last executing test programs: 31.096468949s ago: executing program 4 (id=77): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 30.562499468s ago: executing program 4 (id=81): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xfffff4f1, 0x4}) 30.286528332s ago: executing program 4 (id=83): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e00)={@ifindex, 0xffffffffffffffff, 0xf, 0x2010}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x7, &(0x7f0000000100)=[{0x2, 0x9, 0x77, 0x4}, {0x7, 0x9, 0x5, 0xa1}, {0x7, 0x7, 0x9, 0x81}, {0xfffb, 0xbc, 0x66, 0x14}, {0x4, 0xf8, 0x6, 0x8}, {0xd, 0x9, 0x9, 0x4}, {0x39e2, 0xb6, 0xc3, 0xffffffff}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES8=r6, @ANYRES32=r3, @ANYRES64=r8], 0x94}, 0x1, 0x0, 0x0, 0x4000094}, 0x24008810) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x4) flock(0xffffffffffffffff, 0x1780f9c373410de4) 29.057259822s ago: executing program 4 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 28.744401767s ago: executing program 4 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 28.459432475s ago: executing program 4 (id=99): setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000c852f31a756335387de2d74cf934095ed61f2041169be7c23af87727d0b61c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) ioprio_get$uid(0x3, 0xee01) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 24.138582147s ago: executing program 1 (id=118): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) get_mempolicy(&(0x7f0000000180), 0xfffffffffffffffe, 0x2f9, &(0x7f00005e2000/0x1000)=nil, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = shmget(0x3, 0x1000, 0x54000000, &(0x7f00005e2000/0x1000)=nil) shmat(r2, &(0x7f00005e2000/0x1000)=nil, 0x6000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000580)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x4}, {0x0, 0x2}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f00000000c0)) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) io_setup(0x6, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 23.883913864s ago: executing program 1 (id=122): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0, 0x9}}, [0x8, 0x7fffffff, 0x2, 0xa94c, 0x8, 0x6, 0x8, 0x7, 0x7f, 0x3ff, 0xf, 0x8, 0x9, 0xd4, 0x7]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={r1, @in6={{0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x42}, 0x4}}}, 0x84) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r6}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 23.7754477s ago: executing program 2 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 23.522359691s ago: executing program 1 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 23.520773152s ago: executing program 2 (id=129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r1, @ANYBLOB="cd3e2cbd7000ffdbdf250100000008000200050000007e01010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204"], 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 23.218258624s ago: executing program 2 (id=131): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r2, &(0x7f0000000180)=""/215, 0xd7) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) 23.210308155s ago: executing program 1 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_notify(0xffffffffffffffff, 0x0) 22.976578976s ago: executing program 1 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 22.875946909s ago: executing program 2 (id=138): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bond_slave_0\x00', 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) 22.83520082s ago: executing program 1 (id=140): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8], 0x4) 22.093039915s ago: executing program 2 (id=148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) 21.904566792s ago: executing program 2 (id=150): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3}}, 0x20) dup(r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x40810, 0x403}, [@IFLA_CARRIER={0x5, 0x21, 0xca}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x001000']) r10 = dup2(r0, r0) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0x0, 0x0}) prlimit64(r11, 0xe, 0x0, 0x0) 21.716010139s ago: executing program 3 (id=153): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) inotify_init1(0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() tkill(0x0, 0x14) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setregid(0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYRESOCT], 0xb4}}, 0x0) 20.603219073s ago: executing program 3 (id=155): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, 0x0, &(0x7f0000000400)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r9 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x840) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000000340)=""/87) r10 = gettid() process_vm_readv(r10, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f0000000600)=""/164, 0xa4}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000c00)=""/213, 0xd5}, {&(0x7f00000006c0)=""/126, 0x7e}], 0x2, 0x0) 20.329568312s ago: executing program 3 (id=158): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bond_slave_0\x00', 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) 19.554683935s ago: executing program 3 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 19.484533425s ago: executing program 3 (id=165): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000c40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 19.348588448s ago: executing program 3 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x37, "4372071e845c1497c855383000000002000000372a72ee4dfeed37968b00905020000055965737d2aaec032b9753384b00000000ef86ed"}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ufshcd_upiu\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6}, 0x8) shutdown(r6, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='T', 0x1, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 17.381921308s ago: executing program 0 (id=177): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xe2002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x76, 0x7ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r6, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) 16.493717073s ago: executing program 0 (id=178): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000800006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f0000001740)=ANY=[], 0x0) 16.436355621s ago: executing program 0 (id=179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x3, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 15.640705233s ago: executing program 0 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) mq_notify(0xffffffffffffffff, 0x0) 15.62002555s ago: executing program 0 (id=181): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 15.543813958s ago: executing program 0 (id=182): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x101, 0x0, 0x2000000, 0xfffffffc, 0x0, 0xb063}}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12.488596995s ago: executing program 32 (id=99): setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000c852f31a756335387de2d74cf934095ed61f2041169be7c23af87727d0b61c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) ioprio_get$uid(0x3, 0xee01) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7.519310033s ago: executing program 33 (id=140): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8], 0x4) 6.519468241s ago: executing program 34 (id=150): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3}}, 0x20) dup(r2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x40810, 0x403}, [@IFLA_CARRIER={0x5, 0x21, 0xca}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x001000']) r10 = dup2(r0, r0) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0x0, 0x0}) prlimit64(r11, 0xe, 0x0, 0x0) 4.013134398s ago: executing program 35 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x37, "4372071e845c1497c855383000000002000000372a72ee4dfeed37968b00905020000055965737d2aaec032b9753384b00000000ef86ed"}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='ufshcd_upiu\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6}, 0x8) shutdown(r6, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='T', 0x1, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 0s ago: executing program 36 (id=182): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x101, 0x0, 0x2000000, 0xfffffffc, 0x0, 0xb063}}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 75.245065][ T5803] cgroup: Unknown subsys name 'net' [ 75.515843][ T5803] cgroup: Unknown subsys name 'cpuset' [ 75.572015][ T5803] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.253511][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.828995][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.841495][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.851544][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.866712][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.867429][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.924288][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.926156][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.941377][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.963215][ T5134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.966496][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.969273][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.969733][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.001134][ T5134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.005153][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.041934][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.077805][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.090806][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.092743][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.094115][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.094834][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.187122][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.191978][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.206765][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.208885][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.210084][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.761554][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 81.116523][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 81.128545][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 81.142420][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 81.406029][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 81.543153][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.544417][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.545012][ T5814] bridge_slave_0: entered allmulticast mode [ 81.547763][ T5814] bridge_slave_0: entered promiscuous mode [ 81.602910][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.603037][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.603176][ T5814] bridge_slave_1: entered allmulticast mode [ 81.604692][ T5814] bridge_slave_1: entered promiscuous mode [ 81.833084][ T31] cfg80211: failed to load regulatory.db [ 81.893244][ T5827] Bluetooth: hci0: command tx timeout [ 82.051387][ T5827] Bluetooth: hci2: command tx timeout [ 82.133459][ T5827] Bluetooth: hci1: command tx timeout [ 82.207779][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.211479][ T5827] Bluetooth: hci3: command tx timeout [ 82.291359][ T5827] Bluetooth: hci4: command tx timeout [ 82.453067][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.453299][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.453406][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.453508][ T5819] bridge_slave_0: entered allmulticast mode [ 82.455034][ T5819] bridge_slave_0: entered promiscuous mode [ 82.473044][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.473168][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.473377][ T5825] bridge_slave_0: entered allmulticast mode [ 82.475934][ T5825] bridge_slave_0: entered promiscuous mode [ 82.480229][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.480366][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.480533][ T5818] bridge_slave_0: entered allmulticast mode [ 82.490732][ T5818] bridge_slave_0: entered promiscuous mode [ 82.612640][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.612730][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.612854][ T5819] bridge_slave_1: entered allmulticast mode [ 82.614402][ T5819] bridge_slave_1: entered promiscuous mode [ 82.682349][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.682444][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.682555][ T5825] bridge_slave_1: entered allmulticast mode [ 82.684047][ T5825] bridge_slave_1: entered promiscuous mode [ 82.685047][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.685136][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.685236][ T5818] bridge_slave_1: entered allmulticast mode [ 82.686693][ T5818] bridge_slave_1: entered promiscuous mode [ 82.993823][ T5814] team0: Port device team_slave_0 added [ 83.113077][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.113241][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.113410][ T5829] bridge_slave_0: entered allmulticast mode [ 83.115560][ T5829] bridge_slave_0: entered promiscuous mode [ 83.265283][ T5814] team0: Port device team_slave_1 added [ 83.269025][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.269476][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.269689][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.269849][ T5829] bridge_slave_1: entered allmulticast mode [ 83.273535][ T5829] bridge_slave_1: entered promiscuous mode [ 83.278772][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.284233][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.376369][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.444197][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.446263][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.823216][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.823227][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.823240][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.905153][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.971382][ T5827] Bluetooth: hci0: command tx timeout [ 84.034256][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.034271][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.034294][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.037526][ T5819] team0: Port device team_slave_0 added [ 84.042244][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.044703][ T5825] team0: Port device team_slave_0 added [ 84.047249][ T5818] team0: Port device team_slave_0 added [ 84.066117][ T5819] team0: Port device team_slave_1 added [ 84.131520][ T5827] Bluetooth: hci2: command tx timeout [ 84.136462][ T5825] team0: Port device team_slave_1 added [ 84.138186][ T5818] team0: Port device team_slave_1 added [ 84.211593][ T5827] Bluetooth: hci1: command tx timeout [ 84.291504][ T5827] Bluetooth: hci3: command tx timeout [ 84.371582][ T5827] Bluetooth: hci4: command tx timeout [ 84.888502][ T5829] team0: Port device team_slave_0 added [ 85.063548][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.063564][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.063586][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.066271][ T5829] team0: Port device team_slave_1 added [ 85.068622][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.068634][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.068655][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.070407][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.070416][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.070428][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.157167][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.157183][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.157205][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.253910][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.253926][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.253949][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.255639][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.255651][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.255674][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.272952][ T5814] hsr_slave_0: entered promiscuous mode [ 85.274653][ T5814] hsr_slave_1: entered promiscuous mode [ 85.410048][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.410061][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.410074][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.623697][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.623710][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.623728][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.051449][ T5827] Bluetooth: hci0: command tx timeout [ 86.111455][ T5819] hsr_slave_0: entered promiscuous mode [ 86.112272][ T5819] hsr_slave_1: entered promiscuous mode [ 86.112894][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 86.112978][ T5819] Cannot create hsr debugfs directory [ 86.137065][ T5825] hsr_slave_0: entered promiscuous mode [ 86.138320][ T5825] hsr_slave_1: entered promiscuous mode [ 86.139120][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.139141][ T5825] Cannot create hsr debugfs directory [ 86.157186][ T5818] hsr_slave_0: entered promiscuous mode [ 86.158368][ T5818] hsr_slave_1: entered promiscuous mode [ 86.160175][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 86.160197][ T5818] Cannot create hsr debugfs directory [ 86.212341][ T5827] Bluetooth: hci2: command tx timeout [ 86.292619][ T5827] Bluetooth: hci1: command tx timeout [ 86.371485][ T5827] Bluetooth: hci3: command tx timeout [ 86.451566][ T5827] Bluetooth: hci4: command tx timeout [ 86.793571][ T5829] hsr_slave_0: entered promiscuous mode [ 86.794292][ T5829] hsr_slave_1: entered promiscuous mode [ 86.794819][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 86.794837][ T5829] Cannot create hsr debugfs directory [ 87.917604][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.945904][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.986114][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.019376][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.142424][ T5827] Bluetooth: hci0: command tx timeout [ 88.142699][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.180287][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.225444][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.282521][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.291468][ T5827] Bluetooth: hci2: command tx timeout [ 88.371557][ T5827] Bluetooth: hci1: command tx timeout [ 88.396326][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.419819][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.451480][ T5827] Bluetooth: hci3: command tx timeout [ 88.484912][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.532123][ T5827] Bluetooth: hci4: command tx timeout [ 88.538787][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.679734][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.719301][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.759492][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.791028][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.914319][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.933570][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.977040][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.008911][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.048343][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.127584][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.170979][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.174066][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.227341][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.227484][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.261095][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.350616][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.358039][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.398760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.398921][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.438542][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.438665][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.478831][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.524615][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.529942][ T1486] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.530811][ T1486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.616698][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.616841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.695209][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.726383][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.771896][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.772393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.838638][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.838734][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.917836][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.980260][ T1404] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.980375][ T1404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.037022][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.037162][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.116243][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.297498][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.484975][ T5814] veth0_vlan: entered promiscuous mode [ 90.540331][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.555006][ T5814] veth1_vlan: entered promiscuous mode [ 90.664766][ T5819] veth0_vlan: entered promiscuous mode [ 90.748460][ T5819] veth1_vlan: entered promiscuous mode [ 90.796050][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.819087][ T5814] veth0_macvtap: entered promiscuous mode [ 90.839901][ T5825] veth0_vlan: entered promiscuous mode [ 90.852965][ T5814] veth1_macvtap: entered promiscuous mode [ 90.886455][ T5825] veth1_vlan: entered promiscuous mode [ 90.905947][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.945100][ T5819] veth0_macvtap: entered promiscuous mode [ 90.956589][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.992628][ T5819] veth1_macvtap: entered promiscuous mode [ 91.004100][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.071427][ T1486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.106970][ T1486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.110687][ T5818] veth0_vlan: entered promiscuous mode [ 91.127131][ T1486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.156717][ T1486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.235148][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.235768][ T5825] veth0_macvtap: entered promiscuous mode [ 91.272748][ T5818] veth1_vlan: entered promiscuous mode [ 91.326989][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.327545][ T5825] veth1_macvtap: entered promiscuous mode [ 91.428054][ T1013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.446335][ T1013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.464214][ T1013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.468753][ T1013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.579578][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.589941][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.589964][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.663456][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.803171][ T5818] veth0_macvtap: entered promiscuous mode [ 91.810766][ T1468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.837366][ T1468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.843759][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.843777][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.865113][ T1468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.875658][ T5818] veth1_macvtap: entered promiscuous mode [ 91.902764][ T1468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.986598][ T5829] veth0_vlan: entered promiscuous mode [ 92.005294][ T1486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.005313][ T1486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.188250][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.193955][ T5829] veth1_vlan: entered promiscuous mode [ 92.239780][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.239798][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.260716][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.383321][ T1468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.383634][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.383649][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.385033][ T1468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.387735][ T1468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.387951][ T1468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.614418][ T5937] Zero length message leads to an empty skb [ 92.618090][ T37] audit: type=1326 audit(1759379904.292:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.618137][ T37] audit: type=1326 audit(1759379904.292:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.618175][ T37] audit: type=1326 audit(1759379904.292:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.626622][ T37] audit: type=1326 audit(1759379904.302:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.627232][ T37] audit: type=1326 audit(1759379904.302:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.627682][ T37] audit: type=1326 audit(1759379904.302:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.628171][ T37] audit: type=1326 audit(1759379904.302:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.629111][ T37] audit: type=1326 audit(1759379904.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.629454][ T37] audit: type=1326 audit(1759379904.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.629749][ T37] audit: type=1326 audit(1759379904.302:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5936 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 92.892949][ T1468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.892970][ T1468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.179477][ T5937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.319185][ T5829] veth0_macvtap: entered promiscuous mode [ 93.585836][ T5937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.645604][ T5829] veth1_macvtap: entered promiscuous mode [ 93.661794][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.661814][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.914786][ T5937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.077041][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.239844][ T5937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.301427][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.301446][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.308306][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.339969][ T1168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.340323][ T1168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.340561][ T1168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.340937][ T1168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.696729][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.750127][ T1013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.817063][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.817082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.821645][ T1013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.977717][ T5968] bridge1: entered allmulticast mode [ 95.019867][ T1168] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.311469][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.311487][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.462507][ T5984] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 95.474787][ T5984] macvlan1: entered allmulticast mode [ 95.474807][ T5984] veth1_vlan: entered allmulticast mode [ 95.475017][ T5984] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 95.625963][ T5979] serio: Serial port ptm0 [ 95.727972][ T5990] process 'syz.2.25' launched '/dev/fd/5' with NULL argv: empty string added [ 96.275626][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 96.329360][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 96.402645][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.423876][ T5998] bond0: (slave bond1): Enslaving as an active interface with an up link [ 96.735496][ T6016] netlink: 256 bytes leftover after parsing attributes in process `syz.3.32'. [ 96.735518][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.32'. [ 96.737387][ T6000] bridge_slave_0: left allmulticast mode [ 96.737413][ T6000] bridge_slave_0: left promiscuous mode [ 96.774519][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.896684][ T6000] bridge_slave_1: left allmulticast mode [ 96.896712][ T6000] bridge_slave_1: left promiscuous mode [ 96.896938][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.034597][ T6000] bond0: (slave bond_slave_0): Releasing backup interface [ 97.122388][ T6000] bond0: (slave bond_slave_1): Releasing backup interface [ 97.222719][ T6000] team0: Port device team_slave_0 removed [ 97.256696][ T6000] team0: Port device team_slave_1 removed [ 97.268254][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.268280][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.309368][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.309393][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.422107][ T6000] bond0: (slave bond1): Releasing backup interface [ 97.745201][ T6012] bridge1: entered allmulticast mode [ 97.964006][ T5994] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.964027][ T5994] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 98.196267][ T6054] netlink: 256 bytes leftover after parsing attributes in process `syz.3.43'. [ 98.196289][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'. [ 98.232868][ T5994] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.232890][ T5994] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 98.591593][ T5994] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.591615][ T5994] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 98.704243][ T6065] rdma_op ffff88801c3baa70 conn xmit_rdma 0000000000000000 [ 98.735767][ T6068] 8021q: VLANs not supported on ip6tnl0 [ 98.757272][ T6068] 8021q: VLANs not supported on ip6tnl0 [ 98.767799][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 98.803088][ T5994] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.803114][ T5994] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 99.046125][ T5994] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.046149][ T5994] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 99.231441][ T6068] hsr_slave_1 (unregistering): left promiscuous mode [ 101.067258][ T6076] syz.1.51: vmalloc error: size 1075838976, failed to allocated page array size 2101248, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.067574][ T6076] CPU: 1 UID: 0 PID: 6076 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.067593][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.067607][ T6076] Call Trace: [ 101.067618][ T6076] [ 101.067626][ T6076] dump_stack_lvl+0x189/0x250 [ 101.067656][ T6076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.067674][ T6076] ? __pfx__printk+0x10/0x10 [ 101.067696][ T6076] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 101.067719][ T6076] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 101.067743][ T6076] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 101.067768][ T6076] warn_alloc+0x22e/0x3b0 [ 101.067803][ T6076] ? __pfx_warn_alloc+0x10/0x10 [ 101.067847][ T6076] ? __get_vm_area_node+0x2bc/0x350 [ 101.067871][ T6076] ? hash_netiface_create+0x354/0xf90 [ 101.067898][ T6076] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 101.067953][ T6076] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.067984][ T6076] ? rcu_is_watching+0x15/0xb0 [ 101.068008][ T6076] __kvmalloc_node_noprof+0x2ff/0x500 [ 101.068032][ T6076] ? hash_netiface_create+0x354/0xf90 [ 101.068051][ T6076] ? hash_netiface_create+0x354/0xf90 [ 101.068070][ T6076] ? hash_netiface_create+0x2fe/0xf90 [ 101.068095][ T6076] hash_netiface_create+0x354/0xf90 [ 101.068124][ T6076] ? __nla_parse+0x40/0x60 [ 101.068143][ T6076] ? __pfx_hash_netiface_create+0x10/0x10 [ 101.068166][ T6076] ip_set_create+0xa99/0x1940 [ 101.068189][ T6076] ? ip_set_create+0x4a7/0x1940 [ 101.068223][ T6076] ? __pfx_ip_set_create+0x10/0x10 [ 101.068283][ T6076] nfnetlink_rcv_msg+0xb69/0x1150 [ 101.068308][ T6076] ? nfnetlink_rcv_msg+0x212/0x1150 [ 101.068350][ T6076] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 101.068370][ T6076] ? kasan_save_free_info+0x46/0x50 [ 101.068449][ T6076] netlink_rcv_skb+0x208/0x470 [ 101.068476][ T6076] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 101.068500][ T6076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.068537][ T6076] ? bpf_lsm_capable+0x9/0x20 [ 101.068557][ T6076] ? security_capable+0x7e/0x2e0 [ 101.068587][ T6076] nfnetlink_rcv+0x26a/0x2530 [ 101.068613][ T6076] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 101.068644][ T6076] ? __dev_queue_xmit+0x26f/0x3b70 [ 101.068665][ T6076] ? do_syscall_64+0xfa/0x3b0 [ 101.068696][ T6076] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.068717][ T6076] ? __pfx___dev_queue_xmit+0x10/0x10 [ 101.068753][ T6076] ? ref_tracker_free+0x61e/0x7c0 [ 101.068778][ T6076] ? __asan_memcpy+0x40/0x70 [ 101.068795][ T6076] ? __pfx_ref_tracker_free+0x10/0x10 [ 101.068824][ T6076] ? __skb_clone+0x63/0x7a0 [ 101.068848][ T6076] ? __skb_clone+0x483/0x7a0 [ 101.068874][ T6076] ? skb_clone+0x246/0x3a0 [ 101.068897][ T6076] ? __netlink_deliver_tap+0x807/0x850 [ 101.068921][ T6076] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.068952][ T6076] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.068990][ T6076] netlink_unicast+0x846/0xa10 [ 101.069023][ T6076] ? __pfx_netlink_unicast+0x10/0x10 [ 101.069047][ T6076] ? netlink_sendmsg+0x642/0xb30 [ 101.069068][ T6076] ? skb_put+0x11b/0x210 [ 101.069090][ T6076] netlink_sendmsg+0x805/0xb30 [ 101.069124][ T6076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.069158][ T6076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.069182][ T6076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.069208][ T6076] __sock_sendmsg+0x21c/0x270 [ 101.069234][ T6076] ____sys_sendmsg+0x508/0x820 [ 101.069262][ T6076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.069291][ T6076] ? import_iovec+0x74/0xa0 [ 101.069316][ T6076] ___sys_sendmsg+0x21f/0x2a0 [ 101.069338][ T6076] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.069405][ T6076] ? __fget_files+0x2a/0x420 [ 101.069428][ T6076] ? __fget_files+0x3a6/0x420 [ 101.069461][ T6076] __x64_sys_sendmsg+0x1a1/0x260 [ 101.069484][ T6076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.069514][ T6076] ? rcu_is_watching+0x15/0xb0 [ 101.069539][ T6076] ? do_syscall_64+0xbe/0x3b0 [ 101.069562][ T6076] do_syscall_64+0xfa/0x3b0 [ 101.069578][ T6076] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.069595][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.069613][ T6076] ? clear_bhb_loop+0x60/0xb0 [ 101.069635][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.069652][ T6076] RIP: 0033:0x7f44d39eeec9 [ 101.069676][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.069690][ T6076] RSP: 002b:00007f44d1c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.069708][ T6076] RAX: ffffffffffffffda RBX: 00007f44d3c45fa0 RCX: 00007f44d39eeec9 [ 101.069722][ T6076] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 101.069734][ T6076] RBP: 00007f44d3a71f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.069745][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.069756][ T6076] R13: 00007f44d3c46038 R14: 00007f44d3c45fa0 R15: 00007ffd03c1a688 [ 101.069786][ T6076] [ 101.069798][ T6076] Mem-Info: [ 101.069807][ T6076] active_anon:257 inactive_anon:6122 isolated_anon:0 [ 101.069807][ T6076] active_file:5135 inactive_file:37629 isolated_file:0 [ 101.069807][ T6076] unevictable:768 dirty:591 writeback:0 [ 101.069807][ T6076] slab_reclaimable:11326 slab_unreclaimable:99157 [ 101.069807][ T6076] mapped:30588 shmem:1457 pagetables:1256 [ 101.069807][ T6076] sec_pagetables:0 bounce:0 [ 101.069807][ T6076] kernel_misc_reclaimable:0 [ 101.069807][ T6076] free:1294325 free_pcp:17077 free_cma:0 [ 101.069864][ T6076] Node 0 active_anon:1028kB inactive_anon:24488kB active_file:20340kB inactive_file:150516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122352kB dirty:2364kB writeback:0kB shmem:4292kB kernel_stack:12772kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.069905][ T6076] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.069944][ T6076] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.069995][ T6076] lowmem_reserve[]: 0 2516 2517 2517 2517 [ 101.070026][ T6076] Node 0 DMA32 free:1262840kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1024kB inactive_anon:24544kB active_file:18556kB inactive_file:150448kB unevictable:1536kB writepending:2364kB present:3129332kB managed:2576456kB mlocked:0kB bounce:0kB free_pcp:67236kB local_pcp:33576kB free_cma:0kB [ 101.070079][ T6076] lowmem_reserve[]: 0 0 1 1 1 [ 101.070109][ T6076] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1784kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.070159][ T6076] lowmem_reserve[]: 0 0 0 0 0 [ 101.070189][ T6076] Node 1 Normal free:3899100kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1064kB local_pcp:828kB free_cma:0kB [ 101.070241][ T6076] lowmem_reserve[]: 0 0 0 0 0 [ 101.070271][ T6076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.070383][ T6076] Node 0 DMA32: 3*4kB (UME) 3*8kB (UE) 1*16kB (U) 2*32kB (M) 11*64kB (ME) 7*128kB (UME) 6*256kB (M) 8*512kB (UM) 6*1024kB (UM) 6*2048kB (UME) 302*4096kB (M) = 1262772kB [ 101.070524][ T6076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 101.070616][ T6076] Node 1 Normal: 77*4kB (UME) 41*8kB (UME) 12*16kB (UM) 207*32kB (UME) 87*64kB (UME) 24*128kB (UME) 10*256kB (UM) 9*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3899100kB [ 101.070751][ T6076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.070764][ T6076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.070776][ T6076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.070789][ T6076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.070800][ T6076] 44242 total pagecache pages [ 101.070809][ T6076] 0 pages in swap cache [ 101.070821][ T6076] Free swap = 124996kB [ 101.070827][ T6076] Total swap = 124996kB [ 101.070833][ T6076] 2097051 pages RAM [ 101.070838][ T6076] 0 pages HighMem/MovableOnly [ 101.070844][ T6076] 420847 pages reserved [ 101.070850][ T6076] 0 pages cma reserved [ 102.479614][ T6086] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 103.005721][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 103.005740][ T37] audit: type=1326 audit(1759379914.682:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.005786][ T37] audit: type=1326 audit(1759379914.682:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.005824][ T37] audit: type=1326 audit(1759379914.682:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.092362][ T37] audit: type=1326 audit(1759379914.682:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.628749][ T6135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.762110][ T37] audit: type=1326 audit(1759379915.442:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.763064][ T37] audit: type=1326 audit(1759379915.442:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.769963][ T37] audit: type=1326 audit(1759379915.442:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.770009][ T37] audit: type=1326 audit(1759379915.442:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.770047][ T37] audit: type=1326 audit(1759379915.442:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 103.821310][ T37] audit: type=1326 audit(1759379915.482:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.4.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 104.413437][ T6135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.575791][ T6164] 8021q: VLANs not supported on ip6tnl0 [ 104.577702][ T6164] 8021q: VLANs not supported on ip6tnl0 [ 104.578596][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.033022][ T6164] hsr_slave_1 (unregistering): left promiscuous mode [ 105.867855][ T6135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.831712][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 106.988367][ T6135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.885281][ T6208] 9pnet: Could not find request transport: 0xffffffffffffffff [ 108.011865][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 108.011882][ T37] audit: type=1326 audit(1759379919.692:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.019485][ T37] audit: type=1326 audit(1759379919.692:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.019536][ T37] audit: type=1326 audit(1759379919.692:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.026902][ T37] audit: type=1326 audit(1759379919.702:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.026948][ T37] audit: type=1326 audit(1759379919.702:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.026986][ T37] audit: type=1326 audit(1759379919.702:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.027023][ T37] audit: type=1326 audit(1759379919.702:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.037880][ T37] audit: type=1326 audit(1759379919.702:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.037932][ T37] audit: type=1326 audit(1759379919.712:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.037969][ T37] audit: type=1326 audit(1759379919.712:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6207 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8270eec9 code=0x7ffc0000 [ 108.129933][ T6211] syz.4.83(6211): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 108.314810][ T1168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.401822][ T1468] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.423041][ T6218] 9pnet: Could not find request transport: r [ 108.549921][ T1422] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.551107][ T1422] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.798966][ T6227] program syz.2.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.833096][ T6225] netlink: 76 bytes leftover after parsing attributes in process `syz.1.90'. [ 109.638886][ T6253] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.969694][ T6253] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.087698][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 110.208953][ T6253] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.396899][ T6253] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.604254][ T6261] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 113.435966][ T6298] unsupported nla_type 52263 [ 113.479269][ T1168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.512996][ T1455] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.537176][ T1468] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.578360][ T1168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.709931][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 113.709948][ T37] audit: type=1107 audit(1759379925.382:169): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='õ^' [ 114.164703][ T6318] bridge1: entered allmulticast mode [ 114.308006][ T37] audit: type=1326 audit(1759379925.982:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6319 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 114.308061][ T37] audit: type=1326 audit(1759379925.982:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6319 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2813fd710 code=0x7ffc0000 [ 114.308105][ T37] audit: type=1326 audit(1759379925.982:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6319 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 114.315513][ T37] audit: type=1326 audit(1759379925.992:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6319 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 114.332443][ T37] audit: type=1326 audit(1759379926.012:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6319 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 114.332495][ T37] audit: type=1326 audit(1759379926.012:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6319 comm="syz.0.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 114.373354][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 115.001361][ T37] audit: type=1326 audit(1759379926.672:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6347 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 115.002519][ T37] audit: type=1326 audit(1759379926.682:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6347 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 115.002562][ T37] audit: type=1326 audit(1759379926.682:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6347 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2813feec9 code=0x7ffc0000 [ 115.204991][ T6361] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.226839][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 116.318696][ T6390] vlan2: entered allmulticast mode [ 118.288599][ T6422] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 118.311704][ T6422] team0: Port device dummy0 added [ 118.576360][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 119.198580][ T6437] bridge2: entered allmulticast mode [ 133.024923][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.025018][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.455653][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455750][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.894697][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.894750][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.091323][ T38] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 259.091346][ T38] Not tainted syzkaller #0 [ 259.091354][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.091361][ T38] task:kworker/0:1 state:D stack:20296 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 259.091427][ T38] Workqueue: events rfkill_sync_work [ 259.091461][ T38] Call Trace: [ 259.091468][ T38] [ 259.091482][ T38] __schedule+0x16f3/0x4c20 [ 259.091515][ T38] ? sched_clock+0x3f/0x60 [ 259.091536][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.091568][ T38] ? __pfx___schedule+0x10/0x10 [ 259.091618][ T38] rt_mutex_schedule+0x77/0xf0 [ 259.091638][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 259.091674][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 259.091700][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 259.091724][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 259.091746][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 259.091795][ T38] ? nfc_rfkill_set_block+0x50/0x2e0 [ 259.091813][ T38] mutex_lock_nested+0x16a/0x1d0 [ 259.091832][ T38] ? rt_spin_unlock+0x150/0x200 [ 259.091854][ T38] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 259.091876][ T38] nfc_rfkill_set_block+0x50/0x2e0 [ 259.091895][ T38] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 259.091917][ T38] rfkill_set_block+0x1e5/0x450 [ 259.091947][ T38] rfkill_sync_work+0x114/0x200 [ 259.091963][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 259.091988][ T38] process_scheduled_works+0xae1/0x17b0 [ 259.092042][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.092082][ T38] worker_thread+0x8a0/0xda0 [ 259.092108][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 259.092135][ T38] ? __kthread_parkme+0x7b/0x200 [ 259.092169][ T38] kthread+0x711/0x8a0 [ 259.092199][ T38] ? __pfx_worker_thread+0x10/0x10 [ 259.092220][ T38] ? __pfx_kthread+0x10/0x10 [ 259.092235][ T38] ? rt_spin_unlock+0x150/0x200 [ 259.092260][ T38] ? rt_spin_unlock+0x161/0x200 [ 259.092279][ T38] ? __pfx_kthread+0x10/0x10 [ 259.092298][ T38] ret_from_fork+0x439/0x7d0 [ 259.092323][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.092351][ T38] ? __switch_to_asm+0x39/0x70 [ 259.092368][ T38] ? __switch_to_asm+0x33/0x70 [ 259.092384][ T38] ? __pfx_kthread+0x10/0x10 [ 259.092403][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.092438][ T38] [ 259.092581][ T38] INFO: task kworker/0:3:5887 blocked for more than 143 seconds. [ 259.092618][ T38] Not tainted syzkaller #0 [ 259.092626][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.092634][ T38] task:kworker/0:3 state:D stack:23304 pid:5887 tgid:5887 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 259.092677][ T38] Workqueue: events rfkill_global_led_trigger_worker [ 259.092701][ T38] Call Trace: [ 259.092707][ T38] [ 259.092718][ T38] __schedule+0x16f3/0x4c20 [ 259.092758][ T38] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 259.092790][ T38] ? __pfx___schedule+0x10/0x10 [ 259.092832][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.092853][ T38] rt_mutex_schedule+0x77/0xf0 [ 259.092871][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 259.092893][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 259.092932][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 259.092956][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 259.092977][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 259.093010][ T38] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 259.093044][ T38] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 259.093062][ T38] mutex_lock_nested+0x16a/0x1d0 [ 259.093083][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 259.093108][ T38] rfkill_global_led_trigger_worker+0x27/0xd0 [ 259.093127][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 259.093149][ T38] process_scheduled_works+0xae1/0x17b0 [ 259.093198][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.093239][ T38] worker_thread+0x8a0/0xda0 [ 259.093264][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 259.093290][ T38] ? __kthread_parkme+0x7b/0x200 [ 259.093324][ T38] kthread+0x711/0x8a0 [ 259.093343][ T38] ? __pfx_worker_thread+0x10/0x10 [ 259.093364][ T38] ? __pfx_kthread+0x10/0x10 [ 259.093379][ T38] ? rt_spin_unlock+0x150/0x200 [ 259.093404][ T38] ? rt_spin_unlock+0x161/0x200 [ 259.093422][ T38] ? __pfx_kthread+0x10/0x10 [ 259.093441][ T38] ret_from_fork+0x439/0x7d0 [ 259.093466][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.093495][ T38] ? __switch_to_asm+0x39/0x70 [ 259.093511][ T38] ? __switch_to_asm+0x33/0x70 [ 259.093527][ T38] ? __pfx_kthread+0x10/0x10 [ 259.093547][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.093582][ T38] [ 259.093602][ T38] INFO: task syz.4.99:6244 blocked for more than 143 seconds. [ 259.093613][ T38] Not tainted syzkaller #0 [ 259.093622][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.093629][ T38] task:syz.4.99 state:D stack:25128 pid:6244 tgid:6244 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 259.093671][ T38] Call Trace: [ 259.093677][ T38] [ 259.093688][ T38] __schedule+0x16f3/0x4c20 [ 259.093727][ T38] ? validate_chain+0x897/0x2140 [ 259.093747][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 259.093798][ T38] ? __lock_acquire+0xab9/0xd20 [ 259.093822][ T38] ? __pfx___schedule+0x10/0x10 [ 259.093863][ T38] ? schedule+0x91/0x360 [ 259.093893][ T38] schedule+0x165/0x360 [ 259.093919][ T38] schedule_timeout+0x9a/0x270 [ 259.093942][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 259.093977][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.093994][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.094008][ T38] ? wait_for_completion+0x267/0x5d0 [ 259.094027][ T38] wait_for_completion+0x2bf/0x5d0 [ 259.094058][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 259.094089][ T38] ? __flush_work+0xce/0xd20 [ 259.094107][ T38] ? __flush_work+0xce/0xd20 [ 259.094123][ T38] __flush_work+0x9c1/0xd20 [ 259.094144][ T38] ? __flush_work+0xce/0xd20 [ 259.094163][ T38] ? __pfx___flush_work+0x10/0x10 [ 259.094181][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 259.094219][ T38] ? __pfx___cancel_work+0x10/0x10 [ 259.094236][ T38] ? nfc_genl_device_removed+0x23c/0x330 [ 259.094266][ T38] __cancel_work_sync+0xbe/0x110 [ 259.094285][ T38] rfkill_unregister+0x95/0x230 [ 259.094306][ T38] nfc_unregister_device+0x96/0x2a0 [ 259.094326][ T38] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 259.094347][ T38] virtual_ncidev_close+0x59/0x90 [ 259.094367][ T38] __fput+0x458/0xa80 [ 259.094395][ T38] task_work_run+0x1d1/0x260 [ 259.094417][ T38] ? __pfx_task_work_run+0x10/0x10 [ 259.094444][ T38] ? schedule+0x16f/0x360 [ 259.094469][ T38] exit_to_user_mode_loop+0xe9/0x110 [ 259.094494][ T38] do_syscall_64+0x2bd/0x3b0 [ 259.094514][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.094530][ T38] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 259.094547][ T38] ? clear_bhb_loop+0x60/0xb0 [ 259.094568][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.094590][ T38] RIP: 0033:0x7f4e8270eec9 [ 259.094616][ T38] RSP: 002b:00007ffda2cb5008 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 259.094633][ T38] RAX: 0000000000000000 RBX: 00007f4e82967da0 RCX: 00007f4e8270eec9 [ 259.094645][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 259.094656][ T38] RBP: 00007f4e82967da0 R08: 0000000000021d78 R09: 0000001ca2cb52ff [ 259.094668][ T38] R10: 00000000005db284 R11: 0000000000000246 R12: 000000000001b6ee [ 259.094680][ T38] R13: 00007ffda2cb5100 R14: ffffffffffffffff R15: 00007ffda2cb5120 [ 259.094711][ T38] [ 259.094718][ T38] INFO: task syz.1.140:6350 blocked for more than 143 seconds. [ 259.094730][ T38] Not tainted syzkaller #0 [ 259.094738][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.094746][ T38] task:syz.1.140 state:D stack:26696 pid:6350 tgid:6349 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 259.094787][ T38] Call Trace: [ 259.094793][ T38] [ 259.094804][ T38] __schedule+0x16f3/0x4c20 [ 259.094832][ T38] ? preempt_schedule_common+0x83/0xd0 [ 259.094861][ T38] ? __lock_acquire+0xab9/0xd20 [ 259.094900][ T38] ? __pfx___schedule+0x10/0x10 [ 259.094955][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.094975][ T38] rt_mutex_schedule+0x77/0xf0 [ 259.094994][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 259.095015][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 259.095054][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 259.095078][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 259.095100][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 259.095149][ T38] ? rfkill_register+0x37/0x900 [ 259.095163][ T38] mutex_lock_nested+0x16a/0x1d0 [ 259.095182][ T38] ? device_initialize+0x266/0x450 [ 259.095204][ T38] rfkill_register+0x37/0x900 [ 259.095225][ T38] nfc_register_device+0x14a/0x320 [ 259.095251][ T38] nci_register_device+0x87c/0x9b0 [ 259.095280][ T38] ? __pfx_nci_register_device+0x10/0x10 [ 259.095306][ T38] ? __rt_spin_lock_init+0x3e/0x50 [ 259.095328][ T38] ? __init_waitqueue_head+0xae/0x160 [ 259.095355][ T38] virtual_ncidev_open+0x134/0x1a0 [ 259.095376][ T38] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 259.095393][ T38] misc_open+0x2c2/0x340 [ 259.095420][ T38] chrdev_open+0x4cc/0x5e0 [ 259.095445][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 259.095470][ T38] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 259.095497][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 259.095518][ T38] do_dentry_open+0x9ae/0x1350 [ 259.095556][ T38] vfs_open+0x3b/0x350 [ 259.095576][ T38] ? path_openat+0x2ed9/0x3840 [ 259.095602][ T38] path_openat+0x2ef1/0x3840 [ 259.095629][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 259.095678][ T38] ? __pfx_path_openat+0x10/0x10 [ 259.095698][ T38] ? do_raw_spin_lock+0x121/0x290 [ 259.095729][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 259.095747][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.095765][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 259.095790][ T38] do_filp_open+0x1fa/0x410 [ 259.095811][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 259.095827][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 259.095873][ T38] ? alloc_fd+0x64f/0x6c0 [ 259.095907][ T38] do_sys_openat2+0x121/0x1c0 [ 259.095927][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.095945][ T38] ? exc_page_fault+0x76/0xf0 [ 259.095973][ T38] ? do_user_addr_fault+0xc85/0x1380 [ 259.095999][ T38] __x64_sys_openat+0x138/0x170 [ 259.096022][ T38] do_syscall_64+0xfa/0x3b0 [ 259.096039][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.096055][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.096072][ T38] ? clear_bhb_loop+0x60/0xb0 [ 259.096094][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.096111][ T38] RIP: 0033:0x7f44d39eeec9 [ 259.096125][ T38] RSP: 002b:00007f44d1c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.096142][ T38] RAX: ffffffffffffffda RBX: 00007f44d3c45fa0 RCX: 00007f44d39eeec9 [ 259.096155][ T38] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 259.096167][ T38] RBP: 00007f44d3a71f91 R08: 0000000000000000 R09: 0000000000000000 [ 259.096178][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.096188][ T38] R13: 00007f44d3c46038 R14: 00007f44d3c45fa0 R15: 00007ffd03c1a688 [ 259.096219][ T38] [ 259.096244][ T38] [ 259.096244][ T38] Showing all locks held in the system: [ 259.096253][ T38] 4 locks held by kworker/0:1/10: [ 259.096263][ T38] #0: ffff888019498938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 259.096314][ T38] #1: ffffc900000f7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 259.096359][ T38] #2: ffffffff8e9476f8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 259.096398][ T38] #3: ffff88805e7790f0 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 259.096441][ T38] 3 locks held by kworker/u8:0/12: [ 259.096454][ T38] 1 lock held by khungtaskd/38: [ 259.096464][ T38] #0: ffffffff8d3a9b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 259.096529][ T38] 2 locks held by getty/5573: [ 259.096539][ T38] #0: ffff88823bf280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 259.096591][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 259.096640][ T38] 3 locks held by kworker/0:3/5887: [ 259.096650][ T38] #0: ffff888019498938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 259.096694][ T38] #1: ffffc90004d97bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 259.096739][ T38] #2: ffffffff8e9476f8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 259.096783][ T38] 1 lock held by syz.4.99/6244: [ 259.096792][ T38] #0: ffff88805e7790f0 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 259.096841][ T38] 3 locks held by syz.1.140/6350: [ 259.096850][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.096893][ T38] #1: ffff88805d96f0f0 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 259.096935][ T38] #2: ffffffff8e9476f8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x900 [ 259.096974][ T38] 1 lock held by syz.2.150/6380: [ 259.096983][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097025][ T38] 1 lock held by syz.3.166/6424: [ 259.097035][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097078][ T38] 1 lock held by syz.0.182/6464: [ 259.097087][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097129][ T38] 1 lock held by syz-executor/6467: [ 259.097139][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097181][ T38] 1 lock held by syz-executor/6469: [ 259.097190][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097232][ T38] 1 lock held by syz-executor/6471: [ 259.097242][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097284][ T38] 1 lock held by syz-executor/6473: [ 259.097294][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097335][ T38] 1 lock held by syz-executor/6475: [ 259.097345][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097388][ T38] 1 lock held by syz-executor/6481: [ 259.097397][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097440][ T38] 1 lock held by syz-executor/6483: [ 259.097449][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097492][ T38] 1 lock held by syz-executor/6485: [ 259.097501][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097543][ T38] 1 lock held by syz-executor/6487: [ 259.097553][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097601][ T38] 1 lock held by syz-executor/6489: [ 259.097610][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097653][ T38] 1 lock held by syz-executor/6495: [ 259.097663][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097705][ T38] 1 lock held by syz-executor/6497: [ 259.097715][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097757][ T38] 1 lock held by syz-executor/6499: [ 259.097767][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097810][ T38] 1 lock held by syz-executor/6501: [ 259.097819][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097867][ T38] 1 lock held by syz-executor/6503: [ 259.097877][ T38] #0: ffffffff8dbacd58 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x340 [ 259.097919][ T38] [ 259.097924][ T38] ============================================= [ 259.097924][ T38] [ 259.097942][ T38] NMI backtrace for cpu 0 [ 259.097958][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.097977][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.097986][ T38] Call Trace: [ 259.097992][ T38] [ 259.097999][ T38] dump_stack_lvl+0x189/0x250 [ 259.098019][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.098036][ T38] ? __pfx__printk+0x10/0x10 [ 259.098068][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 259.098094][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.098118][ T38] ? __pfx__printk+0x10/0x10 [ 259.098143][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.098166][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 259.098190][ T38] watchdog+0xf93/0xfe0 [ 259.098212][ T38] ? watchdog+0x1de/0xfe0 [ 259.098233][ T38] kthread+0x711/0x8a0 [ 259.098254][ T38] ? __pfx_watchdog+0x10/0x10 [ 259.098268][ T38] ? __pfx_kthread+0x10/0x10 [ 259.098283][ T38] ? rt_spin_unlock+0x150/0x200 [ 259.098307][ T38] ? rt_spin_unlock+0x161/0x200 [ 259.098325][ T38] ? __pfx_kthread+0x10/0x10 [ 259.098343][ T38] ret_from_fork+0x439/0x7d0 [ 259.098367][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.098395][ T38] ? __switch_to_asm+0x39/0x70 [ 259.098411][ T38] ? __switch_to_asm+0x33/0x70 [ 259.098426][ T38] ? __pfx_kthread+0x10/0x10 [ 259.098444][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.098477][ T38] [ 259.098483][ T38] Sending NMI from CPU 0 to CPUs 1: [ 259.098510][ C1] NMI backtrace for cpu 1 [ 259.098524][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.098542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.098552][ C1] Workqueue: bat_events batadv_nc_worker [ 259.098576][ C1] RIP: 0010:lockdep_hardirqs_on+0x6e/0x150 [ 259.098592][ C1] Code: c0 75 7b 65 8b 05 9a 01 cb 06 85 c0 75 70 83 3d f7 f7 d5 0d 00 75 32 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <75> 6e 83 3d d9 f7 d5 0d 00 75 14 48 8b 83 38 0b 00 00 48 3b 83 50 [ 259.098605][ C1] RSP: 0018:ffffc90000117818 EFLAGS: 00000046 [ 259.098618][ C1] RAX: 0000000000000000 RBX: ffff88801a6f5a00 RCX: c8796eb6d80ead00 [ 259.098630][ C1] RDX: 0000000000000006 RSI: ffffffff8cd90bd4 RDI: ffffffff81836c10 [ 259.098641][ C1] RBP: ffffc90000117938 R08: ffffffff8eb69637 R09: 1ffffffff1d6d2c6 [ 259.098653][ C1] R10: dffffc0000000000 R11: fffffbfff1d6d2c7 R12: 1ffff92000022f0c [ 259.098665][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: dffffc0000000000 [ 259.098676][ C1] FS: 0000000000000000(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 259.098689][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.098700][ C1] CR2: 00007f30de04299a CR3: 000000000d1a6000 CR4: 00000000003526f0 [ 259.098715][ C1] Call Trace: [ 259.098721][ C1] [ 259.098729][ C1] __local_bh_enable_ip+0x1c0/0x2e0 [ 259.098751][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 259.098770][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 259.098790][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 259.098811][ C1] ? rt_spin_unlock+0x150/0x200 [ 259.098832][ C1] ? rt_spin_unlock+0x161/0x200 [ 259.098850][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 259.098875][ C1] batadv_nc_purge_paths+0x34d/0x3f0 [ 259.098898][ C1] ? batadv_nc_purge_paths+0x6a/0x3f0 [ 259.098925][ C1] batadv_nc_worker+0x87e/0xbc0 [ 259.098948][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.098963][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 259.098984][ C1] process_scheduled_works+0xae1/0x17b0 [ 259.099017][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.099045][ C1] worker_thread+0x8a0/0xda0 [ 259.099077][ C1] kthread+0x711/0x8a0 [ 259.099094][ C1] ? __pfx_worker_thread+0x10/0x10 [ 259.099114][ C1] ? __pfx_kthread+0x10/0x10 [ 259.099127][ C1] ? rt_spin_unlock+0x150/0x200 [ 259.099148][ C1] ? rt_spin_unlock+0x161/0x200 [ 259.099166][ C1] ? __pfx_kthread+0x10/0x10 [ 259.099182][ C1] ret_from_fork+0x439/0x7d0 [ 259.099203][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 259.099226][ C1] ? __switch_to_asm+0x39/0x70 [ 259.099241][ C1] ? __switch_to_asm+0x33/0x70 [ 259.099256][ C1] ? __pfx_kthread+0x10/0x10 [ 259.099271][ C1] ret_from_fork_asm+0x1a/0x30 [ 259.099295][ C1] [ 259.099505][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 259.099522][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 259.099541][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.099550][ T38] Call Trace: [ 259.099557][ T38] [ 259.099564][ T38] dump_stack_lvl+0x99/0x250 [ 259.099581][ T38] ? __asan_memcpy+0x40/0x70 [ 259.099606][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.099622][ T38] ? __pfx__printk+0x10/0x10 [ 259.099655][ T38] vpanic+0x281/0x750 [ 259.099675][ T38] ? __pfx_vpanic+0x10/0x10 [ 259.099690][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 259.099710][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.099737][ T38] panic+0xb9/0xc0 [ 259.099753][ T38] ? __pfx_panic+0x10/0x10 [ 259.099773][ T38] ? irq_work_queue+0xc3/0x140 [ 259.099801][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 259.099825][ T38] watchdog+0xfd2/0xfe0 [ 259.099846][ T38] ? watchdog+0x1de/0xfe0 [ 259.099868][ T38] kthread+0x711/0x8a0 [ 259.099888][ T38] ? __pfx_watchdog+0x10/0x10 [ 259.099903][ T38] ? __pfx_kthread+0x10/0x10 [ 259.099918][ T38] ? rt_spin_unlock+0x150/0x200 [ 259.099942][ T38] ? rt_spin_unlock+0x161/0x200 [ 259.099961][ T38] ? __pfx_kthread+0x10/0x10 [ 259.099980][ T38] ret_from_fork+0x439/0x7d0 [ 259.100004][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 259.100032][ T38] ? __switch_to_asm+0x39/0x70 [ 259.100048][ T38] ? __switch_to_asm+0x33/0x70 [ 259.100068][ T38] ? __pfx_kthread+0x10/0x10 [ 259.100087][ T38] ret_from_fork_asm+0x1a/0x30 [ 259.100120][ T38] [ 259.100263][ T38] Kernel Offset: disabled