last executing test programs: 6m16.319700178s ago: executing program 2 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000440), 0x9, 0x80040) r2 = gettid() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143902) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6m12.009934823s ago: executing program 2 (id=754): syz_emit_ethernet(0x7a, &(0x7f0000002380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x44, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f}], "13d888beda0a7f154c4d990d"}}}}}}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x0, 0x0}, 0x8) timer_create(0x2, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}}, &(0x7f0000000440)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7, 0xc3072, r2, 0xffffe000) timer_create(0x0, 0x0, &(0x7f0000000300)) timer_gettime(0x0, &(0x7f0000000500)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40448d0}, 0x40) 6m8.355595406s ago: executing program 2 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r6, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000182000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @flat=@weak_handle={0x77682a85, 0x46c1326c7a9ee034}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x24}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x10}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SEQ_NR={0x6}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x0) 6m6.335277724s ago: executing program 2 (id=763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x3a1501, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r2 = fsopen(0x0, 0x0) fsmount(r2, 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) pipe(0x0) 6m3.729016732s ago: executing program 2 (id=764): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) r0 = openat$cdrom(0xffffff9c, 0x0, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 5m55.872704213s ago: executing program 2 (id=769): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) prlimit64(r3, 0x1, &(0x7f0000000000)={0xfffffffe, 0x4}, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x2, 0x1, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0xffff0001, 0x0, 0xd25d, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 5m39.834160122s ago: executing program 32 (id=769): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) prlimit64(r3, 0x1, &(0x7f0000000000)={0xfffffffe, 0x4}, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x2, 0x1, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x101, 0xffff0001, 0x0, 0xd25d, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3m17.311349214s ago: executing program 4 (id=886): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 3m14.294139078s ago: executing program 4 (id=888): syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x100) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bb, 0x10000, 0x10001, 0xa4}, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)}) 3m12.325912788s ago: executing program 4 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r1, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x2, 0x0, 0x0, 0xf}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3m5.976715449s ago: executing program 4 (id=896): write(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/112, 0x70) 3m2.720800147s ago: executing program 4 (id=900): syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_io_uring_modify_offsets$generic(r0, r1, 0x54, 0x10000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) 2m57.016188612s ago: executing program 0 (id=903): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) syz_ublk_setup_queues(r0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x22581) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@o_path={&(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x0, 0x4000}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x26, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffeffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8f13}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x9, 0x5, 0x0, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x5, 0xd8, &(0x7f00000002c0)=""/216, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m56.482283611s ago: executing program 4 (id=905): gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "000080", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x3}, {[@routing={0x32, 0x2, 0x7, 0x8, 0x0, [@remote]}]}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?/o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000080) membarrier(0x10, 0x0) unshare(0x26020480) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m54.261449772s ago: executing program 0 (id=907): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x301400, 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7c, 0x2, 0x6, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x204, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0xe, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x3fe, 0x7d, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc5, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x804e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0xfffffffe, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x5, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x0, 0x3, 0x7ff, 0x12b, 0xb, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x802006, 0x80a2f0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x9, 0x57, 0x4, 0x3, 0x2, 0x10000, 0x4, 0x5fff, 0x10002, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x0, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d613, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x10, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 2m47.446086705s ago: executing program 0 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$MEMREADOOB(r0, 0xc00c4d04, &(0x7f0000000640)={0x5, 0x82, &(0x7f0000000400)="4504abc72f8b931be088bf611468ec80998d7b1b40aeec7927e20b8853f9e1d2b0519a7696b7791c64b9809826e4f6e0eec541aaf64fa9433e9925d839251da52166083e2bbaff69ef7afe53a48c7fcde1a402832a85cf6183b07c6ab4a3fd155c77aabd092e6aadaae4c41b9f50755104c89656c1c02137066b9c23f2e1761f7555"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000f07d860b02ffed56c8e87181fef57148d14b0a4b887c94260d313a440ca0b91ed6af131ac2b0014a6b9eba5fe8ea4afa0d6682156bc4645fd0aceba49cd181cf2d73d1ce1905d190a753e008d971bb355240448cfd4f92"], 0x50) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r3, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) 2m43.097401214s ago: executing program 0 (id=915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) 2m39.202550429s ago: executing program 33 (id=905): gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "000080", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x3}, {[@routing={0x32, 0x2, 0x7, 0x8, 0x0, [@remote]}]}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?/o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000080) membarrier(0x10, 0x0) unshare(0x26020480) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m35.849611305s ago: executing program 0 (id=919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x5}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1}, 0x6, 0x4, 0x0, 0x0, "45fc1d76114c7abf"}, 0x4}}]}, 0x2c}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) mmap(&(0x7f00000a9000/0x2000)=nil, 0x2000, 0xc, 0x13, r1, 0x27657000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000002180)={0x0, 0x5, 0x0, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = open$dir(&(0x7f0000000200)='./file0\x00', 0x40000, 0x0) statx(r6, &(0x7f0000000280)='./file0\x00', 0x0, 0x8, &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4c3dafc7, 0x6}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "e5a81eadf717f501724c55d1e48e9765"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5aaa25e8a14e8047882df5b5608e4c75"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 2m30.83936638s ago: executing program 0 (id=921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") r3 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./dummy\x00', 0x42, 0x1ff) write(r3, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) close(r3) ioctl(r2, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010000000000000000000000000000000000000000000000000000007465737400") ioctl(r2, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") nanosleep(&(0x7f0000004000)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./dev/dm-0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000005000)="11111111111111111111111111111111", 0x10, 0x0) pwrite64(r4, &(0x7f0000005000)='\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"', 0x10, 0x1000) ioctl(r2, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000002000000000000000000000000000000000000007465737400") 2m15.123070609s ago: executing program 34 (id=921): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") r3 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./dummy\x00', 0x42, 0x1ff) write(r3, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0\x00', 0x34) close(r3) ioctl(r2, 0xc138fd09, &(0x7f0000003000)="0400000000000000000000006c01000038010000010000000000000000000000000000000000000000000000000000007465737400") ioctl(r2, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007465737400") nanosleep(&(0x7f0000004000)={0x0, 0x5f5e100}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./dev/dm-0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000005000)="11111111111111111111111111111111", 0x10, 0x0) pwrite64(r4, &(0x7f0000005000)='\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"', 0x10, 0x1000) ioctl(r2, 0xc138fd06, &(0x7f0000003000)="0400000000000000000000003801000000000000000000000000000002000000000000000000000000000000000000007465737400") 1m18.932752253s ago: executing program 1 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 1m17.458467395s ago: executing program 1 (id=962): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000000100)=0xffff57cc, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000000c0)=0x1000099, 0x4) 1m14.210930857s ago: executing program 1 (id=967): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) pipe(&(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=r1, 0x8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) fchown(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) 1m8.326637059s ago: executing program 1 (id=970): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) fsopen(&(0x7f0000000140)='autofs\x00', 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futimesat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000600)={{0x77359400}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11}, 0x94) socket(0x15, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000700000014000100000000000000040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x3ff, 0x8864000000000000) 1m6.21963513s ago: executing program 1 (id=973): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xc}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m4.602159618s ago: executing program 3 (id=974): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x4000000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d00", @ANYBLOB='y'], 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x2, 0x0, 0x1}, 0x8) syz_open_dev$usbmon(&(0x7f0000000080), 0x20008006, 0xaa002) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000002200)=ANY=[], 0xfffffcd9) 1m3.735173078s ago: executing program 1 (id=975): fsopen(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_vhci(0x0, 0x102) getsockopt(0xffffffffffffffff, 0x400, 0x10001, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0xe503, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004100)="a95ee66af223165fb85c7a063307d28ba66dd294927c55081f5012d8223e0c009905bba59fcad5c499ccbc3ecf96e9d6ab31713938d657bc1cdd65b0a8c5fbba04f0e4926fc32fede46dcf41865bc66b2b1b353824177c6ad6f47ead9c18951b761a2bf0f17b779c4ade8a3100cdb3f4925ce68a944881cad07ce81e6d4ffd31847a0453b3ce672102b33f5c46bab37c7fb678ba1908052334b225eea595ea982901991c169eb4e0fc23b2a45018e1544c308724adc81d1d22c012fe67aebc0d3157170f2a5eb586f9af8bd80fae3bc2e9bbd9b51a9c32fbc467e2b0a0a840b765938728ba3f6902046443434e9c8a539dbce61dd8fb0e6813208877ac1fc45e9fa75ea6c5e7dc23acf9bf14523cc47de600ab3807ae8162eda1c66cf41d61386817d1483e63591002fabca6c9c1b5201974ea2b404dd54d80e24beadcc9048059c4cb26225eb2ade9e189a1ff40fa7cbb917aab58dcda7cf32bf8ac69a4faaf3a67e06e8736f92700608e1bc38d092a18d914881fd0a17e65d465f0c3cbeb987ae1fda981203d792fe5708993cdf5648f94cf23024caa3fc99d7fe6a6a434d5dab60192987ec3f55bedb08c40078e2f5e1c9e0b033f48ee56d00336f997c17a2f976d57193ec8b3132e8ee249c3dcba95e737127c7e2cd8cd6eea30688d627637e82c27b26110c0c61631d0fe0eb8c600023e8e4f0fe495a8666baa4e3cf9de28e4d95d7b7edea0d8f1b19fcff477164bf6abb3d28485398e02dc4b003de2046aa16a808c077f59a35c0ee44d5e6958b57b60b5fe2980cb0f870395c904e735f7c726d48de3bc2b558bce111f913cbdc65e9a6fdd51f0cb6079a4e6048c61a4dba2fc6cce6e3b93d86e312bb43c30a01c0cfc72ebdc3e18781238b159d08ea32fd37fb352f5943b4a22133586ada296c9ec1a3580d9dd59569496194e8f87f95474263ee6313a8eac98de06426c0f5ff00fee25a915e899e9d99b4ca4d52204498a0c8f877adb92cce1010403ad8c53d6162202a09a099930fc4dfb3246f46134993aeae1e49f2e8b0ccb30ea1b09e12dafa24530b8844473ec04d666e8a7e1c89a1f552d04efe1b85a0bbcc33091460faf098625999c0061eaef184e8b02a96e6206d512870a7fe819dbebf93c00ccbf4357841dbe0343c0850cae8d8d15cfeb3da41bf5682c842f53ca5131545784f1dee5ffcf9b4ccf4cdd037a31e4efdb6524056057ba749cc4208df722c80948a486da031a50d129349fda2549157499b8ee553bd545ec411334b902720ef0a71819ffbf002742151d950df0fe8b2efb5a94133d943286c73adf359659480c438bcf1f7f1bc1ad2dbaa54548aa3d1b4ac7d17e755ca23de9f978f45edaaeff3ade5d122c6029f8406732d1c5cfef450635d3bfa323dd14397fa085e1c928ab84f604bd3c378b2368cb0bf371d41ff1e4982e413bc3f3aedf32237845def41805fe66a5239475f246b1bc91045384aac0dd7c0723c5ed4cb02ff0cd39db2b469790a57582543e5fd8edd24944795cb237b5ec6b09e62e7ec95af1560bbd455416d22accf42ad9fdd5eb9afe198e2a327f69ca3b617eae3c24c0fd7dd36fa9fb3bd111d8d7e5dcf3039fa06b8e3405cc73e90f07660b9aa9748643832784b36d2a1418a453645610fcc816c983065a44e86f3fed8ca3bd5397a1eba72c813a49f45af504f18e85fde740dfc63922baece7e5873beded5755869bebd1f984dade3856c34369529bbab5fc32294d2f68512f0d5d116521f56443637b67587372850ff34f093f7c00376bcd15b9d470502200f81d42a46e711ad001aa1135dee47ee2f38754ea50ac8c98b9cd6f1c1a00f862900af52d9e7007be27b3c095b2e0d880d6ff7fa8bece867dac7deb0080d08d7b31cb905666f36cebe4b8033460823ddfe658319bc26a72f1b55fc8bcf364271cb1f280f9f81abab630f656c1491f70412f735061fa1aaf9d0eb016cc5e7152699ed8e7ea5ff05cdb1c7b8c65ca35d18cb7409425240ede6afa92f211b59a825968b83499bc91db40509367fad75ede35c6553ebd28ef8c9f75a566d8107116af185f555cab0322c108ced7e8012c03916ebf8b563dbe818a2576111a0ff9749627acfe19ae3fdccdeab6349b5c1f106a490c1d128d640a81d8706b66e3a16ee0a4068d9e7102c7724a03ab121d7c93adcf179c5e661b9fd47546f2bc73f92e45b372fdb08d8e958610ad2c4acb1a3ad7bfa236565796b16ef1f9799084f7e60d5396a3a286d207051d325eb5282b54837fef08c7e28a5c38f7d72ad8535166d60e2893f58f704aa5152ea4a6b00b6a26825715156eea616c72c1fbaa46f3df4ebe3696164e47cade8edce9f1f7a509e30f135b3b29bfc849ad66bf05c17d6c8679234a7a53a3d8385c509eaf5709b1558434ad5f73b966c6db4eacf52509de480002b6bc6b65134d9cf378d5820bade7c0f0373b389e06c162745c0cedcea0eda0762697f0e73307cda99d95cd7d2388afcbff6370bf3ca5e3b3393bf5a00780a93699c0cfe0fbac6d809ceca12d95c8d5a9f71c236eea0851113ccecd0a6479350b0589b5bba13bbf4640779751328509f7db504c474392b83afb5bb31d4a4835d108584bbbd914e95851ec020a07d95d5dd51fa2bd3dd51bd706cf054a2b4ca0c2937639fc5a5ee3090d08bcd2335a5e6213e4a11c080373854bbfa7a96efa317884b38675a9891f3256ad8a1f74b64e3dde55e4d5c4775b7adc6ac284203aaf9f6ac12f95aaac02b09b2088ff5d53dfaabf0ce4c6958e97250c91147e266247042da5792e7097bc3210f514954b0dbb5163b1d71a0322fdb2c0d747d4754bc0a7da972b9579233ceed92741bf5b582e349b4aa5ce522d9abfba532f50d68b41e365bcf54b008c384bae1099d4d6ced5e7f4c1b05c7f7151d459ad5eb7dcad282b05a31f4530f2d628f93efad19bd239c06143483646c7b1d1614f700be8593108108a8f28152d48ecd6577bc387935552e396bc563db28454bf358d71eaabe0ebfb46226a3088d8c7ea244b99f8fa643d20fa92d9d0cfa4d6c58002eb18e6cc5c13a07237a218b09fcf16dae2812e9d68cedb4a37e49a8298c3dba5712cc84cf1df6427ecdbe2a9ba2f05951608a02ab7674c4c8bcea2832c89ee71efd66b7b72a04e7d2e6caabc3bccbd9d7ea5a8b95c1a9b8fdb9be258b8dd57e9f4e409445267b2f8a1f991ffe7a4b77c50b8845f1be30356f3de2789fcf49ba4ad46d47b78aeefee7e06ae7d386f115ce0a55bc0ee42d9765c12dcdbe540d41a781dd6d08ca45f27c4a91c65c9a9dbb90b9f9c9e60663e41260792663235e70d9bbe3c485f57522b7c3d13704f662fcc94949825316b814acccef8e18128ccf8834330caee12b376b802aa32214160622339c055d8071eb50c7281991495b72eaf132d0669c7d6b534149016e54d5cd2347121dea8ac60e7b5ca5a53acfb8233242ab6ffa6c01997244ccef3d485c6e5ac4b8a252210822265c1f6b9af893550c163a962bd2ea149a6e9b1ab913446c1a54934ce8f56426a8531df2f07fa73670b78d6213d10a0113864bb15af6568765dab324722a74c87bd18550bdb51663c9d8b6724c9dd1299019fe1d8241c7c9a0200257f3a8593b6830c9ed38ac983908242ec5fed94bc07e6f3cf0fecda556a6685d828343d7b7a2ae6a7ce25a1f0af2e565f4479f791d3bb4944803f5a76a768f3ec71e4aafd217da9d8d32aa2967fa320d67c8aed60cc4b5806439092c1a0cf511918beb0c30ff62a547f8bcea0183ed162ec5a7b2764e5ff49aa93539089ca814cee68ad100dfbfcc5617735be68bb8ea22aee333c88fde3124729047646bab77f08e33c7c70d4d6d023b3091337d0582c75206933ed52ed99bda3d4d5cf48bcc8e683b7c17a19768e8770123731d98c1691e22fc97a0c9ee27eff1ed455e839163ef0195ad8f6d3e653d88b0adaa325f8232787cf38629fc1103ae1e77d453db51f8c16299d68a3230e61138e6c716d7c981f8803c2222ec9d99f476701352bfb497a892398a3c84c87ec43c3494e70c92b8fe6351d73bbe68f73dd1d4168b3b67a277c4e85b2e2d34075dbfe23ed3d6f6520d4987b282c2710423cff7624fee0c5bf6364bcdf2734eb8465ad3abea522a5bc1dd787b812901e286788abb7db6fc25398bd4d6b78657bdf7a602b4706caac46bad88c4a0f6c15c8a60252fc53b3d496707e0857f5c5946ff5fcfa89eb816e1b96b335727f09f164136b367191ad047c3f1f3f5fd487ae535b0284e276c232ad5a6df68eaa8c74d5cde46ba3fb6abf3d42177e4466f18f7a8251f9809e39bcfe0ab07e24c4c7bbd99f70b7252d4a1a34a9aa34fa595871996f31a8e1eea0734e2e60d0871a4eb443a7d434b5a53c0bee62f388f4025ed1d413ae737a0b4d39591b9a5cfc5edefbed55ba21f480b7ecd2db6df235c9c6c2e0da1abacccfd8805839164f2493baf75df275012413bca9ebb38a1c88c600b1dac6cc82b9115ecd597b6b4ab0ae3720c6d9cf13bf96cd56e33898026e60e1b6bf1917b602171fe8bae56c7896aff9a5d65522c91f3478af5643dc563523e397b85f26a573d2d03ec2f63dc9615d3956273196cb4ca3033f1fdea6a95fc6fe95c0042caa07d37e0880a3a3053ea87f1a02e3e4cc062f642adfbd6769f2540c04a99335a0fa452559f27acb146257ae1b93f1c80cb000a71cf87b7a8555f4e77ac4ecd6411051a26b846796fd229417fc456e3e7a64a9d5232b0fa9794616a2bfc67ad9aec0cc361f3bb7dcff27d6815defa96896ad904a3d53b4f39030e3b2b786f82f5d46eda4de74a214d092f7d900a3c8575ff781ee659681d77ff348a21c0bec5ee66fa1abdc32ee75ad4a51a0a0f942c801aeb55ad9567d140e13fc3524648a231d8389c25d3c18550cbd54ef5493dc5a7f6ab8924765086a1e5b69ef6e80d5790f078e999883efbf04825c3326d3b7d54aa453988fa226b31cf19549bebbd46b54716e48c05df7655fbcefe426fd48b0e4867795d1a03df00e7da4245e95630f2cd3d1dbaae5b74ab2795f6ad5ababe632f4ae1abbc97182220a28eb1d108feb52f8326ec2b3abb0ed045fe64b8e302348d3bd561eaaa3a7f6d1aa426a5848f320f026db837d98063724d38a778cabe67caa2b8b7462523620661965fbdf41a2e835e64d484804321754f79e8b56f7af558a9007d8871fd60e2aeb697270d470394e97f43c93f6515e9941fce5c3e020148cabac9a3f257769afa92374b3a8b5420dfbeeb3f4f1d9106cf1f822791fab189d3a769438aa0b8ad58316d02eae97264e4238ea807c578fb215614d60f6d69d23c438854b0e0b47cb820e0deca03a8f5b0221f10b0e7164ca28b60f978ae82beb3fc52bf8f5f9d4bf9ea5a44014ffb3fba5604fb70db687bd7649fbb4b72d2e604b8031eec10d7fd55cf62234d1515905c4ecdcb2073ae480437e134fa65b37f5fc718ea1595510b302f5a750bada2b1b51c5d6c14da8e69f51c5454d3c15f94f5551ba41e402f98c31d8340bc24ce0c2d0857eee2e6699781434f9eca84e52e9dc0345c4c289880c3c7162772d39bfa62cfb8b401e1cf9a241e7afe1ae4fd5e224bb1f4c3c7098753b01c35f9c8fe1e0c3cbe7521b259e403006121e1c3f62d357394267e78209f31fa87e1aa87cf1054119ea364d7b9e82ae84b998860d8fa73da7cf6c58fb4bd754316c39bfdc453fcea16b73c1bc56996b22074fb4a1e944b6dc786e1f1d8460004c1b9abba76cb5ad9c02444d01b628aef339809a93696b8eedc658222b11f0ade5cad02ec734bdfae30421adc690dc0882cada0a1cf5ad9d538f0366232c7aca013ae8bafacda63dbdcf8507b911009829f2ef019e60a2b1236614b25c258ac4b05aa85d69e8cb2bff36728b967b58f70683e0f1f4408edc8c4fef715170c163324489d8fa4684579fb6f175af8ee8f387ff939b750c7dfd4ba62fe715eea3e5ac3ff7d5cf3ffcbea739b85374956b00b38d6f4519390d6b382d3a883c8bb7a62ce654c005744921a082479affd60092aaff76cafe07820c1aa10a0d5ba589eb21f48e09bf5c279c7a3ac6bdb7958cd439f54d5ad369f0eb68e090eb2a6cffbce0d5af05f7afe5336ad069482f8a765823c63a45d345a72b42d5ad50d8d73a3e7f22e717c1e2aca4786d43b0b1dd2651fa46c0a6cceaf8f57f2f132cf49112ea156f6a159978f8cf8e5e9d74caee5530d999c4d0e6e50d6c69b5c57edb78b0a63d6a06eeb499060300da73ca39199cd4bf6412d58bc9344b5cedf7800b6cd84f193a55314bfa047bb93f562955d1b4407781ebe40fef42f6e5401046866391dd9ad8b96dc6915d43d40df4d7ceb43f682afa7c0cce1f944d79e81eba4c01c64334bf50bb26db0992e9265ba022b49fec9f188ea213ee504d666544d0230b1272f5222db08aa5347e985abf2607fee7719a03a3dedea280e2bcc77737562cd18d979992dc3bb32dbcd3bbfbb5896b9d06cffef2ee68cb071e76d2b7ec5123a91fd73e6fb737d887c016782328ee5a85bff817a8f5a769205373e5c63ffb883158be34059deb0bb99960f3f0cf838efd35f265240cfede2ed447fd7ebaf92befa24c74546c3c9b93aa6ead03c7350327a3e0bd049a582028f3ca59fc9fdc2ac7819f8f92da0a48c4184f7d9abd10e7745a1af4457127f997580bbda67a56cf9bb67b5f3ce6b2b62dffc56b47c95886fcbbcf89da58ce694281a9e8bf50fd5878efc3d357e6f4994a9483ec74b536a5f8ccc714b045fcb5b896e1d998ac11e418d23028f088e99845ef0458dbf45f0bfe9a7188bda3bc07a27f25c741d414aae493b191d8721ddb60281c741bebccc12c841b07dfab15481f65e90d4337414112c9ec23bff763b1eca8a1bd6cb6c252b6531e4e096dbebae5a16120867ece7746a7b487216851ce059a8e3aa37dd4885c6b4e0b8ed807dcf62279f1de1b3b834add0ba26a1bbce31199a5b145ae456f84136887ba27b2e3c6d57f1cfedc9e7042a6c5c8d5c67c04c4a0610d09ae7c037cc1c75f355fc5033e434762aa8f4f23d28ac98409deea20c826b7a9317168ab0075503f3022ccbf2296b58bea2242082d3925d6788ef2d56c435b1db3f96a992d3854d5a9e2af29e5a7817b6c7f210ef511071c46fc3f013171d53703ed7ec6258f531c0d00782c8e2b30149e6157f0e898732bf683341a4a768c199f0f8953120e8d2e9ea791b228da103a2f67ec920560436bc306861fdb098c45ae66ebe12db1e27bc5d2e5b4fe530de58e90c2d5c4ab764cfe9312f2397dfb20468d7db6e9e0aa5765ff0bd2b1c1620671f9a9a516f405e0e8ca8c3498cadd75a76786d88a1adcfd91d2e7c302876b5c9d97d2ee8e5b51d73ff20039a3dd4ea244ec37242f3bbe6ebd7c2f9c583885274c0537ae5b3af6cdfd216a7e9c9f3638322e1d4c58c5f0ee9107bd19f50f2435642a9c584d4de9a4ac6cbe5f699144b9521f2669ab0df72a70d1af1ac9369c58bc8f23311bccc7e7b0b32b744135241c397d6796690f064c8e6df5d7593c2e7bb159bd1a7da0ee9002c0b7a52b549777def7e854acb8224d83c4ec769bf45e4c699c680243d6e2e4149341db46acc685f0650de45fcd75f4b0bfbb3eb5bce224f2c04a03b35edad303af6a2ba403abe9daed9bc170363333efbb9ab4725e453df55b3861499a7283c983db6cfacd367df13dbad52a31fce48bfd13ab9982d821ace9a998a2763d9bf4f484d46ca345d81360ea8841adaa5b45feace5db05fed42113647dcbe3c3dfd70f4b3537e77228a5218d9419a94685a504fe61a1169115536eb2682a63675a0a4debcfb29ac169e4a999206bb6d4a4cc5e508534e9ad4295f08f681071d5cdf0edd674ba2a43a60739929ff3e22cfd4675b669b78998cfac88a0392033930f2b788dbdfe11e560ec1a04be8fcde01fb3cf80d93ce1df819a21ff158dd18e9bdc759a59b9f7111245d336963a97ac8bc7c4bc2682c8273204117402f666e9bbf1f0c0edb08bf3e51270876f92067ae8d37bdbf857d4174a4a32de8459e4612ab723d5e52bfe77e44d7faf4b70d7c8102a5b3503460b0865e5ded0c0366d9dbfeb111deeb425c8878798cad64a84f2036dd9a883277a89d368d636ae34b7f9a8ee57f1e563d72645629ec94d5e763b29dfe2e2fcf699eee4224ec6a3881f892e4f3139962b7f8c397dda473c820761f82df111ee571df65e01b697287cbd8d1496cc98f462828cf22fcc14bfa4cedf934920892fac405290ab3ee7eedae9af2a1eb0f45309eec1cafec9d5f9fe10212417e89182cd22474a8b8972520b79728c8b712ee96a809b31a0c08bab2285fcff6d8b8f638f5550cea169055163017e5c3ff238fd5ba7e460b06ca7dd11fcb37829e6c71a29df07a53ecf8a041081977da88a21074dee4cf64132868a3d7c32e4efa49a71d98a4be181b681f22152bbdca36b377baf0c90f8cbf2c32f8dac624e7fa650d3aa974aba48d29b7d352557f5b2d8054c86d36363c00497a6e467ebe863890c6344a8151ca09a0012e8d0f904acba4edcc92d16e021dd24f0d58504152c62ddd21904a039222673e9b3c0a255ecb2c67d919cf50abeeb3ed8d52618d31242b274f96057ae05944ae0a367aeb6a29455c1171f69f7b138d20197216e552f1c11956a9a031539b032ff5d666b2b7203b8441d8e8c2bf325aadd08e01d3eebdcf663d318c3302130299b1cf852edec4300498ed3fc57073309f83490ffc5d2f65cf087f47790e950a6c810a50cdef1b6a4c62c0f40f3bf438d1ad1f0a04a4c28645de82c6fe6174147145ccc180e5989fd5368ea9c90b5b74cbb8acdde83a05f91b943d73f950940f4ba967767533e4093015f9e7c5c2bcf422e83af0d2b718dd15c219e1dad959f88f18b4592a20c396e3862bc8d629b50e670eab0e12460e1bd94e8d192fbbef19d5b5e7244ef274a5192f8e28b28d1ecfdbe6da5c4102f9535edf71a6f5de0f59a7290cecf062a0328154b1fa5ba4dcee2a856de908d9984914c5a05038b4678dc5b202150be8768b33d15f7d380f080ecb406be5e991d83f10f6113ec8ee18a4d269a96f4b30b84d059e6600af3fd36f0cd6afc8b9c0d7673ac8ae164a796ee21e4e1e4ba1d75c64a65de49bf755abe4aa4d832ca23c7833972e8735acb7d31969993437d2cbb7b12cfde845e0fa7a3ec6a9959cb859ae8ec8da9b9b93dfaba08b0bc092a1e75d95ded612837ef01b11d05b649ef903a065bbde06643bb2bb6d352b01b2db6b693941e4a6d955fe01c29c56dbd298146a6ab48c2ad9d0e191c4307c3a68c858f975d6da078c95eee82212b07c1c0c496771dfc29429cd3fb6d6932e3c49b77e834e1bcc15a7e2f62779c7eda7cb7339037676dbd603b46554de1ca7950e33d48e7615a7971e525696b69b1e024377d20653bcd41b530f6a764699f75a9134b4be30082ab571eab792063234db36907f6bdf8caba3e0e0f884816943418b32e3063378accf4d916e068f0b9055039e93a875cb500e25ef8258cbea70b445d3c2680c75600759e4df1270f9f79b1826909b2dfe6e7a2b58040d03e0963eb46b8c99a327a61a510c07103b23c40bccefc14e2d8b92140a7792eabc328e147dfcc87cd215a03ffb9d1a54351657ade1af17d4bb953ada02830869186cc820a44fa13325e3e53c565d7cdd5a1292de52150a144df0ed39ee23cb7a26f15ff042a797c9aa69ec8a33d9cede2f1f00c04b990025adf0813ceea6827c46c1ec46cfe6fc9294ac3d7963bbdcb7a5a75431e067c492b0c6da41606c6c82425145ec772f733afcdde02e2a422d64439ba43e080d1f79d1ab5ffa01392f4f21cb9940a1ed244ea5ff85bde6af06d72c5a54cb3c1af918fd0801f8ebdc410db560ec151eec471acd4634f781141c46569dd7abf178f286aed037fd73f4daa356e648eeeda0bc546f196b2b6319da806ef87542e3c47bc5cc54da7ae92e79420fbda44c35f38a72ea14d13df8a4c526175e7f0648151b5fa27ecd735965265e9c07e20f5f1e9cf01a9c9fa508d93cae05d0b666bf7d1a4cdec9b380dcd1694d7ffc09f06420fb2c97ccf1084bce8f30192004f055fe859e3de62ca7f77904d080fa7a6a099d8db70ef3ee82ff8b0d6e4eeee656b17463176c759dcf3d943807207df04da7c731dc2f56a5b263831ce89e4eaaad6e56e21764ca1d96f4cd6069bdfb0a278c23c92521b4a17763c926d70aa4f49cb718c90a426a64ea9c03469be5602ee34141c290375f5e98af76ea53512d32f268cbc0527dcca0ab3e2b1b76e79b4285dc09a3a7f89997da03a629b5d9f755b4ce6a4c50455011efacdc5d2c1b91db8b865c614b135db2e0f9e4cede55ae414cb1f14398a8c9a73a09d315796beb10e702bd8522b9875deff4435cc166b2a87d3d4d7d172b6290acb8e97f6b62615d4019d71324adeac0c3bc00a5650a5fcd471cf27f28a829d0fb8fdeb93b62973482fd1e7b57b3de16283501cd39f6d8986c191172394c39cdf11607f415cb171f8a9662b7990b51a1e42caa718229b34c4262b1db8fdd0c8093d62efd43d9ee3eed44f6208c7151544170c39b9f78becb55c08c597715b2f1901df6457da8e6ebc483b3bb5db68fd3c89668cafc4339a21f4b05e483570190cef51bf92ca49709ba11dc06bd305deadaed6b9f6f028bc95a92fb8385534883990332f54b71733807a1f2b8f25fdb1df88eb3b38976706d07a67f756e431546aebd4af2743f31b36038f91c00deddb1285e26297c174397126ff53433f2e184c1d4cef6b3a7bfa1862de9a1ec20869e03b69379de53d7b4311495acdf897855a9f23552a512ae9bf34a9775693d8957d9905504c089d19d7c98187e1dd671516f8d6b605941d8e7f77ab6118cc5ebeec6ca42a5f9f6818dcef7b0af9652bed27ec585f7e18e23a3b0736dee634cce14dc52656f0663eeee84ebca945e62adf94bba85942c89e328c4f35e43586af445f11b1b64945c8f4dad48f6db27c3444f016cce7feb7a438759d67cd203d9fcb3f44211f4977b5f347800f3f37b874df4ef985dc55d6a1cb3457e6c10a539f4bff7623a09ffe0761fff206afcfb5cc4b5a9fbd54f98e9a553ae59790facbda1adf615a79e439172341c3bf95b99dd8f78ff53699d110769c9731c03ad3ccd8abb8877fe84c0ab0d646ff06a49f73c42764ad003bf85703f633a9d85d0b03d3c595f9eb103a85363fb5df48e201e22d4b361bcb5de70bbaab8a02a2d3b27a5246145b2da2cc71bfa561544f7cd3cff6688a7b049ae086b43d197a61ae54d7113829e8f6afaf2414b7ac0b2f286968d2db9a4bb1b90c1ad9861dba35722483c88c63e5d77cf8b05225f31e665878f9238e55bf90f312fab7c19e400008fd67965386bbbee50999ec685fa1bb20cbf106a909a234f65de75ba4c896e218074ccdb8f75a333ed4e0c256283d1d7d326683b84ddfdb7a7b2e6dc4a93b2dbb8b37b208d4c02b6d192d28bb49ea44dfc56be4e70a3021ed442eaab2c45f832b68bf7b8600", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0xdc120f38dc45bb1c, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x6a040000) 58.999989032s ago: executing program 3 (id=977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = gettid() syz_clone(0x22b2bab63e88c7d3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) getpeername$llc(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="114353012008", 0x6, 0x4008015, &(0x7f0000000040)={0x11, 0xe5, r6, 0x1, 0x7}, 0x14) ptrace(0x11, r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r7, 0x80286f4e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r7, 0x80286f4e, 0x0) 55.230021366s ago: executing program 3 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1100, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3f, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd97021144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 52.563052837s ago: executing program 6 (id=979): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x0, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x16) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0xb]}, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x4008860) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r6, 0x0, 0xacb6, 0x8) splice(r5, 0x0, r4, 0x0, 0x7fffffffffffffff, 0x0) write(r2, &(0x7f0000000040), 0xffffff4a) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) 47.50766845s ago: executing program 35 (id=975): fsopen(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_vhci(0x0, 0x102) getsockopt(0xffffffffffffffff, 0x400, 0x10001, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0xe503, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0xdc120f38dc45bb1c, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x6a040000) 45.649007452s ago: executing program 6 (id=981): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}, {&(0x7f0000000480)="31e80f2ddfd8b7d6df5313a07d6159c90bcec5636266ec0863b6b175ec806a93a088a2bbade7cf82b8825f5fb53518de1e9f9afb3575d24225338fc874a16ca5f526f1f8f4e26041283a47eba964cf193998723fedd78b51ae8b352d58516daaa178a46df26bc0d6262d6eae62dde3f5295e26941badbaf167816cb880fcf180f99d687e6861f145c551368c35ca8f516c4f0c7a0e7395a194f0d51bf19a4d4963b662a3ed7d2bea7f55", 0xaa}, {&(0x7f0000000540)="00597eae5bfdc0701a864f502b7982934f7f201a2236413024d1bfadd48404f379409843d973a5624dcca682a67b8a27c948d4f56c97472de995df6647dd6b560d969d45c4bea4d26f8f1f9240bc9d65aee9360467f79f1e5997f38fdfd2e32f1fca2d4d8d9922dec4352eb3b5851ebb9968ff21664a48560448b803140571e818d917db0787c120f0f465107745a2e5ee811a4a7642445459998a5902b5fb2bc4b1da69d3fee564c228", 0xaa}, {&(0x7f0000000640)="4e976bd9acafa085d112b3ca7879c5146f675885aed2a8280643ae1755f1968c181e905da6c02086c79bdb405a2a52f1835122328d2a5aa6bf01adea962c5d65718089c4503b057f147c6fbc5b62586d128be3f227ae9d8c80f79711130d64e462ef5f531cd5b34751e79a3c5b103d405032881ca7fe43602fcddf746d9714dd4fdbcf", 0x83}, {&(0x7f0000000700)="c1040803abed", 0x6}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = timerfd_create(0x1, 0x0) read(r2, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000340)="dc2a5c69754724ad70618902e469b29139daad22992f82353b18a02049fd8e86acb413c570f5ade8cdb6d821b5c7018c605428ca94f42396e27a650cd362a81c7c3599f6ead9cc4189edef25b90589587e22460c979e4448c5552f7b57cbf943c529c12e90058b1f6e3abafcf5494d1aae09ca2d59e3bc702531d36453022ec773238e7d9cb4e8b43c4e63a89fa45cb7ce92a48cb371ef37eb61ea753430967dab778286f7a3137e9d3b29e84d800c69d577a8df5ffc94d21a989e67109cbfa4851ee2dbf8fae34cba") ptrace(0x10, r3) keyctl$get_persistent(0x16, 0xee01, 0xffffffffffffffff) ptrace$poke(0x13, r3, 0x0, 0x0) 44.192795521s ago: executing program 3 (id=982): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0xa6a}, {0x22b, 0x0, 0x9}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f000042d000/0x4000)=nil, 0x4000) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 38.961191163s ago: executing program 6 (id=983): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/sched/filter\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x0) write(r1, &(0x7f00000003c0)="216f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b72", 0x60) 35.818426941s ago: executing program 3 (id=984): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000029c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xb9, 0x9, 0x80, 0x2, 0x5}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110af00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 26.853042821s ago: executing program 6 (id=985): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r0, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000f00)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000e40, 0x0, 0x0, 0x200000000e70, 0x200000000ea0], 0x0, 0x0, &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x110) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 21.225127827s ago: executing program 3 (id=986): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000300)={0x1, 0x8001}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './proc\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 12.336782322s ago: executing program 6 (id=987): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4212, r4, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x3, 0x300) close_range(r5, r2, 0x2) 1.855397251s ago: executing program 36 (id=986): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000300)={0x1, 0x8001}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './proc\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x64, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 0s ago: executing program 6 (id=989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1100, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd97021144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4.676366][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.780963][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.907208][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.021272][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.142402][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.258259][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.367619][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.472086][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.591442][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.711350][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.055065][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 379.197677][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 379.755378][ T5599] net_ratelimit: 34 callbacks suppressed [ 379.755411][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.860819][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.982758][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.099408][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.210617][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.335345][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.480044][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.601108][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.710079][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.833629][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.898145][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 384.610285][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.610727][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.690824][ T8906] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 384.741067][ T8906] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 384.804389][ T8908] bond1: option mode: unable to set because the bond device has slaves [ 384.830063][ T5836] net_ratelimit: 26 callbacks suppressed [ 384.830088][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 384.878458][ T8908] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 384.939526][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.034250][ T8908] netlink: 64 bytes leftover after parsing attributes in process `syz.2.759'. [ 385.069813][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.189550][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.305985][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.412418][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.529486][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.643872][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.789680][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 385.830522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 386.928581][ T8916] atomic_op ffff8880511309e0 conn xmit_atomic 0000000000000000 [ 387.749455][ T9] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 387.944140][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 387.954597][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 387.954695][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 387.954828][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 387.954848][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.954868][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 387.954888][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 387.954908][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 387.954939][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 387.971239][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 387.971350][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 387.971459][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 387.971478][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.971497][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 387.971516][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 387.971535][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 387.971555][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 388.034774][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 388.034880][ T9] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 388.034993][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 388.035013][ T9] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 388.035032][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 388.035051][ T9] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 388.035071][ T9] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 388.035092][ T9] usb 8-1: config 168 interface 0 has no altsetting 0 [ 388.091774][ T9] usb 8-1: string descriptor 0 read error: -22 [ 388.092786][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.208317][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 388.728035][ T9] usb 8-1: USB disconnect, device number 10 [ 389.860446][ T5836] net_ratelimit: 34 callbacks suppressed [ 389.860498][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 389.982667][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.092054][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.201232][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.311106][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.425006][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.530182][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.642718][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.761670][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.882575][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.095970][ T43] audit: type=1800 audit(1790279244.468:286): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.765" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 394.926706][ T7123] net_ratelimit: 27 callbacks suppressed [ 394.926744][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.077170][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.186327][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.292970][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.405329][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.512731][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.636395][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.753929][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.865754][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 395.976580][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.975407][ T8948] jffs2: notice: (8948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (1 dead, 7 orphan) found. [ 400.139394][ T7123] net_ratelimit: 33 callbacks suppressed [ 400.139440][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.302841][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.420986][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.531810][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.643545][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.755796][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 400.865869][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.101220][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.222795][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.401890][ T8948] overlayfs: failed to clone upperpath [ 401.520503][ T910] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 402.327000][ T910] usb 8-1: not running at top speed; connect to a high speed hub [ 402.327281][ T910] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 402.446122][ T910] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 402.503753][ T910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.503786][ T910] usb 8-1: Product: syz [ 402.503809][ T910] usb 8-1: Manufacturer: syz [ 402.503830][ T910] usb 8-1: SerialNumber: syz [ 402.757535][ T910] oti6858 8-1:1.0: oti6858 converter detected [ 402.982882][ T910] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 403.921987][ T8947] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.380727][ T5859] usb 8-1: USB disconnect, device number 11 [ 404.621695][ T8961] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 405.152479][ T5836] net_ratelimit: 1 callbacks suppressed [ 405.152509][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.183920][ T5859] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 405.225185][ T5859] oti6858 8-1:1.0: device disconnected [ 405.259590][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.382797][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.503198][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.111953][ T8947] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.330347][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.443695][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.550262][ T8966] qrtr: Invalid version 0 [ 406.564984][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.758359][ T8947] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.879462][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.999830][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.219690][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.316741][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 407.421140][ T8947] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.011710][ T7123] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.497840][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.498115][ T12] net_ratelimit: 9 callbacks suppressed [ 410.498157][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.530070][ T8977] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 412.142170][ T7123] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.169893][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.299550][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.432460][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.552902][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.120342][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.120440][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.229712][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.339874][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.450381][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.559579][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.539818][ T8605] net_ratelimit: 17 callbacks suppressed [ 416.539853][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.650288][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.759826][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.873532][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 416.980293][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.091300][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.205820][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.311416][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.430451][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.541682][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.847628][ T5836] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.585996][ T5764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.650608][ T5764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.673313][ T5764] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.713972][ T5836] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.727216][ T5764] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.741741][ T5764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.553673][ T5836] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.018317][ T5836] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.060075][ T5773] Bluetooth: hci3: command tx timeout [ 421.623641][ T5599] net_ratelimit: 16 callbacks suppressed [ 421.623675][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.849272][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.041326][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 422.352880][ T9026] qrtr: Invalid version 0 [ 423.135714][ T5773] Bluetooth: hci3: command tx timeout [ 423.808618][ T5836] bond2 (unregistering): (slave geneve2): Releasing active interface [ 424.022141][ T5836] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 424.106291][ T5836] bond0 (unregistering): Released all slaves [ 424.204403][ T5836] bond1 (unregistering): (slave lo): Releasing backup interface [ 424.221722][ T5836] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 424.227060][ T5836] bond1 (unregistering): Released all slaves [ 424.412652][ T5836] bond2 (unregistering): Released all slaves [ 424.673105][ T9028] syzkaller1: entered promiscuous mode [ 424.673134][ T9028] syzkaller1: entered allmulticast mode [ 424.858743][ T5836] tipc: Left network mode [ 424.859787][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 424.978488][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.089256][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.219166][ T5773] Bluetooth: hci3: command tx timeout [ 425.672736][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.549807][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.570453][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 426.854724][ T5836] hsr_slave_0: left promiscuous mode [ 426.882120][ T5836] hsr_slave_1: left promiscuous mode [ 426.925250][ T5836] veth1_macvtap: left promiscuous mode [ 426.925757][ T5836] veth0_macvtap: left promiscuous mode [ 426.928527][ T5836] veth1_vlan: left promiscuous mode [ 426.939467][ T5836] veth0_vlan: left promiscuous mode [ 427.299147][ T5773] Bluetooth: hci3: command tx timeout [ 427.975859][ T5836] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 428.889495][ T1037] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 429.328575][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.965520][ T9049] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 432.038469][ T1037] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 432.038600][ T1037] usb 8-1: no configurations [ 432.038623][ T1037] usb 8-1: can't read configurations, error -22 [ 432.729476][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.870022][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.982011][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.102750][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.220597][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.340451][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.620472][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.730823][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.852051][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.893469][ T9063] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 434.554765][ T5836] IPVS: stop unused estimator thread 0... [ 435.392726][ T13] net_ratelimit: 3 callbacks suppressed [ 435.392749][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 435.781596][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 436.171292][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.749839][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.779480][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 437.783218][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.786599][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.787279][ T9003] bridge_slave_0: entered allmulticast mode [ 437.853685][ T9003] bridge_slave_0: entered promiscuous mode [ 437.927044][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.928109][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.936358][ T9003] bridge_slave_1: entered allmulticast mode [ 437.989644][ T9003] bridge_slave_1: entered promiscuous mode [ 438.112886][ T9091] fuse: fd is not a fuse device [ 438.269803][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.670473][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.679628][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.714509][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.269434][ T9003] team0: Port device team_slave_0 added [ 439.495558][ T9003] team0: Port device team_slave_1 added [ 440.267461][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 440.338334][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.338359][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.338388][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.557601][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 440.608596][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.608628][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.608663][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.080942][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.519394][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.809477][ T9003] hsr_slave_0: entered promiscuous mode [ 442.829297][ T9003] hsr_slave_1: entered promiscuous mode [ 442.842581][ T9003] debugfs: 'hsr0' already exists in 'hsr' [ 442.842704][ T9003] Cannot create hsr debugfs directory [ 443.210002][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.870909][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.131994][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 444.745205][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 444.919328][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.029586][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.150424][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.249889][ T9003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.291816][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.303678][ T9003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.333245][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.346020][ T9003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.388817][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.396493][ T9003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.431103][ T9003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.509487][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.759241][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.873641][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 445.999383][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.023462][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.023726][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.207813][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.212939][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.336105][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.386436][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.387231][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.498712][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.499649][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.589384][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.743391][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 446.838768][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 446.999906][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.109532][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.242202][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 447.349301][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 450.819681][ T5599] net_ratelimit: 27 callbacks suppressed [ 450.819709][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 450.935779][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.050237][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.187411][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.295284][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.402832][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.522002][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.630473][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.817558][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.830551][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 451.949580][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.088519][ T9003] veth0_vlan: entered promiscuous mode [ 454.189180][ T9003] veth1_vlan: entered promiscuous mode [ 454.496834][ T9003] veth0_macvtap: entered promiscuous mode [ 454.577224][ T9003] veth1_macvtap: entered promiscuous mode [ 454.792773][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.895136][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.046525][ T8605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.048688][ T8605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.066150][ T8605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.389572][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.682418][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.682438][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.022578][ T5836] net_ratelimit: 25 callbacks suppressed [ 456.022599][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.028081][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.028109][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.141623][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.287118][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.390028][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.532330][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.652947][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.759805][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.880240][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 456.992815][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.110066][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.132101][ T7123] net_ratelimit: 34 callbacks suppressed [ 461.132169][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.249463][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.585211][ T9168] tipc: Enabled bearer , priority 0 [ 461.609925][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.729651][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.764454][ T9162] syzkaller0: entered promiscuous mode [ 461.764500][ T9162] syzkaller0: entered allmulticast mode [ 461.829700][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 461.876644][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 461.893930][ T9162] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 462.253499][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.369540][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.486486][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.598554][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 462.638304][ T856] tipc: Node number set to 3056474707 [ 462.700567][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 463.110388][ T9162] tipc: Resetting bearer [ 463.423527][ T9161] tipc: Resetting bearer [ 463.829842][ T9161] tipc: Disabling bearer [ 465.709928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 466.150016][ T12] net_ratelimit: 19 callbacks suppressed [ 466.150055][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.260683][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.370560][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.480518][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.591808][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.710656][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.824780][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.935219][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.071801][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 467.180478][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 470.963833][ T9209] md: could not open device unknown-block(7,0). [ 471.403111][ T9] libceph: connect (1)[c::]:6789 error -99 [ 471.407669][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 471.474253][ T9212] ceph: No mds server is up or the cluster is laggy [ 471.503116][ T9] libceph: connect (1)[c::]:6789 error -99 [ 471.516017][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 471.813181][ T9] libceph: connect (1)[c::]:6789 error -99 [ 471.824000][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 472.290874][ T9214] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 472.390558][ T9] libceph: connect (1)[c::]:6789 error -99 [ 472.397908][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 472.609553][ T5836] net_ratelimit: 27 callbacks suppressed [ 472.609589][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.719834][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.855448][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 472.966684][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.070641][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.190710][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.302051][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.412606][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.519844][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.629711][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.282095][ T43] audit: type=1326 audit(1790279325.658:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.288507][ T43] audit: type=1326 audit(1790279325.658:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.361068][ T43] audit: type=1326 audit(1790279325.738:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.366526][ T43] audit: type=1326 audit(1790279325.738:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.375116][ T43] audit: type=1326 audit(1790279325.748:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.404039][ T43] audit: type=1326 audit(1790279325.778:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.412960][ T43] audit: type=1326 audit(1790279325.778:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.419978][ T43] audit: type=1326 audit(1790279325.788:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.450151][ T43] audit: type=1326 audit(1790279325.818:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf701efec code=0x7ffc0000 [ 474.455689][ T43] audit: type=1326 audit(1790279325.828:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9229 comm="syz.0.807" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf701efec code=0x7ffc0000 [ 477.669566][ T13] net_ratelimit: 35 callbacks suppressed [ 477.669585][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.789610][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.901472][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.010534][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.120217][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.230097][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.345566][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.449743][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.559922][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.692995][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.432218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 479.535659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 482.516310][ T9255] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 482.516337][ T9255] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 482.720246][ T7123] net_ratelimit: 30 callbacks suppressed [ 482.720279][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.831672][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.950154][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.070894][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.190983][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.299671][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.411046][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.520289][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.631665][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 483.750604][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.811891][ T7123] net_ratelimit: 34 callbacks suppressed [ 487.811940][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.923219][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.090664][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.202142][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.320603][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.445139][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.553572][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.681484][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.791112][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.901003][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.459949][ T9150] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 490.661165][ T9150] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 490.707479][ T9150] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 490.707533][ T9150] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 490.813647][ T9150] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.813679][ T9150] usb 8-1: Product: syz [ 490.813697][ T9150] usb 8-1: Manufacturer: syz [ 490.813715][ T9150] usb 8-1: SerialNumber: syz [ 490.937788][ T9150] usb 8-1: config 0 descriptor?? [ 491.004679][ T9150] hub 8-1:0.0: bad descriptor, ignoring hub [ 491.004802][ T9150] hub 8-1:0.0: probe with driver hub failed with error -5 [ 491.098371][ T9150] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8 [ 492.553789][ T856] usb 8-1: USB disconnect, device number 14 [ 492.870074][ T13] net_ratelimit: 34 callbacks suppressed [ 492.870102][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.980777][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.029082][ T9295] syz.1.828: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 493.029334][ T9295] CPU: 2 UID: 0 PID: 9295 Comm: syz.1.828 Not tainted syzkaller #0 PREEMPT(full) [ 493.029351][ T9295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.029363][ T9295] Call Trace: [ 493.029380][ T9295] [ 493.029400][ T9295] dump_stack_lvl+0x100/0x190 [ 493.029503][ T9295] warn_alloc.cold+0x9e/0xb2 [ 493.029608][ T9295] ? __pfx_warn_alloc+0x10/0x10 [ 493.029689][ T9295] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 493.029877][ T9295] ? rb_commit+0x129/0x9d0 [ 493.030030][ T9295] __vmalloc_node_range_noprof+0x123b/0x1420 [ 493.030138][ T9295] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 493.030211][ T9295] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 493.030279][ T9295] ? do_replace+0x1c6/0x490 [ 493.030353][ T9295] ? trace_event_buffer_commit+0x20a/0xa80 [ 493.030464][ T9295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 493.030524][ T9295] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 493.030588][ T9295] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 493.030797][ T9295] ? do_replace+0x1c6/0x490 [ 493.030840][ T9295] __vmalloc_node_noprof+0xad/0xf0 [ 493.030885][ T9295] ? do_replace+0x1c6/0x490 [ 493.030985][ T9295] __vmalloc_noprof+0xa3/0x120 [ 493.031056][ T9295] ? __pfx___vmalloc_noprof+0x10/0x10 [ 493.031253][ T9295] do_replace+0x1c6/0x490 [ 493.031366][ T9295] ? __pfx_do_replace+0x10/0x10 [ 493.031569][ T9295] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 493.031724][ T9295] compat_do_replace+0x589/0x7a0 [ 493.031855][ T9295] ? __pfx_compat_do_replace+0x10/0x10 [ 493.031893][ T9295] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 493.032002][ T9295] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 493.032290][ T9295] ? bpf_lsm_capable+0x9/0x10 [ 493.032309][ T9295] ? security_capable+0x80/0x260 [ 493.032419][ T9295] do_ebt_set_ctl+0x3f4/0x4a0 [ 493.032552][ T9295] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 493.032633][ T9295] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 493.032661][ T9295] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 493.032828][ T9295] ? nf_sockopt_find.isra.0+0x222/0x290 [ 493.032924][ T9295] nf_setsockopt+0x8d/0xf0 [ 493.033033][ T9295] ip_setsockopt+0xcb/0xf0 [ 493.033173][ T9295] tcp_setsockopt+0xa7/0x100 [ 493.033263][ T9295] smc_setsockopt+0x1b6/0xa40 [ 493.033302][ T9295] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 493.033437][ T9295] ? __pfx_smc_setsockopt+0x10/0x10 [ 493.033514][ T9295] ? aa_sock_opt_perm+0x114/0x1e0 [ 493.033601][ T9295] ? __pfx_smc_setsockopt+0x10/0x10 [ 493.033708][ T9295] do_sock_setsockopt+0xf3/0x1d0 [ 493.033816][ T9295] __sys_setsockopt+0x119/0x190 [ 493.033989][ T9295] __ia32_sys_setsockopt+0xbc/0x160 [ 493.034038][ T9295] ? __do_fast_syscall_32+0xb3/0x8b0 [ 493.034077][ T9295] ? lockdep_hardirqs_on+0x7d/0x110 [ 493.034108][ T9295] __do_fast_syscall_32+0x13a/0x8b0 [ 493.034208][ T9295] do_fast_syscall_32+0x32/0x70 [ 493.034275][ T9295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.034321][ T9295] RIP: 0023:0xf7f28fec [ 493.034389][ T9295] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 493.034396][ T9295] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 493.034414][ T9295] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 493.034424][ T9295] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 493.034434][ T9295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.034444][ T9295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 493.034454][ T9295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.034717][ T9295] [ 493.035007][ T9295] Mem-Info: [ 493.035031][ T9295] active_anon:2421 inactive_anon:1486 isolated_anon:0 [ 493.035031][ T9295] active_file:1781 inactive_file:16836 isolated_file:0 [ 493.035031][ T9295] unevictable:1000 dirty:197 writeback:78 [ 493.035031][ T9295] slab_reclaimable:6155 slab_unreclaimable:55892 [ 493.035031][ T9295] mapped:22864 shmem:2793 pagetables:1391 [ 493.035031][ T9295] sec_pagetables:308 bounce:0 [ 493.035031][ T9295] kernel_misc_reclaimable:0 [ 493.035031][ T9295] free:20430 free_pcp:8046 free_cma:0 [ 493.035090][ T9295] Node 0 active_anon:668kB inactive_anon:240kB active_file:196kB inactive_file:1024kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:32kB writeback:4kB shmem:2008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9376kB pagetables:1540kB sec_pagetables:1128kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 493.035150][ T9295] Node 1 active_anon:9016kB inactive_anon:5704kB active_file:6928kB inactive_file:66320kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:91384kB dirty:756kB writeback:308kB shmem:9164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4896kB pagetables:4024kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 493.035210][ T9295] Node 0 DMA free:2148kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:160kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:40kB free_cma:0kB [ 493.035279][ T9295] lowmem_reserve[]: 0 278 278 278 278 [ 493.035344][ T9295] Node 0 DMA32 free:17228kB boost:0kB min:12624kB low:15780kB high:18936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:668kB inactive_anon:240kB active_file:196kB inactive_file:1024kB unevictable:2000kB writepending:36kB zspages:556kB present:1032196kB managed:284848kB mlocked:0kB bounce:0kB free_pcp:2864kB local_pcp:556kB free_cma:0kB [ 493.035406][ T9295] lowmem_reserve[]: 0 0 0 0 0 [ 493.035484][ T9295] Node 1 DMA32 free:62344kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9016kB inactive_anon:5704kB active_file:6928kB inactive_file:66320kB unevictable:2000kB writepending:1064kB zspages:4688kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:29032kB local_pcp:6848kB free_cma:0kB [ 493.035549][ T9295] lowmem_reserve[]: 0 0 0 0 0 [ 493.035645][ T9295] Node 0 DMA: 41*4kB (UM) 18*8kB (UM) 7*16kB (UM) 12*32kB (UM) 7*64kB (UM) 1*128kB (M) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2148kB [ 493.036305][ T9295] Node 0 DMA32: 43*4kB (UME) 90*8kB (UE) 25*16kB (UME) 62*32kB (UME) 55*64kB (UME) 9*128kB (ME) 4*256kB (M) 6*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 0*4096kB = 17164kB [ 493.036705][ T9295] Node 1 DMA32: 2*4kB (UE) 56*8kB (UME) 140*16kB (UME) 46*32kB (UME) 120*64kB (UME) 59*128kB (UME) 68*256kB (UME) 26*512kB (UME) 8*1024kB (UM) 2*2048kB (M) 0*4096kB = 62408kB [ 493.038129][ T9295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.038148][ T9295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 493.038168][ T9295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.038187][ T9295] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 493.038207][ T9295] 22138 total pagecache pages [ 493.038219][ T9295] 705 pages in swap cache [ 493.038231][ T9295] Free swap = 100740kB [ 493.038243][ T9295] Total swap = 124996kB [ 493.038257][ T9295] 524155 pages RAM [ 493.038269][ T9295] 0 pages HighMem/MovableOnly [ 493.038282][ T9295] 212051 pages reserved [ 493.038294][ T9295] 0 pages cma reserved [ 493.089894][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.202712][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.312281][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.419932][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.540674][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.651477][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.769207][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 493.881423][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 497.930255][ T8605] net_ratelimit: 30 callbacks suppressed [ 497.930286][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.041824][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.154584][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.283298][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.392935][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.502750][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.612994][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.722373][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.850111][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 498.961402][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 499.178591][ T43] kauditd_printk_skb: 140 callbacks suppressed [ 499.178614][ T43] audit: type=1326 audit(1790279350.548:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9304 comm="syz.4.831" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08fec code=0x0 [ 500.597334][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 502.952288][ T5836] net_ratelimit: 33 callbacks suppressed [ 502.952327][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.065169][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.181863][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.300469][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.412718][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.542440][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.658580][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.770321][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 503.890368][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 504.017747][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 504.937977][ T9329] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 504.939983][ T9329] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 504.940241][ T9329] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 507.466576][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.466848][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.970146][ T5836] net_ratelimit: 34 callbacks suppressed [ 507.970173][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 508.102272][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 508.210256][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 508.319944][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 508.429676][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 508.550140][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 508.699590][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 508.747954][ T9351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.892098][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 509.009905][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 509.150524][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 509.517019][ T9354] tc action pedit offset must be on 32 bit boundaries [ 513.031853][ T7123] net_ratelimit: 20 callbacks suppressed [ 513.031874][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.144423][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.252795][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.371851][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.481707][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.602036][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.721756][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.840973][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 513.960382][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 514.115458][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 518.116342][ T13] net_ratelimit: 32 callbacks suppressed [ 518.116376][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 518.249651][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 518.366804][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 518.483801][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 518.564388][ T9385] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 518.564645][ T9385] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 518.564676][ T9385] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 518.597424][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 518.703910][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 519.346170][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 519.451032][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 519.582315][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 519.700380][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 519.847421][ T307] IPVS: starting estimator thread 0... [ 519.959560][ T9397] IPVS: using max 4 ests per chain, 9600 per kthread [ 522.168426][ T9150] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 522.597270][ T74] nvmet: connect request for invalid subsystem testsubsys! [ 522.601275][ T9406] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 522.972081][ T9150] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 522.987017][ T9150] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 522.987039][ T9150] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 522.987055][ T9150] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 522.988129][ T9150] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 522.988152][ T9150] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 523.052744][ T9150] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 523.052769][ T9150] usb 9-1: Product: syz [ 523.052785][ T9150] usb 9-1: Manufacturer: syz [ 523.141437][ T7123] net_ratelimit: 30 callbacks suppressed [ 523.141463][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 523.260147][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 523.282196][ T9150] cdc_wdm 9-1:1.0: skipping garbage [ 523.282211][ T9150] cdc_wdm 9-1:1.0: skipping garbage [ 523.363106][ T9150] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 523.363128][ T9150] cdc_wdm 9-1:1.0: Unknown control protocol [ 523.384168][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 523.495138][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 523.602520][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 523.712978][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 523.832344][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 523.949496][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 524.081515][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 524.092998][ T9150] usb 9-1: USB disconnect, device number 2 [ 524.191667][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 528.209785][ T307] IPVS: starting estimator thread 0... [ 528.271132][ T8605] net_ratelimit: 35 callbacks suppressed [ 528.271171][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 528.299803][ T9433] IPVS: using max 4 ests per chain, 9600 per kthread [ 528.389469][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 528.522753][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 528.631233][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 528.742630][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 528.860736][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 528.973156][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 529.080127][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 529.192340][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 529.299687][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 533.319312][ T5836] net_ratelimit: 33 callbacks suppressed [ 533.319333][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 533.439747][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 533.610084][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 533.725831][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 533.841343][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 533.960632][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.073574][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.188415][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.306501][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.413871][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 538.236604][ T9468] bond1: option mode: unable to set because the bond device has slaves [ 538.378168][ T13] net_ratelimit: 31 callbacks suppressed [ 538.378207][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 538.482007][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 538.650472][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 538.774800][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 538.937543][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 539.041874][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 539.160855][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 539.280270][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 539.391327][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 539.513395][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 543.413889][ T13] net_ratelimit: 22 callbacks suppressed [ 543.413917][ T13] bond1: (slave ip6gretap1): link status up again after 0 ms [ 543.443695][ T5836] bond1: (slave ip6gretap1): link status up again after 0 ms [ 543.471534][ T13] bond1: (slave ip6gretap1): link status up again after 0 ms [ 543.504748][ T13] bond1: (slave ip6gretap1): link status up again after 0 ms [ 543.504791][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 543.616867][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 543.748215][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 543.933541][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.042062][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.164103][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 545.379423][ T9480] Bluetooth: hci3: command 0x0406 tx timeout [ 548.492445][ T12] net_ratelimit: 37 callbacks suppressed [ 548.492484][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.600897][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.733040][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.851571][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 548.973974][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.101633][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.245549][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.422062][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.598074][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.750693][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.510493][ T7123] net_ratelimit: 32 callbacks suppressed [ 553.510529][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.619932][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.730067][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.839598][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 553.950043][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.069972][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.182427][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.290320][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.399815][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.509590][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 556.027745][ T9495] jffs2: notice: (9495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (1 dead, 7 orphan) found. [ 556.186269][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 556.188305][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 556.507122][ T9492] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input9 [ 558.544825][ T5599] net_ratelimit: 33 callbacks suppressed [ 558.544868][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.639155][ T43] audit: type=1326 audit(1790279409.968:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.639420][ T43] audit: type=1326 audit(1790279409.968:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.675981][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.713371][ T43] audit: type=1326 audit(1790279410.048:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=298 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.714066][ T43] audit: type=1326 audit(1790279410.048:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.714747][ T43] audit: type=1326 audit(1790279410.058:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.772897][ T43] audit: type=1326 audit(1790279410.108:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.773661][ T43] audit: type=1326 audit(1790279410.108:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.774435][ T43] audit: type=1326 audit(1790279410.118:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.775213][ T43] audit: type=1326 audit(1790279410.138:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.775921][ T43] audit: type=1326 audit(1790279410.148:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.1.889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28fec code=0x7ffc0000 [ 558.807544][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.920951][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.035977][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.149377][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.273893][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.391033][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.509471][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.621942][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.635350][ T8605] net_ratelimit: 23 callbacks suppressed [ 563.635371][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.741905][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.853391][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 563.971054][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.089928][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.201756][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.310795][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.420583][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.573929][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.683722][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 567.666445][ T9541] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 568.949724][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.950154][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.176075][ T7123] net_ratelimit: 30 callbacks suppressed [ 569.176332][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.280560][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.391048][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.505188][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.620946][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.730434][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.840234][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.950137][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.069330][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.179439][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.241458][ T5909] net_ratelimit: 35 callbacks suppressed [ 574.241496][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.351763][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.461607][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.581056][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.690840][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.802698][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.946001][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.049977][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.162748][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.269526][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.295102][ T8605] net_ratelimit: 31 callbacks suppressed [ 579.295135][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.417573][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.539252][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.651216][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.771887][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 579.787649][ T9577] netlink: 52 bytes leftover after parsing attributes in process `syz.4.905'. [ 580.164891][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.279619][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.389574][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.504299][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.628411][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 583.423748][ T9587] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 583.811136][ T9590] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 583.845953][ T9587] md: invalid raid superblock magic on ram0 [ 583.845987][ T9587] md: ram0 does not have a valid v0.90 superblock, not importing! [ 583.898448][ T9590] netlink: 48 bytes leftover after parsing attributes in process `syz.1.910'. [ 584.313988][ T5909] net_ratelimit: 30 callbacks suppressed [ 584.314018][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 584.421342][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 584.557751][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 584.671229][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 584.789798][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.111527][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.250874][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.363836][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.480664][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.613658][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.826389][ T9596] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 588.263969][ T9596] bond2: entered promiscuous mode [ 588.272063][ T9596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.459939][ T5909] net_ratelimit: 18 callbacks suppressed [ 589.460015][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.584030][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.703128][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.788717][ T9605] MTD: Couldn't look up './dev/mtdblock0': -2 [ 589.811286][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.927246][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.040545][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.153271][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.273163][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.382361][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.503391][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.542206][ T7123] net_ratelimit: 33 callbacks suppressed [ 594.542250][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.669726][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.821775][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.926654][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.031151][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.163903][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.274113][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.386968][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.510468][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.627388][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.464764][ T9480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.474601][ T9480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.483834][ T9480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.500929][ T9480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.515156][ T9480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 599.648420][ T8605] net_ratelimit: 25 callbacks suppressed [ 599.648443][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.749753][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.201911][ T5909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.498341][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.601166][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.660370][ T5773] Bluetooth: hci4: command tx timeout [ 600.906945][ T5909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.000413][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.110589][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.355555][ T5909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.610002][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.725036][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.973807][ T5909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.190419][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.309308][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.731014][ T5773] Bluetooth: hci4: command tx timeout [ 604.052025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 604.809962][ T5773] Bluetooth: hci4: command tx timeout [ 605.152863][ T5599] net_ratelimit: 4 callbacks suppressed [ 605.152907][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.796795][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.084450][ T5909] bridge_slave_1: left allmulticast mode [ 606.084513][ T5909] bridge_slave_1: left promiscuous mode [ 606.097686][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.397418][ T5909] bridge_slave_0: left allmulticast mode [ 606.397463][ T5909] bridge_slave_0: left promiscuous mode [ 606.402365][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.889576][ T5773] Bluetooth: hci4: command tx timeout [ 608.657954][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'. [ 608.658011][ T9661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 608.824992][ T9661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.924'. [ 608.992994][ T5773] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 609.735495][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.805609][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.862971][ T5909] bond0 (unregistering): Released all slaves [ 609.979499][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.089401][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.259632][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 613.823183][ T9548] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 614.592543][ T5909] hsr_slave_0: left promiscuous mode [ 614.616505][ T5909] hsr_slave_1: left promiscuous mode [ 614.636407][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.636489][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.686355][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.686403][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.935751][ T5909] veth1_macvtap: left promiscuous mode [ 614.935880][ T5909] veth0_macvtap: left promiscuous mode [ 614.936605][ T5909] veth1_vlan: left promiscuous mode [ 614.937167][ T5909] veth0_vlan: left promiscuous mode [ 618.639545][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 618.788354][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 620.309243][ T5455] 8021q: adding VLAN 0 to HW filter on device eth6 [ 620.320064][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.493717][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.852073][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.310082][ T5836] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.431996][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.530670][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.654127][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.710488][ T5909] IPVS: stop unused estimator thread 0... [ 621.772745][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.880688][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.957649][ T9701] netlink: 'syz.1.934': attribute type 4 has an invalid length. [ 622.214946][ T9480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.231975][ T9480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.282709][ T9480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.313199][ T9480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.327371][ T9480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 622.363086][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.148179][ T9622] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.156391][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.157513][ T9622] bridge_slave_0: entered allmulticast mode [ 624.220114][ T9622] bridge_slave_0: entered promiscuous mode [ 624.288751][ T5455] 8021q: adding VLAN 0 to HW filter on device eth7 [ 624.297016][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.305462][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.309359][ T9622] bridge_slave_1: entered allmulticast mode [ 624.426195][ T9480] Bluetooth: hci1: command tx timeout [ 624.432345][ T9622] bridge_slave_1: entered promiscuous mode [ 625.128174][ T9622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.185541][ T9622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.297636][ T9718] FAULT_INJECTION: forcing a failure. [ 625.297636][ T9718] name failslab, interval 1, probability 0, space 0, times 0 [ 625.297680][ T9718] CPU: 1 UID: 0 PID: 9718 Comm: syz.3.935 Not tainted syzkaller #0 PREEMPT(full) [ 625.297708][ T9718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 625.297723][ T9718] Call Trace: [ 625.297742][ T9718] [ 625.297764][ T9718] dump_stack_lvl+0x100/0x190 [ 625.297899][ T9718] should_fail_ex.cold+0x5/0xa [ 625.298120][ T9718] should_failslab+0xc2/0x120 [ 625.298195][ T9718] __kmalloc_cache_noprof+0x91/0x6d0 [ 625.298274][ T9718] ? landlock_merge_ruleset+0x237/0xd10 [ 625.298537][ T9718] landlock_merge_ruleset+0x237/0xd10 [ 625.298762][ T9718] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 625.299160][ T9718] __do_fast_syscall_32+0x13a/0x8b0 [ 625.299296][ T9718] do_fast_syscall_32+0x32/0x70 [ 625.299416][ T9718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.299497][ T9718] RIP: 0023:0xf7f93fec [ 625.299612][ T9718] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 625.299634][ T9718] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 625.299680][ T9718] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000001a [ 625.299707][ T9718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.299733][ T9718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.299759][ T9718] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 625.299788][ T9718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.300275][ T9718] [ 625.727171][ T9622] team0: Port device team_slave_0 added [ 625.740016][ T13] net_ratelimit: 5 callbacks suppressed [ 625.740032][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.832535][ T9622] team0: Port device team_slave_1 added [ 626.202925][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.219791][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.219822][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.219861][ T9622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.259760][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.259788][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.259822][ T9622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.500601][ T9480] Bluetooth: hci1: command tx timeout [ 626.751217][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.937'. [ 626.840667][ T9622] hsr_slave_0: entered promiscuous mode [ 626.847401][ T9622] hsr_slave_1: entered promiscuous mode [ 626.856399][ T9622] debugfs: 'hsr0' already exists in 'hsr' [ 626.856437][ T9622] Cannot create hsr debugfs directory [ 626.954516][ T9580] libceph: connect (1)[c::]:6789 error -101 [ 626.956630][ T9580] libceph: mon0 (1)[c::]:6789 connect error [ 627.025351][ T9726] ceph: No mds server is up or the cluster is laggy [ 627.490209][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 628.569474][ T9480] Bluetooth: hci1: command tx timeout [ 628.872859][ T5455] 8021q: adding VLAN 0 to HW filter on device eth8 [ 628.980359][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.840192][ T9622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 629.895284][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.045296][ T9622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 630.092463][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.237316][ T9622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 630.281233][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.292669][ T9622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 630.330413][ T9622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.352179][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.352447][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.409696][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.659045][ T9480] Bluetooth: hci1: command tx timeout [ 630.779731][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.542858][ T5455] 8021q: adding VLAN 0 to HW filter on device eth9 [ 632.049765][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.050579][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.051509][ T9703] bridge_slave_0: entered allmulticast mode [ 632.073324][ T9703] bridge_slave_0: entered promiscuous mode [ 632.133534][ T9703] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.134325][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.135488][ T9703] bridge_slave_1: entered allmulticast mode [ 632.162048][ T9703] bridge_slave_1: entered promiscuous mode [ 632.550581][ T9703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.610688][ T9703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.426082][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 634.523040][ T9703] team0: Port device team_slave_0 added [ 635.182511][ T9703] team0: Port device team_slave_1 added [ 636.299767][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.299784][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.299801][ T9703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.309157][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.397748][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.397765][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.397786][ T9703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.429471][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.557236][ T9776] process 'syz.3.942' launched '/dev/fd/4' with NULL argv: empty string added [ 636.638631][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.086588][ T9703] hsr_slave_0: entered promiscuous mode [ 637.103625][ T9703] hsr_slave_1: entered promiscuous mode [ 637.122892][ T9703] debugfs: 'hsr0' already exists in 'hsr' [ 637.122985][ T9703] Cannot create hsr debugfs directory [ 637.686484][ T9622] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.163912][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.164720][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.641308][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.642147][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.790895][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.556129][ T9703] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 639.605285][ T9703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 639.627436][ T9703] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 639.695413][ T9703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.726537][ T9703] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 639.769656][ T9703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.791088][ T9703] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 639.837942][ T9703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.969523][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.120390][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.240302][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.380882][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.559431][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.849791][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.876597][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.071616][ T9703] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.198085][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.199094][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.325830][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.326760][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.441253][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.631899][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.790999][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.919898][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.041081][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.150098][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.262549][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.375946][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.481597][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 642.642628][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 643.175481][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 643.175975][ T9820] FAULT_INJECTION: forcing a failure. [ 643.175975][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 643.176012][ T9820] CPU: 3 UID: 0 PID: 9820 Comm: syz.3.945 Not tainted syzkaller #0 PREEMPT(full) [ 643.176032][ T9820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 643.176045][ T9820] Call Trace: [ 643.176070][ T9820] [ 643.176097][ T9820] dump_stack_lvl+0x100/0x190 [ 643.176210][ T9820] should_fail_ex.cold+0x5/0xa [ 643.176307][ T9820] should_failslab+0xc2/0x120 [ 643.176376][ T9820] __kmalloc_noprof+0xfc/0x840 [ 643.176419][ T9820] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 643.176455][ T9820] ? nla_strdup+0x11/0x150 [ 643.176509][ T9820] ? nft_trans_alloc+0x1d/0x2d0 [ 643.176624][ T9820] nft_trans_alloc+0x1d/0x2d0 [ 643.176705][ T9820] nf_tables_addchain.constprop.0+0xafa/0x1ca0 [ 643.176878][ T9820] ? nft_chain_lookup+0x59c/0xa60 [ 643.177005][ T9820] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 643.177095][ T9820] ? __pfx_nft_chain_lookup+0x10/0x10 [ 643.177510][ T9820] ? nla_strcmp+0xff/0x130 [ 643.177648][ T9820] ? nft_table_lookup.part.0+0x1e3/0x230 [ 643.177730][ T9820] nf_tables_newchain+0x1824/0x2a50 [ 643.177941][ T9820] ? do_trace_netlink_extack+0x72/0x1e0 [ 643.178101][ T9820] ? __pfx_nf_tables_newchain+0x10/0x10 [ 643.178200][ T9820] ? __pfx___nla_validate_parse+0x10/0x10 [ 643.178250][ T9820] ? lock_acquire+0x1d1/0x380 [ 643.178288][ T9820] ? net_generic+0x25/0x2a0 [ 643.178482][ T9820] ? __nla_parse+0x40/0x60 [ 643.178572][ T9820] nfnetlink_rcv_batch+0x1410/0x2880 [ 643.178879][ T9820] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 643.179032][ T9820] ? __local_bh_enable_ip+0xa5/0x120 [ 643.179819][ T9820] ? __nla_parse+0x40/0x60 [ 643.179919][ T9820] nfnetlink_rcv+0x3bd/0x440 [ 643.179994][ T9820] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 643.180178][ T9820] netlink_unicast+0x585/0x850 [ 643.180344][ T9820] ? __pfx_netlink_unicast+0x10/0x10 [ 643.180511][ T9820] netlink_sendmsg+0x8b0/0xda0 [ 643.180673][ T9820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.180765][ T9820] ? apparmor_socket_sendmsg+0x165/0x280 [ 643.180943][ T9820] ____sys_sendmsg+0xa4d/0xbe0 [ 643.180968][ T9820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.181048][ T9820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.181229][ T9820] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 643.181347][ T9820] ___sys_sendmsg+0x190/0x1e0 [ 643.181476][ T9820] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.181525][ T9820] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 643.181789][ T9820] ? find_held_lock+0x2b/0x80 [ 643.182117][ T9820] __sys_sendmsg+0x160/0x210 [ 643.182206][ T9820] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.182561][ T9820] __do_fast_syscall_32+0x13a/0x8b0 [ 643.182647][ T9820] do_fast_syscall_32+0x32/0x70 [ 643.182699][ T9820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.182737][ T9820] RIP: 0023:0xf7f93fec [ 643.182800][ T9820] Code: Unable to access opcode bytes at 0xf7f93fc2. [ 643.182813][ T9820] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 643.182840][ T9820] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 643.182856][ T9820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.182871][ T9820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.182886][ T9820] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 643.182901][ T9820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.183170][ T9820] [ 643.748662][ T9622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.450262][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 646.461105][ T5909] net_ratelimit: 28 callbacks suppressed [ 646.461135][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.585867][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.702683][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.829927][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.951089][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.061116][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.180078][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.382233][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.629616][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.753768][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 648.339359][ T9622] veth0_vlan: entered promiscuous mode [ 648.577823][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.681547][ T9622] veth1_vlan: entered promiscuous mode [ 648.693890][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 650.011521][ T9622] veth0_macvtap: entered promiscuous mode [ 650.184338][ T9622] veth1_macvtap: entered promiscuous mode [ 651.074441][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.489264][ T13] net_ratelimit: 12 callbacks suppressed [ 651.489288][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.594642][ T9622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.731541][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.839967][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.377705][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.377858][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.380308][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.386884][ T5599] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.445217][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.579977][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.701263][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 652.937753][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 653.058459][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 653.201373][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 653.340893][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 654.947541][ T9703] veth0_vlan: entered promiscuous mode [ 655.086478][ T9703] veth1_vlan: entered promiscuous mode [ 655.203350][ T9884] tipc: Enabled bearer , priority 0 [ 655.721369][ T9882] tipc: Disabling bearer [ 656.646898][ T9703] veth0_macvtap: entered promiscuous mode [ 656.810860][ T8605] net_ratelimit: 12 callbacks suppressed [ 656.810901][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.945737][ T9703] veth1_macvtap: entered promiscuous mode [ 656.979878][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.219422][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.389853][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.499525][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.610889][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.617128][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.752533][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 658.033622][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.056748][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 658.077297][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 658.095276][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 658.122533][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 658.139099][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 658.219467][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 658.507637][ T8605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.507710][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 658.530869][ T8605] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.530954][ T8605] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.531002][ T8605] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.609211][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 659.151733][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.151757][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.410454][ T547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.410474][ T547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.077872][ T5909] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.261178][ T5773] Bluetooth: hci3: command tx timeout [ 660.334118][ T5909] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.599873][ T5909] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.797121][ T5909] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.008330][ T8605] net_ratelimit: 11 callbacks suppressed [ 662.008375][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.362949][ T5773] Bluetooth: hci3: command tx timeout [ 662.953326][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.540624][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 663.860748][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 664.409604][ T5773] Bluetooth: hci3: command tx timeout [ 664.469224][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 664.492799][ T5909] bridge_slave_1: left allmulticast mode [ 664.492830][ T5909] bridge_slave_1: left promiscuous mode [ 664.494043][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.531619][ T5909] bridge_slave_0: left allmulticast mode [ 664.531643][ T5909] bridge_slave_0: left promiscuous mode [ 664.532785][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.470585][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.956'. [ 665.534346][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.956'. [ 666.490663][ T5773] Bluetooth: hci3: command tx timeout [ 666.491831][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.536776][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.561063][ T5909] bond0 (unregistering): Released all slaves [ 670.715452][ T5909] hsr_slave_0: left promiscuous mode [ 670.723824][ T5909] hsr_slave_1: left promiscuous mode [ 670.730649][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.730680][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.735732][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.735765][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.776985][ T5909] veth1_macvtap: left promiscuous mode [ 670.777271][ T5909] veth0_macvtap: left promiscuous mode [ 670.777958][ T5909] veth1_vlan: left promiscuous mode [ 670.778356][ T5909] veth0_vlan: left promiscuous mode [ 673.494283][ T9959] netlink: 'syz.3.960': attribute type 2 has an invalid length. [ 675.008266][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 675.434852][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 677.550600][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.710258][ T9967] IPVS: Error connecting to the multicast addr [ 677.721788][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.835839][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.949542][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.070496][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.279532][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.389396][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.509384][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.910033][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 679.021432][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 680.010653][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.010700][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.010739][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.010778][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.010817][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.010857][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.010901][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.010948][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.013501][ T9987] tc action pedit offset must be on 32 bit boundaries [ 680.013560][ T9987] tc action pedit offset must be on 32 bit boundaries [ 682.296941][ T9999] bridge0: port 3(veth1_to_bridge) entered blocking state [ 682.304568][ T9999] bridge0: port 3(veth1_to_bridge) entered disabled state [ 682.305974][ T9999] veth1_to_bridge: entered allmulticast mode [ 682.385276][ T9999] veth1_to_bridge: entered promiscuous mode [ 682.397234][ T9999] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 682.444964][ T9999] bridge0: port 3(veth1_to_bridge) entered blocking state [ 682.445884][ T9999] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 682.735739][ T5455] 8021q: adding VLAN 0 to HW filter on device eth10 [ 682.739281][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.740104][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.747270][ T9899] bridge_slave_0: entered allmulticast mode [ 682.812237][ T9899] bridge_slave_0: entered promiscuous mode [ 682.849998][ T12] net_ratelimit: 4 callbacks suppressed [ 682.850020][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.877192][ T9899] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.883120][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.883803][ T9899] bridge_slave_1: entered allmulticast mode [ 682.942432][ T9899] bridge_slave_1: entered promiscuous mode [ 683.378098][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.769446][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.856838][ T9899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.882040][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 684.004087][ T9899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.920056][ T9899] team0: Port device team_slave_0 added [ 684.942066][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.029783][ T9899] team0: Port device team_slave_1 added [ 685.233900][T10011] loop5: detected capacity change from 0 to 7 [ 685.261827][T10011] Dev loop5: unable to read RDB block 7 [ 685.261864][T10011] loop5: AHDI p1 p3 p4 [ 685.261963][T10011] loop5: partition table partially beyond EOD, truncated [ 685.268082][T10011] loop5: p1 size 100663296 extends beyond EOD, truncated [ 685.403338][T10011] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 685.445180][T10013] netlink: 'syz.6.971': attribute type 88 has an invalid length. [ 685.509480][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.539239][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.539259][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.539278][ T9899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.587152][ T9899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.587170][ T9899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.587191][ T9899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.823445][ T5909] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.953206][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.368229][ T9978] udevd[9978]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 686.619798][T10016] udevd[10016]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 686.735581][ T9899] hsr_slave_0: entered promiscuous mode [ 686.746498][ T9899] hsr_slave_1: entered promiscuous mode [ 686.755567][ T9899] debugfs: 'hsr0' already exists in 'hsr' [ 686.755609][ T9899] Cannot create hsr debugfs directory [ 686.759161][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.408606][ T5455] 8021q: adding VLAN 0 to HW filter on device eth11 [ 687.685871][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 687.889600][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 688.050388][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 688.054974][ T9] usb 11-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 688.069571][ T9] usb 11-1: config 0 has an invalid interface number: 12 but max is 0 [ 688.069592][ T9] usb 11-1: config 0 has no interface number 0 [ 688.069809][ T9] usb 11-1: config 0 interface 12 has no altsetting 0 [ 688.095213][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.095233][ T9] usb 11-1: Product: syz [ 688.095245][ T9] usb 11-1: Manufacturer: syz [ 688.095258][ T9] usb 11-1: SerialNumber: syz [ 688.180898][ T9] usb 11-1: config 0 descriptor?? [ 689.204420][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 689.943448][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.050803][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.174220][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.280745][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.417940][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.522124][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.643121][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.760185][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.916524][ T8605] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.336126][ T25] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 691.562950][ T25] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.587197][ T25] usb 8-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 691.587535][ T25] usb 8-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 691.587564][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 691.626510][ T9] f81534 11-1:0.12: f81534_set_register: reg: 1003 data: 80 failed: -32 [ 691.626992][ T9] f81534 11-1:0.12: f81534_find_config_idx: read failed: -32 [ 691.627014][ T9] f81534 11-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 691.627924][ T9] f81534 11-1:0.12: probe with driver f81534 failed with error -32 [ 691.709916][ T25] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 691.709950][ T25] usb 8-1: Product: syz [ 691.709973][ T25] usb 8-1: Manufacturer: syz [ 691.709995][ T25] usb 8-1: SerialNumber: syz [ 691.822890][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.823364][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.200375][ T25] usb 8-1: config 0 descriptor?? [ 692.344057][ T9672] usb 11-1: USB disconnect, device number 2 [ 694.759004][ T7123] net_ratelimit: 11 callbacks suppressed [ 694.759032][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 694.879358][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.243814][ T25] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 695.347360][ T25] usb 8-1: USB disconnect, device number 15 [ 695.391148][ T7123] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.580212][ T5599] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.638793][T10016] udevd[10016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.541815][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 697.545814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 697.554667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 697.575059][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 697.580311][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 697.618239][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.770111][ C1] net_ratelimit: 433 callbacks suppressed [ 699.770154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.774922][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.780169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.784375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.788340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.793425][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.797914][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.802274][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.806445][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.810865][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 702.975641][T10065] syzkaller0: entered promiscuous mode [ 702.975678][T10065] syzkaller0: entered allmulticast mode [ 704.779416][ C1] net_ratelimit: 1382 callbacks suppressed [ 704.779442][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.781332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.783215][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.784772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.785865][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.787742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.789745][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.791723][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.793576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.795768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 705.616299][ T9899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 705.887044][ T9899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.308914][ C0] sched: DL replenish lagged too much [ 709.791120][ C1] net_ratelimit: 1302 callbacks suppressed [ 709.791176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.796174][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.800573][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.803424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 709.804864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.809313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.813934][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.818707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.818735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 709.823249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.799766][ C1] net_ratelimit: 3278 callbacks suppressed [ 714.799791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.800174][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.801859][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.802066][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.802440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 714.803566][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.804356][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.805165][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.806609][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.806965][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.184459][ T9899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.984740][ T9899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.809354][ C1] net_ratelimit: 3674 callbacks suppressed [ 719.809398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.809927][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.813250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.814012][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.817500][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.817954][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.818141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 719.822080][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.822433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.826469][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 720.514707][ T9480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 720.592620][ T9480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 720.661633][ T9480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 720.724757][ T9480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 720.822631][ T9480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.130196][ T5773] Bluetooth: hci4: command tx timeout [ 724.819212][ C1] net_ratelimit: 3823 callbacks suppressed [ 724.819236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.819965][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.822264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.822517][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.824550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.824796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 724.825551][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.826810][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.827843][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.829231][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 725.219319][ T5773] Bluetooth: hci4: command tx timeout [ 727.324366][ T5773] Bluetooth: hci4: command tx timeout [ 729.379670][ T5773] Bluetooth: hci4: command tx timeout [ 729.830670][ C0] net_ratelimit: 2627 callbacks suppressed [ 729.830712][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 729.830906][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.831380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.833409][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.835367][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.835827][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.837393][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.839605][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.840201][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.840745][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.839104][ C1] net_ratelimit: 4967 callbacks suppressed [ 734.839131][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.840007][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.840961][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.841419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.841884][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.842807][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.843711][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.843746][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.844678][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.845598][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.851220][ C2] net_ratelimit: 2967 callbacks suppressed [ 739.851255][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.851294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.855400][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.855903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.861193][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.861845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 739.862016][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.865626][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.868071][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.869844][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.332494][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.332542][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 744.860004][ C1] net_ratelimit: 4276 callbacks suppressed [ 744.860028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.860187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 744.861101][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.862290][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.864565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.864604][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.866861][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.867865][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 744.868127][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.869271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 745.059522][ T9480] Bluetooth: hci1: command 0x0406 tx timeout [ 747.238737][ T9480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 747.252292][ T9480] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 747.256331][ T9480] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 747.277595][ T9480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 747.288742][ T9480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 749.383025][ T9480] Bluetooth: hci5: command tx timeout [ 749.873140][ C1] net_ratelimit: 3571 callbacks suppressed [ 749.873188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.879232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.884097][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.889699][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.900059][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.901801][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.905425][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.907448][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.909864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.912749][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.455395][ T9480] Bluetooth: hci5: command tx timeout [ 753.232559][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.234330][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.548967][ T9480] Bluetooth: hci5: command tx timeout [ 754.880216][ C2] net_ratelimit: 3811 callbacks suppressed [ 754.880234][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.880667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 754.882303][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.882944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 754.883836][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 754.884436][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.885189][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 754.886523][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.887461][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 754.888624][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.609412][ T9480] Bluetooth: hci5: command tx timeout [ 758.342028][ T44] INFO: task syz.0.921:9635 blocked in I/O wait for more than 144 seconds. [ 758.342060][ T44] Not tainted syzkaller #0 [ 758.342076][ T44] Blocked by coredump. [ 758.342086][ T44] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.342099][ T44] task:syz.0.921 state:D stack:23568 pid:9635 tgid:9635 ppid:5763 task_flags:0x40044c flags:0x08080003 [ 758.342168][ T44] Call Trace: [ 758.342182][ T44] [ 758.342297][ T44] __schedule+0x1259/0x6920 [ 758.342585][ T44] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 758.342928][ T44] ? __pfx___schedule+0x10/0x10 [ 758.342994][ T44] ? find_held_lock+0x2b/0x80 [ 758.343064][ T44] ? schedule+0x225/0x2c0 [ 758.343263][ T44] schedule+0xdd/0x2c0 [ 758.343408][ T44] io_schedule+0x8a/0xf0 [ 758.343521][ T44] folio_wait_bit_common+0x414/0xa80 [ 758.343599][ T44] ? folio_wait_bit_common+0x2a0/0xa80 [ 758.343927][ T44] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 758.344000][ T44] ? filemap_get_folios_tag+0x4c0/0xbb0 [ 758.344177][ T44] ? __pfx_wake_page_function+0x10/0x10 [ 758.350979][ T44] ? rcu_is_watching+0x13/0xc0 [ 758.351194][ T44] folio_wait_writeback+0x92/0x130 [ 758.351435][ T44] __filemap_fdatawait_range+0x145/0x230 [ 758.351792][ T44] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 758.377581][ T44] filemap_write_and_wait_range+0xee/0x130 [ 758.377705][ T44] bdev_release+0x4d3/0x6d0 [ 758.377947][ T44] ? __pfx_blkdev_release+0x10/0x10 [ 758.378060][ T44] blkdev_release+0x15/0x20 [ 758.378112][ T44] __fput+0x3ff/0xb50 [ 758.378421][ T44] task_work_run+0x150/0x240 [ 758.378551][ T44] ? __pfx_task_work_run+0x10/0x10 [ 758.378626][ T44] ? do_raw_spin_unlock+0x53/0x1e0 [ 758.378665][ T44] ? do_raw_spin_unlock+0x145/0x1e0 [ 758.727184][ T44] do_exit+0x951/0x2ae0 [ 758.727254][ T44] ? __pfx___might_resched+0x10/0x10 [ 758.727515][ T44] ? __pfx_do_exit+0x10/0x10 [ 758.727610][ T44] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 758.727688][ T44] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 758.727881][ T44] do_group_exit+0xd5/0x2a0 [ 758.728100][ T44] get_signal+0x1ec7/0x21e0 [ 758.728142][ T44] ? lock_vma_under_rcu+0x11d/0x590 [ 758.728300][ T44] ? __pfx___handle_mm_fault+0x10/0x10 [ 758.728648][ T44] ? __pfx_get_signal+0x10/0x10 [ 758.981892][ T44] arch_do_signal_or_restart+0x91/0x7a0 [ 758.982064][ T44] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 758.982419][ T44] ? fault_signal_pending+0x28/0x1d0 [ 758.982811][ T44] irqentry_exit+0x402/0xa10 [ 758.983028][ T44] asm_exc_page_fault+0x26/0x30 [ 758.983085][ T44] RIP: 0023:0xf705f262 [ 758.983173][ T44] RSP: 002b:00000000ffeedbe0 EFLAGS: 00010202 [ 758.983217][ T44] RAX: 0000000034edc000 RBX: 00000000ffffffff RCX: 00000000850aedb2 [ 758.983244][ T44] RDX: 0000000034edbff8 RSI: 000000000004d5e3 RDI: 00000000f7415118 [ 758.983271][ T44] RBP: 00000000f7f45610 R08: 0000000000000000 R09: 0000000000000000 [ 758.983297][ T44] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 758.983330][ T44] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.983833][ T44] [ 758.983913][ T44] [ 758.983913][ T44] Showing all locks held in the system: [ 758.983940][ T44] locks held by kworker/u32:0/12: 4, last CPU#3: [ 758.983968][ T44] #0: ffff88806b403140 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 758.984129][ T44] #1: ffffc900001e7d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.022794][ T44] #2: ffff88802b53c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 759.022954][ T44] #3: ffff88802b524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 759.023117][ T44] locks held by kworker/2:0/25: 2, last CPU#2: [ 759.023141][ T44] #0: ffff88801c0c7540 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.023295][ T44] #1: ffffc9000052fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.023402][ T44] locks held by kworker/1:1/42: 7, last CPU#1: [ 759.023423][ T44] #0: ffff88801c0c7540 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.023549][ T44] #1: ffffc90000657d08 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.023694][ T44] #2: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x437/0x1600 [ 759.023839][ T44] #3: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0xf8/0x7d0 [ 759.023925][ T44] #4: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: nf_hook.constprop.0+0x98/0x750 [ 759.024026][ T44] #5: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 759.024138][ T44] #6: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: veth_xmit+0x60/0xf40 [ 759.024264][ T44] locks held by khungtaskd/44: 1, last CPU#3: [ 759.024287][ T44] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 759.024449][ T44] locks held by kworker/u33:4/74: 3, last CPU#3: [ 759.024475][ T44] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.024577][ T44] #1: ffffc90000bd7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.024659][ T44] #2: ffff88806b608258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 759.024763][ T44] locks held by kworker/u33:5/101: 3, last CPU#3: [ 759.024783][ T44] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.024903][ T44] #1: ffffc9000102fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.025032][ T44] #2: ffff88806b34b258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 759.259836][ T44] locks held by kworker/u33:6/122: 3, last CPU#3: [ 759.259903][ T44] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.260531][ T44] #1: ffffc900020cfd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.260762][ T44] #2: ffff88804c6bc258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 759.261055][ T44] locks held by kworker/u33:7/307: 4, last CPU#3: [ 759.261083][ T44] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.261320][ T44] #1: ffffc90002e67d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.261528][ T44] #2: ffff888051f20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 759.261701][ T44] #3: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 759.261830][ T44] locks held by kworker/u33:8/312: 3, last CPU#3: [ 759.261854][ T44] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.449788][ T44] #1: ffffc90002ca7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.449896][ T44] #2: ffff88806c500800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 759.450008][ T44] locks held by kworker/u33:9/547: 3, last CPU#3: [ 759.450030][ T44] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.450154][ T44] #1: ffffc90003897d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.450295][ T44] #2: ffff88806b34c258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 759.450461][ T44] locks held by kworker/0:2/1037: 4, last CPU#0: [ 759.450490][ T44] #0: ffff88807067e140 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.450607][ T44] #1: ffffc90004f47d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.450725][ T44] #2: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x437/0x1600 [ 759.450867][ T44] #3: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 759.451043][ T44] locks held by syslogd/5133: 1, last CPU#3: [ 759.451068][ T44] #0: ffff8880257385f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 759.451312][ T44] locks held by getty/5555: 2, on CPU#2: [ 759.451340][ T44] #0: ffff888021bb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 759.451477][ T44] #1: ffffc9000019b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 759.451566][ T44] locks held by sshd-session/5686: 1, last CPU#3: [ 759.451585][ T44] #0: ffff88804ff14488 (mapping.invalidate_lock#2){++++}-{4:4}, at: do_page_cache_ra+0x101/0x160 [ 759.451778][ T44] locks held by kworker/u32:4/5909: 7, on CPU#3: [ 759.451809][ T44] #0: ffff88801d6a4940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.451935][ T44] #1: ffffc9000679fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.452078][ T44] #2: ffffffff90cbe908 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 759.452240][ T44] #3: ffff88804c346128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 759.452328][ T44] #4: ffff88804c345258 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 759.802956][ T44] #5: ffffffff90cd7400 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x1a6/0x970 [ 759.803094][ T44] #6: ffffffff8ec7ca10 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x953/0x2150 [ 759.803189][ T44] locks held by kworker/u32:5/7123: 4, last CPU#3: [ 759.803210][ T44] #0: ffff88804af83940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.803321][ T44] #1: ffffc90002b17d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.803449][ T44] #2: ffff88806bf4a1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 759.803593][ T44] #3: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule_buff+0x583/0x15d0 [ 759.803751][ T44] locks held by kworker/u33:18/7975: 5, last CPU#3: [ 759.803784][ T44] #0: ffff88801c0e4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 759.803879][ T44] #1: ffffc900047dfd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 759.803978][ T44] #2: [ 759.890850][ C2] net_ratelimit: 2776 callbacks suppressed [ 759.890878][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.893165][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.894711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:46:a6:6a:54:a6:03, vlan:0) [ 759.897202][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.900740][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.901132][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 759.903075][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.905261][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 759.905359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 759.907479][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.299081][ T44] ffff88806b608258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 760.299235][ T44] #3: ffff88802b53c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 760.299328][ T44] #4: ffff88802b524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 760.299436][ T44] locks held by kworker/u32:6/8605: 3, on CPU#3: [ 760.299457][ T44] #0: ffff888029fca940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 760.299573][ T44] #1: ffffc9000dbf7d08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 760.299707][ T44] #2: ffffffff90cd7400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 760.299861][ T44] locks held by kworker/2:3/9580: 4, last CPU#2: [ 760.299887][ T44] #0: ffff88801c0aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 760.299983][ T44] #1: ffffc9000361fd08 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 760.300286][ T44] #2: ffffc9000361fa20 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0xb0/0x790 [ 760.300432][ T44] #3: ffffc9000361fa48 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_atomic_helper_dirtyfb+0xb0/0x790 [ 760.300554][ T44] locks held by syz-executor/9899: 1, last CPU#3: [ 760.300570][ T44] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 760.300657][ T44] locks held by syz-executor/10103: 1, on CPU#3: [ 760.300675][ T44] #0: ffffffff90cd7400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 760.300785][ T44] locks held by syz-executor/10128: 1, on CPU#3: [ 760.300805][ T44] #0: ffffffff90cd7400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 760.300932][ T44] locks held by udevd/10130: 2, last CPU#3: [ 760.300955][ T44] #0: ffff88802960e9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 760.301099][ T44] #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 760.301229][ T44] locks held by syz-executor/10136: 3, last CPU#3: [ 760.301245][ T44] #0: ffff88802ae7b348 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 760.301544][ T44] #1: ffffffff8efca020 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x166/0x5b0 [ 760.301667][ T44] #2: ffffffff8eff4ac0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x70/0x100 [ 760.301807][ T44] locks held by udevd/10137: 1, last CPU#3: [ 760.301832][ T44] #0: ffff88806ef39078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 760.301988][ T44] locks held by dhcpcd-run-hook/10139: 2, last CPU#3: [ 760.302011][ T44] #0: ffffffff8effc558 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 760.302099][ T44] #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 760.302195][ T44] locks held by syz.6.989/10140: 2, last CPU#3: [ 760.302215][ T44] #0: ffff8880257fe9b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 760.302334][ T44] #1: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 760.302521][ T44] [ 760.302540][ T44] ============================================= [ 760.302540][ T44] [ 760.302560][ T44] NMI backtrace for cpu 3 [ 760.302586][ T44] CPU: 3 UID: 0 PID: 44 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 760.302618][ T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.302642][ T44] Call Trace: [ 760.302692][ T44] [ 760.302722][ T44] dump_stack_lvl+0x100/0x190 [ 760.302850][ T44] nmi_cpu_backtrace.cold+0x12d/0x151 [ 760.302989][ T44] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 760.303094][ T44] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 760.303283][ T44] sys_info+0x141/0x190 [ 760.303343][ T44] watchdog+0xcb1/0x1030 [ 760.303617][ T44] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 760.303742][ T44] ? __pfx_watchdog+0x10/0x10 [ 760.303834][ T44] ? __kthread_parkme+0x18f/0x230 [ 760.304025][ T44] ? kthread+0x13a/0x450 [ 760.304077][ T44] ? __pfx_watchdog+0x10/0x10 [ 760.304134][ T44] kthread+0x373/0x450 [ 760.304228][ T44] ? __pfx_kthread+0x10/0x10 [ 760.304367][ T44] ret_from_fork+0x730/0xd60 [ 760.304461][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 760.304602][ T44] ? __switch_to+0x800/0x10f0 [ 760.304736][ T44] ? __pfx_kthread+0x10/0x10 [ 760.304860][ T44] ret_from_fork_asm+0x1a/0x30 [ 760.305321][ T44] [ 760.309446][ T44] Sending NMI from CPU 3 to CPUs 0-2: [ 760.309515][ C0] NMI backtrace for cpu 0 [ 760.309534][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 760.309552][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.309562][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 760.309592][ C0] Code: 00 00 5b e9 e2 e1 1d 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 6c f1 80 12 48 8b 34 24 <65> 48 8b 15 50 f1 80 12 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 [ 760.309608][ C0] RSP: 0000:ffffc9000041e788 EFLAGS: 00000246 [ 760.309624][ C0] RAX: 0000000000000102 RBX: ffffc9000041e8d8 RCX: 0000000000000102 [ 760.309634][ C0] RDX: 1ffff92000083d1c RSI: ffffffff820e4dc0 RDI: ffff88801c762580 [ 760.309645][ C0] RBP: ffff88801c0e5000 R08: 0000000000000007 R09: 0000000000000000 [ 760.309655][ C0] R10: 0000000000000420 R11: 000000000000761b R12: 0000000000000919 [ 760.309666][ C0] R13: ffffc9000041e8e0 R14: ffff8880222fd280 R15: 0000000000000420 [ 760.309676][ C0] FS: 0000000000000000(0000) GS:ffff888096959000(0000) knlGS:0000000000000000 [ 760.309707][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.309721][ C0] CR2: 000000000c36c6be CR3: 000000000eb96000 CR4: 0000000000352ef0 [ 760.309732][ C0] Call Trace: [ 760.309741][ C0] [ 760.309748][ C0] __rb_reserve_next.constprop.0+0x4d0/0x1640 [ 760.309842][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 760.309944][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 760.309968][ C0] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 760.310016][ C0] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 760.310088][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 760.310162][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 760.310225][ C0] trace_event_raw_event_lock+0x124/0x2b0 [ 760.310264][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 760.310293][ C0] ? lock_acquire+0x1d1/0x380 [ 760.310349][ C0] ? lock_acquire+0x1d1/0x380 [ 760.310376][ C0] ? unwind_next_frame+0xbd/0x2090 [ 760.310421][ C0] ? unwind_next_frame+0x3be/0x2090 [ 760.310471][ C0] lock_release+0x218/0x310 [ 760.310559][ C0] unwind_next_frame+0x3c3/0x2090 [ 760.310598][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 760.310659][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.310707][ C0] arch_stack_walk+0x94/0xf0 [ 760.310826][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 760.310905][ C0] stack_trace_save+0x8e/0xc0 [ 760.310954][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 760.311062][ C0] kasan_save_stack+0x30/0x50 [ 760.311097][ C0] ? kasan_save_stack+0x30/0x50 [ 760.311127][ C0] ? kasan_save_track+0x14/0x30 [ 760.311158][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 760.311190][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 760.311220][ C0] ? skb_ext_add+0xfa/0x810 [ 760.311249][ C0] ? br_nf_forward_ip.part.0+0x28/0x820 [ 760.311278][ C0] ? br_nf_forward+0xfe5/0x19f0 [ 760.311305][ C0] ? nf_hook_slow+0xbf/0x220 [ 760.311336][ C0] ? __br_forward+0x2f7/0x970 [ 760.311366][ C0] ? br_flood+0x372/0x7b0 [ 760.311394][ C0] ? br_handle_frame_finish+0xfe2/0x1f70 [ 760.311420][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 760.311444][ C0] ? br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 760.311472][ C0] ? br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 760.311503][ C0] ? br_nf_pre_routing+0x90f/0x1560 [ 760.311527][ C0] ? br_handle_frame+0xd59/0x1670 [ 760.311543][ C0] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 760.311564][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 760.311586][ C0] ? __netif_receive_skb+0x1f/0x120 [ 760.311604][ C0] ? process_backlog+0x487/0x1600 [ 760.311623][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 760.311642][ C0] ? net_rx_action+0xa40/0xf20 [ 760.311661][ C0] ? handle_softirqs+0x1e6/0x9d0 [ 760.311683][ C0] ? run_ksoftirqd+0x38/0x60 [ 760.311703][ C0] ? smpboot_thread_fn+0x3d3/0xab0 [ 760.311719][ C0] ? kthread+0x373/0x450 [ 760.311735][ C0] ? ret_from_fork+0x730/0xd60 [ 760.311750][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 760.311891][ C0] kasan_save_track+0x14/0x30 [ 760.311915][ C0] __kasan_slab_alloc+0x89/0x90 [ 760.311949][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 760.311978][ C0] ? skb_ext_add+0xfa/0x810 [ 760.312026][ C0] skb_ext_add+0xfa/0x810 [ 760.312051][ C0] ? net_generic+0x25/0x2a0 [ 760.312075][ C0] ? find_held_lock+0x2b/0x80 [ 760.312094][ C0] ? net_generic+0xea/0x2a0 [ 760.312128][ C0] br_nf_forward_ip.part.0+0x28/0x820 [ 760.312174][ C0] br_nf_forward+0xfe5/0x19f0 [ 760.312219][ C0] nf_hook_slow+0xbf/0x220 [ 760.312262][ C0] __br_forward+0x2f7/0x970 [ 760.312297][ C0] ? __pfx___br_forward+0x10/0x10 [ 760.312318][ C0] ? __asan_memcpy+0x3c/0x60 [ 760.312377][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 760.312401][ C0] ? __skb_clone+0x570/0x760 [ 760.312460][ C0] br_flood+0x372/0x7b0 [ 760.312523][ C0] br_handle_frame_finish+0xfe2/0x1f70 [ 760.312568][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.312614][ C0] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 760.312667][ C0] ? nf_hook_slow+0x167/0x220 [ 760.312716][ C0] br_nf_hook_thresh+0x30d/0x420 [ 760.312740][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.312780][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 760.312796][ C0] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 760.312838][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.312868][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.312893][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.312934][ C0] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 760.312953][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.313004][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 760.313035][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 760.313055][ C0] ? net_generic+0x25/0x2a0 [ 760.313086][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 760.313104][ C0] ? net_generic+0xea/0x2a0 [ 760.313160][ C0] br_nf_pre_routing+0x90f/0x1560 [ 760.313211][ C0] br_handle_frame+0xd59/0x1670 [ 760.313240][ C0] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 760.313268][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 760.313331][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.313418][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 760.313467][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 760.313501][ C0] ? rb_commit+0x129/0x9d0 [ 760.313643][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 760.313704][ C0] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 760.313746][ C0] ? trace_event_buffer_commit+0x20a/0xa80 [ 760.313815][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 760.313871][ C0] ? process_backlog+0x437/0x1600 [ 760.313894][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 760.313921][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 760.313951][ C0] ? lock_acquire+0x1d1/0x380 [ 760.313991][ C0] ? process_backlog+0x437/0x1600 [ 760.314027][ C0] ? process_backlog+0x437/0x1600 [ 760.314045][ C0] __netif_receive_skb+0x1f/0x120 [ 760.314078][ C0] process_backlog+0x487/0x1600 [ 760.314141][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 760.314178][ C0] net_rx_action+0xa40/0xf20 [ 760.314220][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 760.314266][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 760.314288][ C0] ? __rcu_read_lock+0x60/0x70 [ 760.314310][ C0] ? trace_sched_exit_tp+0x120/0x160 [ 760.314337][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 760.314354][ C0] ? sched_clock+0x3a/0x60 [ 760.314378][ C0] ? sched_clock_cpu+0x6c/0x570 [ 760.314500][ C0] ? rcu_is_watching+0x13/0xc0 [ 760.314567][ C0] handle_softirqs+0x1e6/0x9d0 [ 760.314663][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 760.314709][ C0] ? run_ksoftirqd+0x5b/0x60 [ 760.314780][ C0] ? rcu_is_watching+0x13/0xc0 [ 760.314829][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 760.314868][ C0] run_ksoftirqd+0x38/0x60 [ 760.314909][ C0] smpboot_thread_fn+0x3d3/0xab0 [ 760.314990][ C0] ? kthread+0x13a/0x450 [ 760.315018][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 760.315045][ C0] kthread+0x373/0x450 [ 760.315082][ C0] ? __pfx_kthread+0x10/0x10 [ 760.315139][ C0] ret_from_fork+0x730/0xd60 [ 760.315190][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 760.315332][ C0] ? __switch_to+0x800/0x10f0 [ 760.315385][ C0] ? __pfx_kthread+0x10/0x10 [ 760.315435][ C0] ret_from_fork_asm+0x1a/0x30 [ 760.315626][ C0] [ 760.315649][ C2] NMI backtrace for cpu 2 [ 760.315673][ C2] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 760.315697][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.315713][ C2] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 760.315760][ C2] RIP: 0010:ring_buffer_unlock_commit+0x2c/0x700 [ 760.315796][ C2] Code: 1e fa 41 57 41 56 41 55 41 54 55 48 89 fd 53 4c 8d ad a8 00 00 00 48 83 ec 08 e8 6f e7 fb ff 4c 89 ea 65 48 63 1d ec d8 7c 12 <48> b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 35 06 [ 760.315817][ C2] RSP: 0018:ffffc90000547640 EFLAGS: 00000246 [ 760.315837][ C2] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000103 [ 760.315851][ C2] RDX: ffff88801c0ab8a8 RSI: ffffffff820f9741 RDI: ffff88801c0ab800 [ 760.315865][ C2] RBP: ffff88801c0ab800 R08: 0000000000000000 R09: 1ffff11003ad00e5 [ 760.315880][ C2] R10: 0000000000000000 R11: 0000000000089f1d R12: ffff88801c0ab800 [ 760.315894][ C2] R13: ffff88801c0ab8a8 R14: ffffc90000547780 R15: ffffc90000547788 [ 760.315908][ C2] FS: 0000000000000000(0000) GS:ffff888096b59000(0000) knlGS:0000000000000000 [ 760.315952][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.315968][ C2] CR2: 00007f254849342c CR3: 000000004ba9a000 CR4: 0000000000352ef0 [ 760.315982][ C2] Call Trace: [ 760.315994][ C2] [ 760.316041][ C2] trace_buffer_unlock_commit_regs+0x59/0x540 [ 760.316073][ C2] ? ring_buffer_event_data+0x10a/0x150 [ 760.316147][ C2] trace_event_buffer_commit+0x1ed/0xa80 [ 760.316240][ C2] trace_event_raw_event_lock_acquire+0x237/0x330 [ 760.316309][ C2] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 760.316393][ C2] ? lock_acquire+0x1d1/0x380 [ 760.316492][ C2] lock_acquire+0xe7/0x380 [ 760.316533][ C2] ? unwind_next_frame+0xbd/0x2090 [ 760.316568][ C2] ? unwind_next_frame+0x3be/0x2090 [ 760.316602][ C2] ? unwind_next_frame+0x3be/0x2090 [ 760.316657][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.316706][ C2] unwind_next_frame+0xd1/0x2090 [ 760.316737][ C2] ? unwind_next_frame+0xbd/0x2090 [ 760.316770][ C2] ? __napi_poll.constprop.0+0xaf/0x450 [ 760.316838][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.316883][ C2] arch_stack_walk+0x94/0xf0 [ 760.316972][ C2] ? __napi_poll.constprop.0+0xaf/0x450 [ 760.317041][ C2] ? __skb_ext_put+0x102/0x2f0 [ 760.317083][ C2] stack_trace_save+0x8e/0xc0 [ 760.317127][ C2] ? __pfx_stack_trace_save+0x10/0x10 [ 760.317218][ C2] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 760.317264][ C2] kasan_save_stack+0x30/0x50 [ 760.317297][ C2] ? kasan_save_stack+0x30/0x50 [ 760.317326][ C2] ? kasan_save_track+0x14/0x30 [ 760.317353][ C2] ? kasan_save_free_info+0x3b/0x70 [ 760.317379][ C2] ? __kasan_slab_free+0x5f/0x80 [ 760.317410][ C2] ? kmem_cache_free+0x127/0x6c0 [ 760.317436][ C2] ? __skb_ext_put+0x102/0x2f0 [ 760.317464][ C2] ? __skb_ext_del+0xf8/0x380 [ 760.317493][ C2] ? br_nf_dev_queue_xmit+0x7a5/0x2780 [ 760.317523][ C2] ? br_nf_post_routing+0xcbb/0x16a0 [ 760.317550][ C2] ? nf_hook_slow+0xbf/0x220 [ 760.317580][ C2] ? br_forward_finish+0x261/0x4d0 [ 760.317613][ C2] ? br_nf_hook_thresh+0x30d/0x420 [ 760.317638][ C2] ? br_nf_forward_finish+0x693/0xb30 [ 760.317665][ C2] ? br_nf_forward_ip.part.0+0x61e/0x820 [ 760.317692][ C2] ? br_nf_forward+0xfe5/0x19f0 [ 760.317717][ C2] ? nf_hook_slow+0xbf/0x220 [ 760.317746][ C2] ? __br_forward+0x2f7/0x970 [ 760.317777][ C2] ? br_flood+0x372/0x7b0 [ 760.317811][ C2] ? br_handle_frame_finish+0xfe2/0x1f70 [ 760.317838][ C2] ? br_nf_hook_thresh+0x30d/0x420 [ 760.317865][ C2] ? br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 760.317894][ C2] ? br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 760.317927][ C2] ? br_nf_pre_routing+0x90f/0x1560 [ 760.317953][ C2] ? br_handle_frame+0xd59/0x1670 [ 760.317978][ C2] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 760.318010][ C2] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 760.318041][ C2] ? __netif_receive_skb+0x1f/0x120 [ 760.318070][ C2] ? process_backlog+0x487/0x1600 [ 760.318100][ C2] ? __napi_poll.constprop.0+0xaf/0x450 [ 760.318338][ C2] kasan_save_track+0x14/0x30 [ 760.318377][ C2] kasan_save_free_info+0x3b/0x70 [ 760.318411][ C2] __kasan_slab_free+0x5f/0x80 [ 760.318458][ C2] kmem_cache_free+0x127/0x6c0 [ 760.318545][ C2] __skb_ext_put+0x102/0x2f0 [ 760.318628][ C2] __skb_ext_del+0xf8/0x380 [ 760.318670][ C2] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 760.318768][ C2] br_nf_dev_queue_xmit+0x7a5/0x2780 [ 760.318854][ C2] ? find_held_lock+0x2b/0x80 [ 760.318894][ C2] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 760.318929][ C2] ? br_nf_post_routing+0xafb/0x16a0 [ 760.319006][ C2] br_nf_post_routing+0xcbb/0x16a0 [ 760.319071][ C2] ? __pfx_br_nf_post_routing+0x10/0x10 [ 760.319140][ C2] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 760.319179][ C2] ? lock_acquire+0x1d1/0x380 [ 760.319216][ C2] ? br_forward_finish+0x194/0x4d0 [ 760.319300][ C2] nf_hook_slow+0xbf/0x220 [ 760.319373][ C2] br_forward_finish+0x261/0x4d0 [ 760.319428][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 760.319508][ C2] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 760.319570][ C2] ? nf_hook_slow+0x167/0x220 [ 760.319641][ C2] br_nf_hook_thresh+0x30d/0x420 [ 760.319682][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 760.319759][ C2] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 760.319791][ C2] ? net_generic+0x25/0x2a0 [ 760.319848][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 760.319882][ C2] ? net_generic+0xea/0x2a0 [ 760.319981][ C2] br_nf_forward_finish+0x693/0xb30 [ 760.320011][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 760.320096][ C2] br_nf_forward_ip.part.0+0x61e/0x820 [ 760.320178][ C2] br_nf_forward+0xfe5/0x19f0 [ 760.320257][ C2] nf_hook_slow+0xbf/0x220 [ 760.320332][ C2] __br_forward+0x2f7/0x970 [ 760.320387][ C2] ? __pfx___br_forward+0x10/0x10 [ 760.320419][ C2] ? __asan_memcpy+0x3c/0x60 [ 760.320487][ C2] ? __pfx_br_forward_finish+0x10/0x10 [ 760.320521][ C2] ? __skb_clone+0x570/0x760 [ 760.320624][ C2] br_flood+0x372/0x7b0 [ 760.320741][ C2] br_handle_frame_finish+0xfe2/0x1f70 [ 760.320821][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.320901][ C2] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 760.320973][ C2] ? nf_hook_slow+0x167/0x220 [ 760.321046][ C2] br_nf_hook_thresh+0x30d/0x420 [ 760.321087][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.321155][ C2] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 760.321183][ C2] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 760.321253][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.321305][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.321338][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.321408][ C2] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 760.321439][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.321520][ C2] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 760.321573][ C2] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 760.321607][ C2] ? net_generic+0x25/0x2a0 [ 760.321662][ C2] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 760.321690][ C2] ? net_generic+0xea/0x2a0 [ 760.321785][ C2] br_nf_pre_routing+0x90f/0x1560 [ 760.321874][ C2] br_handle_frame+0xd59/0x1670 [ 760.321929][ C2] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 760.321974][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 760.322039][ C2] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.322118][ C2] ? __pfx_br_handle_frame+0x10/0x10 [ 760.322158][ C2] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 760.322199][ C2] ? rb_commit+0x129/0x9d0 [ 760.322340][ C2] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 760.322406][ C2] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 760.322477][ C2] ? trace_event_buffer_commit+0x20a/0xa80 [ 760.322594][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 760.322689][ C2] ? process_backlog+0x437/0x1600 [ 760.322720][ C2] __netif_receive_skb_one_core+0xb0/0x1e0 [ 760.322791][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 760.322842][ C2] ? lock_acquire+0x1d1/0x380 [ 760.322911][ C2] ? process_backlog+0x437/0x1600 [ 760.322980][ C2] ? process_backlog+0x437/0x1600 [ 760.323010][ C2] __netif_receive_skb+0x1f/0x120 [ 760.323067][ C2] process_backlog+0x487/0x1600 [ 760.323176][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 760.323243][ C2] net_rx_action+0xa40/0xf20 [ 760.323361][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 760.323416][ C2] ? mark_held_locks+0x40/0x70 [ 760.323470][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 760.323519][ C2] ? tmigr_handle_remote+0x132/0x380 [ 760.323634][ C2] ? run_timer_base+0x121/0x190 [ 760.323678][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 760.323764][ C2] handle_softirqs+0x1e6/0x9d0 [ 760.323860][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 760.323906][ C2] ? _raw_spin_unlock+0x28/0x50 [ 760.323951][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 760.324014][ C2] __irq_exit_rcu+0x16a/0x210 [ 760.324076][ C2] irq_exit_rcu+0x9/0x30 [ 760.324115][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 760.324162][ C2] [ 760.324172][ C2] [ 760.324193][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.324228][ C2] RIP: 0010:__srcu_check_read_flavor+0x45/0x1d0 [ 760.324265][ C2] Code: 65 48 63 05 35 e1 9d 12 a9 00 00 00 f0 0f 85 f7 00 00 00 8d 43 ff 85 d8 0f 85 fb 00 00 00 48 8d 7d 08 65 4c 8b 25 1b e1 9d 12 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f [ 760.324287][ C2] RSP: 0018:ffffc9000052fb28 EFLAGS: 00000246 [ 760.324309][ C2] RAX: 0000000000000003 RBX: 0000000000000004 RCX: 0000000000000000 [ 760.324323][ C2] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8ee7ca08 [ 760.324337][ C2] RBP: ffffffff8ee7ca00 R08: 0000000000000001 R09: 0000000000000000 [ 760.324351][ C2] R10: 0000000000000cda R11: 0000000000000000 R12: ffff888096b59000 [ 760.324365][ C2] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 760.324531][ C2] lock_acquire+0xaf/0x380 [ 760.324591][ C2] ? __pfx___might_resched+0x10/0x10 [ 760.324668][ C2] _raw_spin_lock+0x2e/0x40 [ 760.324703][ C2] ? wg_ratelimiter_gc_entries+0x62/0x510 [ 760.324747][ C2] wg_ratelimiter_gc_entries+0x62/0x510 [ 760.324832][ C2] process_one_work+0xac7/0x1b10 [ 760.324989][ C2] ? __pfx_process_one_work+0x10/0x10 [ 760.325043][ C2] ? lock_acquire+0x1d1/0x380 [ 760.325158][ C2] ? __pfx_wg_ratelimiter_gc_entries+0x10/0x10 [ 760.325234][ C2] worker_thread+0x5ef/0xe50 [ 760.325376][ C2] ? kthread+0x13a/0x450 [ 760.325403][ C2] ? __pfx_worker_thread+0x10/0x10 [ 760.325432][ C2] kthread+0x373/0x450 [ 760.325469][ C2] ? __pfx_kthread+0x10/0x10 [ 760.325526][ C2] ret_from_fork+0x730/0xd60 [ 760.325577][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 760.325630][ C2] ? __switch_to+0x800/0x10f0 [ 760.325679][ C2] ? __pfx_kthread+0x10/0x10 [ 760.325735][ C2] ret_from_fork_asm+0x1a/0x30 [ 760.325896][ C2] [ 760.325911][ C1] NMI backtrace for cpu 1 [ 760.325940][ C1] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 760.325967][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 760.325983][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 760.326019][ C1] RIP: 0010:kasan_check_range+0x101/0x1e0 [ 760.326059][ C1] Code: 74 1d 80 38 00 74 f2 ba 01 00 00 00 48 85 c0 74 2c 41 83 e2 07 49 39 c1 75 15 45 3a 11 7d 10 ba 01 00 00 00 5b 5d 89 d0 41 5c cc cc cc cc 41 0f b6 d0 e8 e1 e6 ff ff 83 f0 01 89 c2 5b 89 d0 [ 760.326080][ C1] RSP: 0018:ffffc9000059fa28 EFLAGS: 00000246 [ 760.326102][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff820db630 [ 760.326117][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888028d20e90 [ 760.326131][ C1] RBP: ffff888028d20e90 R08: 0000000000000000 R09: ffffed10051a41d2 [ 760.326146][ C1] R10: ffff888028d20e97 R11: 000000000000d05b R12: ffffed1003ad8616 [ 760.326161][ C1] R13: 0000000000000528 R14: ffff88801d6c3000 R15: ffff888028d20e80 [ 760.326176][ C1] FS: 0000000000000000(0000) GS:ffff888096a59000(0000) knlGS:0000000000000000 [ 760.326219][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.326237][ C1] CR2: 0000562a1ff0c660 CR3: 000000000eb96000 CR4: 0000000000352ef0 [ 760.326252][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 760.326287][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 760.326301][ C1] Call Trace: [ 760.326315][ C1] [ 760.326324][ C1] rb_commit+0x590/0x9d0 [ 760.326481][ C1] ring_buffer_unlock_commit+0x75/0x700 [ 760.326557][ C1] trace_buffer_unlock_commit_regs+0x59/0x540 [ 760.326588][ C1] ? ring_buffer_event_data+0x10a/0x150 [ 760.326665][ C1] trace_event_buffer_commit+0x1ed/0xa80 [ 760.326793][ C1] trace_event_raw_event_lock_acquire+0x237/0x330 [ 760.326866][ C1] ? __pfx_trace_event_raw_event_lock_acquire+0x10/0x10 [ 760.326957][ C1] ? lock_acquire+0x1d1/0x380 [ 760.327065][ C1] lock_acquire+0xe7/0x380 [ 760.327110][ C1] ? unwind_next_frame+0xbd/0x2090 [ 760.327151][ C1] ? unwind_next_frame+0x3be/0x2090 [ 760.327191][ C1] ? unwind_next_frame+0x3be/0x2090 [ 760.327255][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.327311][ C1] unwind_next_frame+0xd1/0x2090 [ 760.327352][ C1] ? unwind_next_frame+0xbd/0x2090 [ 760.327392][ C1] ? worker_thread+0x5ef/0xe50 [ 760.327470][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 760.327524][ C1] arch_stack_walk+0x94/0xf0 [ 760.327612][ C1] ? worker_thread+0x5ef/0xe50 [ 760.327701][ C1] stack_trace_save+0x8e/0xc0 [ 760.327750][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 760.327868][ C1] kasan_save_stack+0x30/0x50 [ 760.327906][ C1] ? kasan_save_stack+0x30/0x50 [ 760.327939][ C1] ? kasan_save_track+0x14/0x30 [ 760.327972][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 760.328006][ C1] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 760.328039][ C1] ? skb_ext_add+0xfa/0x810 [ 760.328071][ C1] ? br_nf_forward_ip.part.0+0x28/0x820 [ 760.328102][ C1] ? br_nf_forward+0xfe5/0x19f0 [ 760.328131][ C1] ? nf_hook_slow+0xbf/0x220 [ 760.328165][ C1] ? __br_forward+0x2f7/0x970 [ 760.328203][ C1] ? br_flood+0x372/0x7b0 [ 760.328240][ C1] ? br_handle_frame_finish+0xfe2/0x1f70 [ 760.328270][ C1] ? br_nf_hook_thresh+0x30d/0x420 [ 760.328299][ C1] ? br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 760.328333][ C1] ? br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 760.328369][ C1] ? br_nf_pre_routing+0x90f/0x1560 [ 760.328399][ C1] ? br_handle_frame+0xd59/0x1670 [ 760.328428][ C1] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 760.328466][ C1] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 760.328502][ C1] ? __netif_receive_skb+0x1f/0x120 [ 760.328536][ C1] ? process_backlog+0x487/0x1600 [ 760.328570][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 760.328603][ C1] ? net_rx_action+0xa40/0xf20 [ 760.328638][ C1] ? handle_softirqs+0x1e6/0x9d0 [ 760.328675][ C1] ? do_softirq+0xaf/0xf0 [ 760.328712][ C1] ? __local_bh_enable_ip+0xff/0x120 [ 760.328751][ C1] ? neigh_periodic_work+0x6da/0xc10 [ 760.328781][ C1] ? process_one_work+0xac7/0x1b10 [ 760.328815][ C1] ? worker_thread+0x5ef/0xe50 [ 760.329087][ C1] kasan_save_track+0x14/0x30 [ 760.329129][ C1] __kasan_slab_alloc+0x89/0x90 [ 760.329192][ C1] kmem_cache_alloc_noprof+0x269/0x6a0 [ 760.329246][ C1] ? skb_ext_add+0xfa/0x810 [ 760.329337][ C1] skb_ext_add+0xfa/0x810 [ 760.329388][ C1] ? net_generic+0x25/0x2a0 [ 760.329432][ C1] ? find_held_lock+0x2b/0x80 [ 760.329462][ C1] ? net_generic+0xea/0x2a0 [ 760.329520][ C1] br_nf_forward_ip.part.0+0x28/0x820 [ 760.329614][ C1] br_nf_forward+0xfe5/0x19f0 [ 760.329707][ C1] nf_hook_slow+0xbf/0x220 [ 760.329798][ C1] __br_forward+0x2f7/0x970 [ 760.329867][ C1] ? __pfx___br_forward+0x10/0x10 [ 760.329907][ C1] ? __asan_memcpy+0x3c/0x60 [ 760.329983][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 760.330024][ C1] ? __skb_clone+0x570/0x760 [ 760.330150][ C1] br_flood+0x372/0x7b0 [ 760.330284][ C1] br_handle_frame_finish+0xfe2/0x1f70 [ 760.330384][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.330484][ C1] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 760.330570][ C1] ? nf_hook_slow+0x167/0x220 [ 760.330657][ C1] br_nf_hook_thresh+0x30d/0x420 [ 760.330707][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.330821][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 760.330854][ C1] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 760.330947][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.331014][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.331052][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.331137][ C1] br_nf_pre_routing_finish_ipv6+0x659/0xdd0 [ 760.331176][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.331282][ C1] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 760.331348][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 760.331389][ C1] ? net_generic+0x25/0x2a0 [ 760.331460][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 760.331496][ C1] ? net_generic+0xea/0x2a0 [ 760.331619][ C1] br_nf_pre_routing+0x90f/0x1560 [ 760.331728][ C1] br_handle_frame+0xd59/0x1670 [ 760.331787][ C1] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 760.331841][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 760.331926][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 760.332024][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 760.332075][ C1] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 760.332125][ C1] ? rb_commit+0x129/0x9d0 [ 760.332296][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 760.332380][ C1] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 760.332468][ C1] ? trace_event_buffer_commit+0x20a/0xa80 [ 760.332616][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 760.332736][ C1] ? process_backlog+0x437/0x1600 [ 760.332773][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 760.332828][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 760.332886][ C1] ? lock_acquire+0x1d1/0x380 [ 760.332968][ C1] ? process_backlog+0x437/0x1600 [ 760.333045][ C1] ? process_backlog+0x437/0x1600 [ 760.333082][ C1] __netif_receive_skb+0x1f/0x120 [ 760.333148][ C1] process_backlog+0x487/0x1600 [ 760.333282][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 760.333350][ C1] net_rx_action+0xa40/0xf20 [ 760.333476][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 760.333589][ C1] ? tmigr_handle_remote+0x132/0x380 [ 760.333709][ C1] ? run_timer_base+0x121/0x190 [ 760.333754][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 760.333840][ C1] handle_softirqs+0x1e6/0x9d0 [ 760.333934][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 760.334004][ C1] ? neigh_periodic_work+0x6da/0xc10 [ 760.334054][ C1] do_softirq+0xaf/0xf0 [ 760.334098][ C1] [ 760.334107][ C1] [ 760.334121][ C1] __local_bh_enable_ip+0xff/0x120 [ 760.334171][ C1] neigh_periodic_work+0x6da/0xc10 [ 760.334260][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 760.334298][ C1] ? lock_acquire+0x1d1/0x380 [ 760.334336][ C1] ? process_one_work+0xa2c/0x1b10 [ 760.334398][ C1] ? process_one_work+0x906/0x1b10 [ 760.334434][ C1] ? process_one_work+0x906/0x1b10 [ 760.334520][ C1] process_one_work+0xac7/0x1b10 [ 760.334665][ C1] ? __pfx_process_one_work+0x10/0x10 [ 760.334718][ C1] ? lock_acquire+0x1d1/0x380 [ 760.334851][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 760.334918][ C1] worker_thread+0x5ef/0xe50 [ 760.335058][ C1] ? kthread+0x13a/0x450 [ 760.335086][ C1] ? __pfx_worker_thread+0x10/0x10 [ 760.335116][ C1] kthread+0x373/0x450 [ 760.335151][ C1] ? __pfx_kthread+0x10/0x10 [ 760.335207][ C1] ret_from_fork+0x730/0xd60 [ 760.335257][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 760.335309][ C1] ? __switch_to+0x800/0x10f0 [ 760.335363][ C1] ? __pfx_kthread+0x10/0x10 [ 760.335418][ C1] ret_from_fork_asm+0x1a/0x30 [ 760.335579][ C1] [ 761.957088][ T44] Kernel panic - not syncing: hung_task: blocked tasks [ 761.959310][ T44] CPU: 3 UID: 0 PID: 44 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 761.962167][ T44] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 761.965545][ T44] Call Trace: [ 761.967016][ T44] [ 761.968346][ T44] dump_stack_lvl+0x100/0x190 [ 761.970179][ T44] vpanic+0x553/0x970 [ 761.971518][ T44] ? __pfx_vpanic+0x10/0x10 [ 761.973102][ T44] panic+0xd1/0xe0 [ 761.974341][ T44] ? __pfx_panic+0x10/0x10 [ 761.975915][ T44] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 761.977863][ T44] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 761.979860][ T44] ? watchdog.cold+0x1ec/0x234 [ 761.981489][ T44] watchdog.cold+0x1fd/0x234 [ 761.983080][ T44] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 761.985068][ T44] ? __pfx_watchdog+0x10/0x10 [ 761.986678][ T44] ? __kthread_parkme+0x18f/0x230 [ 761.988721][ T44] ? kthread+0x13a/0x450 [ 761.990186][ T44] ? __pfx_watchdog+0x10/0x10 [ 761.991771][ T44] kthread+0x373/0x450 [ 761.993625][ T44] ? __pfx_kthread+0x10/0x10 [ 761.995306][ T44] ret_from_fork+0x730/0xd60 [ 761.997064][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 761.998943][ T44] ? __switch_to+0x800/0x10f0 [ 762.000659][ T44] ? __pfx_kthread+0x10/0x10 [ 762.002631][ T44] ret_from_fork_asm+0x1a/0x30 [ 762.005050][ T44] [ 762.007083][ T44] Kernel Offset: disabled [ 762.008599][ T44] Rebooting in 86400 seconds..