last executing test programs: 27m8.772943618s ago: executing program 3 (id=16): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000040)=""/32, 0x20) getdents64(r0, &(0x7f0000000080)=""/254, 0xfe) 27m4.99980823s ago: executing program 3 (id=32): r0 = fsopen(&(0x7f00000004c0)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='gid', &(0x7f0000000540)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb#S\xc2lC\x00\x9b>\xa8\x04\xbf;\\.\xb1\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd3T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\xe5s\xc1C\xeb<\x1fa\x0f\xe9\xc7\xd0\x14l7u\x95\x96\x05JH\xcat\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1a\x1e\xa6\xad\x01\xbeG\xfe\x1a3\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 27m4.109124322s ago: executing program 3 (id=34): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000060026008500000061000000850000000700000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x0, 0x28, 0xe40, &(0x7f0000000d00)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000d40)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 27m3.755217119s ago: executing program 3 (id=37): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000840), 0x0) close(r0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 27m1.770773643s ago: executing program 3 (id=51): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 27m1.565397451s ago: executing program 3 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e030600bc87636086464b"], 0xffdd) 26m46.250557994s ago: executing program 32 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e030600bc87636086464b"], 0xffdd) 26m42.362748691s ago: executing program 33 (id=68): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000380)={'wlan1\x00', @random="0100c3201000"}) 26m37.794067085s ago: executing program 34 (id=81): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x400}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r0, 0x8914, &(0x7f00000002c0)="7573623000000000000000000000000003") openat(0xffffffffffffff9c, 0x0, 0x0, 0x10c) 20m6.51039877s ago: executing program 35 (id=608): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x40010) 9m47.073675019s ago: executing program 2 (id=3235): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000002e40)) 9m46.967594767s ago: executing program 2 (id=3237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000001680)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0x19, 0x4, 0x4, 0xfffffffa}, 0x50) write(r2, 0x0, 0x0) 9m46.8927253s ago: executing program 2 (id=3239): socket$igmp6(0xa, 0x3, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 9m46.481117778s ago: executing program 2 (id=3243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) 9m46.318853155s ago: executing program 2 (id=3246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 9m44.383843591s ago: executing program 2 (id=3248): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdc02, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x0) 9m35.768349419s ago: executing program 7 (id=3264): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000004740)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000016c0)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002700)={0x2020}, 0x2020) 9m34.103948139s ago: executing program 7 (id=3267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000500)=""/150, 0x96}], 0x2, 0x6bbf, 0x1000007c) 9m29.281337128s ago: executing program 36 (id=3248): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdc02, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x0) 2m45.006400415s ago: executing program 5 (id=4666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1bf) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffff9c, &(0x7f0000000240)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='zstd', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4351, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x28000359}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m42.965578022s ago: executing program 5 (id=4670): socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000480), 0xb5, 0x10, &(0x7f00000004c0), 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m42.191038426s ago: executing program 7 (id=3277): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) ioprio_get$uid(0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'veth1_virt_wifi\x00', &(0x7f0000000480)=@ethtool_dump={0x32, 0x9, 0x6, 0x15, "ad53a3712b67940eda0a0159c9030ecbb9013538fc"}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000580)={0xc, 0x4d, 0x1}, 0xffffffd7) 2m42.185824334s ago: executing program 5 (id=4673): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 2m41.917501439s ago: executing program 5 (id=4675): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001a40)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000001b00)='7', 0x1) sendmsg$key(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x2, 0x4, 0xdb, 0x6, 0x3, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xb}]}, 0x18}}, 0x40080) 2m40.620839929s ago: executing program 5 (id=4678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000d40)='./proc\x00', &(0x7f0000000d80)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='7', 0x1) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'vlan0\x00'}, 0x18) 2m39.861442662s ago: executing program 5 (id=4683): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000240)=0x20000528, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22102, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r6 = syz_io_uring_setup(0x6b13, &(0x7f0000000380)={0x0, 0x5963, 0x10000, 0x2, 0x32}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x82c03, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r11) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) 2m37.80143004s ago: executing program 7 (id=4687): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1bb) chdir(&(0x7f0000000100)='./mnt\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xa, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f00000000c0)) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000440)=0x239, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000480)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000004c0)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_destroy(r5) 2m35.958233355s ago: executing program 7 (id=4688): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r1, 0x24}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="59ed0eaa6afb0999a69fe28a0f", 0xd}], 0x1}, 0x20000885) 2m35.854903251s ago: executing program 8 (id=4690): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2}}}}}}}, 0x0) 2m35.770082104s ago: executing program 7 (id=4691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, r2}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e20, 0x2, @empty, 0x5}, 0x1, {[0x3, 0x466, 0x2, 0x7, 0x9, 0xfffffff7, 0x8, 0x40]}}, 0x5c) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.67017085s ago: executing program 8 (id=4692): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000680)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.179885198s ago: executing program 8 (id=4693): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f00000001c0)='270', 0x3) syz_open_procfs(0x0, &(0x7f0000000200)='net/nfsfs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000060026008500000061000000850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$mtd(&(0x7f0000000540), 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000580)={0x1, 0x0, 0x98, &(0x7f00000005c0)={0x3, 0xfffe, 0x12}}) 2m34.585048097s ago: executing program 6 (id=4694): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 2m34.496864369s ago: executing program 8 (id=4695): socket(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000a40)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x3, 0x3}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x9e, @loopback, 0x23}, 0x1c) sendto$inet(r1, &(0x7f0000000140)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000300)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m34.222244648s ago: executing program 6 (id=4696): pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000a80)='k', 0x1}], 0x1, 0x1) r1 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000980)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x3000) landlock_restrict_self(0xffffffffffffffff, 0xc) 2m33.819943798s ago: executing program 6 (id=4697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000044c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) 2m33.610023559s ago: executing program 6 (id=4698): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1bb) chdir(&(0x7f0000000100)='./mnt\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xa, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f00000000c0)) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000440)=0x239, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000480)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000004c0)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_destroy(r5) 2m32.890921594s ago: executing program 8 (id=4699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x3, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) 2m31.694279172s ago: executing program 8 (id=4700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800020001"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m31.091650032s ago: executing program 6 (id=4701): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2}}}}}}}, 0x0) 2m31.015347217s ago: executing program 6 (id=4702): r0 = openat$macvtap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x10002) 2m24.029749725s ago: executing program 37 (id=4683): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000200)=0x100000001, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000240)=0x20000528, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22102, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r3 = getpid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000300)) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r6 = syz_io_uring_setup(0x6b13, &(0x7f0000000380)={0x0, 0x5963, 0x10000, 0x2, 0x32}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x82c03, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r11) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) 2m19.718211535s ago: executing program 38 (id=4691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, r2}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e20, 0x2, @empty, 0x5}, 0x1, {[0x3, 0x466, 0x2, 0x7, 0x9, 0xfffffff7, 0x8, 0x40]}}, 0x5c) close_range(r0, 0xffffffffffffffff, 0x0) 2m16.23778559s ago: executing program 39 (id=4700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800020001"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2m15.647972631s ago: executing program 40 (id=4702): r0 = openat$macvtap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x10002) 1m18.743389161s ago: executing program 0 (id=4733): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000001e00)='syzkaller\x00'}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000c93597e30200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m18.556034045s ago: executing program 0 (id=4734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000700)=0x207, 0x4) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000780)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000007c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m18.352622996s ago: executing program 4 (id=4705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 1m18.079750973s ago: executing program 4 (id=4736): chdir(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xa, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000440)=0x239, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000480)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 1m17.131200552s ago: executing program 0 (id=4741): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x802, 0x165) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x8) r0 = getpid() statfs(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001100)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000011c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1m16.09281031s ago: executing program 0 (id=4746): set_mempolicy(0x4005, &(0x7f0000000740)=0x7e, 0x9) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000019c0)={0x2, 0xa, @start={0x0, 0x1, "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", "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"}, [0x9, 0x5, 0x201, 0x65a5, 0xff, 0x8000000000000001, 0xfffffffffffffffc, 0x7f, 0x91c7, 0x0, 0x9, 0x80000000, 0xe95d, 0x1, 0x8, 0x1, 0xc0b, 0x7e57, 0x6, 0x0, 0xffff, 0x9, 0xb047, 0x1, 0x7fff, 0x0, 0x6, 0x3, 0x7, 0x101, 0x4e, 0xffffffffffff8000, 0x5, 0x8, 0x6, 0x1000, 0x5, 0x4, 0x3, 0x2, 0x4, 0x3, 0xd94d, 0x5, 0x4, 0x6, 0x3, 0x1, 0x401, 0x4, 0x4, 0xfffffffffffff800, 0x398dc1c9, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x8, 0x2, 0x7ff, 0xfffffffffffffffe, 0x7, 0x7, 0x8000000000000000]}) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000400)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000440)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 1m15.438129718s ago: executing program 0 (id=4748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 1m14.674269433s ago: executing program 4 (id=4754): r0 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x46, '\x00', @st={0x4, [{0x3, @svalue=0x1000000000009}, {0x2, @svalue=0x7}, {0x1, @uvalue=0x3ff}, {0x1, @uvalue=0x5}]}, 0x1}, {0x1a, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3, @svalue}, {0x3, @svalue}, {0x2, @uvalue=0xf}]}, 0x9}, {0x3d, '\x00', @buffer={"233b263a371067f509207d360700008d262565779b883426b1ec008cc77b2c69", 0x20}, 0xe6}]}) 1m14.47903774s ago: executing program 4 (id=4757): set_mempolicy(0x4005, &(0x7f0000000740)=0x7e, 0x9) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000019c0)={0x2, 0xa, @start={0x0, 0x1, "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", "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"}, [0x9, 0x5, 0x201, 0x65a5, 0xff, 0x8000000000000001, 0xfffffffffffffffc, 0x7f, 0x91c7, 0x0, 0x9, 0x80000000, 0xe95d, 0x1, 0x8, 0x1, 0xc0b, 0x7e57, 0x6, 0x0, 0xffff, 0x9, 0xb047, 0x1, 0x7fff, 0x0, 0x6, 0x3, 0x7, 0x101, 0x4e, 0xffffffffffff8000, 0x5, 0x8, 0x6, 0x1000, 0x5, 0x4, 0x3, 0x2, 0x4, 0x3, 0xd94d, 0x5, 0x4, 0x6, 0x3, 0x1, 0x401, 0x4, 0x4, 0xfffffffffffff800, 0x398dc1c9, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x8, 0x2, 0x7ff, 0xfffffffffffffffe, 0x7, 0x7, 0x8000000000000000]}) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000400)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000440)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 1m14.336683066s ago: executing program 4 (id=4758): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x2}, 0x8, 0x10, &(0x7f0000001480), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x702, 0x64, 0x0, &(0x7f0000001540)="e460334400006400eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m13.714947805s ago: executing program 0 (id=4759): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x86dd, 0x7, 0x0, &(0x7f0000000680)="c1dfb080cd21d3", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.011641286s ago: executing program 4 (id=4767): set_mempolicy(0x4005, &(0x7f0000000740)=0x7e, 0x9) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000019c0)={0x2, 0xa, @start={0x0, 0x1, "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", "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"}, [0x9, 0x5, 0x201, 0x65a5, 0xff, 0x8000000000000001, 0xfffffffffffffffc, 0x7f, 0x91c7, 0x0, 0x9, 0x80000000, 0xe95d, 0x1, 0x8, 0x1, 0xc0b, 0x7e57, 0x6, 0x0, 0xffff, 0x9, 0xb047, 0x1, 0x7fff, 0x0, 0x6, 0x3, 0x7, 0x101, 0x4e, 0xffffffffffff8000, 0x5, 0x8, 0x6, 0x1000, 0x5, 0x4, 0x3, 0x2, 0x4, 0x3, 0xd94d, 0x5, 0x4, 0x6, 0x3, 0x1, 0x401, 0x4, 0x4, 0xfffffffffffff800, 0x398dc1c9, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x8, 0x2, 0x7ff, 0xfffffffffffffffe, 0x7, 0x7, 0x8000000000000000]}) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000400)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000440)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 3.198546721s ago: executing program 1 (id=4979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0xffe0, 0x2}, {0x1}, {0xd, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e4ae}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2.907479102s ago: executing program 9 (id=4980): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000410000006400000011000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.74514598s ago: executing program 9 (id=4981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e00101010800030001"], 0x68}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r2, &(0x7f0000000300)="ffffffffffff00aabbccddee0800", 0xe) 2.742115309s ago: executing program 1 (id=4982): r0 = openat$comedi(0xffffff9c, &(0x7f0000000480)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000580)={0xc000003, 0x0, 0x0, 0x3, 0x5}) 2.526580279s ago: executing program 1 (id=4983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xc8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "11"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) 2.34615919s ago: executing program 9 (id=4984): r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x9dc, 0x282100) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x800, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000a80)={0x0, 0x9, 0x0, [0x8, 0x1, 0x9, 0x4abf, 0x1], [0x80000000, 0xa, 0x0, 0x6, 0x800, 0x200, 0x4, 0x6, 0x3, 0x8000000000000000, 0x9, 0xf, 0x100000000, 0x8, 0xc, 0x4, 0x3, 0x0, 0x4, 0xffffffffffffff3b, 0x80, 0x3, 0x9, 0x4, 0x10ffff, 0x7, 0x7fffffffffffffff, 0x8, 0x0, 0x5, 0x4, 0x9, 0xd31, 0x7, 0xa964, 0x100, 0x80, 0x8000000000000001, 0x100000000, 0x2, 0xe, 0x3ff, 0x2, 0x985, 0x4, 0x5a, 0xe, 0x77c6, 0x10001, 0x4, 0x9, 0x1, 0x119c000000, 0x1b, 0x6fc, 0x7ff, 0x430a, 0xe, 0x9, 0x1000, 0xfff, 0x1, 0x100000000, 0x8, 0xfffffffffffffbff, 0x1e5, 0x8, 0x7, 0x0, 0x6, 0x3, 0xfffffffffffff1b9, 0x800, 0xf67c, 0x4, 0x7, 0xd, 0x3, 0x26, 0x67, 0x2b, 0x7, 0x8001, 0x6, 0x2, 0x5, 0xae, 0x3, 0xc4, 0x9, 0x7fffffff, 0x400, 0x400, 0x806, 0x1c00000, 0x7, 0x9, 0x81, 0x9, 0x2, 0x400000000000000, 0xf, 0x81, 0x7, 0x3, 0x8, 0x4, 0x4, 0xfffffffffffff62e, 0x5, 0xfffffffffffffffa, 0x2, 0x100000000, 0x100000000, 0xffff, 0x200, 0x6, 0x7f, 0x8001, 0xfffffffffffffffc, 0x8000]}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000ec0)={0x1, 0x10000, @start={r5, 0x1, "a0d4f56f13ebac7141610848c325118aa12e57f126a16c2aebca49b7b3acca70c40cea642a548970f303e982e1ac347d802966b446d06868c02f5978988ccb8185e025d9e16df057aa40aaeb2296ff01bf39b9e67323008c43a7a39cb48682a07433b471bf5b51e7bd08f51e4313ab6ccb10002973c79d879531712d48c1a981374eb2d93eb5195a2a1c9acc18e759663b69ff283779af81281bd2634ffb30896a799d54447a5dc47708f6771672cdbedfac85b8a485cd46ae67438e1dbb7cda53352868dfe9716668ca4ec78e66528900ba04f1f42012fbdf36c8636b4dd4224571c3df09cc30c7b7a1bd5552f21a6136f74e469ecd78c3d2dc83e7921d23ba7efe806e41e895f893da916ef6c092097ad519397eb306b8a575f153bd170cf4b220a61849bd914fd95333eeec1b8514dd95216eb335715cd2303c9fec3aa75be44d48098e30d419175deb46b0f284ea9cc2d896aab44ce3064202c7c67cb0d0be5b7eddd834986205c594df1d7515bfc0437ff80cf09c9f483f6d836118aeb4b6bd0d88e0bd0aac31c1acfcd766ae383d39b15da343c64354d6f584be85264b5f5d4d6097f3c3a058f9767ce3afb31cb9301286edce6c4b700eab06dd876fbb7465aada147aeeb18f601bb436f43ef48f5e8cc323c781a5a92a4b624a9cb5b772c0c6a502473876ad338e5dbf5f879d47f372f89a2f490039da491b574e1b2ffeba547cbba122bd02136be16ba25614531fa8b851ac3ba7c89e78ce81419b03ad45068dc3496869614a0093261434de24a0d09b67dd735476ec680d96ad3e8f86971e03fdffe9433dfc5a41b280e75603602d0403f79dc323e5354630b0a824bf9232eb8156268e450e8ac5ecd80652ff164ca57f455f842d4f7d488be8e6daccaaa8a94d956090a331c24e3095952ede1d7153584825cadb8b3a4588a3e83418621392cb949a7084ffc1181abe87e6851943c083987f0648fb952a026650274f6ea1d2e13fb62954662dee1989f43acb748f1da1b20283e3018d6475df7676424237ca793c22acc143f66449a303f12172e8fd1eb1c860917f96de59efe8f117e547b772f7f4c1092f52608d250dfadc8372f90188e8d02545a2899ce77ca94a7b8888a2c312a37116650735d4ca9bbdb237faadd545479f2aad6be1fa36794fe780da6797a52bf63441bbffb00f7487d5debcd175c2bb20c1e4ec5fd53b665584ce6fed98f0309db5542c06c2ba23fad8cbb09e880fcb04366247ddf9ccb873a62e9662119439d8603d696311fdc36fee195bdfbef232c0e0d1ae88d7f17a7c2626ff842c623d28c6d1ea370d8d85f7f1f9bd471878a1b286c68894cb8f454104f71bf51cfb85ccdcdbb3a01726116ace67adc27edfff69c1e98e06c73daaf7d8fc70daab5f34458ffd64cb2318b3aff3a0db0e3f807682b7c7b5ea70ee634e", "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"}, [0x400, 0x5, 0x3, 0x1, 0x7, 0x8, 0xd, 0xffffffffffff8000, 0xe0b7, 0x2, 0x6, 0x2, 0x800, 0x8, 0x100, 0x8, 0x1, 0x4, 0x1, 0x4, 0x4, 0x0, 0x0, 0x800, 0x1, 0x0, 0x3, 0x4, 0x1, 0x3, 0x9, 0x9, 0x1, 0x0, 0x81, 0x6, 0x75, 0x8, 0x0, 0x2, 0x0, 0x3ff, 0xffffffff00000000, 0x3, 0xc9d5, 0x8, 0x1, 0x38000, 0x5, 0x3, 0x2, 0x9, 0x3, 0x8, 0x7ff, 0x81, 0x4, 0x2, 0x5, 0x2, 0x0, 0x400000, 0x9, 0x7]}) write$binfmt_misc(r4, &(0x7f0000001900), 0xe09) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$team(&(0x7f0000001940), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001980)) r7 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000019c0)={'team_slave_1\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001c40)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000001c80)="03000000", 0x4}], 0x2}, 0x0) 2.316970479s ago: executing program 1 (id=4985): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x802, 0x165) prlimit64(0x0, 0xe, &(0x7f0000001000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x8) r0 = getpid() statfs(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001100)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000011c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.491632664s ago: executing program 9 (id=4986): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) fstatfs(0xffffffffffffffff, &(0x7f0000000580)=""/160) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x0, 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000c00)=[&(0x7f0000000c40)={0x180a, 0x0, 0x3, 0x8, 0x0, r3, 0x0}]) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000d00)={0x9, @meta={0x4b31434d, 0x478fd8d0, 0x98da, 0xbc08, 0x5c99631d}}) r5 = syz_io_uring_setup(0xd3a, &(0x7f0000000e00)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000e80)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000f00)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000f40)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r5, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r5}}) add_key$keyring(&(0x7f0000000fc0), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000001000)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001080)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x60}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) 1.275437616s ago: executing program 1 (id=4987): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0x0, 0x4, 0x0, 0x1000}, 0x1c, [0x101, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xac, 0xff, 0xeb93], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfd], [0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_DEV_CREATE(r1, 0x5501) 281.183633ms ago: executing program 9 (id=4988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000410000008500000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e24edb41586163ca52e78e7464fc", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7d}, 0x50) 78.650626ms ago: executing program 9 (id=4989): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0xfffffffc, 0x5a, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x200}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f00000001c0)={0x0, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) ioctl$STOP_ARRAY(r1, 0x932, 0x0) 0s ago: executing program 1 (id=4990): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000640000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 1507.378915][T22109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.378936][T22109] RIP: 0033:0x7fa8805e974e [ 1507.378955][T22109] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1507.378973][T22109] RSP: 002b:00007fa87e86dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1507.378996][T22109] RAX: ffffffffffffffda RBX: 00007fa87e86e6c0 RCX: 00007fa8805e974e [ 1507.379012][T22109] RDX: 0000000000000002 RSI: 00007fa87e86df90 RDI: ffffffffffffff9c [ 1507.379027][T22109] RBP: 00007fa8806b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1507.379040][T22109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.379053][T22109] R13: 00007fa8808a6038 R14: 00007fa8808a5fa0 R15: 00007fff2c313818 [ 1507.379087][T22109] [ 1507.631019][T10955] veth1_vlan: left promiscuous mode [ 1507.631260][T10955] veth0_vlan: left promiscuous mode [ 1507.674677][T22111] FAULT_INJECTION: forcing a failure. [ 1507.674677][T22111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.674715][T22111] CPU: 1 UID: 0 PID: 22111 Comm: syz.6.4486 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1507.674745][T22111] Tainted: [L]=SOFTLOCKUP [ 1507.674753][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1507.674769][T22111] Call Trace: [ 1507.674777][T22111] [ 1507.674787][T22111] dump_stack_lvl+0xe8/0x150 [ 1507.674827][T22111] should_fail_ex+0x447/0x5e0 [ 1507.674864][T22111] _copy_from_user+0x2d/0xb0 [ 1507.674897][T22111] btf_get_info_by_fd+0x10f/0x650 [ 1507.674933][T22111] ? __pfx_btf_get_info_by_fd+0x10/0x10 [ 1507.674961][T22111] ? __fget_files+0x2a/0x420 [ 1507.675002][T22111] ? fdget+0x1b2/0x250 [ 1507.675035][T22111] bpf_obj_get_info_by_fd+0xabf/0x35c0 [ 1507.675113][T22111] ? lock_acquire+0x115/0x350 [ 1507.675157][T22111] ? futex_unqueue+0x22/0x240 [ 1507.675180][T22111] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 1507.675209][T22111] ? futex_unqueue+0x22/0x240 [ 1507.675238][T22111] ? __lock_acquire+0x747/0x2de0 [ 1507.675283][T22111] ? __pfx___futex_wait+0x10/0x10 [ 1507.675321][T22111] ? __pfx_futex_wake_mark+0x10/0x10 [ 1507.675355][T22111] ? lock_acquire+0x115/0x350 [ 1507.675403][T22111] ? bpf_lsm_bpf+0x9/0x20 [ 1507.675427][T22111] ? security_bpf+0x7e/0x2d0 [ 1507.675451][T22111] __sys_bpf+0xbf7/0xe00 [ 1507.675488][T22111] ? __pfx___sys_bpf+0x10/0x10 [ 1507.675519][T22111] ? do_futex+0x3e7/0x4e0 [ 1507.675578][T22111] ? rcu_is_watching+0x16/0xb0 [ 1507.675611][T22111] __x64_sys_bpf+0xba/0xd0 [ 1507.675639][T22111] do_syscall_64+0x16a/0x530 [ 1507.675668][T22111] ? trace_irq_disable+0x3b/0x140 [ 1507.675691][T22111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.675713][T22111] ? clear_bhb_loop+0x70/0xc0 [ 1507.675739][T22111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.675761][T22111] RIP: 0033:0x7fa880628f19 [ 1507.675782][T22111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.675802][T22111] RSP: 002b:00007fa87e86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1507.675825][T22111] RAX: ffffffffffffffda RBX: 00007fa8808a5fa0 RCX: 00007fa880628f19 [ 1507.675842][T22111] RDX: 0000000000000010 RSI: 0000200000002240 RDI: 000000000000000f [ 1507.675857][T22111] RBP: 00007fa8806b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1507.675871][T22111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.675885][T22111] R13: 00007fa8808a6038 R14: 00007fa8808a5fa0 R15: 00007fff2c313818 [ 1507.675920][T22111] [ 1508.494828][T22127] FAULT_INJECTION: forcing a failure. [ 1508.494828][T22127] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.494866][T22127] CPU: 1 UID: 0 PID: 22127 Comm: syz.6.4494 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1508.494896][T22127] Tainted: [L]=SOFTLOCKUP [ 1508.494905][T22127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1508.494919][T22127] Call Trace: [ 1508.494927][T22127] [ 1508.494937][T22127] dump_stack_lvl+0xe8/0x150 [ 1508.494981][T22127] should_fail_ex+0x447/0x5e0 [ 1508.495015][T22127] ? __d_alloc+0x37/0x830 [ 1508.495037][T22127] should_failslab+0xa8/0x100 [ 1508.495066][T22127] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 1508.495089][T22127] ? __d_alloc+0x37/0x830 [ 1508.495115][T22127] __d_alloc+0x37/0x830 [ 1508.495141][T22127] path_from_stashed+0x35c/0x580 [ 1508.495171][T22127] proc_ns_get_link+0x16b/0x2a0 [ 1508.495194][T22127] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1508.495225][T22127] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 1508.495248][T22127] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1508.495272][T22127] pick_link+0x72a/0xfd0 [ 1508.495310][T22127] step_into_slowpath+0x58a/0x820 [ 1508.495344][T22127] ? __pfx_step_into_slowpath+0x10/0x10 [ 1508.495384][T22127] path_openat+0xa9c/0x2100 [ 1508.495426][T22127] do_file_open+0x23e/0x4a0 [ 1508.495446][T22127] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1508.495482][T22127] ? __pfx_do_file_open+0x10/0x10 [ 1508.495528][T22127] ? alloc_fd+0x6b2/0x760 [ 1508.495569][T22127] do_sys_openat2+0x115/0x200 [ 1508.495595][T22127] ? sched_clock+0x41/0x60 [ 1508.495661][T22127] ? __pfx_do_sys_openat2+0x10/0x10 [ 1508.495706][T22127] __x64_sys_openat+0x138/0x170 [ 1508.495741][T22127] do_syscall_64+0x16a/0x530 [ 1508.495768][T22127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.495791][T22127] ? clear_bhb_loop+0x70/0xc0 [ 1508.495818][T22127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.495841][T22127] RIP: 0033:0x7fa8805e974e [ 1508.495861][T22127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1508.495879][T22127] RSP: 002b:00007fa87e86dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1508.495903][T22127] RAX: ffffffffffffffda RBX: 00007fa87e86e6c0 RCX: 00007fa8805e974e [ 1508.495919][T22127] RDX: 0000000000000002 RSI: 00007fa87e86df90 RDI: ffffffffffffff9c [ 1508.495935][T22127] RBP: 00007fa8806b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1508.495949][T22127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.495961][T22127] R13: 00007fa8808a6038 R14: 00007fa8808a5fa0 R15: 00007fff2c313818 [ 1508.495996][T22127] [ 1508.784568][T10955] team0 (unregistering): Port device team_slave_1 removed [ 1508.866264][T10955] team0 (unregistering): Port device team_slave_0 removed [ 1509.431332][T22140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1509.550612][T22151] FAULT_INJECTION: forcing a failure. [ 1509.550612][T22151] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.550635][T22151] CPU: 1 UID: 0 PID: 22151 Comm: syz.8.4503 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1509.550651][T22151] Tainted: [L]=SOFTLOCKUP [ 1509.550655][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1509.550663][T22151] Call Trace: [ 1509.550667][T22151] [ 1509.550673][T22151] dump_stack_lvl+0xe8/0x150 [ 1509.550698][T22151] should_fail_ex+0x447/0x5e0 [ 1509.550718][T22151] should_failslab+0xa8/0x100 [ 1509.550733][T22151] ? security_inode_alloc+0x39/0x310 [ 1509.550746][T22151] kmem_cache_alloc_noprof+0x99/0x680 [ 1509.550765][T22151] ? security_inode_alloc+0x39/0x310 [ 1509.550782][T22151] security_inode_alloc+0x39/0x310 [ 1509.550796][T22151] inode_init_always_gfp+0x983/0xd40 [ 1509.550816][T22151] alloc_inode+0x82/0x1b0 [ 1509.550861][T22151] path_from_stashed+0x205/0x580 [ 1509.550873][T22151] ? userns_get+0x1f7/0x250 [ 1509.550889][T22151] proc_ns_get_link+0x16b/0x2a0 [ 1509.550903][T22151] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1509.550919][T22151] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 1509.550931][T22151] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1509.550945][T22151] pick_link+0x72a/0xfd0 [ 1509.550967][T22151] step_into_slowpath+0x58a/0x820 [ 1509.550985][T22151] ? __pfx_step_into_slowpath+0x10/0x10 [ 1509.551008][T22151] path_openat+0xa9c/0x2100 [ 1509.551030][T22151] do_file_open+0x23e/0x4a0 [ 1509.551040][T22151] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1509.551060][T22151] ? __pfx_do_file_open+0x10/0x10 [ 1509.551084][T22151] ? alloc_fd+0x6b2/0x760 [ 1509.551106][T22151] do_sys_openat2+0x115/0x200 [ 1509.551121][T22151] ? __se_sys_futex+0x3a8/0x450 [ 1509.551136][T22151] ? __pfx_do_sys_openat2+0x10/0x10 [ 1509.551155][T22151] ? rcu_is_watching+0x16/0xb0 [ 1509.551171][T22151] __x64_sys_openat+0x138/0x170 [ 1509.551189][T22151] do_syscall_64+0x16a/0x530 [ 1509.551203][T22151] ? trace_irq_disable+0x3b/0x140 [ 1509.551215][T22151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.551227][T22151] ? clear_bhb_loop+0x70/0xc0 [ 1509.551240][T22151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.551252][T22151] RIP: 0033:0x7f3bd3b4974e [ 1509.551264][T22151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1509.551274][T22151] RSP: 002b:00007f3bd1dd5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1509.551286][T22151] RAX: ffffffffffffffda RBX: 00007f3bd1dd66c0 RCX: 00007f3bd3b4974e [ 1509.551295][T22151] RDX: 0000000000000002 RSI: 00007f3bd1dd5f90 RDI: ffffffffffffff9c [ 1509.551303][T22151] RBP: 00007f3bd3c17f6d R08: 0000000000000000 R09: 0000000000000000 [ 1509.551310][T22151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.551318][T22151] R13: 00007f3bd3e06038 R14: 00007f3bd3e05fa0 R15: 00007fff5ac54f88 [ 1509.551336][T22151] [ 1510.388611][T22165] FAULT_INJECTION: forcing a failure. [ 1510.388611][T22165] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1510.388648][T22165] CPU: 0 UID: 0 PID: 22165 Comm: syz.5.4509 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.388679][T22165] Tainted: [L]=SOFTLOCKUP [ 1510.388687][T22165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1510.388700][T22165] Call Trace: [ 1510.388709][T22165] [ 1510.388718][T22165] dump_stack_lvl+0xe8/0x150 [ 1510.388762][T22165] should_fail_ex+0x447/0x5e0 [ 1510.388802][T22165] get_futex_key+0x1ab/0x1410 [ 1510.388827][T22165] ? __lock_acquire+0x747/0x2de0 [ 1510.388881][T22165] ? __pfx_get_futex_key+0x10/0x10 [ 1510.388904][T22165] ? futex_hash+0x4e/0x2b0 [ 1510.388937][T22165] futex_wake+0x119/0x600 [ 1510.388967][T22165] ? lock_acquire+0x115/0x350 [ 1510.389004][T22165] ? __pfx_futex_wake+0x10/0x10 [ 1510.389054][T22165] do_futex+0x458/0x4e0 [ 1510.389081][T22165] ? landlock_put_ruleset+0x109/0x2b0 [ 1510.389110][T22165] ? __pfx_do_futex+0x10/0x10 [ 1510.389148][T22165] __se_sys_futex+0x3a8/0x450 [ 1510.389183][T22165] ? __pfx___se_sys_futex+0x10/0x10 [ 1510.389221][T22165] ? __x64_sys_futex+0x21/0xf0 [ 1510.389252][T22165] do_syscall_64+0x16a/0x530 [ 1510.389281][T22165] ? trace_irq_disable+0x3b/0x140 [ 1510.389303][T22165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.389326][T22165] ? clear_bhb_loop+0x70/0xc0 [ 1510.389352][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.389374][T22165] RIP: 0033:0x7f540a028f19 [ 1510.389394][T22165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.389413][T22165] RSP: 002b:00007f540826e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1510.389436][T22165] RAX: ffffffffffffffda RBX: 00007f540a2a5fa8 RCX: 00007f540a028f19 [ 1510.389453][T22165] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f540a2a5fac [ 1510.389468][T22165] RBP: 00007f540a2a5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1510.389483][T22165] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1510.389498][T22165] R13: 00007f540a2a6038 R14: 00007ffd25be6390 R15: 00007ffd25be6478 [ 1510.389533][T22165] [ 1510.879300][T22177] FAULT_INJECTION: forcing a failure. [ 1510.879300][T22177] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.879336][T22177] CPU: 0 UID: 0 PID: 22177 Comm: syz.5.4512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.879366][T22177] Tainted: [L]=SOFTLOCKUP [ 1510.879375][T22177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1510.879388][T22177] Call Trace: [ 1510.879397][T22177] [ 1510.879406][T22177] dump_stack_lvl+0xe8/0x150 [ 1510.879449][T22177] should_fail_ex+0x447/0x5e0 [ 1510.879484][T22177] should_failslab+0xa8/0x100 [ 1510.879516][T22177] __kmalloc_noprof+0xf6/0x790 [ 1510.879540][T22177] ? tomoyo_encode+0x2ad/0x570 [ 1510.879560][T22177] ? tomoyo_encode+0x2ad/0x570 [ 1510.879583][T22177] tomoyo_encode+0x2ad/0x570 [ 1510.879605][T22177] tomoyo_realpath_from_path+0x5fd/0x640 [ 1510.879634][T22177] tomoyo_check_open_permission+0x229/0x470 [ 1510.879662][T22177] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1510.879687][T22177] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1510.879712][T22177] ? __asan_memset+0x22/0x50 [ 1510.879751][T22177] ? __pfx_smack_inode_permission+0x10/0x10 [ 1510.879792][T22177] security_file_open+0xa9/0x240 [ 1510.879819][T22177] do_dentry_open+0x4b3/0x1410 [ 1510.879850][T22177] vfs_open_consume+0x4a/0x360 [ 1510.879870][T22177] ? path_openat+0x16e6/0x2100 [ 1510.879890][T22177] path_openat+0x1701/0x2100 [ 1510.879922][T22177] do_file_open+0x23e/0x4a0 [ 1510.879937][T22177] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.879964][T22177] ? __pfx_do_file_open+0x10/0x10 [ 1510.880000][T22177] ? alloc_fd+0x6b2/0x760 [ 1510.880032][T22177] do_sys_openat2+0x115/0x200 [ 1510.880054][T22177] ? __se_sys_futex+0x3a8/0x450 [ 1510.880077][T22177] ? __pfx_do_sys_openat2+0x10/0x10 [ 1510.880103][T22177] ? rcu_is_watching+0x16/0xb0 [ 1510.880126][T22177] __x64_sys_openat+0x138/0x170 [ 1510.880153][T22177] do_syscall_64+0x16a/0x530 [ 1510.880173][T22177] ? trace_irq_disable+0x3b/0x140 [ 1510.880190][T22177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.880207][T22177] ? clear_bhb_loop+0x70/0xc0 [ 1510.880227][T22177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.880243][T22177] RIP: 0033:0x7f5409fe974e [ 1510.880260][T22177] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1510.880276][T22177] RSP: 002b:00007f540826dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1510.880296][T22177] RAX: ffffffffffffffda RBX: 00007f540826e6c0 RCX: 00007f5409fe974e [ 1510.880309][T22177] RDX: 0000000000000000 RSI: 00007f540826df90 RDI: ffffffffffffff9c [ 1510.880322][T22177] RBP: 00007f540a0b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1510.880332][T22177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.880343][T22177] R13: 00007f540a2a6038 R14: 00007f540a2a5fa0 R15: 00007ffd25be6478 [ 1510.880371][T22177] [ 1510.956377][T22177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1513.230277][T22218] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1513.230305][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1513.358395][T22221] FAULT_INJECTION: forcing a failure. [ 1513.358395][T22221] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.358428][T22221] CPU: 1 UID: 0 PID: 22221 Comm: syz.8.4522 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1513.358455][T22221] Tainted: [L]=SOFTLOCKUP [ 1513.358464][T22221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1513.358476][T22221] Call Trace: [ 1513.358484][T22221] [ 1513.358493][T22221] dump_stack_lvl+0xe8/0x150 [ 1513.358546][T22221] should_fail_ex+0x447/0x5e0 [ 1513.358580][T22221] should_failslab+0xa8/0x100 [ 1513.358607][T22221] __kmalloc_noprof+0xf6/0x790 [ 1513.358628][T22221] ? tomoyo_encode+0x2ad/0x570 [ 1513.358649][T22221] ? tomoyo_encode+0x2ad/0x570 [ 1513.358677][T22221] tomoyo_encode+0x2ad/0x570 [ 1513.358703][T22221] tomoyo_realpath_from_path+0x5fd/0x640 [ 1513.358738][T22221] tomoyo_check_open_permission+0x229/0x470 [ 1513.358771][T22221] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1513.358801][T22221] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1513.358835][T22221] ? __asan_memset+0x22/0x50 [ 1513.358887][T22221] ? __pfx_smack_inode_permission+0x10/0x10 [ 1513.358924][T22221] security_file_open+0xa9/0x240 [ 1513.358952][T22221] do_dentry_open+0x4b3/0x1410 [ 1513.358989][T22221] vfs_open_consume+0x4a/0x360 [ 1513.359013][T22221] ? path_openat+0x16e6/0x2100 [ 1513.359042][T22221] path_openat+0x1701/0x2100 [ 1513.359083][T22221] do_file_open+0x23e/0x4a0 [ 1513.359103][T22221] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1513.359139][T22221] ? __pfx_do_file_open+0x10/0x10 [ 1513.359181][T22221] ? alloc_fd+0x6b2/0x760 [ 1513.359223][T22221] do_sys_openat2+0x115/0x200 [ 1513.359249][T22221] ? __se_sys_futex+0x3a8/0x450 [ 1513.359280][T22221] ? __pfx_do_sys_openat2+0x10/0x10 [ 1513.359311][T22221] ? rcu_is_watching+0x16/0xb0 [ 1513.359341][T22221] __x64_sys_openat+0x138/0x170 [ 1513.359375][T22221] do_syscall_64+0x16a/0x530 [ 1513.359403][T22221] ? trace_irq_disable+0x3b/0x140 [ 1513.359429][T22221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.359452][T22221] ? clear_bhb_loop+0x70/0xc0 [ 1513.359477][T22221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.359497][T22221] RIP: 0033:0x7f3bd3b4974e [ 1513.359525][T22221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1513.359544][T22221] RSP: 002b:00007f3bd1dd5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1513.359566][T22221] RAX: ffffffffffffffda RBX: 00007f3bd1dd66c0 RCX: 00007f3bd3b4974e [ 1513.359583][T22221] RDX: 0000000000000000 RSI: 00007f3bd1dd5f90 RDI: ffffffffffffff9c [ 1513.359597][T22221] RBP: 00007f3bd3c17f6d R08: 0000000000000000 R09: 0000000000000000 [ 1513.359611][T22221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.359625][T22221] R13: 00007f3bd3e06038 R14: 00007f3bd3e05fa0 R15: 00007fff5ac54f88 [ 1513.359659][T22221] [ 1513.359712][T22221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1513.673197][T22225] tipc: Can't bind to reserved service type 2 [ 1515.454547][T22252] FAULT_INJECTION: forcing a failure. [ 1515.454547][T22252] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.454583][T22252] CPU: 1 UID: 0 PID: 22252 Comm: syz.8.4531 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1515.454613][T22252] Tainted: [L]=SOFTLOCKUP [ 1515.454621][T22252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1515.454634][T22252] Call Trace: [ 1515.454642][T22252] [ 1515.454652][T22252] dump_stack_lvl+0xe8/0x150 [ 1515.454696][T22252] should_fail_ex+0x447/0x5e0 [ 1515.454733][T22252] should_failslab+0xa8/0x100 [ 1515.454772][T22252] __kmalloc_noprof+0xf6/0x790 [ 1515.454797][T22252] ? tomoyo_encode+0x2ad/0x570 [ 1515.454818][T22252] ? tomoyo_encode+0x2ad/0x570 [ 1515.454847][T22252] tomoyo_encode+0x2ad/0x570 [ 1515.454876][T22252] tomoyo_realpath_from_path+0x5fd/0x640 [ 1515.454913][T22252] tomoyo_check_open_permission+0x229/0x470 [ 1515.454947][T22252] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1515.454979][T22252] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1515.455013][T22252] ? __asan_memset+0x22/0x50 [ 1515.455063][T22252] ? __pfx_smack_inode_permission+0x10/0x10 [ 1515.455101][T22252] security_file_open+0xa9/0x240 [ 1515.455136][T22252] do_dentry_open+0x4b3/0x1410 [ 1515.455174][T22252] vfs_open_consume+0x4a/0x360 [ 1515.455198][T22252] ? path_openat+0x16e6/0x2100 [ 1515.455223][T22252] path_openat+0x1701/0x2100 [ 1515.455264][T22252] do_file_open+0x23e/0x4a0 [ 1515.455283][T22252] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1515.455317][T22252] ? __pfx_do_file_open+0x10/0x10 [ 1515.455364][T22252] ? alloc_fd+0x6b2/0x760 [ 1515.455407][T22252] do_sys_openat2+0x115/0x200 [ 1515.455436][T22252] ? __se_sys_futex+0x3a8/0x450 [ 1515.455464][T22252] ? __pfx_do_sys_openat2+0x10/0x10 [ 1515.455499][T22252] ? rcu_is_watching+0x16/0xb0 [ 1515.455529][T22252] __x64_sys_openat+0x138/0x170 [ 1515.455563][T22252] do_syscall_64+0x16a/0x530 [ 1515.455590][T22252] ? trace_irq_disable+0x3b/0x140 [ 1515.455612][T22252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.455632][T22252] ? clear_bhb_loop+0x70/0xc0 [ 1515.455655][T22252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.455675][T22252] RIP: 0033:0x7f3bd3b4974e [ 1515.455694][T22252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1515.455713][T22252] RSP: 002b:00007f3bd1dd5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1515.455736][T22252] RAX: ffffffffffffffda RBX: 00007f3bd1dd66c0 RCX: 00007f3bd3b4974e [ 1515.455753][T22252] RDX: 0000000000000000 RSI: 00007f3bd1dd5f90 RDI: ffffffffffffff9c [ 1515.455776][T22252] RBP: 00007f3bd3c17f6d R08: 0000000000000000 R09: 0000000000000000 [ 1515.455790][T22252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1515.455804][T22252] R13: 00007f3bd3e06038 R14: 00007f3bd3e05fa0 R15: 00007fff5ac54f88 [ 1515.455839][T22252] [ 1515.458882][T22252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1516.698367][T22280] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4537'. [ 1517.927331][ T9992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1517.997888][ T9992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1518.016339][ T9992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1518.018162][ T9992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1518.019060][ T9992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1518.317897][T22302] FAULT_INJECTION: forcing a failure. [ 1518.317897][T22302] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1518.317933][T22302] CPU: 1 UID: 0 PID: 22302 Comm: syz.8.4541 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1518.317970][T22302] Tainted: [L]=SOFTLOCKUP [ 1518.317977][T22302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1518.317989][T22302] Call Trace: [ 1518.317997][T22302] [ 1518.318006][T22302] dump_stack_lvl+0xe8/0x150 [ 1518.318041][T22302] should_fail_ex+0x447/0x5e0 [ 1518.318069][T22302] get_futex_key+0x1ab/0x1410 [ 1518.318101][T22302] ? __pfx_get_futex_key+0x10/0x10 [ 1518.318124][T22302] ? update_se+0x90/0xf90 [ 1518.318153][T22302] futex_wait_setup+0x4a/0x590 [ 1518.318184][T22302] ? __futex_wait+0xdd/0x480 [ 1518.318215][T22302] __futex_wait+0x177/0x480 [ 1518.318239][T22302] ? update_protect_slice+0x45/0x320 [ 1518.318268][T22302] ? __pfx___futex_wait+0x10/0x10 [ 1518.318294][T22302] ? __pfx_futex_wake_mark+0x10/0x10 [ 1518.318320][T22302] ? try_to_wake_up+0x7d1/0x1320 [ 1518.318349][T22302] futex_wait+0x121/0x390 [ 1518.318374][T22302] ? __pfx_futex_wait+0x10/0x10 [ 1518.318403][T22302] ? __fget_files+0x3a8/0x420 [ 1518.318435][T22302] do_futex+0x3e7/0x4e0 [ 1518.318458][T22302] ? get_ruleset_from_fd+0x8e/0x1c0 [ 1518.318481][T22302] ? __pfx_do_futex+0x10/0x10 [ 1518.318510][T22302] __se_sys_futex+0x3a8/0x450 [ 1518.318539][T22302] ? __pfx___se_sys_futex+0x10/0x10 [ 1518.318560][T22302] ? rcu_is_watching+0x16/0xb0 [ 1518.318588][T22302] ? __x64_sys_futex+0x21/0xf0 [ 1518.318614][T22302] do_syscall_64+0x16a/0x530 [ 1518.318639][T22302] ? trace_irq_disable+0x3b/0x140 [ 1518.318659][T22302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.318678][T22302] ? clear_bhb_loop+0x70/0xc0 [ 1518.318700][T22302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.318719][T22302] RIP: 0033:0x7f3bd3b88f19 [ 1518.318741][T22302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.318758][T22302] RSP: 002b:00007f3bd1dd60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1518.318779][T22302] RAX: ffffffffffffffda RBX: 00007f3bd3e05fa8 RCX: 00007f3bd3b88f19 [ 1518.318794][T22302] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3bd3e05fa8 [ 1518.318808][T22302] RBP: 00007f3bd3e05fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1518.318820][T22302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1518.318833][T22302] R13: 00007f3bd3e06038 R14: 00007fff5ac54ea0 R15: 00007fff5ac54f88 [ 1518.318866][T22302] [ 1519.844566][ T9992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1519.887784][ T9992] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1519.889643][ T9992] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1519.896463][ T9992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1519.900440][ T9992] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1520.292357][T19357] Bluetooth: hci3: command tx timeout [ 1520.400025][T22294] rxe_eth0 speed is unknown, defaulting to 1000 [ 1521.068365][T22353] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4548'. [ 1521.811852][T22363] FAULT_INJECTION: forcing a failure. [ 1521.811852][T22363] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1521.811891][T22363] CPU: 1 UID: 0 PID: 22363 Comm: syz.8.4550 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1521.811923][T22363] Tainted: [L]=SOFTLOCKUP [ 1521.811931][T22363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1521.811945][T22363] Call Trace: [ 1521.811954][T22363] [ 1521.811964][T22363] dump_stack_lvl+0xe8/0x150 [ 1521.812008][T22363] should_fail_ex+0x447/0x5e0 [ 1521.812048][T22363] get_futex_key+0x1ab/0x1410 [ 1521.812088][T22363] ? __pfx_get_futex_key+0x10/0x10 [ 1521.812113][T22363] ? update_se+0x90/0xf90 [ 1521.812148][T22363] futex_wait_setup+0x4a/0x590 [ 1521.812188][T22363] ? __futex_wait+0xdd/0x480 [ 1521.812226][T22363] __futex_wait+0x177/0x480 [ 1521.812256][T22363] ? update_protect_slice+0x45/0x320 [ 1521.812297][T22363] ? __pfx___futex_wait+0x10/0x10 [ 1521.812334][T22363] ? __pfx_futex_wake_mark+0x10/0x10 [ 1521.812372][T22363] ? try_to_wake_up+0x7d1/0x1320 [ 1521.812414][T22363] futex_wait+0x121/0x390 [ 1521.812450][T22363] ? __pfx_futex_wait+0x10/0x10 [ 1521.812491][T22363] ? __fget_files+0x3a8/0x420 [ 1521.812533][T22363] do_futex+0x3e7/0x4e0 [ 1521.812560][T22363] ? get_ruleset_from_fd+0x8e/0x1c0 [ 1521.812588][T22363] ? __pfx_do_futex+0x10/0x10 [ 1521.812632][T22363] __se_sys_futex+0x3a8/0x450 [ 1521.812666][T22363] ? __pfx___se_sys_futex+0x10/0x10 [ 1521.812692][T22363] ? rcu_is_watching+0x16/0xb0 [ 1521.812722][T22363] ? __x64_sys_futex+0x21/0xf0 [ 1521.812754][T22363] do_syscall_64+0x16a/0x530 [ 1521.812783][T22363] ? trace_irq_disable+0x3b/0x140 [ 1521.812806][T22363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.812828][T22363] ? clear_bhb_loop+0x70/0xc0 [ 1521.812856][T22363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.812878][T22363] RIP: 0033:0x7f3bd3b88f19 [ 1521.812899][T22363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.812918][T22363] RSP: 002b:00007f3bd1dd60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1521.812942][T22363] RAX: ffffffffffffffda RBX: 00007f3bd3e05fa8 RCX: 00007f3bd3b88f19 [ 1521.812959][T22363] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3bd3e05fa8 [ 1521.812974][T22363] RBP: 00007f3bd3e05fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.812988][T22363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.813002][T22363] R13: 00007f3bd3e06038 R14: 00007fff5ac54ea0 R15: 00007fff5ac54f88 [ 1521.813039][T22363] [ 1522.132302][T19357] Bluetooth: hci6: command tx timeout [ 1522.242400][ T9724] bridge_slave_1: left allmulticast mode [ 1522.242437][ T9724] bridge_slave_1: left promiscuous mode [ 1522.242713][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.372379][T19357] Bluetooth: hci3: command tx timeout [ 1522.428675][ T9724] bridge_slave_0: left allmulticast mode [ 1522.428702][ T9724] bridge_slave_0: left promiscuous mode [ 1522.428873][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.443189][ T9724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.562985][ T9724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.647456][ T9724] bond0 (unregistering): Released all slaves [ 1524.170078][T22328] rxe_eth0 speed is unknown, defaulting to 1000 [ 1524.276467][T19357] Bluetooth: hci6: command tx timeout [ 1524.457161][T19357] Bluetooth: hci3: command tx timeout [ 1524.930498][T22430] 9p: Bad value for 'rfdno' [ 1525.010570][T22430] sch_tbf: burst 32856 is lower than device lo mtu (65550) ! [ 1525.412718][T22444] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.4564'. [ 1526.300012][T19357] Bluetooth: hci6: command tx timeout [ 1526.532377][T19357] Bluetooth: hci3: command tx timeout [ 1527.989954][ T9724] hsr_slave_0: left promiscuous mode [ 1528.650380][T19357] Bluetooth: hci6: command tx timeout [ 1529.007479][ T9724] hsr_slave_1: left promiscuous mode [ 1529.016553][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.055467][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.773878][ T9724] team0 (unregistering): Port device team_slave_1 removed [ 1529.823492][ T9724] team0 (unregistering): Port device team_slave_0 removed [ 1530.575443][T22294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.575581][T22294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.575750][T22294] bridge_slave_0: entered allmulticast mode [ 1530.628947][T22294] bridge_slave_0: entered promiscuous mode [ 1530.696209][T22294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.696332][T22294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.696483][T22294] bridge_slave_1: entered allmulticast mode [ 1530.698613][T22294] bridge_slave_1: entered promiscuous mode [ 1530.937954][T22500] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1530.938386][T22500] block device autoloading is deprecated and will be removed. [ 1531.019614][T22294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.156064][T22294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.666815][T22294] team0: Port device team_slave_0 added [ 1532.716373][T22294] team0: Port device team_slave_1 added [ 1532.860638][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4578'. [ 1533.024841][T22535] vlan2: entered allmulticast mode [ 1533.099285][T22294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1533.099303][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.099446][T22294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1533.373629][T22294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.373647][T22294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.373675][T22294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.127879][T22294] hsr_slave_0: entered promiscuous mode [ 1536.130779][T22294] hsr_slave_1: entered promiscuous mode [ 1536.137911][T22294] debugfs: 'hsr0' already exists in 'hsr' [ 1536.137931][T22294] Cannot create hsr debugfs directory [ 1536.295415][T22616] trusted_key: encrypted_key: key user:syz not found [ 1536.295597][T22616] FAULT_INJECTION: forcing a failure. [ 1536.295597][T22616] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.295630][T22616] CPU: 0 UID: 0 PID: 22616 Comm: syz.6.4594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1536.295665][T22616] Tainted: [L]=SOFTLOCKUP [ 1536.295673][T22616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1536.295687][T22616] Call Trace: [ 1536.295697][T22616] [ 1536.295707][T22616] dump_stack_lvl+0xe8/0x150 [ 1536.295746][T22616] should_fail_ex+0x447/0x5e0 [ 1536.295783][T22616] should_failslab+0xa8/0x100 [ 1536.295814][T22616] __kvmalloc_node_noprof+0x171/0x880 [ 1536.295843][T22616] ? keyctl_update_key+0x66/0x140 [ 1536.295891][T22616] ? keyctl_update_key+0x66/0x140 [ 1536.295928][T22616] keyctl_update_key+0x66/0x140 [ 1536.295961][T22616] __se_sys_keyctl+0x61d/0xbc0 [ 1536.296002][T22616] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1536.296039][T22616] ? __pfx_do_futex+0x10/0x10 [ 1536.296068][T22616] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1536.296099][T22616] ? __se_sys_futex+0x3a8/0x450 [ 1536.296132][T22616] ? ksys_write+0x248/0x270 [ 1536.296152][T22616] ? __pfx___se_sys_futex+0x10/0x10 [ 1536.296181][T22616] ? __pfx_ksys_write+0x10/0x10 [ 1536.296212][T22616] ? __x64_sys_keyctl+0x20/0xc0 [ 1536.296248][T22616] do_syscall_64+0x16a/0x530 [ 1536.296275][T22616] ? trace_irq_disable+0x3b/0x140 [ 1536.296298][T22616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.296321][T22616] ? clear_bhb_loop+0x70/0xc0 [ 1536.296348][T22616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.296369][T22616] RIP: 0033:0x7fa880628f19 [ 1536.296390][T22616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.296408][T22616] RSP: 002b:00007fa87e86e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1536.296431][T22616] RAX: ffffffffffffffda RBX: 00007fa8808a5fa0 RCX: 00007fa880628f19 [ 1536.296446][T22616] RDX: 0000200000000040 RSI: 00000000187db7a6 RDI: 0000000000000002 [ 1536.296461][T22616] RBP: 00007fa8806b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1536.296476][T22616] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1536.296489][T22616] R13: 00007fa8808a6038 R14: 00007fa8808a5fa0 R15: 00007fff2c313818 [ 1536.296524][T22616] [ 1536.702418][T22624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1536.702481][T22624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1536.808131][T22630] IPVS: twos: TCP 127.0.0.1:21 - no destination available [ 1537.650672][T22328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.650778][T22328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.650884][T22328] bridge_slave_0: entered allmulticast mode [ 1537.665865][T22328] bridge_slave_0: entered promiscuous mode [ 1538.204075][T22328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.204231][T22328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.204411][T22328] bridge_slave_1: entered allmulticast mode [ 1538.206996][T22328] bridge_slave_1: entered promiscuous mode [ 1538.530986][T22328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.609235][T22328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.744961][T22657] TCP: tcp_parse_options: Illegal window scaling value 252 > 14 received [ 1538.744989][T22657] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 1540.106196][T22328] team0: Port device team_slave_0 added [ 1540.424224][T22328] team0: Port device team_slave_1 added [ 1541.054307][T22328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.054326][T22328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.054355][T22328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.127379][T22328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.127397][T22328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.127425][T22328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.662385][ T9724] bridge_slave_1: left allmulticast mode [ 1541.662410][ T9724] bridge_slave_1: left promiscuous mode [ 1541.662584][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.816138][ T9724] bridge_slave_0: left allmulticast mode [ 1541.816163][ T9724] bridge_slave_0: left promiscuous mode [ 1541.816326][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.220850][T22696] 9p: Bad value for 'rfdno' [ 1542.353076][ T9724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.473217][ T9724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.554607][ T9724] bond0 (unregistering): Released all slaves [ 1543.319787][T22328] hsr_slave_0: entered promiscuous mode [ 1543.327984][T22328] hsr_slave_1: entered promiscuous mode [ 1543.336533][T22328] debugfs: 'hsr0' already exists in 'hsr' [ 1543.336554][T22328] Cannot create hsr debugfs directory [ 1544.435821][T22711] : renamed from tunl0 (while UP) [ 1546.482552][ T9724] hsr_slave_0: left promiscuous mode [ 1546.522460][ T9724] hsr_slave_1: left promiscuous mode [ 1546.524370][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1546.548707][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.568729][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.493012][ T9724] team0 (unregistering): Port device team_slave_1 removed [ 1547.570340][ T9724] team0 (unregistering): Port device team_slave_0 removed [ 1548.034312][ T5270] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1548.356302][T22294] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1548.391200][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1548.435272][T22294] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1548.476556][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1548.770027][T22294] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1548.835170][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1548.877602][T22294] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1548.905424][T22294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1549.632847][T22770] smc: smcd device lo applied user defined pnetid SYZ0 [ 1549.726878][T22294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.850120][T22771] Set syz1 is full, maxelem 1029 reached [ 1551.133145][T22294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.170644][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.170806][T20460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.207583][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.209323][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.777066][T22803] vivid-000: disconnect [ 1552.778988][T22802] vivid-000: reconnect [ 1555.397704][T22858] 0x000000000003-0x000000010001 : "" [ 1555.466121][T22858] ftl_cs: FTL header corrupt! [ 1555.661307][T22864] syzkaller0: entered promiscuous mode [ 1555.661337][T22864] syzkaller0: entered allmulticast mode [ 1556.399210][T22294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.699839][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4645'. [ 1556.758007][T22888] vlan2: entered allmulticast mode [ 1557.116000][T22898] overlayfs: failed to resolve './file0': -2 [ 1557.883418][T22328] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1557.926797][T22328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1557.946686][T22328] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1557.988258][T22328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1558.002378][T22328] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1558.040045][T22328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1558.045188][T22328] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1558.086599][T22328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1558.129802][T22910] 0x000000000003-0x000000010001 : "" [ 1558.184520][T22910] ftl_cs: FTL header corrupt! [ 1558.549544][T22294] veth0_vlan: entered promiscuous mode [ 1558.669438][T22294] veth1_vlan: entered promiscuous mode [ 1558.854436][T22294] veth0_macvtap: entered promiscuous mode [ 1558.986988][T22294] veth1_macvtap: entered promiscuous mode [ 1559.025865][T22328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.053971][T22294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1559.078687][T22294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.097870][T22328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.139137][ T9724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.139345][ T9724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.171994][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.173665][T10955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.746599][ T9798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.747953][ T9798] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.747995][ T9798] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.755478][ T9798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.800537][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.800558][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1560.828011][T22960] 0x000000000003-0x000000010001 : "" [ 1560.936372][T22960] ftl_cs: FTL header corrupt! [ 1561.495650][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.495674][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.020313][T22972] FAULT_INJECTION: forcing a failure. [ 1562.020313][T22972] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.020353][T22972] CPU: 1 UID: 0 PID: 22972 Comm: syz.6.4669 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1562.020384][T22972] Tainted: [L]=SOFTLOCKUP [ 1562.020392][T22972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1562.020406][T22972] Call Trace: [ 1562.020414][T22972] [ 1562.020424][T22972] dump_stack_lvl+0xe8/0x150 [ 1562.020471][T22972] should_fail_ex+0x447/0x5e0 [ 1562.020516][T22972] should_failslab+0xa8/0x100 [ 1562.020547][T22972] ? single_open+0x11c/0x240 [ 1562.020574][T22972] kmem_cache_alloc_noprof+0x99/0x680 [ 1562.020609][T22972] ? __pfx_smack_file_open+0x10/0x10 [ 1562.020639][T22972] ? single_open+0x11c/0x240 [ 1562.020673][T22972] single_open+0x11c/0x240 [ 1562.020704][T22972] full_proxy_open_regular+0x224/0x520 [ 1562.020773][T22972] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1562.020807][T22972] do_dentry_open+0x841/0x1410 [ 1562.020845][T22972] vfs_open_consume+0x4a/0x360 [ 1562.020873][T22972] ? path_openat+0x16e6/0x2100 [ 1562.020898][T22972] path_openat+0x1701/0x2100 [ 1562.020942][T22972] do_file_open+0x23e/0x4a0 [ 1562.020961][T22972] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1562.020996][T22972] ? __pfx_do_file_open+0x10/0x10 [ 1562.021045][T22972] ? alloc_fd+0x6b2/0x760 [ 1562.021089][T22972] do_sys_openat2+0x115/0x200 [ 1562.021117][T22972] ? __se_sys_futex+0x3a8/0x450 [ 1562.021148][T22972] ? __pfx_do_sys_openat2+0x10/0x10 [ 1562.021182][T22972] ? rcu_is_watching+0x16/0xb0 [ 1562.021214][T22972] __x64_sys_openat+0x138/0x170 [ 1562.021248][T22972] do_syscall_64+0x16a/0x530 [ 1562.021281][T22972] ? trace_irq_disable+0x3b/0x140 [ 1562.021306][T22972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.021329][T22972] ? clear_bhb_loop+0x70/0xc0 [ 1562.021356][T22972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.021377][T22972] RIP: 0033:0x7fa880628f19 [ 1562.021398][T22972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.021418][T22972] RSP: 002b:00007fa87e86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1562.021442][T22972] RAX: ffffffffffffffda RBX: 00007fa8808a5fa0 RCX: 00007fa880628f19 [ 1562.021458][T22972] RDX: 0000000000000002 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 1562.021476][T22972] RBP: 00007fa8806b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1562.021491][T22972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1562.021510][T22972] R13: 00007fa8808a6038 R14: 00007fa8808a5fa0 R15: 00007fff2c313818 [ 1562.021546][T22972] [ 1562.696268][T22328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1562.743775][T22990] netlink: 'syz.5.4673': attribute type 1 has an invalid length. [ 1562.743799][T22990] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4673'. [ 1563.179016][T22328] veth0_vlan: entered promiscuous mode [ 1563.198043][T22328] veth1_vlan: entered promiscuous mode [ 1563.267495][T22328] veth0_macvtap: entered promiscuous mode [ 1563.286424][T22328] veth1_macvtap: entered promiscuous mode [ 1563.340250][T22328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.361382][T22328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.413575][T20460] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.612889][ T3417] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.450798][T23015] FAULT_INJECTION: forcing a failure. [ 1564.450798][T23015] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.450833][T23015] CPU: 1 UID: 0 PID: 23015 Comm: syz.5.4678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1564.450858][T23015] Tainted: [L]=SOFTLOCKUP [ 1564.450867][T23015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1564.450879][T23015] Call Trace: [ 1564.450886][T23015] [ 1564.450895][T23015] dump_stack_lvl+0xe8/0x150 [ 1564.450932][T23015] should_fail_ex+0x447/0x5e0 [ 1564.450960][T23015] should_failslab+0xa8/0x100 [ 1564.450985][T23015] __kmalloc_noprof+0xf6/0x790 [ 1564.451003][T23015] ? full_name_hash+0x92/0xe0 [ 1564.451028][T23015] ? start_sync_thread+0x716/0x2880 [ 1564.451052][T23015] ? start_sync_thread+0x716/0x2880 [ 1564.451083][T23015] start_sync_thread+0x716/0x2880 [ 1564.451114][T23015] ? __lock_acquire+0x747/0x2de0 [ 1564.451148][T23015] ? __lock_acquire+0x747/0x2de0 [ 1564.451185][T23015] ? hook_capable+0x1c3/0x5e0 [ 1564.451213][T23015] ? do_raw_spin_lock+0x12b/0x2f0 [ 1564.451239][T23015] ? __pfx_start_sync_thread+0x10/0x10 [ 1564.451269][T23015] ? lock_acquire+0x115/0x350 [ 1564.451316][T23015] do_ip_vs_set_ctl+0x4b5/0xaf0 [ 1564.451337][T23015] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1564.451380][T23015] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.451435][T23015] nf_setsockopt+0x26f/0x290 [ 1564.451462][T23015] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1564.451493][T23015] do_sock_setsockopt+0x17c/0x1b0 [ 1564.451516][T23015] __x64_sys_setsockopt+0x143/0x1b0 [ 1564.451538][T23015] do_syscall_64+0x16a/0x530 [ 1564.451558][T23015] ? trace_irq_disable+0x3b/0x140 [ 1564.451578][T23015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.451601][T23015] ? clear_bhb_loop+0x70/0xc0 [ 1564.451629][T23015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.451652][T23015] RIP: 0033:0x7f540a028f19 [ 1564.451673][T23015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.451694][T23015] RSP: 002b:00007f540826e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1564.451718][T23015] RAX: ffffffffffffffda RBX: 00007f540a2a5fa0 RCX: 00007f540a028f19 [ 1564.451734][T23015] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 1564.451748][T23015] RBP: 00007f540a0b7f6d R08: 0000000000000018 R09: 0000000000000000 [ 1564.451763][T23015] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1564.451778][T23015] R13: 00007f540a2a6038 R14: 00007f540a2a5fa0 R15: 00007ffd25be6478 [ 1564.451816][T23015] [ 1564.527290][ T3424] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.950834][ T3424] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.008775][ T3417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.008798][ T3417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.508172][T23031] syzkaller0: entered promiscuous mode [ 1565.508205][T23031] syzkaller0: entered allmulticast mode [ 1566.213612][T23027] netlink: 'syz.6.4684': attribute type 1 has an invalid length. [ 1566.213638][T23027] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4684'. [ 1566.609171][T23036] futex_wake_op: syz.6.4685 tries to shift op by 144; fix this program [ 1569.672028][T23064] 0x000000000003-0x000000010001 : "" [ 1569.718516][T23064] ftl_cs: FTL header corrupt! [ 1569.721540][T23064] FAULT_INJECTION: forcing a failure. [ 1569.721540][T23064] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.721577][T23064] CPU: 0 UID: 0 PID: 23064 Comm: syz.8.4693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1569.721609][T23064] Tainted: [L]=SOFTLOCKUP [ 1569.721618][T23064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1569.721632][T23064] Call Trace: [ 1569.721642][T23064] [ 1569.721652][T23064] dump_stack_lvl+0xe8/0x150 [ 1569.721705][T23064] should_fail_ex+0x447/0x5e0 [ 1569.721742][T23064] should_failslab+0xa8/0x100 [ 1569.721774][T23064] __kmalloc_cache_noprof+0x9c/0x670 [ 1569.721799][T23064] ? percpu_ref_init+0xc5/0x350 [ 1569.721822][T23064] ? percpu_ref_init+0xc5/0x350 [ 1569.721852][T23064] ? __pfx_blkg_release+0x10/0x10 [ 1569.721883][T23064] percpu_ref_init+0xc5/0x350 [ 1569.721912][T23064] blkg_alloc+0xee/0x8f0 [ 1569.721946][T23064] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1569.721978][T23064] blkcg_init_disk+0x1ca/0x2e0 [ 1569.722011][T23064] ? __pfx_blkcg_init_disk+0x10/0x10 [ 1569.722044][T23064] ? rt_spin_unlock+0x159/0x200 [ 1569.722070][T23064] ? rt_spin_unlock+0x165/0x200 [ 1569.722094][T23064] __alloc_disk_node+0x320/0x670 [ 1569.722123][T23064] __blk_mq_alloc_disk+0x24a/0x390 [ 1569.722158][T23064] ? __pfx___blk_mq_alloc_disk+0x10/0x10 [ 1569.722211][T23064] ? blk_mq_alloc_tag_set+0xb69/0x1010 [ 1569.722256][T23064] add_mtd_blktrans_dev+0x916/0x14c0 [ 1569.722303][T23064] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1569.722357][T23064] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1569.722380][T23064] ? mtdblock_add_mtd+0x57/0x240 [ 1569.722418][T23064] mtdblock_add_mtd+0x18a/0x240 [ 1569.722452][T23064] blktrans_notify_add+0x9f/0xf0 [ 1569.722482][T23064] add_mtd_device+0x117f/0x17b0 [ 1569.722525][T23064] ? __pfx_add_mtd_device+0x10/0x10 [ 1569.722566][T23064] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1569.722595][T23064] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1569.722635][T23064] mtd_add_partition+0x388/0x590 [ 1569.722674][T23064] ? __pfx_mtd_add_partition+0x10/0x10 [ 1569.722720][T23064] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1569.722754][T23064] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1569.722816][T23064] mtdchar_ioctl+0x14fd/0x1bc0 [ 1569.722852][T23064] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1569.722897][T23064] ? kasan_quarantine_put+0xbb/0x1f0 [ 1569.722930][T23064] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1569.722964][T23064] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1569.723001][T23064] ? __lock_acquire+0x747/0x2de0 [ 1569.723055][T23064] ? do_futex+0x458/0x4e0 [ 1569.723111][T23064] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1569.723141][T23064] ? mutex_lock_nested+0x14d/0x1d0 [ 1569.723160][T23064] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1569.723193][T23064] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1569.723220][T23064] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1569.723249][T23064] __se_sys_ioctl+0xff/0x170 [ 1569.723277][T23064] do_syscall_64+0x16a/0x530 [ 1569.723304][T23064] ? trace_irq_disable+0x3b/0x140 [ 1569.723327][T23064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.723350][T23064] ? clear_bhb_loop+0x70/0xc0 [ 1569.723377][T23064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.723398][T23064] RIP: 0033:0x7f3bd3b88f19 [ 1569.723420][T23064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.723439][T23064] RSP: 002b:00007f3bd1dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.723463][T23064] RAX: ffffffffffffffda RBX: 00007f3bd3e05fa0 RCX: 00007f3bd3b88f19 [ 1569.723480][T23064] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000006 [ 1569.723495][T23064] RBP: 00007f3bd3c17f6d R08: 0000000000000000 R09: 0000000000000000 [ 1569.723510][T23064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.723524][T23064] R13: 00007f3bd3e06038 R14: 00007f3bd3e05fa0 R15: 00007fff5ac54f88 [ 1569.723561][T23064] [ 1570.473886][T23069] netlink: 'syz.6.4694': attribute type 1 has an invalid length. [ 1570.473911][T23069] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4694'. [ 1573.265893][T23089] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4700'. [ 1581.164400][ T9992] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1581.352454][ T9992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1581.399682][ T9992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1581.400777][ T9992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1581.401500][ T9992] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1581.539925][T23102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1581.820268][ T9992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1581.888904][ T9992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1581.890065][ T9992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1581.890708][ T9992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1584.062369][ T5619] Bluetooth: hci1: command tx timeout [ 1584.292481][ T5619] Bluetooth: hci5: command tx timeout [ 1585.338919][T19357] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1585.430125][T19357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1585.551244][T19357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1585.560130][T19357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1585.560829][T19357] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1586.142280][ T5619] Bluetooth: hci1: command tx timeout [ 1586.384791][ T5619] Bluetooth: hci5: command tx timeout [ 1587.753710][ T5619] Bluetooth: hci7: command tx timeout [ 1588.213688][ T5619] Bluetooth: hci1: command tx timeout [ 1588.452807][ T5619] Bluetooth: hci5: command tx timeout [ 1588.477018][T23057] syz_tun: entered allmulticast mode [ 1588.925831][T22294] syz_tun (unregistering): left allmulticast mode [ 1589.208699][T23024] syz_tun (unregistering): left allmulticast mode [ 1589.638002][T19357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1589.689403][T19357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1589.708677][T19357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1589.739150][T19357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1589.749544][T19357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1589.903803][T23102] Bluetooth: hci7: command tx timeout [ 1590.294600][ T5619] Bluetooth: hci1: command tx timeout [ 1590.495746][T19357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1590.534263][T23102] Bluetooth: hci5: command tx timeout [ 1590.643278][T19357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1590.660110][T19357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1590.696718][T19357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1590.697461][T19357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1591.185300][ T9798] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.986165][ T5619] Bluetooth: hci0: command tx timeout [ 1591.986637][ T5619] Bluetooth: hci7: command tx timeout [ 1592.400778][ T9798] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.567030][T23100] rxe_eth0 speed is unknown, defaulting to 1000 [ 1592.851357][ T9798] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.904118][T23112] rxe_eth0 speed is unknown, defaulting to 1000 [ 1592.932274][T19357] Bluetooth: hci3: command tx timeout [ 1593.191593][ T9798] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.248167][T23098] rxe_eth0 speed is unknown, defaulting to 1000 [ 1593.743754][T23137] rxe_eth0 speed is unknown, defaulting to 1000 [ 1594.052725][ T5619] Bluetooth: hci0: command tx timeout [ 1594.052829][T19357] Bluetooth: hci7: command tx timeout [ 1594.227287][T23130] rxe_eth0 speed is unknown, defaulting to 1000 [ 1594.715179][ T9798] bridge_slave_1: left allmulticast mode [ 1594.715207][ T9798] bridge_slave_1: left promiscuous mode [ 1594.715424][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.853829][ T9798] bridge_slave_0: left allmulticast mode [ 1594.853854][ T9798] bridge_slave_0: left promiscuous mode [ 1594.854052][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.012213][T19357] Bluetooth: hci3: command tx timeout [ 1595.582923][ T9798] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1595.813578][ T9798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.894535][ T9798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.917395][ T9798] bond0 (unregistering): Released all slaves [ 1595.929424][ T9798] bond1 (unregistering): Released all slaves [ 1595.948674][ T9798] bond2 (unregistering): Released all slaves [ 1596.010441][T23100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.010573][T23100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.010724][T23100] bridge_slave_0: entered allmulticast mode [ 1596.033886][T23100] bridge_slave_0: entered promiscuous mode [ 1596.133031][T19357] Bluetooth: hci0: command tx timeout [ 1596.134723][T23100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.134869][T23100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.135038][T23100] bridge_slave_1: entered allmulticast mode [ 1596.138648][T23100] bridge_slave_1: entered promiscuous mode [ 1596.258947][T23112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.259070][T23112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.259218][T23112] bridge_slave_0: entered allmulticast mode [ 1596.261310][T23112] bridge_slave_0: entered promiscuous mode [ 1596.296442][T23112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.296564][T23112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.296667][T23112] bridge_slave_1: entered allmulticast mode [ 1596.298037][T23112] bridge_slave_1: entered promiscuous mode [ 1596.306745][T23100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.397731][T23100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.497964][T23112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.651653][T23112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1596.663209][T23100] team0: Port device team_slave_0 added [ 1596.808445][T23100] team0: Port device team_slave_1 added [ 1596.968617][T23112] team0: Port device team_slave_0 added [ 1596.985270][T23100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1596.985289][T23100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1596.985315][T23100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1596.988168][T23112] team0: Port device team_slave_1 added [ 1597.058543][T23100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.058560][T23100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.058584][T23100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.092562][T19357] Bluetooth: hci3: command tx timeout [ 1597.613911][T23112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.613929][T23112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.613962][T23112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.780422][T23112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.780440][T23112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1597.780466][T23112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.213073][T19357] Bluetooth: hci0: command tx timeout [ 1598.224620][T23100] hsr_slave_0: entered promiscuous mode [ 1598.225750][T23100] hsr_slave_1: entered promiscuous mode [ 1598.226588][T23100] debugfs: 'hsr0' already exists in 'hsr' [ 1598.226605][T23100] Cannot create hsr debugfs directory [ 1598.478514][ T5270] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1598.521947][T23112] hsr_slave_0: entered promiscuous mode [ 1598.530344][T23112] hsr_slave_1: entered promiscuous mode [ 1598.530832][T23112] debugfs: 'hsr0' already exists in 'hsr' [ 1598.530851][T23112] Cannot create hsr debugfs directory [ 1598.591903][T23098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.592993][T23098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.593143][T23098] bridge_slave_0: entered allmulticast mode [ 1598.619849][T23098] bridge_slave_0: entered promiscuous mode [ 1598.711123][T23098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.711522][T23098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.711684][T23098] bridge_slave_1: entered allmulticast mode [ 1598.738519][T23098] bridge_slave_1: entered promiscuous mode [ 1598.951210][T23137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.953464][T23137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.954696][T23137] bridge_slave_0: entered allmulticast mode [ 1598.956024][T23137] bridge_slave_0: entered promiscuous mode [ 1599.122343][ T9798] hsr_slave_0: left promiscuous mode [ 1599.162228][ T9798] hsr_slave_1: left promiscuous mode [ 1599.162988][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.163004][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.172581][T19357] Bluetooth: hci3: command tx timeout [ 1599.246559][ T9798] veth1_macvtap: left promiscuous mode [ 1599.246678][ T9798] veth0_macvtap: left promiscuous mode [ 1599.249740][ T9798] veth1_vlan: left promiscuous mode [ 1599.249875][ T9798] veth0_vlan: left promiscuous mode [ 1600.352700][ T9798] team0 (unregistering): Port device team_slave_1 removed [ 1600.403330][ T9798] team0 (unregistering): Port device team_slave_0 removed [ 1600.651348][T23098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.662798][T23137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.662920][T23137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.663097][T23137] bridge_slave_1: entered allmulticast mode [ 1600.665603][T23137] bridge_slave_1: entered promiscuous mode [ 1600.802449][T23098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.908942][T23137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.948037][T23098] team0: Port device team_slave_0 added [ 1600.950377][T23137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.982681][T23130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.982850][T23130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.983004][T23130] bridge_slave_0: entered allmulticast mode [ 1600.984516][T23130] bridge_slave_0: entered promiscuous mode [ 1600.987431][T23098] team0: Port device team_slave_1 added [ 1601.084554][T23130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.084658][T23130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.084821][T23130] bridge_slave_1: entered allmulticast mode [ 1601.086780][T23130] bridge_slave_1: entered promiscuous mode [ 1601.249026][T23137] team0: Port device team_slave_0 added [ 1601.281888][T23098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.281906][T23098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.281932][T23098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.288969][T23137] team0: Port device team_slave_1 added [ 1601.386579][T23098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.386596][T23098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.386624][T23098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.421190][T23130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.569793][T23130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.596259][T23137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.596278][T23137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.596305][T23137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.726291][T23137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.726310][T23137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.726340][T23137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.440489][T23100] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.541445][T23130] team0: Port device team_slave_0 added [ 1602.549353][ T5270] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1602.570010][T23130] team0: Port device team_slave_1 added [ 1602.629680][T23098] hsr_slave_0: entered promiscuous mode [ 1602.630471][T23098] hsr_slave_1: entered promiscuous mode [ 1602.631009][T23098] debugfs: 'hsr0' already exists in 'hsr' [ 1602.631026][T23098] Cannot create hsr debugfs directory [ 1602.698489][T23137] hsr_slave_0: entered promiscuous mode [ 1602.699177][T23137] hsr_slave_1: entered promiscuous mode [ 1602.699661][T23137] debugfs: 'hsr0' already exists in 'hsr' [ 1602.699679][T23137] Cannot create hsr debugfs directory [ 1602.700783][T23130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.700798][T23130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.700824][T23130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.789191][T23130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.789211][T23130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.789227][T23130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.000397][T23100] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.378096][T23100] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.504868][T23130] hsr_slave_0: entered promiscuous mode [ 1603.505564][T23130] hsr_slave_1: entered promiscuous mode [ 1603.506080][T23130] debugfs: 'hsr0' already exists in 'hsr' [ 1603.506098][T23130] Cannot create hsr debugfs directory [ 1603.714610][T23100] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.719703][ T9798] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.144777][ T5270] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1605.416977][ T9798] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.809664][ T5270] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1606.021448][ T9798] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.637145][ T9798] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.977551][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.583222][ T9798] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.369640][ T9798] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.957616][ T9798] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.711523][ T9798] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.022617][ T9798] bridge_slave_1: left allmulticast mode [ 1612.022653][ T9798] bridge_slave_1: left promiscuous mode [ 1612.022909][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.167368][ T9798] bridge_slave_0: left allmulticast mode [ 1612.167406][ T9798] bridge_slave_0: left promiscuous mode [ 1612.167646][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.432691][ T9798] bridge_slave_1: left allmulticast mode [ 1612.432727][ T9798] bridge_slave_1: left promiscuous mode [ 1612.432981][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.593368][ T9798] bridge_slave_0: left allmulticast mode [ 1612.593394][ T9798] bridge_slave_0: left promiscuous mode [ 1612.593575][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.725596][ T9798] pim6reg: left allmulticast mode [ 1612.824063][ T9798] bridge_slave_1: left allmulticast mode [ 1612.824101][ T9798] bridge_slave_1: left promiscuous mode [ 1612.824313][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.933748][ T9798] bridge_slave_0: left allmulticast mode [ 1612.933773][ T9798] bridge_slave_0: left promiscuous mode [ 1612.933933][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.952754][ T9798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.032641][ T9798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.054940][ T9798] bond0 (unregistering): Released all slaves [ 1614.594611][ T9798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.672723][ T9798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.694087][ T9798] bond0 (unregistering): Released all slaves [ 1615.222720][ T9798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.302731][ T9798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.324070][ T9798] bond0 (unregistering): Released all slaves [ 1616.118267][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1618.493087][T23100] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1618.515253][T23100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1618.575267][T23100] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1618.675056][T23100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1619.003798][T23100] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1619.045684][T23100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1619.303468][T23100] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1619.324753][T23100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1620.825906][T23100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1620.892462][T23100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.920294][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.920403][T20460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.940663][ T3054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.940815][ T3054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.553829][ T9798] hsr_slave_0: left promiscuous mode [ 1622.593660][ T9798] hsr_slave_1: left promiscuous mode [ 1622.594434][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.594451][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.653355][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1622.653382][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.902573][ T9798] hsr_slave_0: left promiscuous mode [ 1622.945966][ T9798] hsr_slave_1: left promiscuous mode [ 1622.947281][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1622.947306][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1623.173957][ T9798] hsr_slave_0: left promiscuous mode [ 1623.193079][ T9798] hsr_slave_1: left promiscuous mode [ 1623.193889][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1623.193906][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1623.263927][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1623.263954][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1623.386599][ T9798] veth1_macvtap: left promiscuous mode [ 1623.386678][ T9798] veth0_macvtap: left promiscuous mode [ 1623.386927][ T9798] veth1_vlan: left promiscuous mode [ 1623.387030][ T9798] veth0_vlan: left promiscuous mode [ 1623.523517][ T9798] veth1_macvtap: left promiscuous mode [ 1623.523586][ T9798] veth0_macvtap: left promiscuous mode [ 1623.526695][ T9798] veth1_vlan: left promiscuous mode [ 1623.662630][ T9798] veth1_macvtap: left promiscuous mode [ 1623.662740][ T9798] veth0_macvtap: left promiscuous mode [ 1623.663115][ T9798] veth1_vlan: left promiscuous mode [ 1623.663306][ T9798] veth0_vlan: left promiscuous mode [ 1624.774537][ T9798] team0 (unregistering): Port device team_slave_1 removed [ 1624.832740][ T9798] team0 (unregistering): Port device team_slave_0 removed [ 1625.682663][ T9798] team0 (unregistering): Port device team_slave_1 removed [ 1625.722709][ T9798] team0 (unregistering): Port device team_slave_0 removed [ 1626.502712][ T9798] team0 (unregistering): Port device team_slave_1 removed [ 1626.542679][ T9798] team0 (unregistering): Port device team_slave_0 removed [ 1626.744171][T23112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1626.785772][T23112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1626.791263][T23100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1626.833831][T23112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1626.858859][T23112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1626.866019][T23112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1626.898057][T23112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1626.909033][T23112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1626.988700][T23112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.699598][T23098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1627.869714][T23098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1627.898686][T23098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1627.985121][T23098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1627.990642][T23098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1628.054810][T23098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1628.309603][T23098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1628.336838][T23098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1628.730443][T23112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.848185][T23100] veth0_vlan: entered promiscuous mode [ 1628.850999][T23137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1628.978447][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1629.006953][T23137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1629.098837][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.136704][T23137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1629.257360][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.351394][T23137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1629.389744][T23137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1629.571737][T23100] veth1_vlan: entered promiscuous mode [ 1629.580914][T23112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.788478][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.788614][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.151372][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.151651][ T3401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.206902][T23130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1630.247303][T23130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1630.260623][T23130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1630.304928][T23130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1630.318331][T23130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1630.378443][T23130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1630.401728][T23130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1630.436769][T23130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1630.596695][T23100] veth0_macvtap: entered promiscuous mode [ 1630.716011][T23100] veth1_macvtap: entered promiscuous mode [ 1630.756219][T23098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.983428][T23098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.990981][T23100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1631.142682][T23100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.151433][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.151566][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.198747][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.198877][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.421429][T23137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1631.525282][ T9798] IPVS: stop unused estimator thread 0... [ 1631.941874][T23137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.347340][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.347582][T20460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.475651][T23130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.478304][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.478471][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.521647][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.521671][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.708843][T23130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.710788][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.710807][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.776800][ T3054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.776951][ T3054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.855980][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.859322][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.193194][T23112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.262384][ T3424] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.262896][ T3424] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.263113][ T3424] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.653817][T23112] veth0_vlan: entered promiscuous mode [ 1633.762711][T23112] veth1_vlan: entered promiscuous mode [ 1634.014648][T23112] veth0_macvtap: entered promiscuous mode [ 1634.065482][T23112] veth1_macvtap: entered promiscuous mode [ 1634.143362][T23098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.162955][T23112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1634.296381][T23112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.776869][T23137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.900814][T23098] veth0_vlan: entered promiscuous mode [ 1636.087802][T23098] veth1_vlan: entered promiscuous mode [ 1636.231739][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.231764][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.287387][T23130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1636.382229][ T3054] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.382662][ T3054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.382905][ T3054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.383207][ T3054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.604774][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.604797][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.817189][T23137] veth0_vlan: entered promiscuous mode [ 1636.851206][T23098] veth0_macvtap: entered promiscuous mode [ 1636.868951][T23137] veth1_vlan: entered promiscuous mode [ 1636.896638][T23098] veth1_macvtap: entered promiscuous mode [ 1637.069917][T23098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1637.131022][T23098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.181876][T23137] veth0_macvtap: entered promiscuous mode [ 1637.241882][T23137] veth1_macvtap: entered promiscuous mode [ 1638.630943][T23137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.769918][T23137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.727564][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.727587][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.872796][T23130] veth0_vlan: entered promiscuous mode [ 1640.189181][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.189204][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.314828][T23130] veth1_vlan: entered promiscuous mode [ 1640.587519][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.587556][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.686126][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.686149][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.635348][T23130] veth0_macvtap: entered promiscuous mode [ 1641.731194][T23130] veth1_macvtap: entered promiscuous mode [ 1641.892957][T23130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.934641][T23130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.144098][ T3401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.145651][ T161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.145931][ T161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.346023][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1642.390804][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1642.411056][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1642.420976][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1642.422964][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1643.052733][T20460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.053226][T20460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.054053][ T3424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.054534][ T3424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.055002][ T3424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.402698][ T3424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.411171][ T3417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.362436][T23763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1644.709822][T19357] Bluetooth: hci2: command tx timeout [ 1644.721022][ T3424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.721044][ T3424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.362573][ T3424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.362623][ T3424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.433353][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.433374][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.486116][ T3424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.791148][T19357] Bluetooth: hci2: command tx timeout [ 1646.939513][ T3401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.158528][T23809] syzkaller0: entered promiscuous mode [ 1647.158557][T23809] syzkaller0: entered allmulticast mode [ 1648.304714][ T3401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.728264][T23738] rxe_eth0 speed is unknown, defaulting to 1000 [ 1648.852332][T19357] Bluetooth: hci2: command tx timeout [ 1649.031214][T23863] cgroup: fork rejected by pids controller in /syz0 [ 1649.757757][ T3401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.375948][T23893] cgroup: fork rejected by pids controller in /syz4 [ 1650.933093][T19357] Bluetooth: hci2: command tx timeout [ 1651.436487][ T3401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.809275][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1651.848478][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1651.856325][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1652.202719][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1652.203746][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1654.526514][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1654.534369][ T5619] Bluetooth: hci0: command tx timeout [ 1654.792626][T23938] overlayfs: missing 'lowerdir' [ 1656.380417][T19357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1656.690052][T23102] Bluetooth: hci0: command tx timeout [ 1656.690170][T19357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1656.701321][T19357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1656.721740][T19357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1656.722971][T19357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1657.097703][T23912] rxe_eth0 speed is unknown, defaulting to 1000 [ 1657.700890][T23738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1657.701120][T23738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.701293][T23738] bridge_slave_0: entered allmulticast mode [ 1657.743052][T23738] bridge_slave_0: entered promiscuous mode [ 1657.763082][T23738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.763179][T23738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.765042][T23738] bridge_slave_1: entered allmulticast mode [ 1657.780456][T23984] FAULT_INJECTION: forcing a failure. [ 1657.780456][T23984] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.780493][T23984] CPU: 1 UID: 0 PID: 23984 Comm: syz.9.4777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1657.780523][T23984] Tainted: [L]=SOFTLOCKUP [ 1657.780532][T23984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1657.780546][T23984] Call Trace: [ 1657.780554][T23984] [ 1657.780563][T23984] dump_stack_lvl+0xe8/0x150 [ 1657.780607][T23984] should_fail_ex+0x447/0x5e0 [ 1657.780649][T23984] should_failslab+0xa8/0x100 [ 1657.780681][T23984] __kvmalloc_node_noprof+0x171/0x880 [ 1657.780710][T23984] ? __rhashtable_init_noprof+0x602/0xbe0 [ 1657.780735][T23984] ? __rhashtable_init_noprof+0x602/0xbe0 [ 1657.780768][T23984] __rhashtable_init_noprof+0x602/0xbe0 [ 1657.780800][T23984] __rhltable_init_noprof+0x26/0x70 [ 1657.780827][T23984] mr_table_alloc+0xf8/0x310 [ 1657.780942][T23984] ? __pfx_ip6mr_new_table_set+0x10/0x10 [ 1657.781027][T23984] ? __pfx_ipmr_expire_process+0x10/0x10 [ 1657.781058][T23984] ip6mr_net_init+0x382/0x6b0 [ 1657.781081][T23984] ? inet6_net_init+0x4ff/0x8c0 [ 1657.781138][T23984] ? __pfx_ip6mr_net_init+0x10/0x10 [ 1657.781164][T23984] ? ac6_proc_init+0x59/0x70 [ 1657.781203][T23984] ops_init+0x35d/0x5d0 [ 1657.781237][T23984] setup_net+0x118/0x350 [ 1657.781308][T23984] ? __pfx_setup_net+0x10/0x10 [ 1657.781343][T23984] ? __ns_common_init+0x384/0x590 [ 1657.781370][T23984] copy_net_ns+0x536/0x770 [ 1657.781406][T23984] create_new_namespaces+0x3f0/0x6b0 [ 1657.781444][T23984] ? security_capable+0x7e/0x2c0 [ 1657.781474][T23984] unshare_nsproxy_namespaces+0x144/0x190 [ 1657.781511][T23984] ksys_unshare+0x532/0x890 [ 1657.781534][T23984] ? __pfx_ksys_unshare+0x10/0x10 [ 1657.781557][T23984] ? rcu_is_watching+0x16/0xb0 [ 1657.781594][T23984] __x64_sys_unshare+0x38/0x50 [ 1657.781615][T23984] do_syscall_64+0x16a/0x530 [ 1657.781649][T23984] ? trace_irq_disable+0x3b/0x140 [ 1657.781672][T23984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.781694][T23984] ? clear_bhb_loop+0x70/0xc0 [ 1657.781721][T23984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.781742][T23984] RIP: 0033:0x7f754a428f19 [ 1657.781763][T23984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.781782][T23984] RSP: 002b:00007f7548676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1657.781805][T23984] RAX: ffffffffffffffda RBX: 00007f754a6a5fa0 RCX: 00007f754a428f19 [ 1657.781821][T23984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1657.781835][T23984] RBP: 00007f754a4b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1657.781849][T23984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.781861][T23984] R13: 00007f754a6a6038 R14: 00007f754a6a5fa0 R15: 00007ffdf5d8c0e8 [ 1657.781896][T23984] [ 1657.794627][T23738] bridge_slave_1: entered promiscuous mode [ 1658.158642][T23992] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1658.158664][T23992] overlayfs: missing 'lowerdir' [ 1658.338313][T23738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1658.372724][T23984] rxe_eth0 speed is unknown, defaulting to 1000 [ 1658.397275][T23738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.596820][ T3401] bridge_slave_1: left allmulticast mode [ 1658.596855][ T3401] bridge_slave_1: left promiscuous mode [ 1658.597113][ T3401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.702258][ T5619] Bluetooth: hci0: command tx timeout [ 1658.761690][ T3401] bridge_slave_0: left allmulticast mode [ 1658.761728][ T3401] bridge_slave_0: left promiscuous mode [ 1658.776458][ T3401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.012234][ T5619] Bluetooth: hci1: command tx timeout [ 1659.996840][ T3401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.074457][ T3401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.125263][ T3401] bond0 (unregistering): Released all slaves [ 1660.347493][T23738] team0: Port device team_slave_0 added [ 1660.485770][T23738] team0: Port device team_slave_1 added [ 1661.426211][T23956] rxe_eth0 speed is unknown, defaulting to 1000 [ 1661.528240][ T5619] Bluetooth: hci0: command tx timeout [ 1661.528272][ T5619] Bluetooth: hci1: command tx timeout [ 1662.295142][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1662.318733][T23738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.318753][T23738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.318778][T23738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.381469][T23738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.381488][T23738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.381515][T23738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.423869][T23738] hsr_slave_0: entered promiscuous mode [ 1663.424998][T23738] hsr_slave_1: entered promiscuous mode [ 1663.425843][T23738] debugfs: 'hsr0' already exists in 'hsr' [ 1663.425869][T23738] Cannot create hsr debugfs directory [ 1663.572143][T19357] Bluetooth: hci1: command tx timeout [ 1664.482341][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1664.482376][ T37] audit: type=1804 audit(2000000012.949:101): pid=24101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.4789" name="bus" dev="ramfs" ino=94673 res=1 errno=0 [ 1665.655216][T19357] Bluetooth: hci1: command tx timeout [ 1666.631665][ T3401] hsr_slave_0: left promiscuous mode [ 1666.666564][ T3401] hsr_slave_1: left promiscuous mode [ 1666.667843][ T3401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.667869][ T3401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.716060][ T3401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.716089][ T3401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.976485][ T3401] veth1_macvtap: left promiscuous mode [ 1666.976595][ T3401] veth0_macvtap: left promiscuous mode [ 1666.976932][ T3401] veth1_vlan: left promiscuous mode [ 1666.977244][ T3401] veth0_vlan: left promiscuous mode [ 1668.672674][ T3401] team0 (unregistering): Port device team_slave_1 removed [ 1668.755983][ T3401] team0 (unregistering): Port device team_slave_0 removed [ 1669.162307][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1669.428125][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.541990][T24212] comedi comedi3: board detection failed [ 1669.984626][T23912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.984738][T23912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.984905][T23912] bridge_slave_0: entered allmulticast mode [ 1669.991062][T23912] bridge_slave_0: entered promiscuous mode [ 1670.043547][T23912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.043724][T23912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.043896][T23912] bridge_slave_1: entered allmulticast mode [ 1670.089525][T23912] bridge_slave_1: entered promiscuous mode [ 1670.278192][T23912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.314485][T23912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.233026][T23912] team0: Port device team_slave_0 added [ 1671.489312][T23912] team0: Port device team_slave_1 added [ 1671.899526][T24245] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4803'. [ 1671.937894][T23912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.937912][T23912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.937939][T23912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.938633][T23956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.938831][T23956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.938977][T23956] bridge_slave_0: entered allmulticast mode [ 1671.948698][T23956] bridge_slave_0: entered promiscuous mode [ 1671.956349][T23912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.956365][T23912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.956392][T23912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.994548][T23956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.994770][T23956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.994958][T23956] bridge_slave_1: entered allmulticast mode [ 1671.999116][T23956] bridge_slave_1: entered promiscuous mode [ 1672.143232][T23956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.189816][T23956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.393201][T23912] hsr_slave_0: entered promiscuous mode [ 1672.395141][T23912] hsr_slave_1: entered promiscuous mode [ 1672.396148][T23912] debugfs: 'hsr0' already exists in 'hsr' [ 1672.396167][T23912] Cannot create hsr debugfs directory [ 1673.248515][ T3401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.394146][T23956] team0: Port device team_slave_0 added [ 1673.539543][T23956] team0: Port device team_slave_1 added [ 1674.018572][ T3401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.339956][T23956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.339974][T23956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.340000][T23956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.408848][T23956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.408866][T23956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.408883][T23956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.822046][T23956] hsr_slave_0: entered promiscuous mode [ 1674.831613][T23956] hsr_slave_1: entered promiscuous mode [ 1674.832968][T23956] debugfs: 'hsr0' already exists in 'hsr' [ 1674.832988][T23956] Cannot create hsr debugfs directory [ 1675.225517][T24281] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4813'. [ 1675.254189][ T3401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.981312][ T3401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.238168][T23738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1677.278465][T23738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1677.557000][T23738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1677.658067][T23738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1677.659969][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1678.904528][T24335] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4827'. [ 1679.221797][T23912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.285670][T23738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1679.316733][T23738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1679.366024][T23738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1679.394438][T23738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1680.107894][T23912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.772520][T23912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.187489][T24401] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4841'. [ 1681.712429][T23912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.968344][T23738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.112245][T24416] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4844'. [ 1682.125770][T23738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.167337][ T3417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.169060][ T3417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.212630][ T3417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.213269][ T3417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.484904][T24425] input: syz0 as /devices/virtual/input/input47 [ 1682.504329][ T3401] bridge_slave_1: left allmulticast mode [ 1682.504365][ T3401] bridge_slave_1: left promiscuous mode [ 1682.504624][ T3401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.704941][ T3401] bridge_slave_0: left allmulticast mode [ 1682.704977][ T3401] bridge_slave_0: left promiscuous mode [ 1682.705227][ T3401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.987418][T24444] 0x000000000003-0x000000010001 : "" [ 1683.048341][ T3401] bridge_slave_1: left allmulticast mode [ 1683.048372][ T3401] bridge_slave_1: left promiscuous mode [ 1683.048573][ T3401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.084735][T24444] ftl_cs: FTL header corrupt! [ 1683.091157][T24444] FAULT_INJECTION: forcing a failure. [ 1683.091157][T24444] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.091194][T24444] CPU: 0 UID: 0 PID: 24444 Comm: syz.9.4852 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1683.091225][T24444] Tainted: [L]=SOFTLOCKUP [ 1683.091234][T24444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1683.091248][T24444] Call Trace: [ 1683.091256][T24444] [ 1683.091266][T24444] dump_stack_lvl+0xe8/0x150 [ 1683.091314][T24444] should_fail_ex+0x447/0x5e0 [ 1683.091352][T24444] should_failslab+0xa8/0x100 [ 1683.091383][T24444] __kmalloc_cache_noprof+0x9c/0x670 [ 1683.091409][T24444] ? rand_initialize_disk+0x4f/0xb0 [ 1683.091455][T24444] ? rand_initialize_disk+0x4f/0xb0 [ 1683.091489][T24444] rand_initialize_disk+0x4f/0xb0 [ 1683.091513][T24444] __alloc_disk_node+0x40f/0x670 [ 1683.091551][T24444] __blk_mq_alloc_disk+0x24a/0x390 [ 1683.091586][T24444] ? __pfx___blk_mq_alloc_disk+0x10/0x10 [ 1683.091636][T24444] ? blk_mq_alloc_tag_set+0xb69/0x1010 [ 1683.091678][T24444] add_mtd_blktrans_dev+0x916/0x14c0 [ 1683.091726][T24444] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1683.091780][T24444] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1683.091804][T24444] ? mtdblock_add_mtd+0x57/0x240 [ 1683.091843][T24444] mtdblock_add_mtd+0x18a/0x240 [ 1683.091876][T24444] blktrans_notify_add+0x9f/0xf0 [ 1683.091907][T24444] add_mtd_device+0x117f/0x17b0 [ 1683.091950][T24444] ? __pfx_add_mtd_device+0x10/0x10 [ 1683.091986][T24444] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1683.092013][T24444] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1683.092050][T24444] mtd_add_partition+0x388/0x590 [ 1683.092083][T24444] ? __pfx_mtd_add_partition+0x10/0x10 [ 1683.092129][T24444] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1683.092163][T24444] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1683.092227][T24444] mtdchar_ioctl+0x14fd/0x1bc0 [ 1683.092262][T24444] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1683.092309][T24444] ? kasan_quarantine_put+0xbb/0x1f0 [ 1683.092343][T24444] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1683.092378][T24444] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1683.092416][T24444] ? __lock_acquire+0x747/0x2de0 [ 1683.092470][T24444] ? do_futex+0x3e7/0x4e0 [ 1683.092535][T24444] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1683.092565][T24444] ? mutex_lock_nested+0x14d/0x1d0 [ 1683.092585][T24444] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1683.092614][T24444] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1683.092639][T24444] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1683.092665][T24444] __se_sys_ioctl+0xff/0x170 [ 1683.092691][T24444] do_syscall_64+0x16a/0x530 [ 1683.092719][T24444] ? trace_irq_disable+0x3b/0x140 [ 1683.092743][T24444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.092765][T24444] ? clear_bhb_loop+0x70/0xc0 [ 1683.092792][T24444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.092813][T24444] RIP: 0033:0x7f754a428f19 [ 1683.092835][T24444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1683.092855][T24444] RSP: 002b:00007f7548676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1683.092880][T24444] RAX: ffffffffffffffda RBX: 00007f754a6a5fa0 RCX: 00007f754a428f19 [ 1683.092897][T24444] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000005 [ 1683.092912][T24444] RBP: 00007f754a4b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1683.092926][T24444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1683.092940][T24444] R13: 00007f754a6a6038 R14: 00007f754a6a5fa0 R15: 00007ffdf5d8c0e8 [ 1683.092977][T24444] [ 1683.441363][ T3401] bridge_slave_0: left allmulticast mode [ 1683.441399][ T3401] bridge_slave_0: left promiscuous mode [ 1683.441648][ T3401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.943482][T24460] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4853'. [ 1683.991545][T24464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1684.770032][T24484] input: syz0 as /devices/virtual/input/input48 [ 1685.162278][T24499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4864'. [ 1686.343956][ T3401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1686.425977][ T3401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1686.609399][ T3401] bond0 (unregistering): Released all slaves [ 1686.652800][T24515] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4868'. [ 1687.172749][ T3401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1687.253437][ T3401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1687.274688][ T3401] bond0 (unregistering): Released all slaves [ 1687.422875][T24517] input: syz0 as /devices/virtual/input/input49 [ 1687.780080][T24521] netlink: 'syz.9.4871': attribute type 10 has an invalid length. [ 1688.273479][T24527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4874'. [ 1688.344357][T24521] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1688.368623][T24521] team0: Port device netdevsim0 added [ 1689.627597][T24541] input: syz0 as /devices/virtual/input/input50 [ 1691.896901][T24574] input: syz0 as /devices/virtual/input/input51 [ 1693.090248][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1694.161029][T23738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.611042][T24642] netlink: 'syz.9.4900': attribute type 1 has an invalid length. [ 1695.680110][T23738] veth0_vlan: entered promiscuous mode [ 1695.709060][T24642] netlink: 'syz.9.4900': attribute type 10 has an invalid length. [ 1695.709084][T24642] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4900'. [ 1695.757463][T24642] dummy0: entered promiscuous mode [ 1695.869816][T23912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1695.987459][T23912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1696.018511][T23912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1696.077591][T23912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1696.080175][T23912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1696.149079][T23912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1696.163049][T23738] veth1_vlan: entered promiscuous mode [ 1696.178133][T23912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1696.250573][T23912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1698.422174][ T3401] hsr_slave_0: left promiscuous mode [ 1698.464123][ T3401] hsr_slave_1: left promiscuous mode [ 1698.464876][ T3401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.464894][ T3401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.516025][ T3401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1698.516054][ T3401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.724115][ T3401] hsr_slave_0: left promiscuous mode [ 1698.762221][ T3401] hsr_slave_1: left promiscuous mode [ 1698.763451][ T3401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.763478][ T3401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.805567][ T3401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1698.805596][ T3401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.971429][T24705] netlink: 'syz.1.4913': attribute type 1 has an invalid length. [ 1699.037512][ T3401] veth1_macvtap: left promiscuous mode [ 1699.037621][ T3401] veth0_macvtap: left promiscuous mode [ 1699.037877][ T3401] veth1_vlan: left promiscuous mode [ 1699.037981][ T3401] veth0_vlan: left promiscuous mode [ 1699.091319][T24707] netlink: 'syz.1.4913': attribute type 10 has an invalid length. [ 1699.091346][T24707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4913'. [ 1699.182584][ T3401] veth1_macvtap: left promiscuous mode [ 1699.182694][ T3401] veth0_macvtap: left promiscuous mode [ 1699.190829][ T3401] veth1_vlan: left promiscuous mode [ 1699.190981][ T3401] veth0_vlan: left promiscuous mode [ 1700.224675][ T3401] team0 (unregistering): Port device team_slave_1 removed [ 1700.263375][ T3401] team0 (unregistering): Port device team_slave_0 removed [ 1701.022597][ T3401] team0 (unregistering): Port device team_slave_1 removed [ 1701.063666][ T3401] team0 (unregistering): Port device team_slave_0 removed [ 1701.270261][T24707] dummy0: entered promiscuous mode [ 1701.584295][T23738] veth0_macvtap: entered promiscuous mode [ 1701.589726][T23956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1701.632847][T23956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1701.638350][T23956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1701.732867][T23956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1701.752188][T23956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1701.893003][T23956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1701.900199][T23738] veth1_macvtap: entered promiscuous mode [ 1701.915971][T23956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1701.953699][T23956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1702.116674][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1702.147150][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1702.159603][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1702.183877][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1702.190422][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1704.197520][T23912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.360249][T23912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.434718][T23956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.453947][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.455576][T20460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.576712][T19357] Bluetooth: hci4: command tx timeout [ 1704.758404][T24769] netlink: 'syz.9.4924': attribute type 1 has an invalid length. [ 1704.883276][T24773] netlink: 'syz.9.4924': attribute type 10 has an invalid length. [ 1704.883299][T24773] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4924'. [ 1704.930081][T24770] dummy0: left promiscuous mode [ 1704.945708][T24773] dummy0: entered promiscuous mode [ 1704.970436][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.970648][T10955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.096492][T24727] rxe_eth0 speed is unknown, defaulting to 1000 [ 1705.110157][T23956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1705.151448][T20460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.151565][T20460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1705.230476][T20460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.230619][T20460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.985202][T19357] Bluetooth: hci4: command tx timeout [ 1707.332126][T19357] Bluetooth: hci5: command 0x0406 tx timeout [ 1707.831328][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4935'. [ 1708.198364][T23912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.279540][T24829] FAULT_INJECTION: forcing a failure. [ 1708.279540][T24829] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1708.279638][T24829] CPU: 0 UID: 0 PID: 24829 Comm: syz.1.4938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1708.279673][T24829] Tainted: [L]=SOFTLOCKUP [ 1708.279680][T24829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1708.279691][T24829] Call Trace: [ 1708.279698][T24829] [ 1708.279706][T24829] dump_stack_lvl+0xe8/0x150 [ 1708.279744][T24829] should_fail_ex+0x447/0x5e0 [ 1708.279775][T24829] get_futex_key+0x1ab/0x1410 [ 1708.279795][T24829] ? call_rcu+0x86/0x300 [ 1708.279817][T24829] ? kmem_cache_free+0x539/0x6d0 [ 1708.279843][T24829] ? do_raw_spin_lock+0x12b/0x2f0 [ 1708.279870][T24829] ? __pfx_get_futex_key+0x10/0x10 [ 1708.279901][T24829] futex_wake+0x119/0x600 [ 1708.279943][T24829] ? __pfx_futex_wake+0x10/0x10 [ 1708.279970][T24829] ? lockdep_hardirqs_on+0x7b/0x110 [ 1708.280008][T24829] do_futex+0x458/0x4e0 [ 1708.280037][T24829] ? __pfx_do_futex+0x10/0x10 [ 1708.280069][T24829] __se_sys_futex+0x3a8/0x450 [ 1708.280096][T24829] ? fput_close_sync+0x11f/0x240 [ 1708.280122][T24829] ? __pfx___se_sys_futex+0x10/0x10 [ 1708.280152][T24829] ? __x64_sys_futex+0x21/0xf0 [ 1708.280175][T24829] do_syscall_64+0x16a/0x530 [ 1708.280199][T24829] ? trace_irq_disable+0x3b/0x140 [ 1708.280219][T24829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.280242][T24829] ? clear_bhb_loop+0x70/0xc0 [ 1708.280266][T24829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.280286][T24829] RIP: 0033:0x7f67a63b8f19 [ 1708.280304][T24829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.280322][T24829] RSP: 002b:00007f67a46060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1708.280343][T24829] RAX: ffffffffffffffda RBX: 00007f67a6635fa8 RCX: 00007f67a63b8f19 [ 1708.280359][T24829] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f67a6635fac [ 1708.280372][T24829] RBP: 00007f67a6635fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1708.280386][T24829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.280398][T24829] R13: 00007f67a6636038 R14: 00007ffd4a2059c0 R15: 00007ffd4a205aa8 [ 1708.280429][T24829] [ 1709.014434][ T5619] Bluetooth: hci4: command tx timeout [ 1710.344888][T24863] 0x000000000003-0x000000010001 : "" [ 1710.493404][T24863] ftl_cs: FTL header corrupt! [ 1710.598292][T24863] FAULT_INJECTION: forcing a failure. [ 1710.598292][T24863] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.598330][T24863] CPU: 1 UID: 0 PID: 24863 Comm: syz.1.4943 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1710.598360][T24863] Tainted: [L]=SOFTLOCKUP [ 1710.598369][T24863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1710.598383][T24863] Call Trace: [ 1710.598392][T24863] [ 1710.598402][T24863] dump_stack_lvl+0xe8/0x150 [ 1710.598445][T24863] should_fail_ex+0x447/0x5e0 [ 1710.598478][T24863] should_failslab+0xa8/0x100 [ 1710.598506][T24863] __kmalloc_cache_noprof+0x9c/0x670 [ 1710.598531][T24863] ? kobject_create_and_add+0x58/0x230 [ 1710.598553][T24863] ? kobject_create_and_add+0x58/0x230 [ 1710.598583][T24863] kobject_create_and_add+0x58/0x230 [ 1710.598609][T24863] __add_disk+0x682/0xdb0 [ 1710.598651][T24863] add_disk_fwnode+0x100/0x3a0 [ 1710.598690][T24863] add_mtd_blktrans_dev+0xe81/0x14c0 [ 1710.598734][T24863] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1710.598782][T24863] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 1710.598805][T24863] ? mtdblock_add_mtd+0x57/0x240 [ 1710.598842][T24863] mtdblock_add_mtd+0x18a/0x240 [ 1710.598873][T24863] blktrans_notify_add+0x9f/0xf0 [ 1710.598905][T24863] add_mtd_device+0x117f/0x17b0 [ 1710.598950][T24863] ? __pfx_add_mtd_device+0x10/0x10 [ 1710.598988][T24863] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 1710.599016][T24863] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1710.599054][T24863] mtd_add_partition+0x388/0x590 [ 1710.599088][T24863] ? __pfx_mtd_add_partition+0x10/0x10 [ 1710.599132][T24863] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 1710.599165][T24863] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1710.599233][T24863] mtdchar_ioctl+0x14fd/0x1bc0 [ 1710.599269][T24863] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1710.599316][T24863] ? kasan_quarantine_put+0xbb/0x1f0 [ 1710.599349][T24863] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1710.599383][T24863] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1710.599420][T24863] ? __lock_acquire+0x747/0x2de0 [ 1710.599475][T24863] ? do_futex+0x458/0x4e0 [ 1710.599531][T24863] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1710.599558][T24863] ? mutex_lock_nested+0x14d/0x1d0 [ 1710.599578][T24863] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 1710.599607][T24863] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 1710.599632][T24863] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1710.599660][T24863] __se_sys_ioctl+0xff/0x170 [ 1710.599688][T24863] do_syscall_64+0x16a/0x530 [ 1710.599714][T24863] ? trace_irq_disable+0x3b/0x140 [ 1710.599737][T24863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.599766][T24863] ? clear_bhb_loop+0x70/0xc0 [ 1710.599795][T24863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.599817][T24863] RIP: 0033:0x7f67a63b8f19 [ 1710.599839][T24863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.599858][T24863] RSP: 002b:00007f67a4606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1710.599882][T24863] RAX: ffffffffffffffda RBX: 00007f67a6635fa0 RCX: 00007f67a63b8f19 [ 1710.599899][T24863] RDX: 0000200000000580 RSI: 0000000000001269 RDI: 0000000000000005 [ 1710.599913][T24863] RBP: 00007f67a6447f6d R08: 0000000000000000 R09: 0000000000000000 [ 1710.599928][T24863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.599942][T24863] R13: 00007f67a6636038 R14: 00007f67a6635fa0 R15: 00007ffd4a205aa8 [ 1710.599979][T24863] [ 1711.092683][ T5619] Bluetooth: hci4: command tx timeout [ 1711.853254][T19357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1712.109844][T19357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1712.127070][T19357] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1712.128857][T19357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1712.129721][T19357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1713.630867][T23956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1713.715640][T24727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.715763][T24727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.715940][T24727] bridge_slave_0: entered allmulticast mode [ 1713.747634][T24727] bridge_slave_0: entered promiscuous mode [ 1714.178344][T24929] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1714.198645][T24727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.198770][T24727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.198934][T24727] bridge_slave_1: entered allmulticast mode [ 1714.223457][T24727] bridge_slave_1: entered promiscuous mode [ 1714.331802][T24727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1714.396472][T24727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.454539][ T5619] Bluetooth: hci2: command tx timeout [ 1714.457082][T24943] 0x000000000000-0x000000020000 : "" [ 1714.746647][T24943] ftl_cs: FTL header not found. [ 1715.168573][T24727] team0: Port device team_slave_0 added [ 1715.279011][T24727] team0: Port device team_slave_1 added [ 1716.545737][T23102] Bluetooth: hci2: command tx timeout [ 1716.600662][T24987] netlink: 'syz.1.4965': attribute type 1 has an invalid length. [ 1716.681856][T23102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1716.768462][T23102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1716.787207][T23102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1716.814843][T23102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1716.816455][T23102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1716.821420][T24991] netlink: 'syz.1.4965': attribute type 10 has an invalid length. [ 1716.821439][T24991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1717.180154][T24987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1717.208143][T24989] dummy0: left promiscuous mode [ 1717.294711][T24989] bond1: (slave dummy0): making interface the new active one [ 1717.391136][T24989] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1717.394232][T24991] dummy0: entered promiscuous mode [ 1717.450601][T24991] bond1: (slave dummy0): Releasing active interface [ 1717.538659][T24727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.538678][T24727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.538705][T24727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.553615][T24727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.553633][T24727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.553659][T24727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.572276][T19357] Bluetooth: hci3: command 0x0406 tx timeout [ 1718.643386][ T5619] Bluetooth: hci2: command tx timeout [ 1719.162547][ T5619] Bluetooth: hci0: command tx timeout [ 1720.730186][ T5619] Bluetooth: hci2: command tx timeout [ 1720.764070][T25041] Can't find ip_set type hash: [ 1721.105930][T24895] rxe_eth0 speed is unknown, defaulting to 1000 [ 1721.172534][ T5619] Bluetooth: hci0: command tx timeout [ 1721.175920][T25052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4976'. [ 1721.709761][T25052] bridge0: port 3(bond1) entered blocking state [ 1721.711071][T25052] bridge0: port 3(bond1) entered disabled state [ 1721.711257][T25052] bond1: entered allmulticast mode [ 1721.718367][T25052] bond1: entered promiscuous mode [ 1721.801267][T24727] hsr_slave_0: entered promiscuous mode [ 1721.810513][T24727] hsr_slave_1: entered promiscuous mode [ 1721.811430][T24727] debugfs: 'hsr0' already exists in 'hsr' [ 1721.811449][T24727] Cannot create hsr debugfs directory [ 1722.136087][T25080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4981'. [ 1722.136120][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4981'. [ 1722.421615][T24980] rxe_eth0 speed is unknown, defaulting to 1000 [ 1722.657902][T25091] netlink: 'syz.9.4984': attribute type 10 has an invalid length. [ 1723.252434][ T5619] Bluetooth: hci0: command tx timeout [ 1724.515835][T25117] input: syz0 as /devices/virtual/input/input52 [ 1724.735361][T25123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1724.905926][T25126] [ 1724.908297][T25126] ====================================================== [ 1724.915322][T25126] WARNING: possible circular locking dependency detected [ 1724.922461][T25126] syzkaller #0 Tainted: G L [ 1724.928446][T25126] ------------------------------------------------------ [ 1724.935475][T25126] syz.9.4989/25126 is trying to acquire lock: [ 1724.941635][T25126] ffffffff8fbb4518 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1724.951201][T25126] [ 1724.951201][T25126] but task is already holding lock: [ 1724.958578][T25126] ffff888035d24340 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 1724.968999][T25126] [ 1724.968999][T25126] which lock already depends on the new lock. [ 1724.968999][T25126] [ 1724.979407][T25126] [ 1724.979407][T25126] the existing dependency chain (in reverse order) is: [ 1724.988425][T25126] [ 1724.988425][T25126] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1724.996783][T25126] mutex_lock_nested+0x55/0x1d0 [ 1725.002162][T25126] md_alloc+0x81e/0xf40 [ 1725.006858][T25126] md_alloc_and_put+0x1a/0x1f0 [ 1725.012152][T25126] blk_request_module+0x27d/0x2a0 [ 1725.017717][T25126] blkdev_get_no_open+0x3f/0xe0 [ 1725.023134][T25126] blkdev_open+0x1e9/0x630 [ 1725.028101][T25126] do_dentry_open+0x841/0x1410 [ 1725.033403][T25126] vfs_open_consume+0x4a/0x360 [ 1725.038693][T25126] path_openat+0x1701/0x2100 [ 1725.043801][T25126] do_file_open+0x23e/0x4a0 [ 1725.048821][T25126] do_sys_openat2+0x115/0x200 [ 1725.054034][T25126] __x64_sys_openat+0x138/0x170 [ 1725.059424][T25126] do_syscall_64+0x16a/0x530 [ 1725.064550][T25126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.070980][T25126] [ 1725.070980][T25126] -> #1 (disks_mutex){+.+.}-{4:4}: [ 1725.078291][T25126] mutex_lock_nested+0x55/0x1d0 [ 1725.083681][T25126] md_alloc+0x40/0xf40 [ 1725.088287][T25126] md_alloc_and_put+0x1a/0x1f0 [ 1725.093595][T25126] blk_request_module+0x27d/0x2a0 [ 1725.099151][T25126] blkdev_get_no_open+0x3f/0xe0 [ 1725.104548][T25126] blkdev_open+0x1e9/0x630 [ 1725.109489][T25126] do_dentry_open+0x841/0x1410 [ 1725.114790][T25126] vfs_open_consume+0x4a/0x360 [ 1725.120092][T25126] path_openat+0x1701/0x2100 [ 1725.125211][T25126] do_file_open+0x23e/0x4a0 [ 1725.130252][T25126] do_sys_openat2+0x115/0x200 [ 1725.135472][T25126] __x64_sys_openat+0x138/0x170 [ 1725.140860][T25126] do_syscall_64+0x16a/0x530 [ 1725.145997][T25126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.152431][T25126] [ 1725.152431][T25126] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1725.160186][T25126] __lock_acquire+0x164c/0x2de0 [ 1725.165586][T25126] lock_acquire+0x115/0x350 [ 1725.170617][T25126] mutex_lock_nested+0x55/0x1d0 [ 1725.175998][T25126] blk_request_module+0x35/0x2a0 [ 1725.181465][T25126] blkdev_get_no_open+0x3f/0xe0 [ 1725.186845][T25126] bdev_file_open_by_dev+0xa0/0x240 [ 1725.192568][T25126] md_import_device+0x2e9/0x650 [ 1725.197932][T25126] md_add_new_disk+0x3a3/0x1850 [ 1725.203296][T25126] md_ioctl+0x2027/0x2630 [ 1725.208137][T25126] blkdev_ioctl+0x5e6/0x750 [ 1725.213169][T25126] __se_sys_ioctl+0xff/0x170 [ 1725.218275][T25126] do_syscall_64+0x16a/0x530 [ 1725.223386][T25126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.229799][T25126] [ 1725.229799][T25126] other info that might help us debug this: [ 1725.229799][T25126] [ 1725.240014][T25126] Chain exists of: [ 1725.240014][T25126] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 1725.240014][T25126] [ 1725.253390][T25126] Possible unsafe locking scenario: [ 1725.253390][T25126] [ 1725.260902][T25126] CPU0 CPU1 [ 1725.266259][T25126] ---- ---- [ 1725.271630][T25126] lock(&mddev->reconfig_mutex); [ 1725.276643][T25126] lock(disks_mutex); [ 1725.283220][T25126] lock(&mddev->reconfig_mutex); [ 1725.290778][T25126] lock(major_names_lock); [ 1725.295272][T25126] [ 1725.295272][T25126] *** DEADLOCK *** [ 1725.295272][T25126] [ 1725.303401][T25126] locks held by syz.9.4989/25126: 1, on CPU#1: [ 1725.309542][T25126] #0: ffff888035d24340 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 1725.320280][T25126] [ 1725.320280][T25126] stack backtrace: [ 1725.326173][T25126] CPU: 1 UID: 0 PID: 25126 Comm: syz.9.4989 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1725.332069][ T5619] Bluetooth: hci0: command tx timeout [ 1725.342975][T25126] Tainted: [L]=SOFTLOCKUP [ 1725.347291][T25126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1725.357339][T25126] Call Trace: [ 1725.360614][T25126] [ 1725.363536][T25126] dump_stack_lvl+0xe8/0x150 [ 1725.368136][T25126] print_circular_bug+0x2e2/0x300 [ 1725.373159][T25126] check_noncircular+0x12f/0x150 [ 1725.378102][T25126] __lock_acquire+0x164c/0x2de0 [ 1725.382955][T25126] ? __lock_acquire+0x747/0x2de0 [ 1725.387895][T25126] lock_acquire+0x115/0x350 [ 1725.392398][T25126] ? blk_request_module+0x35/0x2a0 [ 1725.397507][T25126] ? blk_request_module+0x35/0x2a0 [ 1725.402613][T25126] ? blk_request_module+0x35/0x2a0 [ 1725.407733][T25126] mutex_lock_nested+0x55/0x1d0 [ 1725.412587][T25126] ? blk_request_module+0x35/0x2a0 [ 1725.417725][T25126] blk_request_module+0x35/0x2a0 [ 1725.422669][T25126] blkdev_get_no_open+0x3f/0xe0 [ 1725.427524][T25126] bdev_file_open_by_dev+0xa0/0x240 [ 1725.432722][T25126] md_import_device+0x2e9/0x650 [ 1725.437574][T25126] md_add_new_disk+0x3a3/0x1850 [ 1725.442422][T25126] md_ioctl+0x2027/0x2630 [ 1725.446747][T25126] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1725.452813][T25126] ? __pfx_md_ioctl+0x10/0x10 [ 1725.457484][T25126] ? do_vfs_ioctl+0x11bc/0x1580 [ 1725.462331][T25126] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1725.467348][T25126] ? __pfx_smack_log+0x10/0x10 [ 1725.472112][T25126] ? smk_tskacc+0x2f6/0x370 [ 1725.476619][T25126] ? smack_file_ioctl+0x265/0x370 [ 1725.481643][T25126] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1725.487008][T25126] ? __pfx_md_ioctl+0x10/0x10 [ 1725.491690][T25126] blkdev_ioctl+0x5e6/0x750 [ 1725.496202][T25126] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1725.501235][T25126] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1725.506205][T25126] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1725.511231][T25126] __se_sys_ioctl+0xff/0x170 [ 1725.515819][T25126] do_syscall_64+0x16a/0x530 [ 1725.520411][T25126] ? trace_irq_disable+0x3b/0x140 [ 1725.525449][T25126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.531533][T25126] ? clear_bhb_loop+0x70/0xc0 [ 1725.536226][T25126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.542186][T25126] RIP: 0033:0x7f754a428f19 [ 1725.546611][T25126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.566234][T25126] RSP: 002b:00007f7548655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.574662][T25126] RAX: ffffffffffffffda RBX: 00007f754a6a6090 RCX: 00007f754a428f19 [ 1725.582642][T25126] RDX: 00002000000001c0 RSI: 0000000040140921 RDI: 0000000000000004 [ 1725.590605][T25126] RBP: 00007f754a4b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1725.598570][T25126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1725.606530][T25126] R13: 00007f754a6a6128 R14: 00007f754a6a6090 R15: 00007ffdf5d8c0e8 [ 1725.614503][T25126] [ 1725.670537][T25126] block device autoloading is deprecated and will be removed. [ 1725.670730][T25126] md: invalid raid superblock magic on ram18 [ 1725.670744][T25126] md: ram18 does not have a valid v0.0 superblock, not importing! [ 1725.670798][T25126] md: md_import_device returned -22 [ 1725.864454][ T131] bridge_slave_1: left allmulticast mode [ 1725.864482][ T131] bridge_slave_1: left promiscuous mode [ 1725.864644][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.004147][ T131] bridge_slave_0: left allmulticast mode [ 1726.004184][ T131] bridge_slave_0: left promiscuous mode [ 1726.004340][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.093882][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.182575][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.205244][ T131] bond0 (unregistering): Released all slaves [ 1728.311959][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1728.332262][ T3417] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.332623][ T3417] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.332687][ T3417] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.332718][ T3417] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.802187][ T131] hsr_slave_0: left promiscuous mode [ 1728.842163][ T131] hsr_slave_1: left promiscuous mode [ 1728.842905][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.893606][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.972934][ T131] veth1_macvtap: left promiscuous mode [ 1728.972996][ T131] veth0_macvtap: left promiscuous mode [ 1728.973146][ T131] veth1_vlan: left promiscuous mode [ 1728.973238][ T131] veth0_vlan: left promiscuous mode [ 1729.435171][ T131] team0 (unregistering): Port device team_slave_1 removed [ 1729.472887][ T131] team0 (unregistering): Port device team_slave_0 removed [ 1729.552888][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1730.004012][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1730.239352][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1730.742998][ T131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.773866][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1730.859997][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.013036][ T131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.054370][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1731.293948][ T131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.583299][ T131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.023569][ T131] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.023604][ T131] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.273839][ T131] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.273863][ T131] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.533224][ T131] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.533247][ T131] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.812702][ T131] team0: Port device netdevsim0 removed [ 1732.813261][ T131] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.813290][ T131] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.379018][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1734.617105][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1734.883797][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15