last executing test programs: 20.251742297s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r3, 0xc0086442, &(0x7f0000000100)) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="80fd02000040", 0x6}], 0x1, 0x0, 0x4) fanotify_init(0x2, 0x1) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000480)={0x6, 0x0, [{0xb, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000001, 0x2, 0x0, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) rseq(0xfffffffffffffffc, 0xffffff81, 0x0, 0x0) close(r5) 18.385785272s ago: executing program 2 (id=3): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) madvise(&(0x7f0000049000/0x3000)=nil, 0x3000, 0x16) 17.19639693s ago: executing program 2 (id=8): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x161280, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x5a, 0x2, 0xb3c1, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x7acb], 0x30000, 0x4000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000f8dbdf25030000000500020009000000180001801400020073797a5f74756e000000000000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) 16.667074336s ago: executing program 4 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) open_by_handle_at(r1, &(0x7f0000000280)=ANY=[], 0x454040) sendmsg$key(0xffffffffffffffff, 0x0, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)}) sendmsg$sock(0xffffffffffffffff, 0x0, 0xcc840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0), 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xd0, &(0x7f00000002c0)=ANY=[]) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, 0x0, 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 15.83188612s ago: executing program 2 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 14.114525359s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0xfffffffc, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0xfddb, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d0}, 0x1800) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xcb42, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 13.41745636s ago: executing program 4 (id=16): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 13.276570777s ago: executing program 1 (id=17): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r1, 0x0) madvise(&(0x7f0000049000/0x3000)=nil, 0x3000, 0x16) 13.136849463s ago: executing program 0 (id=19): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.302411069s ago: executing program 1 (id=20): unshare(0x2a020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x80108906, 0x0) 11.930464032s ago: executing program 3 (id=21): socket(0x10, 0x3, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000045c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @multicast1}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.828090564s ago: executing program 1 (id=22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xff, 0x0, 0xff, 0x100fffe00], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3f800000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffffff, 0xff000000, 0xff000000], 0x4e20, 0x2e, 0x4, 0x4e24, 0x2, 0x20}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) 11.609901782s ago: executing program 0 (id=23): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000440)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f00000003c0)=""/51, 0x33}, 0x0, 0x4}, 0xa0) mount$cgroup(0x0, 0x0, 0x0, 0x3000443, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 11.201335992s ago: executing program 1 (id=24): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getgid() mount$9p_virtio(&(0x7f0000000280), 0x0, &(0x7f0000000340), 0x20000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=virtio,fscache,dfltgid=', @ANYBLOB="2c63616368653d6c6f6f73652c63836368653d6c6f6f73652c736d61636b6673"]) dup2(r4, r4) setresuid(0xee01, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) prlimit64(r5, 0x6, 0x0, 0x0) 11.136437052s ago: executing program 3 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='source', 0x0, r0) 5.887092296s ago: executing program 3 (id=26): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0xfdef) 3.94106429s ago: executing program 1 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.252644387s ago: executing program 3 (id=28): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xbc8) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000040), &(0x7f0000002000)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x638, 0xffffffff, 0x0, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x568, 0x568, 0x568, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@mh={{0x28}, {"4dd1"}}, @common=@srh1={{0x90}, {0x29, 0x1, 0x40, 0x2f, 0x7, @empty, @local, @mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xff], 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x9}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff], 'ip6_vti0\x00', 'hsr0\x00', {0xff}, {0xff}, 0x67, 0x57, 0x1, 0x3f}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x8, 0x86, 0x2, 0xce05, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff000000], [0x0, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 0x1a40, 0x800}}, @common=@frag={{0x30}, {[0x101], 0x7, 0x8, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0xc43, 0x5], 0xaa, 0x0, 0x6, [@empty, @local, @mcast1, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}, @common=@hbh={{0x48}, {0xfffff70c, 0x0, 0x1, [0x8000, 0x9, 0x8, 0xfffd, 0x1, 0x8, 0x9, 0x8, 0x6, 0x3, 0xff71, 0x7fff, 0x9, 0x1d8, 0x101, 0x5], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r7, &(0x7f00000002c0)="0d922b3ba8e5ae0c9352f8543bce466b311d1527d92477b2d0d2a1bcbb90496beff541e5b8f39661e4f6fdac1bd657dfeba9df3ec39bca42a3263be2f468e48a7e4fb152fc756c8bf79093c6669480bb66b090c590e64c2aeb1b67650ec04bdf33ec5e0944083d1d8d", &(0x7f0000000340)=@udp6, 0x1}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) 3.019843835s ago: executing program 1 (id=29): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @mcast1, 0x1000}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.705618844s ago: executing program 0 (id=30): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001b340)=ANY=[], 0x1f8}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.99761756s ago: executing program 0 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.383202514s ago: executing program 2 (id=32): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000080), &(0x7f0000000580)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.326701579s ago: executing program 4 (id=33): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x44004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x20044000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, 0x0, 0x20040014) 968.82365ms ago: executing program 3 (id=34): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, 0x0, 0x0, 0x1204c0b0, 0x0, 0x0) 864.428656ms ago: executing program 0 (id=35): socket(0x10, 0x3, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000045c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @multicast1}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 461.616612ms ago: executing program 2 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='source', 0x0, r0) 292.901675ms ago: executing program 4 (id=37): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="d018c6d2d2bdda9e01f3b45e241f68af", 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 224.288941ms ago: executing program 3 (id=38): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 0s ago: executing program 0 (id=39): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) unshare(0x22020400) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000001000010828bd", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYBLOB="080003"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @remote}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x8, 0xe10, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x20, 0x1, 0x3, 0x67344b96}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @multicast1}, &(0x7f0000000600)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x208, 0x30, 0xffff, 0x70bd2a, 0x0, {}, [{0x1f4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x49}, {0x40, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x112, 0xf, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8000, 0x3, 0x4, 0xb}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x2, 0x2, 0x4, 0x5}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfff, 0xffffffffffffffff, 0xa88, 0x6}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x1, 0x40, 0x6}, 0x4, r10}}]}, {0xd7, 0x6, "0eecb6d4dd586a7675eb62ee4d509712782708afe0eefde5f998114cae403db47dd905a54c6d1b2ff1f229cfc89619990d20fd913c74ef26d0041955d82ab91eb1df33dea7cff8680ebdd2832640ed5e25dc21812081fabf22dfbe813b4784f920d49653d7c772ad30589a97e1f22ef20a99aa9a36de4dfa5ed7d1a400c900771746e77d3a73694cfb586432de5dc856403729e7dab63fa0f550d91f75f6ac7d7432719956a07bd5cb51e96c05e9a6158d3a99eeafee18365090522c07d97c306411a236d1ed41001661efe4a6134c05b746fd"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x208}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x14, 0x17, [0x2, 0xfffffff9, 0xfffff3ae, 0x7]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000150a03"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r12, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) readv(r11, &(0x7f0000000580)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 195.365032][ T5553] cgroup: Unknown subsys name 'net' [ 195.500557][ T5553] cgroup: Unknown subsys name 'cpuset' [ 195.518291][ T5553] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 202.585524][ T5553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 207.585777][ T5572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.605708][ T5572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.615925][ T5572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.631626][ T5572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.644959][ T5572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.856139][ T4870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.867453][ T4870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.877949][ T4870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.892959][ T4870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.905695][ T4870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.002957][ T5572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.015209][ T5572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.026464][ T5572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.045470][ T5572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.058746][ T5572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.138513][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.149160][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.161910][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.181162][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.195691][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.234141][ T5572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.245446][ T5572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.256879][ T5572] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.283182][ T5572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.300169][ T5572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.743506][ T5572] Bluetooth: hci0: command tx timeout [ 209.913784][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.920917][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.979813][ T5572] Bluetooth: hci1: command tx timeout [ 210.141775][ T5572] Bluetooth: hci2: command tx timeout [ 210.299804][ T5572] Bluetooth: hci3: command tx timeout [ 210.379957][ T5572] Bluetooth: hci4: command tx timeout [ 211.819915][ T5572] Bluetooth: hci0: command tx timeout [ 212.063133][ T5572] Bluetooth: hci1: command tx timeout [ 212.219698][ T5572] Bluetooth: hci2: command tx timeout [ 212.389959][ T5572] Bluetooth: hci3: command tx timeout [ 212.459733][ T5572] Bluetooth: hci4: command tx timeout [ 213.098423][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.107108][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.116872][ T5578] bridge_slave_0: entered allmulticast mode [ 213.128091][ T5578] bridge_slave_0: entered promiscuous mode [ 213.299642][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.308604][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.318052][ T5578] bridge_slave_1: entered allmulticast mode [ 213.344925][ T5578] bridge_slave_1: entered promiscuous mode [ 213.684697][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.767760][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.828383][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.850124][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.871726][ T5571] bridge_slave_0: entered allmulticast mode [ 213.891647][ T5571] bridge_slave_0: entered promiscuous mode [ 213.900675][ T5572] Bluetooth: hci0: command tx timeout [ 213.971022][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.981878][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.993297][ T5571] bridge_slave_1: entered allmulticast mode [ 214.014424][ T5571] bridge_slave_1: entered promiscuous mode [ 214.140061][ T5572] Bluetooth: hci1: command tx timeout [ 214.177969][ T5578] team0: Port device team_slave_0 added [ 214.299815][ T5572] Bluetooth: hci2: command tx timeout [ 214.321140][ T5578] team0: Port device team_slave_1 added [ 214.365182][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.403785][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.411912][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.419358][ T5583] bridge_slave_0: entered allmulticast mode [ 214.428266][ T5583] bridge_slave_0: entered promiscuous mode [ 214.469743][ T5572] Bluetooth: hci3: command tx timeout [ 214.471757][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.482901][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.490860][ T5582] bridge_slave_0: entered allmulticast mode [ 214.499818][ T5582] bridge_slave_0: entered promiscuous mode [ 214.519920][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.549853][ T5572] Bluetooth: hci4: command tx timeout [ 214.561998][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.570078][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.577655][ T5583] bridge_slave_1: entered allmulticast mode [ 214.587090][ T5583] bridge_slave_1: entered promiscuous mode [ 214.623900][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.632116][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.640023][ T5582] bridge_slave_1: entered allmulticast mode [ 214.648679][ T5582] bridge_slave_1: entered promiscuous mode [ 214.685395][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.693434][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.701421][ T5576] bridge_slave_0: entered allmulticast mode [ 214.710793][ T5576] bridge_slave_0: entered promiscuous mode [ 214.753969][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.761195][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.787708][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.863731][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.871994][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.879747][ T5576] bridge_slave_1: entered allmulticast mode [ 214.888436][ T5576] bridge_slave_1: entered promiscuous mode [ 214.932158][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.939227][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.967525][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.017061][ T5571] team0: Port device team_slave_0 added [ 215.061688][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.101278][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.120105][ T5571] team0: Port device team_slave_1 added [ 215.165401][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.187912][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.234211][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.338743][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.433666][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.441484][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.467966][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.516674][ T5583] team0: Port device team_slave_0 added [ 215.560712][ T5582] team0: Port device team_slave_0 added [ 215.569093][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.576508][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.603268][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.653299][ T5583] team0: Port device team_slave_1 added [ 215.673375][ T5578] hsr_slave_0: entered promiscuous mode [ 215.683521][ T5578] hsr_slave_1: entered promiscuous mode [ 215.701148][ T5582] team0: Port device team_slave_1 added [ 215.733138][ T5576] team0: Port device team_slave_0 added [ 215.806210][ T5576] team0: Port device team_slave_1 added [ 215.952884][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.960082][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.986513][ T5572] Bluetooth: hci0: command tx timeout [ 215.986865][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.006649][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.013929][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.040298][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.131836][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.138931][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.166236][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.180600][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.187779][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.214065][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.225054][ T5572] Bluetooth: hci1: command tx timeout [ 216.273375][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.280729][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.307123][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.379801][ T5572] Bluetooth: hci2: command tx timeout [ 216.390366][ T5571] hsr_slave_0: entered promiscuous mode [ 216.399323][ T5571] hsr_slave_1: entered promiscuous mode [ 216.408076][ T5571] debugfs: 'hsr0' already exists in 'hsr' [ 216.414309][ T5571] Cannot create hsr debugfs directory [ 216.423470][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.430945][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.457544][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.540271][ T5572] Bluetooth: hci3: command tx timeout [ 216.619856][ T5572] Bluetooth: hci4: command tx timeout [ 216.736196][ T5583] hsr_slave_0: entered promiscuous mode [ 216.745243][ T5583] hsr_slave_1: entered promiscuous mode [ 216.753747][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 216.759767][ T5583] Cannot create hsr debugfs directory [ 216.780755][ T5582] hsr_slave_0: entered promiscuous mode [ 216.790293][ T5582] hsr_slave_1: entered promiscuous mode [ 216.798245][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 216.804305][ T5582] Cannot create hsr debugfs directory [ 217.014915][ T5576] hsr_slave_0: entered promiscuous mode [ 217.024914][ T5576] hsr_slave_1: entered promiscuous mode [ 217.033587][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 217.039630][ T5576] Cannot create hsr debugfs directory [ 218.261605][ T5578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.287842][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.301772][ T5578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.322631][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.333450][ T5578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.354085][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.366375][ T5578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.386002][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.565005][ T5571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.592110][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.604546][ T5571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.624261][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.647318][ T5571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.666739][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.678661][ T5571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.701062][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.961323][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.982500][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.993301][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.013958][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.024625][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.050037][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.061539][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.084572][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.499143][ T5576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.527241][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.540431][ T5576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.562507][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.574449][ T5576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.598771][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.610001][ T5576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.636448][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.867850][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.012373][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.033569][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.047804][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.072713][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.098777][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.123474][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.159966][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.183632][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.334685][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.498954][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.506435][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.544808][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.621736][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.629229][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.827570][ T5571] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.882154][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.989311][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.996886][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.088986][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.096468][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.235707][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.397156][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.404819][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.485962][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.670500][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.678158][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.923600][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.972424][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.093431][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.100983][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.215863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.223535][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.408556][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.636063][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.643852][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.869633][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.877307][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.495688][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.747824][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.784115][ T5571] veth0_vlan: entered promiscuous mode [ 226.895402][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.046890][ T5571] veth1_vlan: entered promiscuous mode [ 227.374500][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.617029][ T5578] veth0_vlan: entered promiscuous mode [ 227.635341][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.768673][ T5571] veth0_macvtap: entered promiscuous mode [ 227.832062][ T5578] veth1_vlan: entered promiscuous mode [ 227.888062][ T5571] veth1_macvtap: entered promiscuous mode [ 227.948856][ T5582] veth0_vlan: entered promiscuous mode [ 228.176522][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.194807][ T5582] veth1_vlan: entered promiscuous mode [ 228.208025][ T5576] veth0_vlan: entered promiscuous mode [ 228.262582][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.368780][ T5583] veth0_vlan: entered promiscuous mode [ 228.435575][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.445391][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.462017][ T5578] veth0_macvtap: entered promiscuous mode [ 228.485479][ T5576] veth1_vlan: entered promiscuous mode [ 228.501957][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.512327][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.565636][ T5578] veth1_macvtap: entered promiscuous mode [ 228.670899][ T5583] veth1_vlan: entered promiscuous mode [ 228.877030][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.978191][ T5582] veth0_macvtap: entered promiscuous mode [ 229.005873][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.135213][ T5582] veth1_macvtap: entered promiscuous mode [ 229.187202][ T5576] veth0_macvtap: entered promiscuous mode [ 229.211378][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.221796][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.273551][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.283787][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.393552][ T5583] veth0_macvtap: entered promiscuous mode [ 229.438577][ T5576] veth1_macvtap: entered promiscuous mode [ 229.534917][ T5583] veth1_macvtap: entered promiscuous mode [ 229.678530][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.781056][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.867771][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.934108][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.969692][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.097469][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.143144][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.163312][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.177973][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.258819][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.280070][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.351341][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.529967][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.561701][ T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.628519][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.733555][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.798705][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.847902][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.974742][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.017827][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.368118][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.407497][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.872961][ T5571] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.009008][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.045609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.411714][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.436711][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.091212][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.126328][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.486412][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 243.556888][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.583560][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.713353][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 243.941643][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.975467][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.029938][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 244.095353][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.145567][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.203304][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 244.268778][ T11] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 244.320526][ T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.372857][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 244.407594][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.439705][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.492119][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.504554][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.568229][ T11] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 244.600179][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.665126][ T11] usb 5-1: config 0 descriptor?? [ 244.690487][ T5847] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 244.773605][ T11] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 245.002304][ T5803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.057813][ T5712] usb 5-1: USB disconnect, device number 2 [ 245.059131][ T4916] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 245.099103][ T5803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.120251][ T5863] trusted_key: syz.1.2 sent an empty control message without MSG_MORE. [ 247.379924][ T5712] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 247.743872][ T5712] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 247.777021][ T5712] usb 5-1: config 0 has no interface number 0 [ 247.874581][ T5712] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 247.904544][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.935664][ T5712] usb 5-1: Product: syz [ 247.958131][ T5712] usb 5-1: Manufacturer: syz [ 247.994905][ T5712] usb 5-1: SerialNumber: syz [ 248.072130][ T5712] usb 5-1: config 0 descriptor?? [ 248.144712][ T5864] syzkaller0: entered promiscuous mode [ 248.167160][ T5864] syzkaller0: entered allmulticast mode [ 248.406499][ T5712] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 248.479189][ T5712] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 248.526376][ T11] libceph: connect (1)[c::]:6789 error -101 [ 248.534861][ T5712] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 248.544492][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 248.598676][ T5712] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 248.652365][ T5712] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 248.666108][ T5871] ceph: No mds server is up or the cluster is laggy [ 248.816202][ T11] usb 5-1: USB disconnect, device number 3 [ 248.980163][ T11] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 249.074062][ T11] keyspan 5-1:0.133: device disconnected [ 249.618094][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 249.685893][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 249.712523][ T5882] Zero length message leads to an empty skb [ 251.414148][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.424658][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.707326][ T5898] xt_recent: hitcount (1065353216) is larger than allowed maximum (65535) [ 251.746117][ T5896] Bluetooth: MGMT ver 1.23 [ 254.250585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 254.352699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 254.454978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 254.659772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 254.762174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 254.864587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 255.069602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 255.118741][ T9] libceph: connect (1)[c::]:6789 error -101 [ 255.481109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 255.581319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 255.683936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 256.018185][ T5905] ceph: No mds server is up or the cluster is laggy [ 257.100670][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 259.582004][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.724667][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.024379][ T5929] x_tables: duplicate underflow at hook 2 [ 261.567273][ T139] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.643066][ T5827] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.685943][ T5827] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.779176][ T5827] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.174835][ T1966] libceph: connect (1)[c::]:6789 error -101 [ 263.200137][ T1966] libceph: mon0 (1)[c::]:6789 connect error [ 263.470575][ T1966] libceph: connect (1)[c::]:6789 error -101 [ 263.506231][ T1966] libceph: mon0 (1)[c::]:6789 connect error [ 263.520804][ T5955] ===================================================== [ 263.528241][ T5955] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9a4/0xa30 [ 263.536421][ T5955] ieee802154_hdr_push+0x9a4/0xa30 [ 263.542014][ T5955] ieee802154_header_create+0x854/0xb90 [ 263.547906][ T5955] dgram_sendmsg+0xb55/0x16f0 [ 263.553374][ T5955] ieee802154_sock_sendmsg+0x91/0xe0 [ 263.558990][ T5955] ____sys_sendmsg+0xf37/0xfd0 [ 263.567486][ T5955] ___sys_sendmsg+0x271/0x3b0 [ 263.573542][ T5955] __x64_sys_sendmsg+0x211/0x3e0 [ 263.579598][ T5955] x64_sys_call+0x1e20/0x3ea0 [ 263.584602][ T5955] do_syscall_64+0x134/0xf80 [ 263.589735][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.595927][ T5955] [ 263.598349][ T5955] Uninit was stored to memory at: [ 263.603890][ T5955] ieee802154_hdr_push+0x99d/0xa30 [ 263.609296][ T5955] ieee802154_header_create+0x854/0xb90 [ 263.615984][ T5955] dgram_sendmsg+0xb55/0x16f0 [ 263.622907][ T5955] ieee802154_sock_sendmsg+0x91/0xe0 [ 263.628522][ T5955] ____sys_sendmsg+0xf37/0xfd0 [ 263.633692][ T5955] ___sys_sendmsg+0x271/0x3b0 [ 263.638584][ T5955] __x64_sys_sendmsg+0x211/0x3e0 [ 263.644010][ T5955] x64_sys_call+0x1e20/0x3ea0 [ 263.648963][ T5955] do_syscall_64+0x134/0xf80 [ 263.653926][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.663372][ T5955] [ 263.671395][ T5955] Local variable hdr created at: [ 263.676458][ T5955] ieee802154_header_create+0x4e/0xb90 [ 263.683374][ T5955] dgram_sendmsg+0xb55/0x16f0 [ 263.688319][ T5955] [ 263.691068][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(full) [ 263.700683][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.710989][ T5955] ===================================================== [ 263.718019][ T5955] Disabling lock debugging due to kernel taint [ 263.725331][ T5955] Kernel panic - not syncing: kmsan.panic set ... [ 263.731927][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.3.38 Tainted: G B syzkaller #0 PREEMPT(full) [ 263.742933][ T5955] Tainted: [B]=BAD_PAGE [ 263.747210][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.757427][ T5955] Call Trace: [ 263.760854][ T5955] [ 263.763908][ T5955] __dump_stack+0x26/0x30 [ 263.768465][ T5955] dump_stack_lvl+0x50/0x1c0 [ 263.773263][ T5955] ? dump_stack+0x12/0x25 [ 263.777811][ T5955] dump_stack+0x1e/0x25 [ 263.782215][ T5955] vpanic+0x7b4/0x1430 [ 263.786572][ T5955] panic+0x15d/0x160 [ 263.790742][ T5955] kmsan_report+0x31a/0x320 [ 263.795501][ T5955] ? __msan_warning+0x1b/0x30 [ 263.800403][ T5955] ? ieee802154_hdr_push+0x9a4/0xa30 [ 263.805910][ T5955] ? ieee802154_header_create+0x854/0xb90 [ 263.811888][ T5955] ? dgram_sendmsg+0xb55/0x16f0 [ 263.816988][ T5955] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 263.822670][ T5955] ? ____sys_sendmsg+0xf37/0xfd0 [ 263.827839][ T5955] ? ___sys_sendmsg+0x271/0x3b0 [ 263.832913][ T5955] ? __x64_sys_sendmsg+0x211/0x3e0 [ 263.838266][ T5955] ? x64_sys_call+0x1e20/0x3ea0 [ 263.843370][ T5955] ? do_syscall_64+0x134/0xf80 [ 263.848380][ T5955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.854672][ T5955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.860936][ T5955] ? dgram_sendmsg+0xb55/0x16f0 [ 263.866011][ T5955] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 263.871633][ T5955] ? ____sys_sendmsg+0xf37/0xfd0 [ 263.876781][ T5955] ? ___sys_sendmsg+0x271/0x3b0 [ 263.881780][ T5955] ? __x64_sys_sendmsg+0x211/0x3e0 [ 263.887039][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 263.892297][ T5955] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 263.898864][ T5955] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 263.905075][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 263.910329][ T5955] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 263.916712][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 263.922138][ T5955] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 263.928634][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 263.933924][ T5955] __msan_warning+0x1b/0x30 [ 263.938686][ T5955] ieee802154_hdr_push+0x9a4/0xa30 [ 263.943952][ T5955] ? vmw_execbuf_process+0x932/0x57b0 [ 263.949501][ T5955] ? __msan_memcpy+0x105/0x1c0 [ 263.954529][ T5955] ieee802154_header_create+0x854/0xb90 [ 263.960294][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 263.965580][ T5955] dgram_sendmsg+0xb55/0x16f0 [ 263.970426][ T5955] ? __pfx_ieee802154_header_create+0x10/0x10 [ 263.976723][ T5955] ? __pfx_dgram_sendmsg+0x10/0x10 [ 263.982123][ T5955] ieee802154_sock_sendmsg+0x91/0xe0 [ 263.987558][ T5955] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 263.993764][ T5955] ____sys_sendmsg+0xf37/0xfd0 [ 263.998710][ T5955] ___sys_sendmsg+0x271/0x3b0 [ 264.003548][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 264.008832][ T5955] ? __rcu_read_unlock+0x6c/0xd0 [ 264.013875][ T5955] ? __fget_files+0x3b4/0x4a0 [ 264.018748][ T5955] ? __fget_files+0x3b9/0x4a0 [ 264.023539][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 264.028827][ T5955] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 264.034799][ T5955] __x64_sys_sendmsg+0x211/0x3e0 [ 264.039916][ T5955] ? kmsan_get_metadata+0xf1/0x160 [ 264.045187][ T5955] x64_sys_call+0x1e20/0x3ea0 [ 264.050102][ T5955] do_syscall_64+0x134/0xf80 [ 264.054925][ T5955] ? clear_bhb_loop+0x50/0xa0 [ 264.059778][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.065894][ T5955] RIP: 0033:0x7f3733f9ce59 [ 264.070405][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.090142][ T5955] RSP: 002b:00007f3734d72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.098682][ T5955] RAX: ffffffffffffffda RBX: 00007f3734215fa0 RCX: 00007f3733f9ce59 [ 264.106748][ T5955] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 264.114826][ T5955] RBP: 00007f3734032d6f R08: 0000000000000000 R09: 0000000000000000 [ 264.122883][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.130938][ T5955] R13: 00007f3734216038 R14: 00007f3734215fa0 R15: 00007ffcd1498418 [ 264.139038][ T5955] [ 264.142620][ T5955] Kernel Offset: disabled [ 264.147015][ T5955] Rebooting in 86400 seconds..