last executing test programs: 4.270137156s ago: executing program 2 (id=146): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @initdev}, &(0x7f0000000740)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'macvlan1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'gretap0\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x700, 0x1, 0x9, 0x6, {{0x31, 0x4, 0x0, 0x9, 0xc4, 0x65, 0x0, 0x73, 0x4, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x3c, 0x58, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xf}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x3, 0x0}, 0x8}, {@local, 0x776}]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x4b, 0x3, [{0x7, 0xe, "1f8ae41241f88b4126348f20"}, {0x2, 0xc, "b57250143e2398abe9bd"}, {0x2, 0xd, "8257c97610fe5762d11753"}, {0x5, 0x11, "8f111b58e41ff7fc0f9ee2cbdc8021"}, {0x6, 0x2}, {0x1, 0xb, "dd78770c1289034ef2"}]}, @end, @end, @lsrr={0x83, 0x1f, 0x2f, [@empty, @rand_addr=0x64010101, @broadcast, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x80, 0x5, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x80, 0x20, 0x6, 0xffff8001}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x400, 0x22f, {{0x9, 0x4, 0x0, 0x36, 0x24, 0x65, 0x0, 0xf8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, {[@noop, @generic={0x7, 0x5, 'Ub]'}, @generic={0x88, 0x7, "6c7339d144"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000012c0)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf25040000005000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020064766d72703000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0100000074799ea7ffa34148a21d09b41ecac659b9d719c90606194f45a087a63784706c49bd0889bf84f1c878ee8f8e38b0d866c2fc783ccb7dec292e7cf97a3e1bcc8ae0e531ba2aff8a4cce960e17f97047e42a0c29404d1c3fb347e52518cf6ed8fd7f9e0000006676802df58140e4ad171aff5b2b2ac02065d717f7e035e98a7fee585a81a6886cccb4df1e61ee89b5286d178b56446d9d1292e5ef5aa46160e02f91ef57fce61db8b56c268dcb8ed6a6db87a6b1c3fdd1367eec76adfd3c8031300e4e7d72a051ff2d7d599cef52a42c77b5ff1d1e7f55f9e4e553455e6f3f389f46a8dd46fe7c8b30dc71f3b74fdc4322128b19d634", @ANYRES32=0x0, @ANYBLOB="50000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300020000001400020076657468310000000000000000000000080003000200000008000100", @ANYRES32=r0, @ANYBLOB="08000300030000005800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300030000000800030002000000140002007767300000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300020000005000138014cb02007665740104000000000000616d00000008000100fd5b272b5aae741007f11f584ab667aaaa", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESOCT=0x0, @ANYBLOB="0800030000000000140002006e65747063693000000000000000000008000300020000001400020073697430000000000000000000000000080003000200000008000300020000002800018014000200697036746e6c3000000000000000000008000100", @ANYRES64=r0, @ANYBLOB="0800018b", @ANYRES32=r3, @ANYBLOB="6400018008000100", @ANYRES32=r4, @ANYBLOB="140002006d61637365633000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES16=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRESOCT=r7, @ANYBLOB="08000300000000001400020070696d36726567310000000000000000"], 0x208}, 0x1, 0x0, 0x0, 0x84}, 0x40) sendmmsg$inet6(r2, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f0", 0x1}], 0x1}}], 0x2, 0x20000010) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="ffff0000e805c3c7602746b6d3939d4a0df2f0dc4cb16397aacf01f33ff800"], 0x8) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x1050d1, &(0x7f0000000000)={0x0, 0xfffff7fc, 0x20, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf411119ed83ebbba, 0x50, r0, 0xa6d6a000) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) 4.017494957s ago: executing program 2 (id=148): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') write$cgroup_pid(r1, 0x0, 0x1) read$msr(r1, &(0x7f0000000040)=""/174, 0xae) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r3, 0x2000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000140)={&(0x7f00002e0000/0x3000)=nil}) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000200)={0x0, 0x0, '\x00', {0x0, @bt={0x2, 0xe, 0x1, 0x2, 0x5, 0x9, 0x0, 0x5, 0x1147, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0x10, 0x16, {0x2, 0xfffffff8}, 0x62, 0x3}}}) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.468750976s ago: executing program 2 (id=151): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.341641951s ago: executing program 1 (id=152): creat(&(0x7f0000001380)='./file0\x00', 0x29) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 3.260901312s ago: executing program 1 (id=154): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000002600)={0x32, 0x0, '\x00', [@padn, @padn]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r1, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) 3.185515316s ago: executing program 2 (id=155): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="f257a8ea7bc273dfaeab968508069d205e545c1a182ab21b86cf553ee66aca279db0e7aea4ec53062e89", 0x2a, 0x24000040, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setns(r4, 0x8020000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x1f, 0x0, "966e49d5b8a5f9bcbb98226a8aa02da2fa3bc307e45f0ac0835e9df4172024ab39323390f33b09244f06fade849a1328407c710ad5f3d8132174a1ad1a6bd5a5b361d6681b400175cd366a76294b5610"}, 0xd8) close(r5) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r4}}, 0x20) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r6, 0xa4717000) 3.153517906s ago: executing program 2 (id=156): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x80802, 0x0) shutdown(r0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x5, 0x0, 0x2, 0x8, 0x1800000000000}, &(0x7f0000000100)={0x8, 0x9, 0x5698, 0x4, 0x1d, 0x2, 0xa1b, 0x1}, &(0x7f0000000140)={0x49cfdee5, 0xb6, 0x8000000000000000, 0xfd, 0x3, 0x7, 0x57, 0x4}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xc2b]}, 0x8}) poll(&(0x7f0000000080)=[{r0, 0x7002}], 0x1, 0x48000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 3.11087908s ago: executing program 1 (id=157): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x761342, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff11c6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) (async) fadvise64(r0, 0x7, 0x1ff, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) (async) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) write$apparmor_exec(r2, &(0x7f0000000140)={'exec ', 'syzkaller1\x00'}, 0x10) (async) copy_file_range(r3, 0x0, r2, &(0x7f00000000c0)=0x100200, 0x400000, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r5, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="080000040001000000080004002bffffff40000380050008000600e50006000400020000001400020076657468305f746f5f626f6e6400000006000400a1c40000080003000200000008000100020000001c00038008000100010000000500080010000000060007004e220000"], 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x44000) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r7, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x4004000) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf8eb, 0x3e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x6, 0x1, 0x5fda, 0x400]}, @chandef_params]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 2.993530629s ago: executing program 1 (id=158): creat(&(0x7f0000000080)='./file0\x00', 0xac) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001601"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0xe8fb015d3498b992, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380), 0x8) socket$inet6(0xa, 0x80000, 0x4) 2.923478763s ago: executing program 2 (id=159): write$nbd(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="6744669800000000040000000200000085b268bb25bd4f7279031e629939a91a5f4d30b17a0678e9e3d3b47b0425f73b4b8a6a4c9c46a13fef029bdeafba583303328fae4c078beec37703060254d9334d4f001000003dd834a05b9c00b7816b57faa7a362b46b01fd2c9eb9eca507cb37db12"], 0x73) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102082405"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x420480, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14}}], 0x18}, 0xe900) sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)='|', 0x1}], 0x1}, 0x44000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4211, r5, 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wlan0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000000)={0x1, 0x100, 0x9b02}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x10) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x8, 0xffffffff, {{0xf, 0x4, 0x2, 0x36, 0x3c, 0x66, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x4, [{@local, 0x8001}, {@loopback, 0x3ff}, {@empty, 0x9}]}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x7, [{@remote, 0xfffffffe}]}]}}}}}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000200)=r6) 1.862068876s ago: executing program 0 (id=163): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f000097a000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0xa88f0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) (async) write(r0, &(0x7f0000000840)="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", 0xfb) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000001080)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x3}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x320, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x8000, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x3f0, 0x0, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0x0, 0x0, 0x0, 0x5c9, 0x0, 0x100, 0x0, 0x7}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) recvmmsg(r1, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/177, 0xb1}], 0x3}, 0x8000006}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f00000009c0)=""/4125, 0x101d}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x7}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x24}], 0x5, 0x12002, 0x0) (async) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1.525354052s ago: executing program 0 (id=164): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="bc0000001900010000000000fddbdf25fc0200000000000000000000000000016401010000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="0000000000006a5a44dc390000000000000000000010000000000000000700000000000000a80c0000000000000000000000000000000000000000000f000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000020000000004000500"], 0xbc}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000500)={r5, 0x1, 0x6}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc011) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl(r9, 0x2275, 0x0) getsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000540), &(0x7f00000007c0)=0x4) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="384b30ff", @ANYRES16=r3, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900810000005900000006001201050000000500e40001000000"], 0x38}}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000400)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r10, 0xffffe000) syz_open_dev$tty20(0xc, 0x4, 0x1) geteuid() 1.367887751s ago: executing program 1 (id=165): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.254032059s ago: executing program 0 (id=166): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbb1, 0x20011, r0, 0xd56d9000) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xe6f48000, 0x4000, 0xeeee0000, 0x4000], 0xb, 0x21, 0x6}) 1.033260276s ago: executing program 3 (id=167): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r3 = gettid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'netpci0\x00', 0x1000}) ioctl$TUNSETCARRIER(r4, 0x400454e2, 0x0) timer_delete(0x0) tkill(r3, 0x12) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) getresgid(&(0x7f00000004c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@flat=@binder={0x73622a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3c}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f00000034c0)={0x2020}, 0xcac) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r10, r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.030804312s ago: executing program 1 (id=168): syz_usb_connect$uac1(0x0, 0x8b, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 995.055189ms ago: executing program 0 (id=169): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46faf) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x122) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x803400, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x88901) umount2(&(0x7f0000000180)='./file0\x00', 0x1) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = semget$private(0x0, 0x4, 0x119) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0xfff5]) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}) mmap(&(0x7f000050c000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r2, 0xb2d53000) 819.567879ms ago: executing program 3 (id=170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "3c444bdaacdcab4d", "7c09e3c444d2f0ff2495408ac00bc823", "13d4610e", "05d41a5b745d371f"}, 0x28) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x10, 0x2, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x109000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) (async) write(r1, &(0x7f0000000a00)="1c0000001a009b8a140000003b9b301f000000000000000c00000000", 0x1c) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc010203030902120001000000000904"], 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'bridge0\x00', {}, 0x76cc}) (async) read$char_usb(r5, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400490001"], 0x7) 589.584537ms ago: executing program 0 (id=171): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x7ffffffa, 0x10) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x6) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x10, 0x4) 505.635633ms ago: executing program 3 (id=172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x7) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x2, 0x28011, r2, 0x0) sendfile(r2, r2, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x7) (async) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x2, 0x28011, r2, 0x0) (async) sendfile(r2, r2, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async) 428.08693ms ago: executing program 0 (id=173): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x4, @none, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) r4 = memfd_secret(0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)={0x20, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x101440, 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r9, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xd) read(r8, 0x0, 0x0) close_range(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 245.37952ms ago: executing program 3 (id=174): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000440)=0x9, 0x4) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000004c0)={[0xdddd1000, 0x8000000, 0xeeee8000, 0x1], 0x101, 0x24, 0x9}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) (async) execve(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000340)={[&(0x7f0000000100)='\'\x00', &(0x7f0000000140)='[^\x00', &(0x7f0000000180)='@}\xf9\x00', &(0x7f00000001c0)='@*V(+)})\x00', &(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='/dev/rnullb0\x00', &(0x7f0000000280)='xfs\x00', &(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='+%-/:@}#@\x00']}, &(0x7f00000003c0)={[&(0x7f0000000480)='\xe6\xff\xebJ\xe5\xe2\xfdr`\x90\xdaH|F\xd5\xfba\x88r\x12&_\xf9r\xee\x1d2\xd9:Wa.\x06\x0e']}) 209.727707ms ago: executing program 3 (id=175): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 1 [ 53.322355][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.329618][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.337979][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.345945][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.353282][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.361064][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.369330][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.376420][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.385017][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.470673][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.477973][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.485330][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.493042][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.500550][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.517511][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.526186][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.535147][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.543020][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.558326][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.642310][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 53.744429][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 53.801280][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.808615][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.816095][ T5856] bridge_slave_0: entered allmulticast mode [ 53.822838][ T5856] bridge_slave_0: entered promiscuous mode [ 53.830474][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.837570][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.844933][ T5856] bridge_slave_1: entered allmulticast mode [ 53.851869][ T5856] bridge_slave_1: entered promiscuous mode [ 53.908376][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.917744][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 53.935193][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.961926][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.969079][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.977894][ T5860] bridge_slave_0: entered allmulticast mode [ 53.984756][ T5860] bridge_slave_0: entered promiscuous mode [ 53.993989][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.001187][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.008330][ T5860] bridge_slave_1: entered allmulticast mode [ 54.015096][ T5860] bridge_slave_1: entered promiscuous mode [ 54.035235][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 54.051622][ T5856] team0: Port device team_slave_0 added [ 54.070884][ T5856] team0: Port device team_slave_1 added [ 54.078199][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.090107][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.152985][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.160681][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.187310][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.199211][ T5860] team0: Port device team_slave_0 added [ 54.208699][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.215918][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.223405][ T5865] bridge_slave_0: entered allmulticast mode [ 54.230014][ T5865] bridge_slave_0: entered promiscuous mode [ 54.236976][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.244481][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.270440][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.282059][ T5860] team0: Port device team_slave_1 added [ 54.291215][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.298349][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.305538][ T5865] bridge_slave_1: entered allmulticast mode [ 54.312526][ T5865] bridge_slave_1: entered promiscuous mode [ 54.370833][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.380354][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.387305][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.413828][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.424863][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.432490][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.439715][ T5867] bridge_slave_0: entered allmulticast mode [ 54.446177][ T5867] bridge_slave_0: entered promiscuous mode [ 54.459793][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.471929][ T5856] hsr_slave_0: entered promiscuous mode [ 54.478045][ T5856] hsr_slave_1: entered promiscuous mode [ 54.484656][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.491916][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.517959][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.528810][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.536149][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.543338][ T5867] bridge_slave_1: entered allmulticast mode [ 54.550187][ T5867] bridge_slave_1: entered promiscuous mode [ 54.587757][ T5865] team0: Port device team_slave_0 added [ 54.604971][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.616043][ T5865] team0: Port device team_slave_1 added [ 54.627125][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.680585][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.687553][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.714238][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.727678][ T5860] hsr_slave_0: entered promiscuous mode [ 54.733774][ T5860] hsr_slave_1: entered promiscuous mode [ 54.739864][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 54.745576][ T5860] Cannot create hsr debugfs directory [ 54.764294][ T5867] team0: Port device team_slave_0 added [ 54.770813][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.777768][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.804024][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.825002][ T5867] team0: Port device team_slave_1 added [ 54.854817][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.861821][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.887837][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.911499][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.918468][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.944572][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.975833][ T5865] hsr_slave_0: entered promiscuous mode [ 54.982370][ T5865] hsr_slave_1: entered promiscuous mode [ 54.988401][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 54.994328][ T5865] Cannot create hsr debugfs directory [ 55.043973][ T5867] hsr_slave_0: entered promiscuous mode [ 55.050405][ T5867] hsr_slave_1: entered promiscuous mode [ 55.056286][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 55.062234][ T5867] Cannot create hsr debugfs directory [ 55.178025][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.186932][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.206369][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.227859][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.273323][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.285735][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.302511][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.311592][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.345564][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.354830][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.364683][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.377067][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.429945][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.445981][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.455801][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.465203][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.470003][ T5863] Bluetooth: hci0: command tx timeout [ 55.477314][ T5863] Bluetooth: hci1: command tx timeout [ 55.551372][ T5863] Bluetooth: hci2: command tx timeout [ 55.555898][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.572108][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.584476][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.608498][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.618396][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.632530][ T5863] Bluetooth: hci3: command tx timeout [ 55.639915][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.646990][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.656035][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.663160][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.674834][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.681924][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.691076][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.704886][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.712005][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.729612][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.738687][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.745888][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.763502][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.770629][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.799599][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.823149][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.830278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.862724][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.869889][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.001412][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.071441][ T5856] veth0_vlan: entered promiscuous mode [ 56.083245][ T5856] veth1_vlan: entered promiscuous mode [ 56.138416][ T5856] veth0_macvtap: entered promiscuous mode [ 56.162765][ T5856] veth1_macvtap: entered promiscuous mode [ 56.194192][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.214636][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.231735][ T2905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.246624][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.254225][ T2905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.271849][ T2905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.281658][ T2905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.293433][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.332694][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.368283][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.376519][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.381568][ T5860] veth0_vlan: entered promiscuous mode [ 56.398184][ T5867] veth0_vlan: entered promiscuous mode [ 56.419023][ T5860] veth1_vlan: entered promiscuous mode [ 56.428557][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.438609][ T5867] veth1_vlan: entered promiscuous mode [ 56.444245][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.466779][ T5860] veth0_macvtap: entered promiscuous mode [ 56.488814][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.490696][ T5865] veth0_vlan: entered promiscuous mode [ 56.512068][ T5860] veth1_macvtap: entered promiscuous mode [ 56.534453][ T5865] veth1_vlan: entered promiscuous mode [ 56.544342][ T5867] veth0_macvtap: entered promiscuous mode [ 56.558064][ T5867] veth1_macvtap: entered promiscuous mode [ 56.576332][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.604619][ T5865] veth0_macvtap: entered promiscuous mode [ 56.613597][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.628243][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.642953][ T5865] veth1_macvtap: entered promiscuous mode [ 56.654698][ T1101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.668210][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.683702][ T1101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.697451][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.709762][ T1101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.719211][ T5939] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 56.728349][ T5939] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 56.735684][ T1101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.747408][ T5939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 56.756638][ T5939] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 56.767552][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.776318][ T5939] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 56.785162][ T1101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.796449][ T5939] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4) [ 56.806170][ T1101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.815206][ T5939] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 56.822551][ T1101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.835312][ T5939] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 56.842019][ T5939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 56.851778][ T5939] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 56.865984][ T1101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.880533][ T1101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.903454][ T1101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.918462][ T1101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.956483][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.974285][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.002498][ T1101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.029398][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.037241][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.054998][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.074948][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.160546][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.194951][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.208424][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.221721][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.244674][ T5942] /dev/rnullb0: Can't open blockdev [ 57.295875][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.388271][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.409399][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.453759][ T5942] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1665237869 (1665237869 ns) > initial count (677302680 ns). Using initial count to start timer. [ 57.552081][ T5863] Bluetooth: hci0: command tx timeout [ 57.552090][ T5185] Bluetooth: hci1: command tx timeout [ 57.570580][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.629920][ T5863] Bluetooth: hci2: command tx timeout [ 57.711872][ T5863] Bluetooth: hci3: command tx timeout [ 57.760980][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.916067][ T5955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 58.062928][ T5858] usb 2-1: Using ep0 maxpacket: 32 [ 58.076569][ T5858] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 58.091631][ T5858] usb 2-1: config 0 has no interface number 0 [ 58.106367][ T5858] usb 2-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 58.118444][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.135085][ T5858] usb 2-1: Product: syz [ 58.143997][ T5858] usb 2-1: Manufacturer: syz [ 58.149726][ T5858] usb 2-1: SerialNumber: syz [ 58.170522][ T5858] usb 2-1: config 0 descriptor?? [ 58.191918][ T5858] spcp8x5 2-1:0.191: SPCP8x5 converter detected [ 58.213291][ T5858] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 58.427369][ T5858] usb 2-1: USB disconnect, device number 2 [ 58.436681][ T5858] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 58.445365][ T5858] spcp8x5 2-1:0.191: device disconnected [ 59.051530][ T5961] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 59.081448][ T5961] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 59.119040][ T5969] IPv6: syztnl0: Disabled Multicast RS [ 59.128720][ T5969] /dev/rnullb0: Can't open blockdev [ 59.139468][ T2905] nci: nci_rx_work: unknown MT 0x1 [ 59.264038][ T5971] /dev/rnullb0: Can't open blockdev [ 59.314971][ T5973] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 59.466537][ T5978] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 59.475232][ T5978] /dev/rnullb0: Can't open blockdev [ 59.576317][ T30] audit: type=1326 audit(1756758334.601:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.15" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f6f5418ebe9 code=0x0 [ 59.630693][ T5863] Bluetooth: hci0: command tx timeout [ 59.630700][ T5185] Bluetooth: hci1: command tx timeout [ 59.651635][ T5983] Zero length message leads to an empty skb [ 59.709730][ T5863] Bluetooth: hci2: command tx timeout [ 59.773348][ T5990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17'. [ 59.789383][ T5863] Bluetooth: hci3: command tx timeout [ 59.866268][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 60.099401][ T5858] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.259434][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 60.276171][ T5858] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 60.291879][ T5858] usb 4-1: config 0 has no interface number 0 [ 60.310034][ T5858] usb 4-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 60.329403][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.349592][ T5858] usb 4-1: Product: syz [ 60.359351][ T5858] usb 4-1: Manufacturer: syz [ 60.363986][ T5858] usb 4-1: SerialNumber: syz [ 60.391267][ T5858] usb 4-1: config 0 descriptor?? [ 60.399702][ T5858] spcp8x5 4-1:0.191: SPCP8x5 converter detected [ 60.414090][ T5858] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 60.640815][ T5858] usb 4-1: USB disconnect, device number 2 [ 60.673550][ T5858] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 60.779773][ T5858] spcp8x5 4-1:0.191: device disconnected [ 60.995035][ T6011] ======================================================= [ 60.995035][ T6011] WARNING: The mand mount option has been deprecated and [ 60.995035][ T6011] and is ignored by this kernel. Remove the mand [ 60.995035][ T6011] option from the mount to silence this warning. [ 60.995035][ T6011] ======================================================= [ 61.029933][ C1] vkms_vblank_simulate: vblank timer overrun [ 61.037683][ T6011] /dev/rnullb0: Can't open blockdev [ 61.296210][ T6028] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.330651][ T6029] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 61.339276][ T6028] netlink: 56 bytes leftover after parsing attributes in process `syz.0.36'. [ 61.345253][ T6029] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 61.401590][ T6029] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 61.409155][ T6029] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 61.436352][ T6029] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 61.451829][ T6029] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4) [ 61.481993][ T6029] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 61.517091][ T6029] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 61.553706][ T6029] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 61.560374][ T6029] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 61.721363][ T5863] Bluetooth: hci0: command tx timeout [ 61.791246][ T5863] Bluetooth: hci2: command tx timeout [ 61.851097][ T5919] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.873721][ T5863] Bluetooth: hci3: command tx timeout [ 61.989384][ T5919] usb 2-1: device descriptor read/64, error -71 [ 62.229380][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 62.283288][ T6045] gfs2: gfs2 mount does not exist [ 62.379792][ T5919] usb 2-1: device descriptor read/64, error -71 [ 62.489675][ T5919] usb usb2-port1: attempt power cycle [ 62.649662][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.739425][ T5858] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 62.799451][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 62.805906][ T10] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 62.814903][ T10] usb 3-1: config 0 has no interface number 0 [ 62.822688][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 62.831820][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.839871][ T5919] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 62.847418][ T10] usb 3-1: Product: syz [ 62.851648][ T10] usb 3-1: Manufacturer: syz [ 62.856251][ T10] usb 3-1: SerialNumber: syz [ 62.862410][ T10] usb 3-1: config 0 descriptor?? [ 62.868902][ T10] spcp8x5 3-1:0.191: SPCP8x5 converter detected [ 62.875365][ T5858] usb 4-1: device descriptor read/64, error -71 [ 62.883516][ T5919] usb 2-1: device descriptor read/8, error -71 [ 62.889845][ T10] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 63.083794][ T24] usb 3-1: USB disconnect, device number 2 [ 63.092711][ T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 63.101440][ T24] spcp8x5 3-1:0.191: device disconnected [ 63.119850][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 63.139422][ T5919] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 63.160303][ T5919] usb 2-1: device descriptor read/8, error -71 [ 63.250011][ T5858] usb 4-1: device descriptor read/64, error -71 [ 63.270321][ T5919] usb usb2-port1: unable to enumerate USB device [ 63.361517][ T5858] usb usb4-port1: attempt power cycle [ 63.571020][ T5863] Bluetooth: hci0: adv larger than maximum supported [ 63.637149][ T6080] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 63.653870][ T6080] UDF-fs: Scanning with blocksize 4096 failed [ 63.719411][ T5858] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 63.739929][ T5858] usb 4-1: device descriptor read/8, error -71 [ 63.979621][ T5858] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 64.011672][ T5858] usb 4-1: device descriptor read/8, error -71 [ 64.077004][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.53'. [ 64.119750][ T5858] usb usb4-port1: unable to enumerate USB device [ 64.203095][ T6113] netlink: 'syz.2.54': attribute type 6 has an invalid length. [ 64.479486][ T5858] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.631241][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 64.640194][ T5858] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.659450][ T5858] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 64.672995][ T5858] usb 3-1: config 1 interface 0 has no altsetting 1 [ 64.681429][ T5858] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 64.690703][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.698707][ T5858] usb 3-1: Product: syz [ 64.703040][ T5858] usb 3-1: Manufacturer: syz [ 64.707651][ T5858] usb 3-1: SerialNumber: syz [ 64.717148][ T5858] smsusb:smsusb_probe: board id=8, interface number 0 [ 64.868398][ T6130] netlink: 'syz.0.59': attribute type 29 has an invalid length. [ 64.917160][ T6115] syzkaller1: entered promiscuous mode [ 64.924579][ T6115] syzkaller1: entered allmulticast mode [ 64.980836][ T3094] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 65.001973][ T6141] fuse: Bad value for 'user_id' [ 65.006968][ T6141] fuse: Bad value for 'user_id' [ 65.060758][ T5858] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 65.071562][ T5858] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 65.082407][ T5858] usb 3-1: USB disconnect, device number 3 [ 65.170697][ T3094] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 65.195983][ T3094] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.281197][ T6145] /dev/rnullb0: Can't open blockdev [ 65.402171][ T6150] kAFS: unable to lookup cell 'sy0' [ 65.446891][ T3094] usb 2-1: config 0 has no interface number 0 [ 65.459740][ T3094] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 65.470122][ T3094] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.490853][ T3094] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 65.501064][ T3094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.509073][ T3094] usb 2-1: Product: syz [ 65.513379][ T3094] usb 2-1: Manufacturer: syz [ 65.518055][ T3094] usb 2-1: SerialNumber: syz [ 65.525066][ T3094] usb 2-1: config 0 descriptor?? [ 65.694020][ T6158] /dev/rnullb0: Can't open blockdev [ 65.788539][ T6160] process 'syz.3.67' launched './file1' with NULL argv: empty string added [ 65.802195][ T6160] /dev/sg0: Can't lookup blockdev [ 65.901524][ T3094] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 65.930710][ T3094] usb 2-1: USB disconnect, device number 7 [ 66.838535][ T6184] capability: warning: `syz.1.75' uses deprecated v2 capabilities in a way that may be insecure [ 66.853743][ T6188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.459598][ T3094] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 67.522520][ T5919] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 67.633838][ T3094] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 67.656920][ T3094] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 67.690920][ T3094] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 67.709665][ T3094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.720420][ T3094] usb 3-1: Product: syz [ 67.724607][ T3094] usb 3-1: Manufacturer: syz [ 67.741910][ T3094] usb 3-1: SerialNumber: syz [ 67.760960][ T3094] usb 3-1: config 0 descriptor?? [ 67.766553][ T6202] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 67.790557][ T3094] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 67.808466][ T3094] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 67.826873][ T3094] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 67.847095][ T3094] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 67.856303][ T3094] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 67.864740][ T3094] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 67.873998][ T3094] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 67.886418][ T3094] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 68.010311][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.039043][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.153252][ T5899] usb 3-1: USB disconnect, device number 4 [ 68.172261][ T5899] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 68.212926][ T5899] keyspan 3-1:0.0: device disconnected [ 68.887835][ T6225] NILFS (nullb0): couldn't find nilfs on the device [ 69.136496][ T5919] usb 2-1: config 4 has an invalid interface number: 88 but max is 1 [ 69.145409][ T5919] usb 2-1: config 4 has an invalid interface number: 29 but max is 1 [ 69.154123][ T5919] usb 2-1: config 4 has no interface number 0 [ 69.160888][ T5919] usb 2-1: config 4 has no interface number 1 [ 69.167044][ T5919] usb 2-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 69.177910][ T5919] usb 2-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 69.189719][ T5919] usb 2-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 69.201088][ T5919] usb 2-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.214962][ T5919] usb 2-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 69.226897][ T5919] usb 2-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 69.250062][ T5919] usb 2-1: config 4 interface 88 has no altsetting 0 [ 69.256954][ T5919] usb 2-1: config 4 interface 29 has no altsetting 0 [ 69.276270][ T5919] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 69.295556][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.309091][ T5919] usb 2-1: Product: syz [ 69.313963][ T5919] usb 2-1: Manufacturer: syz [ 69.318651][ T5919] usb 2-1: SerialNumber: syz [ 69.330081][ T6184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.736497][ T6245] /dev/rnullb0: Can't open blockdev [ 69.923586][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.970412][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.082989][ T6261] /dev/rnullb0: Can't open blockdev [ 70.208162][ T5919] chaoskey 2-1:4.29: Unable to register with hwrng [ 70.245415][ T5919] usb 2-1: USB disconnect, device number 8 [ 70.843429][ T6284] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 70.878241][ T6284] overlayfs: missing 'lowerdir' [ 71.486496][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.492925][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726950][ T6320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.997338][ T6344] /dev/rnullb0: Can't open blockdev [ 72.058091][ T6347] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.066569][ T3094] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 72.169489][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 72.241532][ T3094] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 72.259426][ T3094] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 72.268601][ T3094] usb 4-1: config 0 has no interface number 1 [ 72.299368][ T3094] usb 4-1: config 0 has no interface number 2 [ 72.305530][ T3094] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 72.316436][ T3094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.332349][ T3094] usb 4-1: config 0 descriptor?? [ 72.431010][ T10] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 72.441856][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.457694][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 72.467001][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.475097][ T10] usb 2-1: Product: syz [ 72.480494][ T10] usb 2-1: Manufacturer: syz [ 72.487327][ T10] usb 2-1: SerialNumber: syz [ 72.499592][ T10] rtl8150 2-1:1.0: couldn't find required endpoints [ 72.510971][ T10] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 72.724407][ T3094] usb 4-1: Could not set interface, error -71 [ 72.777002][ T3094] usb 4-1: USB disconnect, device number 7 [ 72.864809][ T5899] usb 2-1: USB disconnect, device number 9 [ 72.920800][ T6356] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 72.927744][ T6356] /dev/rnullb0: Can't open blockdev [ 73.094868][ T6358] netlink: 'syz.2.125': attribute type 33 has an invalid length. [ 73.109420][ T6358] netlink: 160 bytes leftover after parsing attributes in process `syz.2.125'. [ 73.836005][ T6366] overlay: ./file0 is not a directory [ 73.841517][ T5899] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 73.981672][ T6371] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.989620][ T6371] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 73.998748][ T6371] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 74.003705][ T6367] /dev/rnullb0: Can't open blockdev [ 74.008402][ T6371] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 74.065655][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.099374][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.117858][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 31658, setting to 64 [ 74.129282][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.144074][ T5899] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 74.153467][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.161840][ T5899] usb 4-1: Product: syz [ 74.166186][ T5899] usb 4-1: Manufacturer: syz [ 74.170895][ T5899] usb 4-1: SerialNumber: syz [ 74.177700][ T5899] usb 4-1: config 0 descriptor?? [ 74.187861][ T6361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.200488][ T5899] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 75.439448][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.589463][ T5899] usb 1-1: device descriptor read/64, error -71 [ 75.639506][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 75.801803][ T5858] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 75.812453][ T5858] usb 3-1: config 0 has no interface number 0 [ 75.820205][ T5858] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 75.829415][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.838163][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.848891][ T5858] usb 3-1: config 0 descriptor?? [ 75.856946][ T5858] cp210x 3-1:0.1: cp210x converter detected [ 75.959385][ T5899] usb 1-1: device descriptor read/64, error -71 [ 76.069617][ T5899] usb usb1-port1: attempt power cycle [ 76.187766][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 76.261832][ T5858] cp210x 3-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 76.429674][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.536239][ T5858] usb 3-1: cp210x converter now attached to ttyUSB0 [ 76.541282][ T5899] usb 1-1: device descriptor read/8, error -71 [ 76.631980][ T3094] usb 4-1: USB disconnect, device number 8 [ 76.727221][ T6410] /dev/rnullb0: Can't open blockdev [ 76.740963][ T5858] usb 3-1: USB disconnect, device number 6 [ 76.763563][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 76.764295][ T6416] /dev/rnullb0: Can't open blockdev [ 76.786128][ T5899] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.788450][ T5858] cp210x 3-1:0.1: device disconnected [ 76.819916][ T5899] usb 1-1: device descriptor read/8, error -71 [ 76.929632][ T5899] usb usb1-port1: unable to enumerate USB device [ 77.190175][ T5899] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 77.349610][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 77.356941][ T5899] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 77.366145][ T5899] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 77.376278][ T5899] usb 4-1: config 0 has no interface number 1 [ 77.382924][ T5899] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 77.397886][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.415156][ T5899] usb 4-1: config 0 descriptor?? [ 77.426247][ T5899] usb 4-1: bad CDC descriptors [ 77.954845][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 78.232060][ T6443] /dev/rnullb0: Can't open blockdev [ 78.329760][ T6447] netlink: 'syz.1.154': attribute type 4 has an invalid length. [ 78.454564][ T6452] IPVS: Error connecting to the multicast addr [ 78.678461][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.745361][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.779398][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 78.812248][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.870461][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.939478][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 78.955791][ T43] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 78.968097][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.994862][ T43] usb 2-1: config 0 descriptor?? [ 79.014026][ T43] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 79.040267][ T36] bridge_slave_1: left allmulticast mode [ 79.061609][ T36] bridge_slave_1: left promiscuous mode [ 79.077584][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.108887][ T36] bridge_slave_0: left allmulticast mode [ 79.128262][ T36] bridge_slave_0: left promiscuous mode [ 79.134466][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.153617][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.154736][ T6460] /dev/rnullb0: Can't open blockdev [ 79.177804][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.252074][ T43] usb 2-1: Detected FT232B [ 79.256591][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.264839][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.276895][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.356322][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.374206][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.394349][ T36] bond0 (unregistering): Released all slaves [ 79.656840][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 79.668299][ T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 79.686591][ T43] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 79.726363][ T43] usb 2-1: USB disconnect, device number 10 [ 79.733641][ T6479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.752966][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 79.777666][ T43] ftdi_sio 2-1:0.0: device disconnected [ 79.817847][ T36] hsr_slave_0: left promiscuous mode [ 79.818275][ T36] hsr_slave_1: left promiscuous mode [ 79.818705][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.818720][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.820388][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.820406][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.825083][ T36] veth1_macvtap: left promiscuous mode [ 79.825139][ T36] veth0_macvtap: left promiscuous mode [ 79.825245][ T36] veth1_vlan: left promiscuous mode [ 79.825328][ T36] veth0_vlan: left promiscuous mode [ 80.073319][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 80.128463][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 80.158497][ T36] team0 (unregistering): Port device team_slave_1 removed [ 80.182208][ T36] team0 (unregistering): Port device team_slave_0 removed [ 80.459223][ T3094] usb 4-1: USB disconnect, device number 9 [ 80.596950][ T6461] chnl_net:caif_netlink_parms(): no params data found [ 80.779369][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 80.935279][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.944117][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.945603][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.962090][ T6461] bridge_slave_0: entered allmulticast mode [ 80.979201][ T6461] bridge_slave_0: entered promiscuous mode [ 80.989926][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.997097][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.005881][ T43] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.039752][ T6461] bridge_slave_1: entered allmulticast mode [ 81.046612][ T6461] bridge_slave_1: entered promiscuous mode [ 81.056330][ T43] usb 2-1: config 1 has no interface number 1 [ 81.081350][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.115241][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.126275][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.135979][ T6461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.153266][ T43] usb 2-1: Product: syz [ 81.166660][ T43] usb 2-1: Manufacturer: syz [ 81.171644][ T6461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.180755][ T43] usb 2-1: SerialNumber: syz [ 81.272330][ T6544] /dev/rnullb0: Can't open blockdev [ 81.280835][ T6461] team0: Port device team_slave_0 added [ 81.291496][ T6461] team0: Port device team_slave_1 added [ 81.309581][ T5863] Bluetooth: hci2: command tx timeout [ 81.384739][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.395538][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 81.405964][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.409385][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.419784][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.447907][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.459623][ T6461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.486339][ T6461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.495622][ T6547] /dev/rnullb0: Can't open blockdev [ 81.510687][ T6461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.526134][ T6507] /dev/rnullb0: Can't open blockdev [ 81.552469][ C1] ------------[ cut here ]------------ [ 81.558047][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:2/3094 [ 81.568699][ C1] Modules linked in: [ 81.572547][ T6461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.572647][ C1] CPU: 1 UID: 0 PID: 3094 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 81.592514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.602697][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 81.608801][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 81.614499][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 81.634161][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 81.640277][ C1] RAX: ffffffff8a51b3b7 RBX: ffff88803148a000 RCX: ffff88802f789e00 [ 81.648261][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.656293][ C1] RBP: ffffc90000a08568 R08: ffff88802980a403 R09: 1ffff11005301480 [ 81.664320][ C1] R10: dffffc0000000000 R11: ffffed1005301481 R12: ffff88802f1d8101 [ 81.672356][ C1] R13: dffffc0000000001 R14: 1ffff1100629140b R15: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 81.680380][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 81.689364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.695964][ C1] CR2: 000000110c35213a CR3: 0000000053b0c000 CR4: 00000000003526f0 [ 81.703993][ C1] Call Trace: [ 81.707311][ C1] [ 81.710203][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 81.715608][ C1] ? unwind_next_frame+0xa5/0x2390 [ 81.720775][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.725599][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 81.727944][ T1209] cfg80211: failed to load regulatory.db [ 81.730833][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.730862][ C1] nft_reject_inet_eval+0x441/0x690 [ 81.730888][ C1] nft_do_chain+0x40c/0x1920 [ 81.730906][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.730929][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 81.730942][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 81.765838][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.772229][ C1] ? ktime_get+0x3e/0x1f0 [ 81.776590][ C1] nft_do_chain_inet+0x25d/0x340 [ 81.781573][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 81.787057][ C1] ? NF_HOOK+0x9a/0x3a0 [ 81.791283][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.796074][ C1] ? lock_acquire+0x5f/0x360 [ 81.800706][ C1] ? ip_sabotage_in+0x57/0x270 [ 81.805515][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 81.811021][ C1] nf_hook_slow+0xc5/0x220 [ 81.815454][ C1] NF_HOOK+0x206/0x3a0 [ 81.819623][ C1] ? skb_orphan+0xaf/0xd0 [ 81.823996][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 81.829209][ C1] ? NF_HOOK+0x9a/0x3a0 [ 81.833505][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 81.838221][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 81.843471][ C1] __netif_receive_skb+0xd3/0x380 [ 81.848517][ C1] ? process_backlog+0x2d5/0x14f0 [ 81.853593][ C1] process_backlog+0x60e/0x14f0 [ 81.858493][ C1] ? __pfx_process_backlog+0x10/0x10 [ 81.863848][ C1] ? ktime_get+0x3e/0x1f0 [ 81.868205][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.873031][ C1] __napi_poll+0xc4/0x360 [ 81.877407][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.882220][ C1] net_rx_action+0x707/0xe30 [ 81.886830][ C1] ? ktime_get+0x3e/0x1f0 [ 81.891224][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 81.896356][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.901240][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 81.906486][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 81.911843][ C1] handle_softirqs+0x283/0x870 [ 81.916632][ C1] ? do_softirq+0xec/0x180 [ 81.921134][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 81.927055][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 81.933015][ C1] do_softirq+0xec/0x180 [ 81.937278][ C1] [ 81.940281][ C1] [ 81.943229][ C1] ? __pfx_do_softirq+0x10/0x10 [ 81.948125][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.952968][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 81.958208][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 81.964028][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 81.969079][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 81.975008][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 81.980170][ C1] ? rcu_is_watching+0x15/0xb0 [ 81.984958][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 81.990770][ C1] process_scheduled_works+0xae1/0x17b0 [ 81.996347][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.002422][ C1] worker_thread+0x8a0/0xda0 [ 82.007053][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.013471][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.019444][ C1] ? __kthread_parkme+0x7b/0x200 [ 82.024442][ C1] kthread+0x711/0x8a0 [ 82.028535][ C1] ? __pfx_worker_thread+0x10/0x10 [ 82.033723][ C1] ? __pfx_kthread+0x10/0x10 [ 82.038357][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.043185][ C1] ? __pfx_kthread+0x10/0x10 [ 82.047796][ C1] ret_from_fork+0x47c/0x820 [ 82.052456][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 82.057660][ C1] ? __switch_to_asm+0x39/0x70 [ 82.062494][ C1] ? __switch_to_asm+0x33/0x70 [ 82.067275][ C1] ? __pfx_kthread+0x10/0x10 [ 82.071953][ C1] ret_from_fork_asm+0x1a/0x30 [ 82.076737][ C1] [ 82.079817][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.087104][ C1] CPU: 1 UID: 0 PID: 3094 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 82.096486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.106556][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 82.112654][ C1] Call Trace: [ 82.115951][ C1] [ 82.118810][ C1] dump_stack_lvl+0x99/0x250 [ 82.123518][ C1] ? __asan_memcpy+0x40/0x70 [ 82.128145][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.133390][ C1] ? __pfx__printk+0x10/0x10 [ 82.138137][ C1] vpanic+0x281/0x750 [ 82.142156][ C1] ? __pfx_vpanic+0x10/0x10 [ 82.146670][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 82.151949][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 82.157142][ C1] panic+0xb9/0xc0 [ 82.160858][ C1] ? __pfx_panic+0x10/0x10 [ 82.165357][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 82.170290][ C1] __warn+0x334/0x4c0 [ 82.174283][ C1] ? nf_send_unreach6+0x828/0xa20 [ 82.179301][ C1] ? nf_send_unreach6+0x828/0xa20 [ 82.184341][ C1] report_bug+0x2be/0x4f0 [ 82.188680][ C1] ? nf_send_unreach6+0x828/0xa20 [ 82.193704][ C1] ? nf_send_unreach6+0x828/0xa20 [ 82.198727][ C1] ? nf_send_unreach6+0x82a/0xa20 [ 82.203747][ C1] handle_bug+0x84/0x160 [ 82.207977][ C1] exc_invalid_op+0x1a/0x50 [ 82.212467][ C1] asm_exc_invalid_op+0x1a/0x20 [ 82.217305][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 82.222932][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 82.242532][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 82.248619][ C1] RAX: ffffffff8a51b3b7 RBX: ffff88803148a000 RCX: ffff88802f789e00 [ 82.256581][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.264546][ C1] RBP: ffffc90000a08568 R08: ffff88802980a403 R09: 1ffff11005301480 [ 82.272524][ C1] R10: dffffc0000000000 R11: ffffed1005301481 R12: ffff88802f1d8101 [ 82.280495][ C1] R13: dffffc0000000001 R14: 1ffff1100629140b R15: 0000000000000000 [ 82.288459][ C1] ? nf_send_unreach6+0x827/0xa20 [ 82.293575][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 82.298941][ C1] ? unwind_next_frame+0xa5/0x2390 [ 82.304046][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.308803][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 82.313993][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.318753][ C1] nft_reject_inet_eval+0x441/0x690 [ 82.323947][ C1] nft_do_chain+0x40c/0x1920 [ 82.328525][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.333286][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 82.338300][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 82.343155][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.349475][ C1] ? ktime_get+0x3e/0x1f0 [ 82.353800][ C1] nft_do_chain_inet+0x25d/0x340 [ 82.358727][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 82.364178][ C1] ? NF_HOOK+0x9a/0x3a0 [ 82.368323][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.373079][ C1] ? lock_acquire+0x5f/0x360 [ 82.377661][ C1] ? ip_sabotage_in+0x57/0x270 [ 82.382421][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 82.387869][ C1] nf_hook_slow+0xc5/0x220 [ 82.392292][ C1] NF_HOOK+0x206/0x3a0 [ 82.396356][ C1] ? skb_orphan+0xaf/0xd0 [ 82.400677][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 82.405867][ C1] ? NF_HOOK+0x9a/0x3a0 [ 82.410025][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 82.414605][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 82.419810][ C1] __netif_receive_skb+0xd3/0x380 [ 82.424828][ C1] ? process_backlog+0x2d5/0x14f0 [ 82.429846][ C1] process_backlog+0x60e/0x14f0 [ 82.434694][ C1] ? __pfx_process_backlog+0x10/0x10 [ 82.439980][ C1] ? ktime_get+0x3e/0x1f0 [ 82.444302][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.449056][ C1] __napi_poll+0xc4/0x360 [ 82.453374][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.458126][ C1] net_rx_action+0x707/0xe30 [ 82.462707][ C1] ? ktime_get+0x3e/0x1f0 [ 82.467033][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 82.472133][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.476897][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 82.482091][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 82.487368][ C1] handle_softirqs+0x283/0x870 [ 82.492124][ C1] ? do_softirq+0xec/0x180 [ 82.496535][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 82.501811][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 82.507786][ C1] do_softirq+0xec/0x180 [ 82.512030][ C1] [ 82.514950][ C1] [ 82.517866][ C1] ? __pfx_do_softirq+0x10/0x10 [ 82.522750][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.527534][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 82.532726][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 82.538441][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 82.543461][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 82.549176][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 82.554280][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.559036][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 82.564750][ C1] process_scheduled_works+0xae1/0x17b0 [ 82.570303][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.576290][ C1] worker_thread+0x8a0/0xda0 [ 82.580874][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.587214][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 82.593103][ C1] ? __kthread_parkme+0x7b/0x200 [ 82.598038][ C1] kthread+0x711/0x8a0 [ 82.602099][ C1] ? __pfx_worker_thread+0x10/0x10 [ 82.607199][ C1] ? __pfx_kthread+0x10/0x10 [ 82.611782][ C1] ? rcu_is_watching+0x15/0xb0 [ 82.616537][ C1] ? __pfx_kthread+0x10/0x10 [ 82.621121][ C1] ret_from_fork+0x47c/0x820 [ 82.625709][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 82.630810][ C1] ? __switch_to_asm+0x39/0x70 [ 82.635563][ C1] ? __switch_to_asm+0x33/0x70 [ 82.640315][ C1] ? __pfx_kthread+0x10/0x10 [ 82.644900][ C1] ret_from_fork_asm+0x1a/0x30 [ 82.649687][ C1] [ 82.653047][ C1] Kernel Offset: disabled [ 82.657369][ C1] Rebooting in 86400 seconds..