last executing test programs: 8m35.246674117s ago: executing program 1 (id=452): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8m33.932537603s ago: executing program 1 (id=459): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x58) 8m33.688064844s ago: executing program 3 (id=463): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) ioctl$SG_IO(r1, 0x2285, 0x0) 8m33.617228754s ago: executing program 1 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 8m33.418757114s ago: executing program 3 (id=468): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 8m33.108895107s ago: executing program 0 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) getdents(r3, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8m32.93699s ago: executing program 3 (id=472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)}], 0x1}}], 0x1, 0xc854) sendmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="dc", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x170}}, {{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000005c0)="58dd68d8c9", 0x5}], 0x1}}], 0x2, 0x4044040) 8m32.663458776s ago: executing program 3 (id=473): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 8m32.462439819s ago: executing program 1 (id=474): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m32.349595202s ago: executing program 3 (id=477): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 8m32.176075215s ago: executing program 1 (id=478): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) ioctl$SG_IO(r1, 0x2285, 0x0) 8m32.053932799s ago: executing program 0 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 8m31.986557955s ago: executing program 1 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_pidfd_open(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8m31.711646996s ago: executing program 0 (id=482): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) 8m31.552628038s ago: executing program 0 (id=483): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)}], 0x1}}], 0x1, 0xc854) sendmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="dc", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x170}}, {{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000005c0)="58dd68d8c9", 0x5}], 0x1}}], 0x2, 0x4044040) 8m31.376898279s ago: executing program 0 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 8m31.123922347s ago: executing program 0 (id=486): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x26}}, 0x0) 8m31.059800918s ago: executing program 3 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000110007"], 0xd4}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000140), &(0x7f00000001c0)=0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1}, 0x20040041) 6m49.483693977s ago: executing program 2 (id=842): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 6m47.57681088s ago: executing program 2 (id=845): socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000006d0000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x22}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x150, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) 6m32.456199333s ago: executing program 35 (id=845): socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000006d0000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x22}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x150, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) 4m36.615992042s ago: executing program 7 (id=1405): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81001) 4m35.450728904s ago: executing program 4 (id=1409): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x10000000) 4m33.906690285s ago: executing program 4 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb0, 0x2, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x77}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 4m33.688087442s ago: executing program 7 (id=1413): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES32, @ANYBLOB="140003002001"], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 4m33.612970871s ago: executing program 4 (id=1414): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m33.220143809s ago: executing program 7 (id=1416): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4m33.093847604s ago: executing program 7 (id=1417): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x109401, 0x0) write$vga_arbiter(r0, &(0x7f0000001280)=ANY=[@ANYBLOB='target PCI:0:'], 0x14) 4m33.002250448s ago: executing program 7 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 4m32.820295783s ago: executing program 7 (id=1419): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) socket$packet(0x11, 0x3, 0x300) setuid(0xee00) ioctl$SNAPSHOT_FREE(r0, 0x3305) 4m27.93304843s ago: executing program 4 (id=1438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d", 0x5a}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad11", 0x85}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m27.810247096s ago: executing program 4 (id=1439): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000), 0x0) 4m27.651100248s ago: executing program 4 (id=1440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00943f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0xa000001c}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000100), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 4m17.254357514s ago: executing program 36 (id=1419): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) socket$packet(0x11, 0x3, 0x300) setuid(0xee00) ioctl$SNAPSHOT_FREE(r0, 0x3305) 4m12.583064674s ago: executing program 37 (id=1440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00943f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0xa000001c}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000100), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 3m22.796489062s ago: executing program 6 (id=1569): sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20040080) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 3m22.041897213s ago: executing program 8 (id=1572): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) 3m21.778104451s ago: executing program 8 (id=1573): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m21.384109315s ago: executing program 6 (id=1574): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x2}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m21.257105891s ago: executing program 6 (id=1575): ioprio_set$pid(0x1, 0x0, 0x6000) ioprio_get$pid(0x1, 0x0) r0 = memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) fcntl$addseals(r0, 0x409, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) fallocate(r0, 0x3, 0x6, 0x3) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m19.999311304s ago: executing program 8 (id=1576): socket$l2tp(0x2, 0x2, 0x73) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c"], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) 3m17.445797538s ago: executing program 6 (id=1578): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40", @ANYRES32], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='affs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000004"], 0x0, 0x3a, 0x0, 0x0, 0x5}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r6, 0x3000}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001440)={0x14, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xa084}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x2000000}}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000040000000000000a4a490249bc4155600000000000000"], 0x50) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req={0xfffffe01, 0x3189, 0x18, 0x7fff}, 0x10) r8 = socket(0x23, 0x80805, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x22, 0x5, {0x5, 0x23, "b3b768"}}, &(0x7f0000000140)={0x0, 0x3, 0x67, @string={0x67, 0x3, "06f0c211dc01892b72d4da525ad91e56b416d7811f2a15e01dd35115988373fa76730740eb182af10d3145f3f4878a9fc92a275590eb795a0c927421291b3a37e14792ed93151f053f6a9a1710f8f9dca6fab0573b4b0249d7db31c12170c0cd0f85d32505"}}, &(0x7f0000000300)={0x0, 0xf, 0x51, {0x5, 0xf, 0x51, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xff, 0x1101e, 0x9734, [0xf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xe0, 0x1, 0x5, 0x224, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x2f, 0x5, 0x7ff0000, 0xf000, 0x5, [0xff0000, 0xffc000, 0xf0, 0xff, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xff, 0xa, 0xffff}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x8, 0xff, "a4e068e6", "3cc58487"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x80, 0x7, 0x6, 0x800, 0xd9}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000440)={0x20, 0x9, 0x7f, "d31c1e39d928eadb5c1e32feeb2dd95a678cfc2d54bf0725e2610f39a8ba6c7bfad44334765157e37ff44c81f348518bbe1d659b8b3a178cb84a7c626b6a3f36bdf29141ba621c48b63ef14db80b361bd07439382cf8f030df233437c305dab92210fdd9ac9bab25b4dc570e4863ba9059a24060889aa5262ddfd47ef691c8"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x8, 0x40, [0x1680f]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0xb, 0x2, "dbb2"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @remote}, 0xfffffffffffffffd, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xe}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0xb6}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x3}}) 3m17.17150797s ago: executing program 8 (id=1580): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x682602) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a"], 0x44}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x7, 0x4) r5 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009740)=[{&(0x7f0000000f40)={0x4dc, 0x3f, 0x22d, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0xf3}, @nested={0x385, 0xbb, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @fd}, @nested={0x4, 0x2e}, @nested={0xbd, 0x81, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @fd=r1}, @generic="fa6434a38e4ac582a1eba24a0ccdd93f48f6eb11aea87ac7873f2e04026728e77e73c498de202147dcd24ab58bd1600125d03d98ff044cb8e4ec975ea6e8912975577ff1548ef8e76c61817576daceadf3575a275a957699ec6918c65799b26cc464825d91eb76d1efd4bec6c8c175449958d1f5102ade4d20cd61c0d6a934481d1e5bbf3d33507ecbb01c2310b4fc213c95a137b9dec0079eb8e5cad75b019632a07bdaa699c21163e470105792f6cdc4"]}, @generic="673bf83c1bd94c9281e72e4583a3734cbcc6a6b451a4fda1f6183474077eef3451870476788e6c13cc0fc3d3d7eabc581fac186b72de6864c895d48bc9d35e55c40a98ef4a62b755e8b0202b70190235c4000ba3f9aa219d1224cf498edd735a0b45fefcdf906e8141cdc1c10a2779435cd4f2a851045a721f226bf5c6d2f5e3683592684e662fbd5b8e305c49", @nested={0x21d, 0x68, 0x0, 0x1, [@generic="4ba9d665a5259393801d4ceb6b4f8313802db33230a2fc8ca6eaa156a286b5c717ded32f1d69c1501dca2168f004018e26642d60b23e1b1c1386eaaab95ecfc9732a29d4bb775954e032146bfb30ca5e65ac47f773b7b276d41203d4e717b99def1ee707b5ba86ec120896513a04426b16e525987b5ab446af51cc61ba2a45c8d62effb00863ba29ba9ecee5659151c29dc4e33d599a279633ba419c94e23b73ab03f15551cc6e3d97531e4fca8f9131439bbe", @generic="8900df16c64a0041bac63d2524ec9cfa15fbadfe1270cfd269e7483001a32e79bc9bfea65671e297619bf7fcf21b6c8734d90c2329af1c7a870e380d8db3770bad9e2ae2c5aedb0b9ce7129d8615c1786c42c9ce2cbfe47b051537f24f5fc1ece913ca6fa2f25c4081f3fec3a649871776c2d302b5d8c52e8605e499425a832ba7b91d6d091720ab73cb3fb80c60a10e058e9bfc4f07e8e2d8b351d3f06800b0bf8d1280b6bc19435a62e24fbc8292d6ffc97de078161be508b3243fbf3a5abff5ddf19bd62a3e8083a6bb8bf44f61e063d75a191e80c0d3917160253af60e3ad4a102f0ffd478412c73eb066ca00cbeb721157a50caf38c", @generic="971edc094a0ee0db08d304274c4a7b441aeaae61b20863488673610c8e0433cc3aab17d75b9f85ce02b63fa288dde8a360595fb1b8859881baa487d0065f283e6e3c64f9dc4bea8b3163ed7ac9cf7e95213ce7912a5e0eb6c99200ee3fd1e44f0d68688a078de3adf0f5089261ef"]}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8e, 0x138, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic="663f98afc4124dfaedba25ebf2c36a3fa72791579cf441690ce5bfea5221bae40c040c7ab837dbc407f1b975c472472ea9015939a219c09fa9c0bde7b3c730de91fb907b3b38e1f9cbd79157367bc82a05c9637d8089cdf4f935cb0d0811453c000954ee964bafce9abae2bd0628f1661c8e6b37f5a70153e322d77d8069", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x8}, @generic]}, @generic="56654540a80ae4fa1c01d76d89b959b637b8bbbc9ae8c49794d2dc25ae602307d047b420aba01a9b47d8867f02a9f9241a1e2b98c89a3ccef16eef8ec88015f37e406f4bbc1d5bdba70cadfcb599e88c64105082e3e5e23a07858a7de20f35c83c5eacd9aa1f7e0e0cfcec0616d646871cb2f00d75967748c12965fe6224a2d0100af51ca204665dd582083ada23e9687ccac5eac2d46330c5268520ac0e14e8e0e65d3c1f26f61241007a8064"]}, 0x4dc}], 0x1, 0x0, 0x0, 0x4000007}, 0x20004800) 3m2.392654696s ago: executing program 8 (id=1587): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006a013e001001000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0/file0\x00', &(0x7f00000002c0)={0x800, 0x0, 0x5}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) 2m47.74905149s ago: executing program 38 (id=1585): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009740)=[{&(0x7f0000000f40)={0x4dc, 0x3f, 0x22d, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0xf3}, @nested={0x385, 0xbb, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @fd}, @nested={0x4, 0x2e}, @nested={0xbd, 0x81, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @fd=r1}, @generic="fa6434a38e4ac582a1eba24a0ccdd93f48f6eb11aea87ac7873f2e04026728e77e73c498de202147dcd24ab58bd1600125d03d98ff044cb8e4ec975ea6e8912975577ff1548ef8e76c61817576daceadf3575a275a957699ec6918c65799b26cc464825d91eb76d1efd4bec6c8c175449958d1f5102ade4d20cd61c0d6a934481d1e5bbf3d33507ecbb01c2310b4fc213c95a137b9dec0079eb8e5cad75b019632a07bdaa699c21163e470105792f6cdc4"]}, @generic="673bf83c1bd94c9281e72e4583a3734cbcc6a6b451a4fda1f6183474077eef3451870476788e6c13cc0fc3d3d7eabc581fac186b72de6864c895d48bc9d35e55c40a98ef4a62b755e8b0202b70190235c4000ba3f9aa219d1224cf498edd735a0b45fefcdf906e8141cdc1c10a2779435cd4f2a851045a721f226bf5c6d2f5e3683592684e662fbd5b8e305c49", @nested={0x21d, 0x68, 0x0, 0x1, [@generic="4ba9d665a5259393801d4ceb6b4f8313802db33230a2fc8ca6eaa156a286b5c717ded32f1d69c1501dca2168f004018e26642d60b23e1b1c1386eaaab95ecfc9732a29d4bb775954e032146bfb30ca5e65ac47f773b7b276d41203d4e717b99def1ee707b5ba86ec120896513a04426b16e525987b5ab446af51cc61ba2a45c8d62effb00863ba29ba9ecee5659151c29dc4e33d599a279633ba419c94e23b73ab03f15551cc6e3d97531e4fca8f9131439bbe", @generic="8900df16c64a0041bac63d2524ec9cfa15fbadfe1270cfd269e7483001a32e79bc9bfea65671e297619bf7fcf21b6c8734d90c2329af1c7a870e380d8db3770bad9e2ae2c5aedb0b9ce7129d8615c1786c42c9ce2cbfe47b051537f24f5fc1ece913ca6fa2f25c4081f3fec3a649871776c2d302b5d8c52e8605e499425a832ba7b91d6d091720ab73cb3fb80c60a10e058e9bfc4f07e8e2d8b351d3f06800b0bf8d1280b6bc19435a62e24fbc8292d6ffc97de078161be508b3243fbf3a5abff5ddf19bd62a3e8083a6bb8bf44f61e063d75a191e80c0d3917160253af60e3ad4a102f0ffd478412c73eb066ca00cbeb721157a50caf38c", @generic="971edc094a0ee0db08d304274c4a7b441aeaae61b20863488673610c8e0433cc3aab17d75b9f85ce02b63fa288dde8a360595fb1b8859881baa487d0065f283e6e3c64f9dc4bea8b3163ed7ac9cf7e95213ce7912a5e0eb6c99200ee3fd1e44f0d68688a078de3adf0f5089261ef"]}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8e, 0x138, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic="663f98afc4124dfaedba25ebf2c36a3fa72791579cf441690ce5bfea5221bae40c040c7ab837dbc407f1b975c472472ea9015939a219c09fa9c0bde7b3c730de91fb907b3b38e1f9cbd79157367bc82a05c9637d8089cdf4f935cb0d0811453c000954ee964bafce9abae2bd0628f1661c8e6b37f5a70153e322d77d8069", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x8}, @generic]}, @generic="56654540a80ae4fa1c01d76d89b959b637b8bbbc9ae8c49794d2dc25ae602307d047b420aba01a9b47d8867f02a9f9241a1e2b98c89a3ccef16eef8ec88015f37e406f4bbc1d5bdba70cadfcb599e88c64105082e3e5e23a07858a7de20f35c83c5eacd9aa1f7e0e0cfcec0616d646871cb2f00d75967748c12965fe6224a2d0100af51ca204665dd582083ada23e9687ccac5eac2d46330c5268520ac0e14e8e0e65d3c1f26f61241007a8064"]}, 0x4dc}], 0x1, 0x0, 0x0, 0x4000007}, 0x20004800) 2m47.266811969s ago: executing program 39 (id=1587): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000006a013e001001000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0/file0\x00', &(0x7f00000002c0)={0x800, 0x0, 0x5}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) 332.04681ms ago: executing program 5 (id=4454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000740)={{0x2, 0x4e22, @remote}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x22, {0x2, 0x4e20, @loopback}, 'xfrm0\x00'}) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000040)={0x3, 0x1, @start={0xa}}) 257.767688ms ago: executing program 5 (id=4455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 160.025414ms ago: executing program 5 (id=4456): syz_emit_ethernet(0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 142.027937ms ago: executing program 5 (id=4457): socket(0x2, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 94.743279ms ago: executing program 5 (id=4458): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802009d5a00002ef345260000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000002000000850000000800000095000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xa}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) mmap$IORING_OFF_PBUF_RING(0x0, 0x247, 0x0, 0x4000010, 0xffffffffffffffff, 0x8002f304) mmap$IORING_OFF_SQES(0x0, 0x3, 0x1000001, 0x50, 0xffffffffffffffff, 0x10000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) 0s ago: executing program 5 (id=4459): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x488880, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7, 0x8, 0x1, 0x7f, 'syz1\x00'}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r0, 0x81, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x12, 0x14, "8ba59f7b7a41be5604413c657780da7dce86b6ef8361ca550a0ab27f73bb0121863763ddbcb829a123ee3d4ddf9ea9f0540919ca01aef5de3ab2a77a9008284a", "1d23122d66b46031639dd513bd01720ebf007cab0ae8266bda52bceddc4cc8efb7827c392cb919ff9a62b2e3077258fad247dfef45fd7751ea92c968ec2fc597", "05ab79d4aa8091f23bd5c8e9ae74cf176712c8d768b6ecfe4e22adbe9f116f57", [0x9, 0x4]}}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004001}], 0x1, 0x80) r7 = gettid() capset(&(0x7f0000000140)={0x19980330, r7}, &(0x7f0000000180)={0x3, 0x5, 0x3, 0x5, 0x7f, 0xb}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x3, "0c8ac4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x31d}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="040000"], 0x10) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): devsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.322081][ T3103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.414116][ T3103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.679987][ T3103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.680005][ T3103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.753522][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.064920][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.223627][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.223644][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.361776][ T3103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.363031][ T3103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.363280][ T3103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.363748][ T3103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.558752][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.558771][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.695260][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.695279][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.896201][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.896221][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.412015][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.412031][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.741991][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.742008][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.071272][ T1748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.071290][ T1748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.542624][ T5870] tipc: Started in network mode [ 95.542656][ T5870] tipc: Node identity da1ae369783f, cluster identity 4711 [ 95.543009][ T5870] tipc: Enabled bearer , priority 0 [ 95.583587][ T5870] syzkaller0: entered promiscuous mode [ 95.583609][ T5870] syzkaller0: entered allmulticast mode [ 95.624168][ T5871] faux_driver vgem: [drm] Unknown color mode 11; guessing buffer size. [ 95.715506][ T5870] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 96.603748][ T5892] tipc: Resetting bearer [ 96.648468][ T5869] tipc: Resetting bearer [ 96.836839][ T5869] tipc: Disabling bearer [ 99.980816][ T5720] tipc: Node number set to 2720392041 [ 102.276425][ T5961] Illegal XDP return value 4294967274 on prog (id 5) dev N/A, expect packet loss! [ 102.372582][ T5964] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 102.372606][ T5964] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 102.372615][ T5964] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 104.743347][ T6003] batadv0: entered promiscuous mode [ 104.826899][ T6003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.759049][ T6029] netlink: 'syz.2.95': attribute type 4 has an invalid length. [ 106.050630][ T6036] bridge0: port 3(syz_tun) entered blocking state [ 106.050839][ T6036] bridge0: port 3(syz_tun) entered disabled state [ 106.076015][ T6038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.98'. [ 106.091797][ T6036] syz_tun: entered allmulticast mode [ 106.106218][ T6036] syz_tun: entered promiscuous mode [ 106.121728][ T6036] bridge0: port 3(syz_tun) entered blocking state [ 106.121879][ T6036] bridge0: port 3(syz_tun) entered forwarding state [ 106.221154][ T6039] bridge0: port 3(syz_tun) entered learning state [ 106.830578][ T6054] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.033473][ T6058] Zero length message leads to an empty skb [ 108.194389][ T6077] syzkaller0: entered promiscuous mode [ 108.194412][ T6077] syzkaller0: entered allmulticast mode [ 111.599468][ T6127] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.159891][ T6139] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.289176][ T6147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.437691][ T6174] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 113.686455][ T6174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.250937][ T6198] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 114.250959][ T6198] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 114.250969][ T6198] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 114.757992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.672768][ T6224] netlink: 14 bytes leftover after parsing attributes in process `syz.0.171'. [ 116.185805][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 116.618485][ T6264] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 117.686904][ T6264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.782244][ T6269] macvlan2: entered promiscuous mode [ 117.782268][ T6269] macvlan2: entered allmulticast mode [ 117.938794][ T6275] bond1: (slave ip6gretap1): making interface the new active one [ 117.961854][ T6275] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 118.584767][ T6306] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 118.994669][ T6306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.593564][ T6329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.593579][ T6329] IPv6: NLM_F_CREATE should be set when creating new route [ 119.593742][ T6329] IPv6: NLM_F_CREATE should be set when creating new route [ 119.594607][ T6329] IPv6: NLM_F_CREATE should be set when creating new route [ 120.077424][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.215'. [ 120.269190][ T6338] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 120.685959][ T6338] bond1 (unregistering): Released all slaves [ 121.229772][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 123.134440][ T6373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.780138][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 123.990205][ T6388] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 124.260513][ T6386] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 124.343650][ T6386] bond2 (unregistering): Released all slaves [ 124.495647][ T6388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.817987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.279486][ T6475] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 130.486886][ T6483] syz.4.267 (6483) used greatest stack depth: 19392 bytes left [ 130.513926][ T6475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.737282][ T37] audit: type=1326 audit(1783218655.605:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6500 comm="syz.0.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3988de59 code=0x7ffc0000 [ 130.737329][ T37] audit: type=1326 audit(1783218655.605:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6500 comm="syz.0.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3988de59 code=0x7ffc0000 [ 130.737365][ T37] audit: type=1326 audit(1783218655.605:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6500 comm="syz.0.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3988de59 code=0x7ffc0000 [ 130.737398][ T37] audit: type=1326 audit(1783218655.605:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6500 comm="syz.0.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fbd3988de59 code=0x7ffc0000 [ 130.737429][ T37] audit: type=1326 audit(1783218655.605:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6500 comm="syz.0.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd3988de59 code=0x7ffc0000 [ 130.741097][ T37] audit: type=1326 audit(1783218655.605:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6500 comm="syz.0.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd3988de59 code=0x7ffc0000 [ 130.741139][ T37] audit: type=1326 audit(1783218655.605:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6500 comm="syz.0.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd3988de59 code=0x7ffc0000 [ 132.750101][ T6531] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 132.757604][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757675][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.958751][ T6533] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 133.158646][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.645422][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 133.883659][ T6559] netlink: 292 bytes leftover after parsing attributes in process `syz.4.297'. [ 133.883694][ T6559] netlink: 60 bytes leftover after parsing attributes in process `syz.4.297'. [ 135.352060][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 138.284144][ T6635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.284474][ T6635] IPv6: NLM_F_CREATE should be set when creating new route [ 138.296144][ T6635] IPv6: NLM_F_CREATE should be set when creating new route [ 138.296304][ T6635] IPv6: NLM_F_CREATE should be set when creating new route [ 138.652617][ T6634] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 138.845652][ T6643] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 139.004676][ T6634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.254909][ T6643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.961461][ T6687] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 141.764160][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.825488][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.223657][ T6710] ======================================================= [ 142.223657][ T6710] WARNING: The mand mount option has been deprecated and [ 142.223657][ T6710] and is ignored by this kernel. Remove the mand [ 142.223657][ T6710] option from the mount to silence this warning. [ 142.223657][ T6710] ======================================================= [ 142.232450][ T6710] 9p: Bad value for 'wfdno' [ 142.640985][ T6718] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 142.922246][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.948963][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.625361][ T6687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.674819][ T6718] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 144.686096][ T3078] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.710271][ T3078] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.710314][ T3078] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.710340][ T3078] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.754355][ T6764] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 145.805852][ T6764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.371511][ T6787] 9p: Bad value for 'rfdno' [ 146.789436][ T6797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.378'. [ 147.432491][ T6809] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 147.574897][ T6809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.745097][ T6828] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 148.003029][ T6828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.149126][ T822] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.378670][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 148.425851][ T822] usb 5-1: config 1 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 148.425893][ T822] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.425916][ T822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 148.461118][ T822] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 148.461146][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.461163][ T822] usb 5-1: Product: syz [ 148.461175][ T822] usb 5-1: Manufacturer: syz [ 148.461187][ T822] usb 5-1: SerialNumber: syz [ 149.195182][ T6861] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 149.344992][ T6861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.567936][ T822] usb 5-1: USB disconnect, device number 2 [ 151.173528][ T6900] syz.2.415 uses obsolete (PF_INET,SOCK_PACKET) [ 151.989599][ T6911] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 152.297785][ T6911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.878659][ T6939] capability: warning: `syz.3.430' uses deprecated v2 capabilities in a way that may be insecure [ 153.415565][ T6955] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 153.744670][ T6955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.859809][ T6968] syzkaller0: entered promiscuous mode [ 153.859834][ T6968] syzkaller0: entered allmulticast mode [ 154.052140][ T6977] usb usb7: usbfs: process 6977 (syz.1.442) did not claim interface 0 before use [ 157.027017][ T7047] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 157.250961][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 157.280640][ T7047] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.827396][ T7091] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 159.536052][ T7104] overlayfs: failed to resolve './file0': -2 [ 164.762252][ T7140] Invalid ELF header magic: != ELF [ 166.397497][ T7164] program syz.2.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.186737][ T4911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.240913][ T4911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.243400][ T4911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.247643][ T4911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.287438][ T4911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.775055][ T7091] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 174.567571][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.599128][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.624450][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.654809][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.661180][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.694384][ T5602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.747101][ T4911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.757543][ T4911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.773782][ T4911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.774817][ T4911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.393135][ T4911] Bluetooth: hci5: command tx timeout [ 175.501647][ T5606] bridge0: port 3(syz_tun) entered disabled state [ 175.632050][ T5606] syz_tun (unregistering): left allmulticast mode [ 175.632081][ T5606] syz_tun (unregistering): left promiscuous mode [ 175.632581][ T5606] bridge0: port 3(syz_tun) entered disabled state [ 176.988125][ T4911] Bluetooth: hci6: command tx timeout [ 177.177075][ T4911] Bluetooth: hci0: command tx timeout [ 178.010767][ T4911] Bluetooth: hci5: command tx timeout [ 178.533465][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.080083][ T4911] Bluetooth: hci6: command tx timeout [ 179.228073][ T4911] Bluetooth: hci0: command tx timeout [ 179.326790][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.361673][ T7274] netlink: 'syz.2.547': attribute type 10 has an invalid length. [ 179.505627][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.505653][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.540215][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.540242][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.028570][ T4911] Bluetooth: hci5: command tx timeout [ 180.180564][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.622370][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.152705][ T4911] Bluetooth: hci6: command tx timeout [ 181.774900][ T822] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.984117][ T4911] Bluetooth: hci0: command tx timeout [ 182.041376][ T822] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 182.041401][ T822] usb 5-1: config 2 has no interface number 0 [ 182.041428][ T822] usb 5-1: config 2 interface 79 has no altsetting 0 [ 182.075842][ T822] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 182.075869][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.075885][ T822] usb 5-1: Product: syz [ 182.075893][ T822] usb 5-1: Manufacturer: syz [ 182.075900][ T822] usb 5-1: SerialNumber: syz [ 182.108618][ T4911] Bluetooth: hci5: command tx timeout [ 182.181623][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz.2.556'. [ 182.989222][ T822] usb 5-1: USB disconnect, device number 3 [ 183.023464][ T12] bridge_slave_1: left allmulticast mode [ 183.023616][ T12] bridge_slave_1: left promiscuous mode [ 183.024494][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.229388][ T4911] Bluetooth: hci6: command tx timeout [ 183.280169][ T12] bridge_slave_0: left allmulticast mode [ 183.284696][ T12] bridge_slave_0: left promiscuous mode [ 183.284932][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.031874][ T4911] Bluetooth: hci0: command tx timeout [ 184.250258][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 185.869152][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.893335][ T37] audit: type=1326 audit(1783218710.765:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.893455][ T37] audit: type=1326 audit(1783218710.765:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.893619][ T37] audit: type=1326 audit(1783218710.765:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.893749][ T37] audit: type=1326 audit(1783218710.765:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.893904][ T37] audit: type=1326 audit(1783218710.765:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.894031][ T37] audit: type=1326 audit(1783218710.765:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.894165][ T37] audit: type=1326 audit(1783218710.765:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.894321][ T37] audit: type=1326 audit(1783218710.765:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.894486][ T37] audit: type=1326 audit(1783218710.765:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 185.894630][ T37] audit: type=1326 audit(1783218710.765:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.4.565" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3ecdede59 code=0x7ffc0000 [ 186.020953][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.151826][ T12] bond0 (unregistering): Released all slaves [ 186.302631][ T12] bond1 (unregistering): Released all slaves [ 186.327882][ T12] bond2 (unregistering): Released all slaves [ 186.363868][ T12] bond3 (unregistering): Released all slaves [ 186.406519][ T12] bond4 (unregistering): Released all slaves [ 186.446019][ T12] bond5 (unregistering): Released all slaves [ 187.767392][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.767465][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.767626][ T7177] bridge_slave_0: entered allmulticast mode [ 187.776765][ T7177] bridge_slave_0: entered promiscuous mode [ 187.942940][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.944597][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.944788][ T7177] bridge_slave_1: entered allmulticast mode [ 187.947324][ T7177] bridge_slave_1: entered promiscuous mode [ 188.144307][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.144423][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.144652][ T7197] bridge_slave_0: entered allmulticast mode [ 188.153346][ T7197] bridge_slave_0: entered promiscuous mode [ 188.237670][ T12] tipc: Left network mode [ 188.302371][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.302480][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.302642][ T7197] bridge_slave_1: entered allmulticast mode [ 188.306024][ T7197] bridge_slave_1: entered promiscuous mode [ 188.355524][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.465824][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.085248][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 189.345257][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.593267][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.660823][ T7177] team0: Port device team_slave_0 added [ 189.928898][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.929016][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.929231][ T7199] bridge_slave_0: entered allmulticast mode [ 189.937437][ T7199] bridge_slave_0: entered promiscuous mode [ 189.982707][ T7177] team0: Port device team_slave_1 added [ 190.032529][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.032665][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.032871][ T7199] bridge_slave_1: entered allmulticast mode [ 190.042803][ T7199] bridge_slave_1: entered promiscuous mode [ 190.129849][ T7197] team0: Port device team_slave_0 added [ 190.327605][ T7418] program syz.2.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.463195][ T7422] netlink: 14 bytes leftover after parsing attributes in process `syz.4.591'. [ 190.885138][ T7197] team0: Port device team_slave_1 added [ 191.161568][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.161583][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.161605][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.372050][ T7199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.449917][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 191.486606][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.486624][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.486646][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.575057][ T7199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.620419][ T7447] program syz.4.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.693395][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.693411][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.693432][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.782398][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.782413][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.782434][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.809502][ T7199] team0: Port device team_slave_0 added [ 191.956697][ T37] kauditd_printk_skb: 395 callbacks suppressed [ 191.956714][ T37] audit: type=1326 audit(1783218716.825:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 191.956755][ T37] audit: type=1326 audit(1783218716.825:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 191.956791][ T37] audit: type=1326 audit(1783218716.825:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 191.956825][ T37] audit: type=1326 audit(1783218716.825:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 192.008139][ T37] audit: type=1326 audit(1783218716.875:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 192.008185][ T37] audit: type=1326 audit(1783218716.875:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 192.030994][ T37] audit: type=1326 audit(1783218716.905:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 192.031875][ T37] audit: type=1326 audit(1783218716.905:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 192.036718][ T37] audit: type=1326 audit(1783218716.905:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 192.061904][ T37] audit: type=1326 audit(1783218716.935:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.2.604" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cc1b5e68e code=0x7ffc0000 [ 192.114701][ T12] hsr_slave_0: left promiscuous mode [ 192.163308][ T12] hsr_slave_1: left promiscuous mode [ 192.165719][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.165824][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.222046][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.222077][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.575101][ T7466] capability: warning: `syz.2.607' uses 32-bit capabilities (legacy support in use) [ 192.650187][ T7469] program syz.2.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.710157][ T12] veth1_macvtap: left promiscuous mode [ 192.710589][ T12] veth0_macvtap: left promiscuous mode [ 192.711272][ T12] veth1_vlan: left promiscuous mode [ 192.737831][ T12] veth0_vlan: left promiscuous mode [ 194.245102][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245174][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.749754][ T12] team0 (unregistering): Port device team_slave_1 removed [ 194.821071][ T12] team0 (unregistering): Port device team_slave_0 removed [ 195.171198][ T7199] team0: Port device team_slave_1 added [ 195.449303][ T7177] hsr_slave_0: entered promiscuous mode [ 195.486927][ T7177] hsr_slave_1: entered promiscuous mode [ 195.487913][ T7177] debugfs: 'hsr0' already exists in 'hsr' [ 195.487932][ T7177] Cannot create hsr debugfs directory [ 195.641470][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.641484][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.641503][ T7199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.704821][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.704836][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.704857][ T7199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.833381][ T7197] hsr_slave_0: entered promiscuous mode [ 195.834704][ T7197] hsr_slave_1: entered promiscuous mode [ 195.835567][ T7197] debugfs: 'hsr0' already exists in 'hsr' [ 195.835588][ T7197] Cannot create hsr debugfs directory [ 196.238804][ T7199] hsr_slave_0: entered promiscuous mode [ 196.243629][ T7199] hsr_slave_1: entered promiscuous mode [ 196.245469][ T7199] debugfs: 'hsr0' already exists in 'hsr' [ 196.245491][ T7199] Cannot create hsr debugfs directory [ 197.301659][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 198.964332][ T7177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.106039][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.123825][ T7177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.235089][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.267727][ T7177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.358883][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.439107][ T7177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.542032][ T7177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.105040][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.472618][ T5599] Bluetooth: hci4: command 0x0406 tx timeout [ 201.481283][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 201.566037][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 201.775719][ T7622] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 201.825428][ T7622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.942053][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'. [ 202.023527][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.145302][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 202.158607][ T7197] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.232584][ T7197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.259685][ T7197] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.322744][ T7197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.685636][ T7645] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 203.776973][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.839680][ T7197] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.920403][ T7197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.996811][ T7645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 204.070042][ T7197] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.192647][ T7197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.239896][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 204.310257][ T7662] netlink: 'syz.2.675': attribute type 1 has an invalid length. [ 204.392111][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.514648][ T7662] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 207.280902][ T7199] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.302090][ T7706] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 207.354451][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.462475][ T7706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 207.463306][ T7199] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 207.515861][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.541539][ T7707] macvlan2: entered promiscuous mode [ 207.541563][ T7707] macvlan2: entered allmulticast mode [ 207.694050][ T7199] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 207.735078][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.775393][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 207.781638][ T7199] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 207.833167][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.237251][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.150242][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.692'. [ 209.322551][ T7738] program syz.2.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.673263][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.788878][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 209.788910][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 209.869717][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.909922][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.910100][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.949949][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.955369][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.026675][ T7754] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 210.186739][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.266555][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.335902][ T7754] 8021q: adding VLAN 0 to HW filter on device bond10 [ 211.322700][ T7775] program syz.4.702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.675128][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 211.675151][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 211.729052][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.056995][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 212.233406][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.424362][ T7795] program syz.2.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.579103][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 212.723817][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.856883][ T1470] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.857011][ T1470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.915283][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.915477][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.981998][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.374357][ T7199] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.452624][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.467428][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.554185][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.554258][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.885979][ T7854] netlink: 292 bytes leftover after parsing attributes in process `syz.2.726'. [ 215.886002][ T7854] netlink: 72 bytes leftover after parsing attributes in process `syz.2.726'. [ 215.899202][ T12] bridge_slave_1: left allmulticast mode [ 215.899234][ T12] bridge_slave_1: left promiscuous mode [ 215.899478][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.014744][ T37] kauditd_printk_skb: 276 callbacks suppressed [ 216.014760][ T37] audit: type=1326 audit(1783218740.885:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.015526][ T37] audit: type=1326 audit(1783218740.885:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.022755][ T37] audit: type=1326 audit(1783218740.895:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.022794][ T37] audit: type=1326 audit(1783218740.895:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.022830][ T37] audit: type=1326 audit(1783218740.895:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.022864][ T37] audit: type=1326 audit(1783218740.895:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.022898][ T37] audit: type=1326 audit(1783218740.895:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.022933][ T37] audit: type=1326 audit(1783218740.895:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.022969][ T37] audit: type=1326 audit(1783218740.895:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.023004][ T37] audit: type=1326 audit(1783218740.895:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.2.728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 216.124403][ T12] bridge_slave_0: left allmulticast mode [ 216.124437][ T12] bridge_slave_0: left promiscuous mode [ 216.127320][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.571037][ T12] bridge_slave_1: left allmulticast mode [ 217.571067][ T12] bridge_slave_1: left promiscuous mode [ 217.571298][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.630218][ T12] bridge_slave_0: left allmulticast mode [ 218.633462][ T12] bridge_slave_0: left promiscuous mode [ 218.633710][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.686369][ T7877] netlink: 292 bytes leftover after parsing attributes in process `syz.2.735'. [ 218.686391][ T7877] netlink: 72 bytes leftover after parsing attributes in process `syz.2.735'. [ 218.861324][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.738'. [ 219.636129][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.710394][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.751607][ T12] bond0 (unregistering): Released all slaves [ 219.757535][ T12] bond1 (unregistering): Released all slaves [ 219.768125][ T12] bond2 (unregistering): Released all slaves [ 219.778331][ T12] bond3 (unregistering): Released all slaves [ 219.791343][ T12] bond4 (unregistering): Released all slaves [ 220.228792][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.288709][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.310918][ T12] bond0 (unregistering): Released all slaves [ 220.316815][ T12] bond1 (unregistering): Released all slaves [ 220.328329][ T12] bond2 (unregistering): Released all slaves [ 220.341459][ T12] bond3 (unregistering): Released all slaves [ 220.378968][ T7887] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 220.495240][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 221.421088][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.581447][ T7919] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 222.837449][ T7919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.693903][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'. [ 223.711761][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.729979][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 224.364306][ T7177] veth0_vlan: entered promiscuous mode [ 224.667074][ T7177] veth1_vlan: entered promiscuous mode [ 225.117636][ T7984] program syz.2.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.728919][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.975476][ T7177] veth0_macvtap: entered promiscuous mode [ 226.055293][ T7177] veth1_macvtap: entered promiscuous mode [ 226.580171][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 226.598147][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 226.598162][ T37] audit: type=1326 audit(1783218751.455:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.598202][ T37] audit: type=1326 audit(1783218751.455:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.598239][ T37] audit: type=1326 audit(1783218751.455:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.598275][ T37] audit: type=1326 audit(1783218751.465:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.605923][ T37] audit: type=1326 audit(1783218751.475:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.708139][ T37] audit: type=1326 audit(1783218751.575:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.708188][ T37] audit: type=1326 audit(1783218751.575:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.708225][ T37] audit: type=1326 audit(1783218751.575:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.708260][ T37] audit: type=1326 audit(1783218751.575:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.708296][ T37] audit: type=1326 audit(1783218751.575:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.2.756" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 226.919929][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.923501][ T7197] veth0_vlan: entered promiscuous mode [ 226.992269][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.089323][ T3582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.089973][ T7197] veth1_vlan: entered promiscuous mode [ 227.288541][ T12] hsr_slave_0: left promiscuous mode [ 227.329276][ T12] hsr_slave_1: left promiscuous mode [ 227.329934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.329950][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.389647][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.389670][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.538196][ T12] hsr_slave_0: left promiscuous mode [ 227.578178][ T12] hsr_slave_1: left promiscuous mode [ 227.579260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.579282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.609851][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.609875][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.702722][ T12] batadv0: left promiscuous mode [ 227.702873][ T12] veth1_macvtap: left promiscuous mode [ 227.702926][ T12] veth0_macvtap: left promiscuous mode [ 227.703105][ T12] veth1_vlan: left promiscuous mode [ 227.703207][ T12] veth0_vlan: left promiscuous mode [ 227.858353][ T12] veth1_macvtap: left promiscuous mode [ 227.858415][ T12] veth0_macvtap: left promiscuous mode [ 227.858562][ T12] veth1_vlan: left promiscuous mode [ 227.858661][ T12] veth0_vlan: left promiscuous mode [ 229.218742][ T12] team0 (unregistering): Port device team_slave_1 removed [ 229.251136][ T12] team0 (unregistering): Port device team_slave_0 removed [ 230.050008][ T12] team0 (unregistering): Port device team_slave_1 removed [ 230.090441][ T12] team0 (unregistering): Port device team_slave_0 removed [ 230.292673][ T3582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.320445][ T3582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.327526][ T3582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.958608][ T7199] veth0_vlan: entered promiscuous mode [ 231.901620][ T7197] veth0_macvtap: entered promiscuous mode [ 231.917227][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 231.925567][ T7199] veth1_vlan: entered promiscuous mode [ 232.583727][ T7197] veth1_macvtap: entered promiscuous mode [ 232.597494][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.597511][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.812841][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.890317][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.890335][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.891579][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.921524][ T7199] veth0_macvtap: entered promiscuous mode [ 232.945652][ T102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.143921][ T102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.147663][ T7199] veth1_macvtap: entered promiscuous mode [ 233.224487][ T102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.262102][ T102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.305071][ T4911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.352100][ T4911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.369935][ T4911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.374649][ T4911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.375503][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.388150][ T5693] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 233.582436][ T5693] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 233.582462][ T5693] usb 3-1: config 2 has no interface number 0 [ 233.582490][ T5693] usb 3-1: config 2 interface 79 has no altsetting 0 [ 233.588584][ T5693] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 233.588608][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.588625][ T5693] usb 3-1: Product: syz [ 233.588637][ T5693] usb 3-1: Manufacturer: syz [ 233.588649][ T5693] usb 3-1: SerialNumber: syz [ 234.167221][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.833593][ T5693] usb 3-1: USB disconnect, device number 2 [ 235.183567][ T37] kauditd_printk_skb: 92 callbacks suppressed [ 235.183583][ T37] audit: type=1326 audit(1783218760.045:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183642][ T37] audit: type=1326 audit(1783218760.055:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183678][ T37] audit: type=1326 audit(1783218760.055:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183713][ T37] audit: type=1326 audit(1783218760.055:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183747][ T37] audit: type=1326 audit(1783218760.055:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183783][ T37] audit: type=1326 audit(1783218760.055:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183818][ T37] audit: type=1326 audit(1783218760.055:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183853][ T37] audit: type=1326 audit(1783218760.055:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183890][ T37] audit: type=1326 audit(1783218760.055:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.183926][ T37] audit: type=1326 audit(1783218760.055:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.2.774" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 235.330763][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.373433][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.376051][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.386376][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.435805][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.442371][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.444324][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.451262][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.469709][ T5602] Bluetooth: hci2: command tx timeout [ 235.537106][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.542600][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.623696][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.360702][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 237.482275][ T60] Bluetooth: hci5: command tx timeout [ 237.568203][ T60] Bluetooth: hci2: command tx timeout [ 237.662347][ T60] Bluetooth: hci3: command tx timeout [ 239.155298][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.438372][ T5687] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 239.548401][ T60] Bluetooth: hci5: command tx timeout [ 239.600330][ T5687] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 239.600355][ T5687] usb 5-1: config 2 has no interface number 0 [ 239.600383][ T5687] usb 5-1: config 2 interface 79 has no altsetting 0 [ 239.628867][ T60] Bluetooth: hci2: command tx timeout [ 239.645670][ T5687] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 239.645699][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.645717][ T5687] usb 5-1: Product: syz [ 239.645778][ T5687] usb 5-1: Manufacturer: syz [ 239.645792][ T5687] usb 5-1: SerialNumber: syz [ 239.692670][ T8150] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 239.708110][ T60] Bluetooth: hci3: command tx timeout [ 240.621551][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.894035][ T5687] usb 5-1: USB disconnect, device number 4 [ 240.908854][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 241.628242][ T60] Bluetooth: hci5: command tx timeout [ 241.708064][ T60] Bluetooth: hci2: command tx timeout [ 241.788189][ T60] Bluetooth: hci3: command tx timeout [ 241.908765][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 241.914589][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.550624][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.733749][ T8200] program syz.2.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.975575][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 242.975592][ T37] audit: type=1326 audit(1783218767.845:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 242.975893][ T37] audit: type=1326 audit(1783218767.845:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 242.976116][ T37] audit: type=1326 audit(1783218767.845:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 242.976375][ T37] audit: type=1326 audit(1783218767.845:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 243.060371][ T37] audit: type=1326 audit(1783218767.905:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 243.060419][ T37] audit: type=1326 audit(1783218767.905:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 243.060455][ T37] audit: type=1326 audit(1783218767.905:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 243.060490][ T37] audit: type=1326 audit(1783218767.905:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 243.060524][ T37] audit: type=1326 audit(1783218767.905:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc1b9de59 code=0x7ffc0000 [ 243.060560][ T37] audit: type=1326 audit(1783218767.905:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8201 comm="syz.2.790" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cc1b5e68e code=0x7ffc0000 [ 243.713508][ T60] Bluetooth: hci5: command tx timeout [ 243.869445][ T60] Bluetooth: hci3: command tx timeout [ 245.853862][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.854058][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.854251][ T8071] bridge_slave_0: entered allmulticast mode [ 245.888879][ T8071] bridge_slave_0: entered promiscuous mode [ 246.031724][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.031813][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.031998][ T8071] bridge_slave_1: entered allmulticast mode [ 246.037854][ T8071] bridge_slave_1: entered promiscuous mode [ 246.042926][ T8252] program syz.4.797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.666710][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.807597][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.855894][ T8283] program syz.4.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.066822][ T8071] team0: Port device team_slave_0 added [ 249.067070][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.067182][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.067340][ T8091] bridge_slave_0: entered allmulticast mode [ 249.073321][ T8091] bridge_slave_0: entered promiscuous mode [ 249.104008][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.104118][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.104324][ T8093] bridge_slave_0: entered allmulticast mode [ 249.139222][ T8093] bridge_slave_0: entered promiscuous mode [ 249.150503][ T8071] team0: Port device team_slave_1 added [ 249.152000][ T8091] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.152108][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.152266][ T8091] bridge_slave_1: entered allmulticast mode [ 249.159019][ T8091] bridge_slave_1: entered promiscuous mode [ 249.176806][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.176945][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.177157][ T8093] bridge_slave_1: entered allmulticast mode [ 249.180974][ T8093] bridge_slave_1: entered promiscuous mode [ 249.715198][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.715213][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.715234][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.721838][ T8091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.729205][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.730591][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.730602][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.730623][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.743112][ T8091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.749238][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.906990][ T8091] team0: Port device team_slave_0 added [ 249.949100][ T8093] team0: Port device team_slave_0 added [ 249.952718][ T8091] team0: Port device team_slave_1 added [ 251.208483][ T8310] program syz.4.813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.469918][ T8093] team0: Port device team_slave_1 added [ 251.836248][ T8071] hsr_slave_0: entered promiscuous mode [ 251.837030][ T8071] hsr_slave_1: entered promiscuous mode [ 252.353605][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.353620][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.353642][ T8091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.761669][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.761684][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.761707][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.764139][ T8091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.764151][ T8091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.764172][ T8091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.912781][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.912791][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.912804][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.462226][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 253.541498][ T8091] hsr_slave_0: entered promiscuous mode [ 253.547030][ T8091] hsr_slave_1: entered promiscuous mode [ 253.555854][ T8091] debugfs: 'hsr0' already exists in 'hsr' [ 253.555878][ T8091] Cannot create hsr debugfs directory [ 253.613963][ T8093] hsr_slave_0: entered promiscuous mode [ 253.615355][ T8093] hsr_slave_1: entered promiscuous mode [ 253.631396][ T8093] debugfs: 'hsr0' already exists in 'hsr' [ 253.631423][ T8093] Cannot create hsr debugfs directory [ 254.234418][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 254.234443][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 254.578636][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 255.633419][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.633477][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.831977][ T8071] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.263853][ T8071] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.649749][ T8071] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.442585][ T8071] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.663604][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 259.438715][ T12] bridge_slave_1: left allmulticast mode [ 259.438749][ T12] bridge_slave_1: left promiscuous mode [ 259.438994][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.614334][ T12] bridge_slave_0: left allmulticast mode [ 259.614369][ T12] bridge_slave_0: left promiscuous mode [ 259.614615][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.942440][ T12] bridge_slave_1: left allmulticast mode [ 259.942473][ T12] bridge_slave_1: left promiscuous mode [ 259.942772][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.104281][ T12] bridge_slave_0: left allmulticast mode [ 260.104316][ T12] bridge_slave_0: left promiscuous mode [ 260.104544][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.398754][ T12] bridge_slave_1: left allmulticast mode [ 260.398899][ T12] bridge_slave_1: left promiscuous mode [ 260.399133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.509761][ T12] bridge_slave_0: left allmulticast mode [ 260.509793][ T12] bridge_slave_0: left promiscuous mode [ 260.510037][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.709013][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.788909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.811409][ T12] bond0 (unregistering): Released all slaves [ 263.492101][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.560244][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.601162][ T12] bond0 (unregistering): Released all slaves [ 264.730273][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.809150][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.850799][ T12] bond0 (unregistering): Released all slaves [ 267.126212][ T8440] infiniband syz0: set active [ 267.126231][ T8440] infiniband syz0: added bond_slave_0 [ 267.211469][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 267.262227][ T8440] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 267.375462][ T8440] infiniband syz0: Couldn't open port 1 [ 267.375877][ T8440] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 267.375905][ T8440] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 267.375940][ T8440] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 267.901384][ T8440] RDS/IB: syz0: added [ 267.937073][ T8440] smc: adding ib device syz0 with port count 1 [ 268.115806][ T8440] smc: ib device syz0 port 1 has no pnetid [ 268.828969][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 271.915103][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 273.062346][ T8071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.641993][ T8071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.682072][ T8071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.749809][ T8071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.754617][ T8071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.864395][ T8071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.867224][ T8071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.929481][ T8071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.822416][ T8091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.887916][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.907693][ T8091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.950502][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.504426][ T8091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 275.557745][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.569657][ T8091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.630901][ T8091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.424205][ T8093] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.489340][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.521373][ T8093] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.573217][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.593586][ T8093] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.626803][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.661570][ T8093] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.724206][ T8093] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.830384][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.013096][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.043038][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.043210][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.109905][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.110097][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.239367][ T8091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.404459][ T8091] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.472484][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.472681][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.564188][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.564356][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.631411][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.837363][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.879591][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.883007][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.905038][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.915734][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.154205][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.215007][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.216954][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.395710][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.398672][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.812563][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 279.890322][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.029107][ T60] Bluetooth: hci0: command tx timeout [ 280.418695][ T8091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.964967][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.853505][ T8071] veth0_vlan: entered promiscuous mode [ 282.110003][ T60] Bluetooth: hci0: command tx timeout [ 282.125648][ T8091] veth0_vlan: entered promiscuous mode [ 282.127677][ T8071] veth1_vlan: entered promiscuous mode [ 282.268902][ T8091] veth1_vlan: entered promiscuous mode [ 282.573037][ T8093] veth0_vlan: entered promiscuous mode [ 282.938651][ T12] hsr_slave_0: left promiscuous mode [ 282.978733][ T12] hsr_slave_1: left promiscuous mode [ 282.979683][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.979699][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.039072][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.039097][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.198901][ T12] hsr_slave_0: left promiscuous mode [ 283.218412][ T12] hsr_slave_1: left promiscuous mode [ 283.219122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.219137][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.270610][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.270632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.408456][ T12] hsr_slave_0: left promiscuous mode [ 283.428148][ T12] hsr_slave_1: left promiscuous mode [ 283.428822][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.428837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.479347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.479373][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.604024][ T12] veth1_macvtap: left promiscuous mode [ 283.604089][ T12] veth0_macvtap: left promiscuous mode [ 283.604237][ T12] veth1_vlan: left promiscuous mode [ 283.604342][ T12] veth0_vlan: left promiscuous mode [ 283.728486][ T12] veth1_macvtap: left promiscuous mode [ 283.728587][ T12] veth0_macvtap: left promiscuous mode [ 283.731606][ T12] veth1_vlan: left promiscuous mode [ 283.731736][ T12] veth0_vlan: left promiscuous mode [ 283.768420][ T12] veth1_macvtap: left promiscuous mode [ 283.768483][ T12] veth0_macvtap: left promiscuous mode [ 283.768621][ T12] veth1_vlan: left promiscuous mode [ 283.768721][ T12] veth0_vlan: left promiscuous mode [ 284.190080][ T60] Bluetooth: hci0: command tx timeout [ 284.698605][ T12] team0 (unregistering): Port device team_slave_1 removed [ 284.738609][ T12] team0 (unregistering): Port device team_slave_0 removed [ 285.310671][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.350478][ T12] team0 (unregistering): Port device team_slave_0 removed [ 285.889006][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.928661][ T12] team0 (unregistering): Port device team_slave_0 removed [ 286.101957][ T8071] veth0_macvtap: entered promiscuous mode [ 286.115408][ T8093] veth1_vlan: entered promiscuous mode [ 286.186041][ T8071] veth1_macvtap: entered promiscuous mode [ 286.211880][ T8091] veth0_macvtap: entered promiscuous mode [ 286.268601][ T60] Bluetooth: hci0: command tx timeout [ 286.407296][ T8091] veth1_macvtap: entered promiscuous mode [ 286.579678][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.696097][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.696739][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.696964][ T8696] bridge_slave_0: entered allmulticast mode [ 286.707365][ T8696] bridge_slave_0: entered promiscuous mode [ 286.719163][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.721853][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.819053][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.819246][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.819463][ T8696] bridge_slave_1: entered allmulticast mode [ 286.822029][ T8696] bridge_slave_1: entered promiscuous mode [ 286.908513][ T8091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.937529][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.918423][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.919102][ T8093] veth0_macvtap: entered promiscuous mode [ 287.935365][ T8696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.025912][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.036587][ T8696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.050503][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.140482][ T8093] veth1_macvtap: entered promiscuous mode [ 288.147156][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.197804][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.207710][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.342214][ T67] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.359356][ T8696] team0: Port device team_slave_0 added [ 288.383056][ T8696] team0: Port device team_slave_1 added [ 288.716476][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 288.746639][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.746654][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.746675][ T8696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.925686][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.925701][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.925723][ T8696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.199041][ T8841] gtp0: entered promiscuous mode [ 289.199066][ T8841] gtp0: entered allmulticast mode [ 289.671807][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.162627][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.314244][ T8696] hsr_slave_0: entered promiscuous mode [ 290.315695][ T8696] hsr_slave_1: entered promiscuous mode [ 290.316687][ T8696] debugfs: 'hsr0' already exists in 'hsr' [ 290.316711][ T8696] Cannot create hsr debugfs directory [ 290.327725][ T102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.344744][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.344763][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.514060][ T102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.818120][ T102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.927622][ T102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.066169][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.066187][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.459021][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.459039][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.081406][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.081424][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.521887][ T8217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.521905][ T8217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.046689][ T3103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.046708][ T3103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.685979][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.929'. [ 295.186486][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.935'. [ 295.633623][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.726004][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.939'. [ 295.933993][ T8696] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 296.003957][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.7.940'. [ 296.034683][ T8696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.048801][ T8696] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 296.868392][ T8696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.553908][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.612232][ T8696] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 297.723346][ T8696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.748980][ T8696] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 297.856984][ T8696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.987920][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.7.951'. [ 298.902086][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.717315][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.966'. [ 300.717337][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.966'. [ 300.724797][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.971821][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 301.493996][ T8696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.620235][ T8696] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.703170][ T1470] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.703271][ T1470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.284562][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 302.284582][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.978'. [ 302.329513][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.330554][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.546311][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.980'. [ 303.304067][ T12] bridge_slave_1: left allmulticast mode [ 303.304102][ T12] bridge_slave_1: left promiscuous mode [ 303.331811][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.539023][ T9102] syz.5.982 (9102) used greatest stack depth: 18720 bytes left [ 303.635071][ T12] bridge_slave_0: left allmulticast mode [ 303.635103][ T12] bridge_slave_0: left promiscuous mode [ 303.635318][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.297852][ T9153] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 305.359208][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.428687][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.455447][ T12] bond0 (unregistering): Released all slaves [ 305.497927][ T12] bond1 (unregistering): Released all slaves [ 305.542421][ T12] bond2 (unregistering): Released all slaves [ 305.613009][ T12] bond3 (unregistering): Released all slaves [ 305.660768][ T12] bond4 (unregistering): Released all slaves [ 305.698688][ T12] bond5 (unregistering): Released all slaves [ 305.721987][ T12] bond6 (unregistering): Released all slaves [ 305.745616][ T12] bond7 (unregistering): Released all slaves [ 305.774219][ T12] bond8 (unregistering): Released all slaves [ 305.911626][ T12] bond9 (unregistering): Released all slaves [ 305.933077][ T12] bond10 (unregistering): Released all slaves [ 306.009351][ T9153] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 306.244143][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 306.368074][ T8402] syz0: Port: 1 Link DOWN [ 306.533739][ T12] IPVS: stopping backup sync thread 8150 ... [ 307.497478][ T9214] netlink: 'syz.5.1012': attribute type 1 has an invalid length. [ 308.470946][ T8696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.561897][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 310.452430][ T8696] veth0_vlan: entered promiscuous mode [ 310.503089][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 310.533716][ T8696] veth1_vlan: entered promiscuous mode [ 310.704252][ T8696] veth0_macvtap: entered promiscuous mode [ 310.714776][ T8696] veth1_macvtap: entered promiscuous mode [ 310.765203][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.800308][ T8696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.889236][ T5954] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.892312][ T157] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.892353][ T157] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.892383][ T157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.486456][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1044'. [ 312.562980][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.562998][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.749769][ T5257] 8021q: adding VLAN 0 to HW filter on device eth16 [ 314.010617][ T12] hsr_slave_0: left promiscuous mode [ 314.041947][ T12] hsr_slave_1: left promiscuous mode [ 314.347097][ T12] veth1_macvtap: left promiscuous mode [ 314.415254][ T12] veth0_macvtap: left promiscuous mode [ 314.415483][ T12] veth1_vlan: left promiscuous mode [ 314.415622][ T12] veth0_vlan: left promiscuous mode [ 314.582254][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1059'. [ 315.257154][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1068'. [ 315.538570][ T12] team0 (unregistering): Port device team_slave_1 removed [ 315.578818][ T12] team0 (unregistering): Port device team_slave_0 removed [ 315.681992][ T67] smc: removing ib device syz0 [ 316.177334][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.177353][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.505682][ T9424] syzkaller0: entered promiscuous mode [ 316.505705][ T9424] syzkaller0: entered allmulticast mode [ 316.711989][ T9416] uprobe: syz.4.1074:9416 failed to unregister, leaking uprobe [ 316.712951][ T9416] uprobe: syz.4.1074:9416 failed to unregister, leaking uprobe [ 317.070591][ T67] smbdirect: ib_dev[syz0] removed [ 317.074942][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.075006][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.847093][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1086'. [ 317.861039][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1085'. [ 318.371419][ T9464] uprobe: syz.4.1089:9464 failed to unregister, leaking uprobe [ 318.379955][ T9464] uprobe: syz.4.1089:9464 failed to unregister, leaking uprobe [ 318.880994][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1098'. [ 319.169276][ T9490] batadv0: entered promiscuous mode [ 319.171763][ T9490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.176746][ T9490] batadv0: left promiscuous mode [ 320.086338][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1111'. [ 320.187392][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1113'. [ 323.177985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 323.337986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 323.778441][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1129'. [ 324.696332][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1137'. [ 325.148343][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 325.308365][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 325.317812][ T9] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 325.317850][ T9] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 325.317870][ T9] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.317891][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 325.372904][ T9] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 325.372962][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.372993][ T9] usb 5-1: Product: syz [ 325.373015][ T9] usb 5-1: Manufacturer: syz [ 325.373028][ T9] usb 5-1: SerialNumber: syz [ 325.813893][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 325.899369][ T9617] usb usb7: usbfs: process 9617 (syz.6.1149) did not claim interface 0 before use [ 325.955808][ T9] usb 5-1: USB disconnect, device number 5 [ 326.186423][ T9] usblp0: removed [ 327.931750][ T9643] syz.6.1158 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 327.931809][ T9643] CPU: 1 UID: 0 PID: 9643 Comm: syz.6.1158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.931830][ T9643] Tainted: [L]=SOFTLOCKUP [ 327.931835][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.931850][ T9643] Call Trace: [ 327.931856][ T9643] [ 327.931863][ T9643] dump_stack_lvl+0xe8/0x150 [ 327.931899][ T9643] dump_header+0xd3/0x4b0 [ 327.931923][ T9643] oom_kill_process+0x3ab/0x970 [ 327.931947][ T9643] out_of_memory+0x1064/0x1480 [ 327.931976][ T9643] ? __pfx_out_of_memory+0x10/0x10 [ 327.931993][ T9643] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.932013][ T9643] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.932033][ T9643] ? _mutex_lock_killable+0x152/0x1d0 [ 327.932049][ T9643] ? try_charge_memcg+0xbb6/0x15b0 [ 327.932068][ T9643] try_charge_memcg+0xc75/0x15b0 [ 327.932096][ T9643] ? __pfx_try_charge_memcg+0x10/0x10 [ 327.932127][ T9643] ? charge_memcg+0x20/0x2b0 [ 327.932144][ T9643] charge_memcg+0x19c/0x2b0 [ 327.932162][ T9643] __mem_cgroup_charge+0x25/0x80 [ 327.932177][ T9643] shmem_get_folio_gfp+0x81a/0x1c40 [ 327.932220][ T9643] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 327.932240][ T9643] ? filemap_map_pages+0x1db/0x1d10 [ 327.932269][ T9643] shmem_fault+0x170/0x380 [ 327.932290][ T9643] __do_fault+0x138/0x2a0 [ 327.932309][ T9643] do_pte_missing+0x1828/0x28f0 [ 327.932333][ T9643] ? handle_mm_fault+0xe8/0x13f0 [ 327.932359][ T9643] handle_mm_fault+0xd28/0x13f0 [ 327.932386][ T9643] ? handle_mm_fault+0xe8/0x13f0 [ 327.932409][ T9643] ? __pfx_handle_mm_fault+0x10/0x10 [ 327.932441][ T9643] ? __lock_acquire+0x683/0x2ce0 [ 327.932460][ T9643] ? lock_mm_and_find_vma+0xa7/0x340 [ 327.932479][ T9643] do_user_addr_fault+0x744/0x1340 [ 327.932516][ T9643] exc_page_fault+0x6a/0xc0 [ 327.932535][ T9643] asm_exc_page_fault+0x26/0x30 [ 327.932550][ T9643] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 327.932568][ T9643] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 327.932581][ T9643] RSP: 0000:ffffc90005f3fa38 EFLAGS: 00050206 [ 327.932601][ T9643] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 327.932611][ T9643] RDX: 0000000000000001 RSI: 0000200000108000 RDI: ffffc90005f3fac0 [ 327.932621][ T9643] RBP: ffffc90005f3fc50 R08: ffffc90005f3faf7 R09: 1ffff92000be7f5e [ 327.932632][ T9643] R10: dffffc0000000000 R11: fffff52000be7f5f R12: ffffc90005f3fbc0 [ 327.932643][ T9643] R13: ffffc90005f3fac0 R14: ffffc90005f3fac0 R15: 0000200000108000 [ 327.932667][ T9643] _copy_from_user+0x7a/0xb0 [ 327.932686][ T9643] ___sys_recvmsg+0x173/0x5a0 [ 327.932707][ T9643] ? __pfx____sys_recvmsg+0x10/0x10 [ 327.932726][ T9643] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.932745][ T9643] ? irqentry_exit+0x218/0x8f0 [ 327.932793][ T9643] do_recvmmsg+0x320/0x7f0 [ 327.932816][ T9643] ? __pfx_do_recvmmsg+0x10/0x10 [ 327.932832][ T9643] ? do_futex+0x3e7/0x4e0 [ 327.932871][ T9643] __x64_sys_recvmmsg+0x198/0x250 [ 327.932889][ T9643] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 327.932912][ T9643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.932928][ T9643] do_syscall_64+0x174/0x580 [ 327.932947][ T9643] ? trace_irq_disable+0x3b/0x140 [ 327.932961][ T9643] ? clear_bhb_loop+0x40/0x90 [ 327.932979][ T9643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.932993][ T9643] RIP: 0033:0x7ff4e17ade59 [ 327.933011][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.933021][ T9643] RSP: 002b:00007ff4df9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 327.933036][ T9643] RAX: ffffffffffffffda RBX: 00007ff4e1a36090 RCX: 00007ff4e17ade59 [ 327.933047][ T9643] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 327.933056][ T9643] RBP: 00007ff4e1843e6f R08: 0000000000000000 R09: 0000000000000000 [ 327.933065][ T9643] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 327.933074][ T9643] R13: 00007ff4e1a36128 R14: 00007ff4e1a36090 R15: 00007ffd277d30d8 [ 327.933099][ T9643] [ 327.933109][ T9643] memory: usage 307200kB, limit 307200kB, failcnt 3895 [ 327.933118][ T9643] memory+swap: usage 308412kB, limit 9007199254740988kB, failcnt 0 [ 327.933128][ T9643] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 327.933138][ T9643] Memory cgroup stats for /syz6: [ 327.933505][ T9643] cache 0 [ 327.933512][ T9643] rss 12288 [ 327.933517][ T9643] shmem 0 [ 327.933522][ T9643] mapped_file 0 [ 327.933527][ T9643] dirty 0 [ 327.933531][ T9643] writeback 0 [ 327.933536][ T9643] workingset_refault_anon 291 [ 327.933541][ T9643] workingset_refault_file 0 [ 327.933547][ T9643] swap 1232896 [ 327.933551][ T9643] swapcached 2535424 [ 327.933556][ T9643] pgpgin 9400 [ 327.933561][ T9643] pgpgout 9373 [ 327.933566][ T9643] pgfault 12969 [ 327.933571][ T9643] pgmajfault 219 [ 327.933576][ T9643] inactive_anon 0 [ 327.933581][ T9643] active_anon 0 [ 327.933585][ T9643] inactive_file 0 [ 327.933590][ T9643] active_file 0 [ 327.933595][ T9643] unevictable 0 [ 327.933600][ T9643] hierarchical_memory_limit 314572800 [ 327.933606][ T9643] hierarchical_memsw_limit 9223372036854771712 [ 327.933612][ T9643] total_cache 0 [ 327.933616][ T9643] total_rss 12288 [ 327.933621][ T9643] total_shmem 0 [ 327.933626][ T9643] total_mapped_file 0 [ 327.933631][ T9643] total_dirty 0 [ 327.933636][ T9643] total_writeback 0 [ 327.933641][ T9643] total_workingset_refault_anon 291 [ 327.933646][ T9643] total_workingset_refault_file 0 [ 327.933652][ T9643] total_swap 1232896 [ 327.933657][ T9643] total_swapcached 2535424 [ 327.933662][ T9643] total_pgpgin 9400 [ 327.933667][ T9643] total_pgpgout 9373 [ 327.933672][ T9643] total_pgfault 12969 [ 327.933677][ T9643] total_pgmajfault 219 [ 327.933682][ T9643] total_inactive_anon 0 [ 327.933687][ T9643] total_active_anon 0 [ 327.933692][ T9643] total_inactive_file 0 [ 327.933697][ T9643] total_active_file 0 [ 327.933702][ T9643] total_unevictable 0 [ 327.933707][ T9643] anon_cost 67 [ 327.933712][ T9643] file_cost 0 [ 327.933717][ T9643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1158,pid=9635,uid=0 [ 327.936444][ T9643] Memory cgroup out of memory: Killed process 9635 (syz.6.1158) total-vm:104484kB, anon-rss:1252kB, file-rss:22912kB, shmem-rss:20kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 329.062852][ T9643] syz.6.1158 (9643) used greatest stack depth: 18248 bytes left [ 329.235404][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1164'. [ 331.551192][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1179'. [ 332.143267][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 340.537697][ T9880] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 340.849273][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1229'. [ 344.307844][ T9939] batadv0: entered promiscuous mode [ 344.362840][ T9939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.773289][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 347.656439][ T9996] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1273'. [ 351.851010][T10030] netlink: 'syz.6.1286': attribute type 1 has an invalid length. [ 351.851029][T10030] netlink: 'syz.6.1286': attribute type 1 has an invalid length. [ 351.851039][T10030] netlink: 'syz.6.1286': attribute type 1 has an invalid length. [ 351.851050][T10030] netlink: 'syz.6.1286': attribute type 1 has an invalid length. [ 351.943722][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1289'. [ 360.112192][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 360.207273][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 360.226919][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 366.100904][T10130] netlink: 'syz.6.1305': attribute type 4 has an invalid length. [ 366.200074][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1305'. [ 366.200099][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1305'. [ 366.200114][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1305'. [ 368.648174][ T11] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 368.894236][ T11] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.894310][ T11] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91 [ 368.894332][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.173555][ T11] ttusb_dec_send_command: command bulk message failed: error -22 [ 369.173813][ T11] ttusb-dec 7-1:1.0: probe with driver ttusb-dec failed with error -22 [ 377.985722][ T5687] usb 7-1: USB disconnect, device number 2 [ 378.510547][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510614][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.851303][T10287] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 379.816001][T10287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.099089][T10289] macvlan3: entered promiscuous mode [ 381.099112][T10289] macvlan3: entered allmulticast mode [ 387.195038][T10347] netlink: 'syz.6.1377': attribute type 1 has an invalid length. [ 390.027344][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1395'. [ 396.270545][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1413'. [ 400.405499][T10489] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1432'. [ 400.587776][T10458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 400.587922][T10458] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 401.504796][ T4911] Bluetooth: hci0: command 0x0406 tx timeout [ 402.593206][ T4911] Bluetooth: hci4: command 0x0406 tx timeout [ 403.150805][T10458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.150893][T10458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 403.450522][T10521] netlink: 'syz.5.1444': attribute type 1 has an invalid length. [ 403.851746][T10521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.045332][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 405.228140][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 407.333683][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 409.023845][T10562] 9p: Could not find request transport: xen [ 409.673713][T10458] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 409.673946][T10458] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 411.708331][ T5602] Bluetooth: hci5: command 0x0406 tx timeout [ 412.181076][T10458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.181160][T10458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 412.360402][T10458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 412.360541][T10458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 413.681637][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 413.788466][ T5602] Bluetooth: hci5: command 0x0406 tx timeout [ 414.188187][ T5602] Bluetooth: hci3: command 0x0406 tx timeout [ 414.438248][ T5602] Bluetooth: hci0: command 0x0406 tx timeout [ 415.383053][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1477'. [ 416.121397][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 416.232621][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 416.275144][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 416.365148][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 416.367816][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 416.516419][ T5599] Bluetooth: hci0: command 0x0406 tx timeout [ 417.039935][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1483'. [ 417.661691][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.737038][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.748919][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.750052][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.774312][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.108261][ T4911] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 418.438981][ T5599] Bluetooth: hci6: command tx timeout [ 419.334688][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1493'. [ 419.948445][ T5599] Bluetooth: hci3: command tx timeout [ 420.508149][ T5599] Bluetooth: hci6: command tx timeout [ 422.039139][ T5599] Bluetooth: hci3: command tx timeout [ 422.588243][ T5599] Bluetooth: hci6: command tx timeout [ 424.118220][ T5599] Bluetooth: hci3: command tx timeout [ 424.670472][ T5599] Bluetooth: hci6: command tx timeout [ 424.843816][ T1748] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.190730][ T5599] Bluetooth: hci3: command tx timeout [ 431.652033][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1515'. [ 434.437249][ T1748] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.644598][T10744] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1520'. [ 436.854328][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1520'. [ 438.057760][T10755] 9p: Could not find request transport: xen [ 440.217734][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.217805][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.574915][ T1748] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.089694][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1530'. [ 448.468061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 448.905250][T10793] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1534'. [ 450.710325][ T1748] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.678177][ T11] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 452.886870][ T11] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 452.886897][ T11] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 452.886915][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.886932][ T11] usb 6-1: config 0 has no interface number 0 [ 452.886962][ T11] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 452.886997][ T11] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 452.887021][ T11] usb 6-1: config 0 interface 255 has no altsetting 0 [ 452.887052][ T11] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 452.887072][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.014063][ T11] usb 6-1: config 0 descriptor?? [ 456.452824][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.452961][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.453189][T10633] bridge_slave_0: entered allmulticast mode [ 456.492977][T10633] bridge_slave_0: entered promiscuous mode [ 456.537793][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.537922][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.554188][T10633] bridge_slave_1: entered allmulticast mode [ 456.567083][T10633] bridge_slave_1: entered promiscuous mode [ 456.832827][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.973975][ T9] usb 6-1: USB disconnect, device number 2 [ 457.128299][T10856] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.263278][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.058320][ T11] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 458.261957][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.261982][ T11] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.262067][ T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.262089][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.365741][ T11] usb 6-1: config 0 descriptor?? [ 459.625602][T10633] team0: Port device team_slave_0 added [ 459.639427][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.639541][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.639898][T10586] bridge_slave_0: entered allmulticast mode [ 459.686506][T10586] bridge_slave_0: entered promiscuous mode [ 459.794434][T10633] team0: Port device team_slave_1 added [ 459.797369][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.797488][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.797700][T10586] bridge_slave_1: entered allmulticast mode [ 459.848952][T10586] bridge_slave_1: entered promiscuous mode [ 460.323160][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.323175][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.323196][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.448288][ T5730] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 460.620990][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.622407][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.622421][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.622444][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.684006][ T5730] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 460.684032][ T5730] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 460.684049][ T5730] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 460.684067][ T5730] usb 7-1: config 0 has no interface number 0 [ 460.684107][ T5730] usb 7-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.684144][ T5730] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 460.684165][ T5730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.833284][ T5730] usb 7-1: config 0 descriptor?? [ 460.883567][ T9] usb 6-1: USB disconnect, device number 3 [ 463.294476][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1564'. [ 464.059073][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.907329][T10586] team0: Port device team_slave_0 added [ 465.372600][T10586] team0: Port device team_slave_1 added [ 465.902820][T10904] 9p: Could not find request transport: xen [ 467.146343][ T5730] usb 7-1: USB disconnect, device number 3 [ 467.507673][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1571'. [ 467.735749][T10633] hsr_slave_0: entered promiscuous mode [ 467.750850][T10633] hsr_slave_1: entered promiscuous mode [ 467.753017][T10633] debugfs: 'hsr0' already exists in 'hsr' [ 467.753040][T10633] Cannot create hsr debugfs directory [ 467.770105][ T199] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 467.936635][ T199] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.936661][ T199] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.936695][ T199] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.936715][ T199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.004594][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.004610][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.004634][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.072302][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.072318][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.072344][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.167429][ T199] usb 6-1: config 0 descriptor?? [ 469.808785][ T1748] bridge_slave_1: left allmulticast mode [ 469.808820][ T1748] bridge_slave_1: left promiscuous mode [ 469.809077][ T1748] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.868926][T10937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 469.952039][ T1748] bridge_slave_0: left allmulticast mode [ 469.952071][ T1748] bridge_slave_0: left promiscuous mode [ 469.952333][ T1748] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.330734][ T199] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 470.548178][ T199] usb 9-1: Using ep0 maxpacket: 16 [ 470.550381][ T199] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.550404][ T199] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.553440][ T199] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.553466][ T199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.553484][ T199] usb 9-1: Product: syz [ 470.553497][ T199] usb 9-1: Manufacturer: syz [ 470.553521][ T199] usb 9-1: SerialNumber: syz [ 470.800732][ T199] usb 9-1: 0:2 : does not exist [ 470.800844][ T199] usb 9-1: unit 6 not found! [ 471.123929][ T11] usb 6-1: USB disconnect, device number 4 [ 471.512714][ T199] usb 9-1: USB disconnect, device number 2 [ 471.689745][T10910] udevd[10910]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.820479][ T1748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.881896][ T1748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.904317][ T1748] bond0 (unregistering): Released all slaves [ 472.121190][T10586] hsr_slave_0: entered promiscuous mode [ 472.122709][T10586] hsr_slave_1: entered promiscuous mode [ 472.123747][T10586] debugfs: 'hsr0' already exists in 'hsr' [ 472.123770][T10586] Cannot create hsr debugfs directory [ 472.808177][ T5730] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 482.472998][ T5730] usb 7-1: unable to read config index 0 descriptor/start: -110 [ 482.473037][ T5730] usb 7-1: can't read configurations, error -110 [ 485.285816][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1581'. [ 487.511340][ T4911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.558359][ T4911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.559765][ T4911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.560944][ T4911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.561741][ T4911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.084436][ T4911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.134290][ T4911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.136007][ T4911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.159761][ T4911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.195510][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.719470][ T4911] Bluetooth: hci1: command tx timeout [ 490.348143][ T4911] Bluetooth: hci4: command tx timeout [ 490.564329][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 491.788244][ T4911] Bluetooth: hci1: command tx timeout [ 492.428210][ T4911] Bluetooth: hci4: command tx timeout [ 493.879607][ T4911] Bluetooth: hci1: command tx timeout [ 494.508113][ T4911] Bluetooth: hci4: command tx timeout [ 495.948094][ T4911] Bluetooth: hci1: command tx timeout [ 496.324177][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 496.588105][ T4911] Bluetooth: hci4: command tx timeout [ 499.605412][T10978] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.605623][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.605859][T10978] bridge_slave_0: entered allmulticast mode [ 499.640814][T10978] bridge_slave_0: entered promiscuous mode [ 499.774122][T10978] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.774247][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.774435][T10978] bridge_slave_1: entered allmulticast mode [ 499.809758][T10978] bridge_slave_1: entered promiscuous mode [ 501.390281][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.390347][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.446538][ T5257] 8021q: adding VLAN 0 to HW filter on device eth19 [ 501.486940][T10978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.648592][T10978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.756915][T10970] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.757034][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.757227][T10970] bridge_slave_0: entered allmulticast mode [ 501.789841][T10970] bridge_slave_0: entered promiscuous mode [ 502.657771][ T5599] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 502.704536][ T5599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 502.724285][ T5599] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 502.810255][ T5599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 502.811170][ T5599] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 503.434958][ T4911] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 503.484838][ T4911] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 503.523304][ T4911] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 503.537601][ T4911] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 503.562226][ T4911] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 504.988297][ T5599] Bluetooth: hci7: command tx timeout [ 505.871366][ T4911] Bluetooth: hci8: command tx timeout [ 506.560119][T10970] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.560236][T10970] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.560448][T10970] bridge_slave_1: entered allmulticast mode [ 506.603073][T10970] bridge_slave_1: entered promiscuous mode [ 506.622579][T10978] team0: Port device team_slave_0 added [ 507.068313][ T5599] Bluetooth: hci7: command tx timeout [ 507.948928][ T5599] Bluetooth: hci8: command tx timeout [ 509.148157][ T5599] Bluetooth: hci7: command tx timeout [ 510.029649][ T5599] Bluetooth: hci8: command tx timeout [ 511.228392][ T5599] Bluetooth: hci7: command tx timeout [ 512.118951][ T5599] Bluetooth: hci8: command tx timeout [ 533.223301][ T4911] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 533.262684][ T4911] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 533.296921][ T4911] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 533.313846][ T4911] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 533.317841][ T4911] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 544.786098][ T5599] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 544.850964][ T5599] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 544.852456][ T5599] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 544.931143][ T5599] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 544.972950][ T5599] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 562.535428][ T5598] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 562.583662][ T5598] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 562.606422][ T5598] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 562.639164][ T5598] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 562.642134][ T5598] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 562.831946][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.832012][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.684497][ T60] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 564.726883][ T60] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 564.763733][ T60] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 564.764972][ T60] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 564.765848][ T60] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 593.437364][T13441] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 593.478836][T13441] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 593.483214][T13441] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 593.503360][T13441] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 593.505816][T13441] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 594.146742][ T4911] Bluetooth: hci9: command tx timeout [ 596.188217][ T4911] Bluetooth: hci9: command tx timeout [ 596.188699][ T4911] Bluetooth: hci11: command tx timeout [ 596.189008][ T4911] Bluetooth: hci12: command tx timeout [ 596.189284][ T4911] Bluetooth: hci10: command tx timeout [ 596.189753][ T60] Bluetooth: hci13: command tx timeout [ 598.268123][ T4911] Bluetooth: hci12: command tx timeout [ 598.268152][ T4911] Bluetooth: hci13: command tx timeout [ 598.268171][ T4911] Bluetooth: hci10: command tx timeout [ 598.268189][ T4911] Bluetooth: hci11: command tx timeout [ 598.268207][ T4911] Bluetooth: hci9: command tx timeout [ 600.348222][ T60] Bluetooth: hci9: command tx timeout [ 600.348250][ T60] Bluetooth: hci11: command tx timeout [ 600.348270][ T60] Bluetooth: hci10: command tx timeout [ 600.348289][ T60] Bluetooth: hci13: command tx timeout [ 600.348307][ T60] Bluetooth: hci12: command tx timeout [ 602.428174][ T60] Bluetooth: hci13: command tx timeout [ 602.428205][ T60] Bluetooth: hci10: command tx timeout [ 602.428223][ T60] Bluetooth: hci11: command tx timeout [ 602.428279][ T4911] Bluetooth: hci12: command tx timeout [ 605.730710][ T5598] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 605.810245][ T5598] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 605.813906][ T5598] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 605.815021][ T5598] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 605.849758][ T5598] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 607.868137][ T4911] Bluetooth: hci14: command tx timeout [ 609.948097][T13441] Bluetooth: hci14: command tx timeout [ 610.991641][T13441] Bluetooth: hci1: command 0x0406 tx timeout [ 610.991811][T13441] Bluetooth: hci4: command 0x0406 tx timeout [ 612.028074][ T60] Bluetooth: hci14: command tx timeout [ 614.118250][ T60] Bluetooth: hci14: command tx timeout [ 622.595823][T13441] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 622.634294][T13441] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 622.651441][T13441] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 622.656140][T13441] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 622.673003][T13441] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 623.396508][ T5599] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 623.497506][ T5599] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 623.509094][ T5599] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 623.529736][ T5599] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 623.535591][ T5599] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 624.273188][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.273260][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.348207][T15417] Bluetooth: hci7: command 0x0406 tx timeout [ 626.348579][T15417] Bluetooth: hci8: command 0x0406 tx timeout [ 654.051047][T15417] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 654.149415][T15417] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 654.152350][T15417] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 654.154157][T15417] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 654.154949][T15417] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 665.936435][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.972415][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.976075][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.995015][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.996923][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.793003][ T102] kworker/u8:5 (102) used greatest stack depth: 14104 bytes left [ 669.708395][ T38] INFO: task kworker/0:1:11 blocked for more than 145 seconds. [ 669.708422][ T38] Tainted: G L syzkaller #0 [ 669.708432][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.708440][ T38] task:kworker/0:1 state:D stack:22152 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 669.708487][ T38] Workqueue: events switchdev_deferred_process_work [ 669.708539][ T38] Call Trace: [ 669.708546][ T38] [ 669.708558][ T38] __schedule+0x16dc/0x5500 [ 669.708609][ T38] ? __pfx___schedule+0x10/0x10 [ 669.708647][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.708667][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.708702][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.708725][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.708745][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.708774][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 669.708812][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 669.708836][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.708853][ T38] ? rcu_is_watching+0x15/0xb0 [ 669.708877][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 669.708899][ T38] switchdev_deferred_process_work+0xe/0x20 [ 669.708923][ T38] process_scheduled_works+0xa8e/0x14e0 [ 669.708971][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.708998][ T38] ? assign_work+0x3cf/0x5d0 [ 669.709024][ T38] worker_thread+0xa47/0xfb0 [ 669.709059][ T38] ? __kthread_parkme+0x71/0x1f0 [ 669.709091][ T38] kthread+0x388/0x470 [ 669.709116][ T38] ? __pfx_worker_thread+0x10/0x10 [ 669.709135][ T38] ? __pfx_kthread+0x10/0x10 [ 669.709159][ T38] ret_from_fork+0x514/0xb70 [ 669.709188][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 669.709213][ T38] ? __switch_to+0xc89/0x1420 [ 669.709239][ T38] ? __pfx_kthread+0x10/0x10 [ 669.709264][ T38] ret_from_fork_asm+0x1a/0x30 [ 669.709306][ T38] [ 669.709338][ T38] INFO: task kworker/u8:4:67 blocked for more than 145 seconds. [ 669.709353][ T38] Tainted: G L syzkaller #0 [ 669.709362][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.709370][ T38] task:kworker/u8:4 state:D stack:20424 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 669.709411][ T38] Workqueue: events_unbound linkwatch_event [ 669.709432][ T38] Call Trace: [ 669.709438][ T38] [ 669.709448][ T38] __schedule+0x16dc/0x5500 [ 669.709496][ T38] ? __pfx___schedule+0x10/0x10 [ 669.709534][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.709553][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.709586][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.709608][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.709628][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.709658][ T38] ? linkwatch_event+0xe/0x60 [ 669.709688][ T38] ? linkwatch_event+0xe/0x60 [ 669.709705][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.709723][ T38] ? rcu_is_watching+0x15/0xb0 [ 669.709745][ T38] ? process_scheduled_works+0xa20/0x14e0 [ 669.709777][ T38] linkwatch_event+0xe/0x60 [ 669.709795][ T38] process_scheduled_works+0xa8e/0x14e0 [ 669.709862][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.709890][ T38] ? assign_work+0x3cf/0x5d0 [ 669.709915][ T38] worker_thread+0xa47/0xfb0 [ 669.709962][ T38] kthread+0x388/0x470 [ 669.709987][ T38] ? __pfx_worker_thread+0x10/0x10 [ 669.710005][ T38] ? __pfx_kthread+0x10/0x10 [ 669.710031][ T38] ret_from_fork+0x514/0xb70 [ 669.710058][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 669.710083][ T38] ? __switch_to+0xc89/0x1420 [ 669.710107][ T38] ? __pfx_kthread+0x10/0x10 [ 669.710133][ T38] ret_from_fork_asm+0x1a/0x30 [ 669.710166][ T38] [ 669.710270][ T38] INFO: task dhcpcd:5257 blocked for more than 145 seconds. [ 669.710293][ T38] Tainted: G L syzkaller #0 [ 669.710302][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.710310][ T38] task:dhcpcd state:D stack:21864 pid:5257 tgid:5257 ppid:5256 task_flags:0x400140 flags:0x00080000 [ 669.710350][ T38] Call Trace: [ 669.710356][ T38] [ 669.710367][ T38] __schedule+0x16dc/0x5500 [ 669.710416][ T38] ? __pfx___schedule+0x10/0x10 [ 669.710453][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.710472][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.710505][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.710527][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.710547][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.710587][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 669.710615][ T38] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 669.710637][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.710656][ T38] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 669.710682][ T38] rtnl_dump_ifinfo+0xa74/0x14b0 [ 669.710722][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 669.710752][ T38] ? stack_trace_save+0xa9/0x100 [ 669.710787][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.710857][ T38] ? trace_kmalloc+0x2a/0xf0 [ 669.710875][ T38] ? netlink_dump+0x19c/0xee0 [ 669.710901][ T38] ? __kmalloc_node_track_caller_noprof+0x59d/0x7c0 [ 669.710922][ T38] ? __alloc_skb+0x1d7/0x7a0 [ 669.710944][ T38] ? netlink_dump+0x19c/0xee0 [ 669.710971][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 669.710996][ T38] rtnl_dumpit+0xcc/0x200 [ 669.711023][ T38] netlink_dump+0x711/0xee0 [ 669.711061][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 669.711098][ T38] ? netlink_recvmsg+0x5bf/0xa50 [ 669.711116][ T38] ? kmem_cache_free+0x187/0x6c0 [ 669.711134][ T38] ? netlink_recvmsg+0x5bf/0xa50 [ 669.711155][ T38] netlink_recvmsg+0x683/0xa50 [ 669.711183][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 669.711206][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.711227][ T38] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 669.711249][ T38] ? security_socket_recvmsg+0x7e/0x2c0 [ 669.711281][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 669.711300][ T38] sock_recvmsg+0x196/0x1e0 [ 669.711327][ T38] ____sys_recvmsg+0x1f2/0x4b0 [ 669.711355][ T38] ? __pfx_____sys_recvmsg+0x10/0x10 [ 669.711388][ T38] ? import_iovec+0x73/0xa0 [ 669.711412][ T38] ___sys_recvmsg+0x213/0x5a0 [ 669.711439][ T38] ? count_memcg_event_mm+0x21/0x260 [ 669.711469][ T38] ? __pfx____sys_recvmsg+0x10/0x10 [ 669.711508][ T38] ? handle_mm_fault+0xe8/0x13f0 [ 669.711535][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 669.711558][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 669.711588][ T38] __x64_sys_recvmsg+0x1b4/0x290 [ 669.711610][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 669.711636][ T38] ? do_user_addr_fault+0xc4a/0x1340 [ 669.711669][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.711690][ T38] do_syscall_64+0x174/0x580 [ 669.711713][ T38] ? trace_irq_disable+0x3b/0x140 [ 669.711731][ T38] ? clear_bhb_loop+0x40/0x90 [ 669.711753][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.711779][ T38] RIP: 0033:0x7fb33ff0f407 [ 669.711796][ T38] RSP: 002b:00007fff4c71ec10 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 669.711814][ T38] RAX: ffffffffffffffda RBX: 00007fb33fe85780 RCX: 00007fb33ff0f407 [ 669.711827][ T38] RDX: 0000000000000000 RSI: 00007fff4c71eca0 RDI: 000000000000003a [ 669.711839][ T38] RBP: 00007fff4c71ec84 R08: 0000000000000000 R09: 0000000000000000 [ 669.711851][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001d9c [ 669.711862][ T38] R13: 00007fff4c71ec90 R14: 00007fff4c71ed80 R15: 0000000000000000 [ 669.711892][ T38] [ 669.711965][ T38] INFO: task syz-executor:10970 blocked for more than 145 seconds. [ 669.711981][ T38] Tainted: G L syzkaller #0 [ 669.711990][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.711998][ T38] task:syz-executor state:D stack:23256 pid:10970 tgid:10970 ppid:1 task_flags:0x400140 flags:0x00080002 [ 669.712040][ T38] Call Trace: [ 669.712047][ T38] [ 669.712058][ T38] __schedule+0x16dc/0x5500 [ 669.712084][ T38] ? kernel_text_address+0xa5/0xe0 [ 669.712124][ T38] ? __pfx___schedule+0x10/0x10 [ 669.712160][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.712179][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.712213][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.712235][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.712255][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.712302][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 669.712330][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.712352][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.712370][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.712396][ T38] rtnl_newlink+0x8a3/0x1bd0 [ 669.712432][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.712457][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.712482][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.712551][ T38] ? __kernel_text_address+0xd/0x30 [ 669.712569][ T38] ? unwind_get_return_address+0x4d/0x90 [ 669.712588][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.712612][ T38] ? arch_stack_walk+0xfb/0x150 [ 669.712642][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.712680][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.712702][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 669.712725][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 669.712754][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.712776][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.712801][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.712831][ T38] netlink_rcv_skb+0x226/0x4a0 [ 669.712859][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.712884][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.712922][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.712941][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.712964][ T38] netlink_unicast+0x7f5/0x990 [ 669.712999][ T38] netlink_sendmsg+0x813/0xb40 [ 669.713026][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.713047][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 669.713078][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.713096][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 669.713120][ T38] __sys_sendto+0x41e/0x5d0 [ 669.713150][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 669.713173][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 669.713206][ T38] ? fput_close_sync+0x11f/0x240 [ 669.713224][ T38] ? kmem_cache_free+0x526/0x6c0 [ 669.713253][ T38] ? rcu_is_watching+0x15/0xb0 [ 669.713286][ T38] __x64_sys_sendto+0xde/0x100 [ 669.713311][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.713330][ T38] do_[ 669.713330][ T38] do_syscall_64+0x174/0x580 [ 669.713353][ T38] ? trace_irq_disable+0x3b/0x140 [ 669.713370][ T38] ? clear_bhb_loop+0x40/0x90 [ 669.713392][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.713410][ T38] RIP: 0033:0x7f2f7980e68e [ 669.713425][ T38] RSP: 002b:00007ffcc4366528 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 669.713443][ T38] RAX: ffffffffffffffda RBX: 00005555673ac500 RCX: 00007f2f7980e68e [ 669.713456][ T38] RDX: 0000000000000088 RSI: 00007f2f7a604670 RDI: 0000000000000003 [ 669.713468][ T38] RBP: 0000000000000001 R08: 00007ffcc43665a4 R09: 000000000000000c [ 669.713479][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 669.713489][ T38] R13: 0000000000000000 R14: 00007f2f7a604670 R15: 0000000000000000 [ 669.713518][ T38] [ 669.713526][ T38] INFO: task syz-executor:10978 blocked for more than 145 seconds. [ 669.713541][ T38] Tainted: G L syzkaller #0 [ 669.713550][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.713558][ T38] task:syz-executor state:D stack:22472 pid:10978 tgid:10978 ppid:1 task_flags:0x400140 flags:0x00080002 [ 669.713605][ T38] Call Trace: [ 669.713611][ T38] [ 669.713621][ T38] __schedule+0x16dc/0x5500 [ 669.713646][ T38] ? kernel_text_address+0xa5/0xe0 [ 669.713686][ T38] ? __pfx___schedule+0x10/0x10 [ 669.713722][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.713741][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.713774][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.713796][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.713816][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.713846][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.713873][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.713902][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.713923][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.713947][ T38] rtnl_newlink+0x8a3/0x1bd0 [ 669.713982][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.714007][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.714032][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.714058][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.714079][ T38] ? unwind_next_frame+0x8f/0x2550 [ 669.714105][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 669.714136][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 669.714161][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.714183][ T38] ? kernel_text_address+0xa5/0xe0 [ 669.714201][ T38] ? __kernel_text_address+0xd/0x30 [ 669.714218][ T38] ? unwind_get_return_address+0x4d/0x90 [ 669.714236][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.714260][ T38] ? arch_stack_walk+0xfb/0x150 [ 669.714296][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.714320][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.714355][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.714378][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 669.714399][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 669.714428][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.714451][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.714475][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.714506][ T38] netlink_rcv_skb+0x226/0x4a0 [ 669.714533][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.714559][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.714597][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.714614][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.714638][ T38] netlink_unicast+0x7f5/0x990 [ 669.714673][ T38] netlink_sendmsg+0x813/0xb40 [ 669.714700][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.714720][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 669.714750][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.714767][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 669.714792][ T38] __sys_sendto+0x41e/0x5d0 [ 669.714822][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 669.714844][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 669.714878][ T38] ? fput_close_sync+0x11f/0x240 [ 669.714894][ T38] ? kmem_cache_free+0x526/0x6c0 [ 669.714921][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 669.714948][ T38] __x64_sys_sendto+0xde/0x100 [ 669.714973][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.714993][ T38] do_syscall_64+0x174/0x580 [ 669.715017][ T38] ? clear_bhb_loop+0x40/0x90 [ 669.715039][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.715056][ T38] RIP: 0033:0x7fc73af1e68e [ 669.715072][ T38] RSP: 002b:00007ffe6b7b8598 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 669.715089][ T38] RAX: ffffffffffffffda RBX: 00005555568ef500 RCX: 00007fc73af1e68e [ 669.715102][ T38] RDX: 0000000000000028 RSI: 00007fc73bd14670 RDI: 0000000000000003 [ 669.715114][ T38] RBP: 0000000000000001 R08: 00007ffe6b7b8614 R09: 000000000000000c [ 669.715125][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 669.715136][ T38] R13: 0000000000000000 R14: 00007fc73bd14670 R15: 0000000000000000 [ 669.715164][ T38] [ 669.715178][ T38] INFO: task syz-executor:11333 blocked for more than 145 seconds. [ 669.715193][ T38] Tainted: G L syzkaller #0 [ 669.715203][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.715210][ T38] task:syz-executor state:D stack:24632 pid:11333 tgid:11333 ppid:1 task_flags:0x400140 flags:0x00080002 [ 669.715253][ T38] Call Trace: [ 669.715259][ T38] [ 669.715276][ T38] __schedule+0x16dc/0x5500 [ 669.715301][ T38] ? kernel_text_address+0xa5/0xe0 [ 669.715341][ T38] ? __pfx___schedule+0x10/0x10 [ 669.715377][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.715397][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.715429][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.715451][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.715472][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.715502][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.715529][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.715558][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.715579][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.715604][ T38] rtnl_newlink+0x8a3/0x1bd0 [ 669.715639][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.715664][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.715689][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.715715][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.715736][ T38] ? unwind_next_frame+0x8f/0x2550 [ 669.715762][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 669.715792][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 669.715817][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.715838][ T38] ? kernel_text_address+0xa5/0xe0 [ 669.715856][ T38] ? __kernel_text_address+0xd/0x30 [ 669.715872][ T38] ? unwind_get_return_address+0x4d/0x90 [ 669.715891][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.715916][ T38] ? arch_stack_walk+0xfb/0x150 [ 669.715944][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.715969][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.716004][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.716026][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 669.716048][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 669.716077][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.716099][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.716124][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.716154][ T38] netlink_rcv_skb+0x226/0x4a0 [ 669.716181][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.716207][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.716244][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.716262][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.716291][ T38] netlink_unicast+0x7f5/0x990 [ 669.716326][ T38] netlink_sendmsg+0x813/0xb40 [ 669.716354][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.716374][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 669.716404][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.716422][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 669.716447][ T38] __sys_sendto+0x41e/0x5d0 [ 669.716476][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 669.716498][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 669.716533][ T38] ? fput_close_sync+0x11f/0x240 [ 669.716550][ T38] ? kmem_cache_free+0x526/0x6c0 [ 669.716576][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 669.716603][ T38] __x64_sys_sendto+0xde/0x100 [ 669.716628][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.716648][ T38] do_syscall_64+0x174/0x580 [ 669.716669][ T38] ? trace_irq_disable+0x3b/0x140 [ 669.716686][ T38] ? clear_bhb_loop+0x40/0x90 [ 669.716708][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.716726][ T38] RIP: 0033:0x7f58fe5ae68e [ 669.716741][ T38] RSP: 002b:00007ffd03720c08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 669.716759][ T38] RAX: ffffffffffffffda RBX: 0000555582ea7500 RCX: 00007f58fe5ae68e [ 669.716771][ T38] RDX: 000000000000002c RSI: 00007f58ff3a4670 RDI: 0000000000000003 [ 669.716782][ T38] RBP: 0000000000000001 R08: 00007ffd03720c84 R09: 000000000000000c [ 669.716793][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 669.716804][ T38] R13: 0000000000000000 R14: 00007f58ff3a4670 R15: 0000000000000000 [ 669.716832][ T38] [ 669.716839][ T38] INFO: task syz-executor:11345 blocked for more than 145 seconds. [ 669.716853][ T38] Tainted: G L syzkaller #0 [ 669.716863][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.716870][ T38] task:syz-executor state:D stack:25800 pid:11345 tgid:11345 ppid:1 task_flags:0x400140 flags:0x00080002 [ 669.716912][ T38] Call Trace: [ 669.716918][ T38] [ 669.716928][ T38] __schedule+0x16dc/0x5500 [ 669.716954][ T38] ? kernel_text_address+0xa5/0xe0 [ 669.716993][ T38] ? __pfx___schedule+0x10/0x10 [ 669.717030][ T38] rt_mutex_schedule+0x76/0xf0 [ 669.717049][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 669.717081][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 669.717103][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 669.717124][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 669.717154][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.717182][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.717210][ T38] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.717231][ T38] mutex_lock_nested+0x168/0x1d0 [ 669.717255][ T38] rtnl_newlink+0x8a3/0x1bd0 [ 669.717298][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.717322][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.717347][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.717374][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.717395][ T38] ? unwind_next_frame+0x8f/0x2550 [ 669.717420][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 669.717450][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 669.717474][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.717496][ T38] ? kernel_text_address+0xa5/0xe0 [ 669.717514][ T38] ? __kernel_text_address+0xd/0x30 [ 669.717530][ T38] ? unwind_get_return_address+0x4d/0x90 [ 669.717549][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.717574][ T38] ? arch_stack_walk+0xfb/0x150 [ 669.717602][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.717626][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.717661][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.717683][ T38] rtnetlink_rcv_msg+0x802/0xc00 [ 669.717705][ T38] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 669.717734][ T38] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 669.717757][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.717781][ T38] ? __lock_acquire+0x683/0x2ce0 [ 669.717811][ T38] netlink_rcv_skb+0x226/0x4a0 [ 669.717838][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.717864][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.717902][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.717920][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.717942][ T38] netlink_unicast+0x7f5/0x990 [ 670.273261][ T38] netlink_sendmsg+0x813/0xb40 [ 670.273300][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.273323][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 670.273355][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.273372][ T38] sock_sendmsg_nosec+0x13a/0x180 [ 670.273399][ T38] __sys_sendto+0x41e/0x5d0 [ 670.273429][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 670.273451][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 670.273488][ T38] ? fput_close_sync+0x11f/0x240 [ 670.273505][ T38] ? kmem_cache_free+0x526/0x6c0 [ 670.273533][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 670.273560][ T38] __x64_sys_sendto+0xde/0x100 [ 670.273586][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.273606][ T38] do_syscall_64+0x174/0x580 [ 670.273629][ T38] ? trace_irq_disable+0x3b/0x140 [ 670.273647][ T38] ? clear_bhb_loop+0x40/0x90 [ 670.273669][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.273687][ T38] RIP: 0033:0x7fb2d246e68e [ 670.273705][ T38] RSP: 002b:00007ffe154280c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 670.273724][ T38] RAX: ffffffffffffffda RBX: 000055555c373500 RCX: 00007fb2d246e68e [ 670.273737][ T38] RDX: 000000000000002c RSI: 00007fb2d3264670 RDI: 0000000000000003 [ 670.273750][ T38] RBP: 0000000000000001 R08: 00007ffe15428144 R09: 000000000000000c [ 670.273761][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 670.273771][ T38] R13: 0000000000000000 R14: 00007fb2d3264670 R15: 0000000000000000 [ 670.273799][ T38] [ 670.273840][ T38] [ 670.273840][ T38] Showing all locks held in the system: [ 670.273853][ T38] 3 locks held by kworker/0:1/11: [ 670.273864][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.273911][ T38] #1: ffffc90000107c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.273955][ T38] #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 670.274004][ T38] 6 locks held by kworker/u8:0/12: [ 670.274013][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.274056][ T38] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.274101][ T38] #2: ffff888062020310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 670.274149][ T38] #3: ffff88803aab3520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 670.274193][ T38] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 670.274242][ T38] #5: ffff8880b8636d10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 670.274289][ T38] 6 locks held by kworker/u8:1/14: [ 670.274299][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.274342][ T38] #1: ffffc90000137c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.274386][ T38] #2: ffff8880331c0310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 670.274433][ T38] #3: ffff88806041e520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 670.274476][ T38] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 670.274517][ T38] #5: ffff8880b8636d10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 670.274562][ T38] 4 locks held by pr/legacy/17: [ 670.274574][ T38] 4 locks held by rcuc/1/28: [ 670.274583][ T38] 3 locks held by ktimers/1/29: [ 670.274593][ T38] 2 locks held by kworker/1:0/31: [ 670.274603][ T38] 1 lock held by khungtaskd/38: [ 670.274613][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 670.396643][ T38] 3 locks held by kworker/u8:2/43: [ 670.396658][ T38] #0: ffff88801af7c938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.396712][ T38] #1: ffffc90000b57c40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.396757][ T38] #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd9/0x640 [ 670.396804][ T38] 3 locks held by kworker/u8:3/45: [ 670.396814][ T38] #0: ffff888032cf9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.396858][ T38] #1: ffffc90000b77c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.396903][ T38] #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 670.396953][ T38] 4 locks held by kworker/u9:0/60: [ 670.396963][ T38] #0: ffff8880635e7138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397010][ T38] #1: ffffc9000126fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397054][ T38] #2: ffff888094c8c0b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 [ 670.397096][ T38] #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 670.397137][ T38] 3 locks held by kworker/u8:4/67: [ 670.397146][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397189][ T38] #1: ffffc9000152fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397241][ T38] #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 670.397285][ T38] 2 locks held by kworker/0:2/199: [ 670.397295][ T38] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397338][ T38] #1: ffffc90003997c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397381][ T38] 6 locks held by kworker/1:2/822: [ 670.397394][ T38] 5 locks held by kworker/u8:8/1154: [ 670.397407][ T38] 6 locks held by kworker/u8:9/1470: [ 670.397417][ T38] 5 locks held by kworker/u8:10/1748: [ 670.397426][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397469][ T38] #1: ffffc90006f7fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.397512][ T38] #2: ffffffff8f5a19e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 670.397558][ T38] #3: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 670.397604][ T38] #4: ffff888060d708d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0x121/0x200 [ 670.397656][ T38] 6 locks held by kworker/u8:12/3078: [ 670.397668][ T38] 4 locks held by kworker/u8:14/3582: [ 670.397679][ T38] 1 lock held by klogd/4951: [ 670.397689][ T38] 2 locks held by dhcpcd/5257: [ 670.397699][ T38] #0: ffff88803c9fc928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 670.397747][ T38] #1: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 670.397796][ T38] 2 locks held by getty/5358: [ 670.397806][ T38] #0: ffff8880330410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 670.397849][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 670.397896][ T38] 4 locks held by kworker/u9:2/5598: [ 670.397907][ T38] #0: ffff8880624f6138 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.439465][ T38] #1: ffffc90004f77c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.523023][ T38] #2: ffff88807f7600b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 670.523073][ T38] #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 670.523122][ T38] 6 locks held by kworker/u9:3/5599: [ 670.523133][ T38] #0: ffff88803fe25938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.523176][ T38] #1: ffffc90004fa7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.523227][ T38] #2: ffff888052250f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 670.523272][ T38] #3: ffff8880522500b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 670.523314][ T38] #4: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x145/0x320 [ 670.523355][ T38] #5: ffff888060be1b70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 670.523403][ T38] 4 locks held by kworker/u9:4/5602: [ 670.523413][ T38] #0: ffff8880617d2138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.523455][ T38] #1: ffffc90004fe7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.523499][ T38] #2: ffff888063d5cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 670.523544][ T38] #3: ffff888063d5c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 670.523588][ T38] 2 locks held by kworker/1:5/5713: [ 670.523599][ T38] 3 locks held by kworker/1:6/5786: [ 670.523611][ T38] 9 locks held by syz-executor/8071: [ 670.523622][ T38] 8 locks held by kworker/u8:16/8217: [ 670.523633][ T38] 5 locks held by kworker/1:7/8402: [ 670.523650][ T38] 3 locks held by syz-executor/10586: [ 670.523660][ T38] #0: ffff888054a58f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 670.523708][ T38] #1: ffff888054a580b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 670.523748][ T38] #2: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 670.523791][ T38] 3 locks held by syz-executor/10633: [ 670.523801][ T38] #0: ffff8880500b0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 670.523847][ T38] #1: ffff8880500b00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 670.523887][ T38] #2: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 670.523931][ T38] 2 locks held by syz-executor/10970: [ 670.523941][ T38] #0: ffffffff8ed15c68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 670.523992][ T38] #1: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 670.524038][ T38] 1 lock held by syz.6.1585/10972: [ 670.524048][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 670.524093][ T38] 1 lock held by syz-executor/10978: [ 670.524103][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 670.524149][ T38] 1 lock held by syz.8.1587/10982: [ 670.524159][ T38] #0: ffff88803b2880d0 (&type->s_umount_key#59){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 670.524214][ T38] 1 lock held by syz-executor/11333: [ 670.524224][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 670.524270][ T38] 1 lock held by syz-executor/11345: [ 670.524280][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 670.524325][ T38] 1 lock held by syz-executor/12378: [ 670.524335][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.524390][ T38] 1 lock held by syz-executor/12787: [ 670.646682][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.646742][ T38] 1 lock held by syz-executor/13424: [ 670.646753][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.646796][ T38] 1 lock held by syz-executor/13439: [ 670.646807][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.646850][ T38] 4 locks held by kworker/u9:5/13441: [ 670.646860][ T38] #0: ffff88803c086138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.646908][ T38] #1: ffffc90004437c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.646952][ T38] #2: ffff888094cd00b0 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xa5/0x1580 [ 670.646994][ T38] #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 670.647035][ T38] 1 lock held by syz-executor/14511: [ 670.647045][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.647087][ T38] 4 locks held by kworker/u9:6/14515: [ 670.647097][ T38] #0: ffff88802c49c938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.647143][ T38] #1: ffffc900040d7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.647192][ T38] #2: ffff88807fb080b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 670.647240][ T38] #3: ffffffff8f733eb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 670.647287][ T38] 1 lock held by syz-executor/14779: [ 670.647297][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.647340][ T38] 1 lock held by syz-executor/15373: [ 670.647350][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.647392][ T38] 1 lock held by syz-executor/15390: [ 670.647402][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.647443][ T38] 2 locks held by kworker/1:13/15393: [ 670.647455][ T38] 1 lock held by syz-executor/16403: [ 670.647464][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.647507][ T38] 1 lock held by syz-executor/16806: [ 670.647517][ T38] #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 670.647560][ T38] [ 670.647565][ T38] ============================================= [ 670.647565][ T38] [ 670.647573][ T38] NMI backtrace for cpu 0 [ 670.647608][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 670.647632][ T38] Tainted: [L]=SOFTLOCKUP [ 670.647638][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.647649][ T38] Call Trace: [ 670.647658][ T38] [ 670.647666][ T38] dump_stack_lvl+0xe8/0x150 [ 670.647694][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 670.647715][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 670.647742][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 670.647765][ T38] sys_info+0x135/0x170 [ 670.647782][ T38] watchdog+0xfd7/0x1030 [ 670.647814][ T38] ? watchdog+0x1c7/0x1030 [ 670.647843][ T38] kthread+0x388/0x470 [ 670.647868][ T38] ? __pfx_watchdog+0x10/0x10 [ 670.647890][ T38] ? __pfx_kthread+0x10/0x10 [ 670.647914][ T38] ret_from_fork+0x514/0xb70 [ 670.647942][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 670.647970][ T38] ? __switch_to+0xc89/0x1420 [ 670.647991][ T38] ? __pfx_kthread+0x10/0x10 [ 670.648015][ T38] ret_from_fork_asm+0x1a/0x30 [ 670.648043][ T38] [ 670.648087][ T38] Sending NMI from CPU 0 to CPUs 1: [ 670.648129][ C1] NMI backtrace for cpu 1 [ 670.648149][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 670.648169][ C1] Tainted: [L]=SOFTLOCKUP [ 670.648175][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.648184][ C1] RIP: 0010:__dequeue_entity+0x813/0x1180 [ 670.648202][ C1] Code: 8d 7c 24 08 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 05 e8 57 9c 95 00 49 89 5c 24 08 e9 c8 02 00 00 <48> 8d 5d 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 670.648215][ C1] RSP: 0018:ffffc90000a3f9e0 EFLAGS: 00000046 [ 670.648229][ C1] RAX: 0000000000000000 RBX: ffff88801d2b9fa0 RCX: dffffc0000000000 [ 670.648240][ C1] RDX: 0000000000000001 RSI: ffff888033c11f80 RDI: ffff888033c11fa0 [ 670.648251][ C1] RBP: ffff88801d2b9f90 R08: ffffc90000a3fcc8 R09: 1ffff11003a5e200 [ 670.648262][ C1] R10: dffffc0000000000 R11: ffffffff81975550 R12: ffff8880b873b980 [ 670.648273][ C1] R13: ffff888033c11f80 R14: 0000000000000000 R15: 1ffff110170e773a [ 670.648284][ C1] FS: 0000000000000000(0000) GS:ffff888125d4c000(0000) knlGS:0000000000000000 [ 670.648297][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.648307][ C1] CR2: 00007fffc714c59c CR3: 000000002ada0000 CR4: 00000000003526f0 [ 670.648321][ C1] Call Trace: [ 670.648328][ C1] [ 670.648334][ C1] ? update_se+0x90/0xf30 [ 670.648349][ C1] ? plist_check_list+0x2ef/0x310 [ 670.648372][ C1] set_next_task_fair+0x106/0xce0 [ 670.648396][ C1] __pick_next_task+0x372/0x3c0 [ 670.648419][ C1] __schedule+0x864/0x5500 [ 670.648443][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 670.648462][ C1] ? sched_clock_cpu+0x74/0x440 [ 670.648484][ C1] ? __pfx___schedule+0x10/0x10 [ 670.648500][ C1] ? schedule+0x90/0x2b0 [ 670.648523][ C1] ? schedule+0x90/0x2b0 [ 670.648541][ C1] schedule+0x164/0x2b0 [ 670.648560][ C1] smpboot_thread_fn+0x5f9/0xa80 [ 670.648580][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 670.648602][ C1] kthread+0x388/0x470 [ 670.648622][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 670.648639][ C1] ? __pfx_kthread+0x10/0x10 [ 670.648659][ C1] ret_from_fork+0x514/0xb70 [ 670.648680][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 670.648707][ C1] ? __switch_to+0xc89/0x1420 [ 670.648726][ C1] ? __pfx_kthread+0x10/0x10 [ 670.648746][ C1] ret_from_fork_asm+0x1a/0x30 [ 670.648768][ C1] [ 670.778914][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 670.778935][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 670.778960][ T38] Tainted: [L]=SOFTLOCKUP [ 670.778967][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.778978][ T38] Call Trace: [ 670.778987][ T38] [ 670.778996][ T38] vpanic+0x56c/0xa60 [ 670.779020][ T38] ? __pfx___schedule+0x10/0x10 [ 670.779044][ T38] ? __pfx_vpanic+0x10/0x10 [ 670.779071][ T38] panic+0xc5/0xd0 [ 670.779087][ T38] ? __pfx_panic+0x10/0x10 [ 670.779103][ T38] ? preempt_schedule_common+0x82/0xd0 [ 670.779125][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 670.779147][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 670.779171][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 670.779202][ T38] watchdog+0x1030/0x1030 [ 670.779235][ T38] ? watchdog+0x1c7/0x1030 [ 670.779265][ T38] kthread+0x388/0x470 [ 670.779290][ T38] ? __pfx_watchdog+0x10/0x10 [ 670.779312][ T38] ? __pfx_kthread+0x10/0x10 [ 670.779336][ T38] ret_from_fork+0x514/0xb70 [ 670.779364][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 670.779388][ T38] ? __switch_to+0xc89/0x1420 [ 670.779412][ T38] ? __pfx_kthread+0x10/0x10 [ 670.779436][ T38] ret_from_fork_asm+0x1a/0x30 [ 670.779467][ T38] [ 670.779769][ T38] Kernel Offset: disabled