last executing test programs: 1m43.84205977s ago: executing program 1 (id=41): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000000)={0xfffffedb, 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x5422) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r5, 0x29, 0xcd, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = syz_io_uring_setup(0x89, &(0x7f00000006c0)={0x0, 0x459b, 0x800, 0x2, 0x1d4, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r11, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x4) r12 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x24f3, 0x0, 0x1}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r12, 0x18, &(0x7f0000000000), 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x120, 0x6}, 0xfffffffffffffffe, 0x384}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1m42.172622912s ago: executing program 0 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008000) 1m41.736352204s ago: executing program 1 (id=50): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = dup3(r1, r0, 0x0) r3 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) r4 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="b801000016000100fcffffff0000000000000000000000000000000000000000fc0200000000000000000000000000004e200000000000000000008000000000", @ANYRES64=r5, @ANYRES32, @ANYBLOB="fc0200000000000000000000000000000000000033000000003a0b000000000000000000000000000500000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbf0ce719d1d68470e56746176725a0004000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a00000000000000000000000500000005000000ac000700fe8000000000000000000000000000aa0a0101000100000000000000000000004e20fd5f4e2200010a0020a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18d900000000000003000000000000000100000000000000ff07000000000000018000000000000009000000000000000600000000000000ff070000000000000100000000000000000000000000004f010100000000000000000000000000003101000000000000000002000000000014000d00ac1e000100"/132], 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x8880) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000003, 0xfff}) syz_open_dev$dri(0x0, 0x0, 0x20000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x24008000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'bond_slave_0\x00', &(0x7f0000000500)=@ethtool_cmd={0x17, 0x7, 0x3, 0x2, 0xd, 0x4, 0x8, 0x8, 0x7, 0x9, 0x4, 0x2d3, 0x3, 0x6, 0x6, 0x9, [0x80000001, 0x4]}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f00000001c0)={0xae74, r9}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) 1m41.650466502s ago: executing program 0 (id=51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = userfaultfd(0x801) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x304}, "ce53e105552e7c5a", "7ef33a580452e5ad6c273c9c4a80e312", "3a2975ad", "676ffd5ab4ca9da5"}, 0x28) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d09000105000000090007000806a4037f000109050602ff030000000905820208"], 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "215f60d540590932", "244931719809e5aca35c875e4e3896d7", "2a5407e1", "8ed7eb84c21afaf6"}, 0x28) 1m41.34841649s ago: executing program 1 (id=53): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r0) 1m39.756323107s ago: executing program 3 (id=58): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000c40)={0x1}) 1m39.495040083s ago: executing program 3 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010025bd700022a44a9200000000", @ANYRES32=r1, @ANYBLOB="100804000700000008000400000100001400"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 1m39.126217479s ago: executing program 3 (id=61): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008000) 1m38.960282012s ago: executing program 1 (id=63): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) remap_file_pages(&(0x7f000052e000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffc00, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d40000001c0016801800018014000b00328a5589"], 0x58}}, 0x0) 1m38.956174657s ago: executing program 3 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6(0xa, 0x80000, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x3, @empty, 0x264b}}, 0xc000, 0x9}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={r3, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f000001f500)={0x4, 0x3, 0x2, {0x1, @pix={0x8, 0x80, 0x34343459, 0x0, 0x5, 0xb, 0x5, 0xfeedcafe, 0x1, 0x1, 0x2, 0x1}}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003e000701feffffff00000000017c000004008e000c00018006000600800a00000800028004001980bda9a42109c8946fb358b759950b59"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x7fb25000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r8, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20004004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) 1m38.631974718s ago: executing program 2 (id=66): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e40)=""/303, 0x12f}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000001080)=""/210, 0xd2}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000a40)=""/117, 0x75}], 0x8}, 0x0) 1m38.508426859s ago: executing program 0 (id=67): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) 1m37.541629161s ago: executing program 2 (id=68): r0 = socket(0x18, 0x80000, 0x0) write(r0, 0x0, 0x0) 1m37.507696571s ago: executing program 2 (id=69): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000c80)={0x16, 0x1, 0x1, "55622608efffff13cad27436ef280e0684a800", 0x41414770}) 1m37.480709067s ago: executing program 4 (id=70): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xec}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48810}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x8, 0x8000) mmap$usbmon(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xd, 0x11, r2, 0xf4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) r3 = open$dir(&(0x7f0000000000)='./file1\x00', 0x8, 0x24) openat(r3, &(0x7f0000000080)='./file1\x00', 0x8, 0x2) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000540)='./file0\x00', 0x184) renameat(r4, &(0x7f00000025c0)='./file0\x00', r4, &(0x7f0000002600)='./file1\x00') renameat(r4, &(0x7f0000000040)='./file1\x00', r3, &(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) chdir(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) write$P9_RSYMLINK(r5, &(0x7f0000000240)={0x14, 0x11, 0x2, {0x0, 0x1, 0x805}}, 0x14) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r5, r6, 0x6700000000000000) 1m37.353564262s ago: executing program 2 (id=71): syz_emit_ethernet(0x2a, &(0x7f0000002100)=ANY=[@ANYBLOB="0108fcc97e5906bebf00000008060001"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000096f000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, 0xffffffffffffffff, 0x6a855000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x8ec) syz_usb_disconnect(r2) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x46c202, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000340), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da04ae988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e583af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4505cee24a0e6d7b48241847bf9e343ef4674c45e2a08506", 0xcb}], 0x2, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000068000100030010000000008000000000000000000c00020001000000150000000600070003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 1m37.072518918s ago: executing program 4 (id=72): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x24, 0x65, 0x141cbdfabbd299, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0x0, 0xe}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x95) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0xad}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000000)=""/39, 0x27}], 0x9, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m37.063219739s ago: executing program 3 (id=73): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r0) 1m36.910524324s ago: executing program 4 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008000) 1m36.241145593s ago: executing program 4 (id=75): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000001c00), &(0x7f00000001c0)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000240)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x80010, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r4, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @local, @multicast2, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r5, 0x1) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000001a1029070024000e00f8ffffffffffffff0200000000000000d8000000d60000000300020100000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m36.115540587s ago: executing program 1 (id=76): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) r1 = syz_usb_connect(0x2, 0x3c7, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd1, 0x8e, 0x4c, 0x20, 0x12d1, 0xf713, 0xcbbc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b5, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x89, 0xf7, 0xc, 0xff, 0x1, 0x17, 0x1, [@uac_as], [{{0x9, 0x5, 0x80, 0x11, 0x8, 0xaa, 0x7, 0x2, [@generic={0x55, 0x5, "2f3e3ee362219ef813fc9b9ab72150a887e8eda4aa9b784c31de1c40e62d52cf5bcd8e00ea6d5a7e89033793aa4eef6ea84bb051a4c6fbd15ec491179fcef39d6bb75726a990c3e8cd8799a817b7097226dfda"}, @generic={0xd7, 0x4, "492bac7a83b26e6c79838bc4898a43613b405270b57f117a8d930e4f60406085e775b8bf2c606d426ca171c882746289396e6fb52a67eccc7b0b1b350e0c86952190289c49567999fdd8fd0aa5802ee2f7cdb574bff625fd2057b02f4bb20f881c6f40a41829862e59e3798744ed7c4e378ef9b73c5179e4b7c1fa15e88ad6a466c0d5ad97fe0988ecd99d8dbb880b2a7a55e33f8abc3581453f66a27b970e882a811e23a5cdb8030b3e9d486540d422fe3188e38496f3dface65eb3c57256bb38afc6008784b7d04cac6e1afbf2aef0085c51799a"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x8, 0x9, 0x3, 0x3, [@generic={0x15, 0x22, "151632c95842333e0fda72fbda9f520def088d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0xc, 0xff, [@generic={0x52, 0x1, "c3781107fea1d4e742b92a4f8fad3e4a162033b02ed227a11b96118b09f8cf2c2d918833ace6c5fd23bfa992bf5a2c3e4d4ac09a96e4b3fa1e5f8098ba14a4d27eb2322912259c91dd5b9e05baa7abae"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x38, 0x2}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x0, 0x1, 0x79, [@generic={0x17, 0x8, "189d2380692e392cc2c18ddfb0ba38b157e8ad7fcf"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x40}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x10, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x40, 0x9, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x8f8}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x5, 0x7, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x1, 0x5, 0x1, [@generic={0xd0, 0x3a1f947898c47070, "d6d3b69c3258be7cca6911c22fc0b662a5e89b12c345c552ca4e8a91753197484097df645cefe075321c58be27f242c0c7d072707e6edac8960cb09b2459e4eeb541ed98ebf85d9098e277856d68c41c7440a5ed91c9ba18d0c3f11256fd5eb4277bcba25c9f6cb9dcdd2967c75f967854da1577461109f27ab99d9fa1c396950580859d1dd2f2704a57a41d12859bfec36be7186c91ca34d0808cf4058001642f717a1bf7399b21c44e3e51dcbed20419a8c5a50c78d611733e600d50dadf8d1a629fffdb4feaff5f005e8029eb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x89, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2e, 0x8000}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x3, 0x1, [@generic={0x9a, 0x1, "04e35c2c4ad35473039bae1d0599afb8bd409ce78ce326c33a6fd323abdba2797a42eae828b087664a0b5e3f330bb495edf1744de5fc241f1dba3b1f0d7dba397e5f3528bf58c08113f92f3367cffb175b161a393cee73657544b65568f9664b78a59c51cd1ce2a13ae9fe10bf6f5049e456d072853aa0f28efe2390345a27e475be294709ffe34f37067a0d0af873a75eea4228657d3a70"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xa7, 0x9}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x88, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x8}]}}]}}]}}]}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) r3 = epoll_create1(0x0) epoll_pwait2(r3, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x16, 0x0, 0x0, 0x8000, 0x8000}}) syz_usb_control_io(r1, 0x0, 0x0) 1m35.279178443s ago: executing program 0 (id=77): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}}, 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x84, 0xa, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe3c}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x400}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x80}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8800000}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040d1}, 0x44) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x14000804}, 0x4880) 1m35.193353902s ago: executing program 4 (id=78): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e40)=""/303, 0x12f}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000001080)=""/210, 0xd2}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000a40)=""/117, 0x75}], 0x8}, 0x0) 1m35.045732819s ago: executing program 2 (id=79): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) sendto$rxrpc(r3, 0x0, 0x0, 0x44800, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r6, &(0x7f0000000b40)=[{&(0x7f0000000c80)=""/163, 0xa3}], 0x1, 0x0, 0x20) bind$rxrpc(r5, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @empty}}, 0x24) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x38, r10, 0x1, 0x70b929, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0xffff, 0x40, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x3}}, 0xe8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r11, 0x89e0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) 1m34.971684892s ago: executing program 0 (id=80): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a4e020000000000000000010000000900030073797a320000000014000409000000400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000002010c0001400000000000000008080105400000000177660000110001000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000200)={"0d8d00", 0x8, 0x5, 0x1, 0x207fe, 0x0, "0400b7e7a2aac9779bf500000000f3", "1f8a5a00", "41cb01fb", "0300", ["8bbb001000001bb4645e8900", "ab5286400300000008008516"]}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "66c33e220346685b", "d8d3e1ba8de3db48d9b2f96ec7a4250fb430961a301d68b4caf483f685018566", '\x00', "9cde53c2ab92cf9a"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000740)=0x1) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1ea, 0xe9ad, 0x0, &(0x7f00000001c0)={[0x7]}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x5, 0x3, 0x4000, 0x2000, &(0x7f0000001000/0x2000)=nil}) 1m33.790072024s ago: executing program 3 (id=81): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = syz_open_procfs(r0, &(0x7f0000000180)='attr/current\x00') r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) write$input_event(r6, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) read$char_usb(r4, &(0x7f0000000240)=""/9, 0x9) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000019100)={0x0, 0x8, [@local, @broadcast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @random="b5b15a33654b", @random="9f1c2c2391c3", @empty]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000019080)=ANY=[@ANYBLOB="66643dc8e617a6ba520a8387e34f1cfcbd250da4eef3d02c19b792a1bf27c6871ff55a952eaabd3395521bedba75457e9952882d594b492bb1e115", @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) read$FUSE(r4, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_IOCTL(r7, &(0x7f0000000100)={0x20, 0x0, r8, {0x800, 0x0, 0x4, 0x3}}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, r9) 1m33.78237094s ago: executing program 4 (id=82): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000740)={0x38, 0x5, 0x0, 0x1, 0x0, 0x2, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240400c1}, 0x200000d4) r3 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fspick(r4, 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000800)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000"], 0x17d4}}, 0x0) 1m33.721744716s ago: executing program 1 (id=83): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000740)={0x38, 0x5, 0x0, 0x1, 0x0, 0x2, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240400c1}, 0x200000d4) r3 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fspick(r4, 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000800)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000"], 0x17d4}}, 0x0) 1m33.252213264s ago: executing program 2 (id=84): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x60}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x1, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000002080500ff7f0000000000b3acd03c0709"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m33.248624167s ago: executing program 0 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008000) 0s ago: executing program 32 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4040810}, 0x20008000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 67.046803][ T5851] cgroup: Unknown subsys name 'net' [ 67.238744][ T5851] cgroup: Unknown subsys name 'cpuset' [ 67.246968][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.683321][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.064844][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.095456][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.103472][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.112333][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.122238][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.134981][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.153945][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.160721][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.164848][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.170113][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.195361][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.201855][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.209624][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.210629][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.217047][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.232696][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.240492][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.248411][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.256701][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.265349][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.265804][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.273476][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.281806][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.295229][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.314791][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.321539][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.332365][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.972214][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 72.036555][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 72.055104][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 72.103923][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 72.272232][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.279491][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.287087][ T5883] bridge_slave_0: entered allmulticast mode [ 72.294364][ T5883] bridge_slave_0: entered promiscuous mode [ 72.348564][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.355767][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.362891][ T5883] bridge_slave_1: entered allmulticast mode [ 72.371165][ T5883] bridge_slave_1: entered promiscuous mode [ 72.406189][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.413338][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.420627][ T5877] bridge_slave_0: entered allmulticast mode [ 72.428388][ T5877] bridge_slave_0: entered promiscuous mode [ 72.492021][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.501148][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.508795][ T5881] bridge_slave_0: entered allmulticast mode [ 72.516963][ T5881] bridge_slave_0: entered promiscuous mode [ 72.526010][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.533149][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.540572][ T5881] bridge_slave_1: entered allmulticast mode [ 72.548851][ T5881] bridge_slave_1: entered promiscuous mode [ 72.555798][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.562912][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.570196][ T5877] bridge_slave_1: entered allmulticast mode [ 72.577163][ T5877] bridge_slave_1: entered promiscuous mode [ 72.614126][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.621261][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.628733][ T5879] bridge_slave_0: entered allmulticast mode [ 72.635776][ T5879] bridge_slave_0: entered promiscuous mode [ 72.667956][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.681499][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.691339][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 72.702881][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.710471][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.717874][ T5879] bridge_slave_1: entered allmulticast mode [ 72.724879][ T5879] bridge_slave_1: entered promiscuous mode [ 72.745330][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.758287][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.813618][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.846074][ T5883] team0: Port device team_slave_0 added [ 72.881399][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.917825][ T5877] team0: Port device team_slave_0 added [ 72.926019][ T5883] team0: Port device team_slave_1 added [ 72.933292][ T5877] team0: Port device team_slave_1 added [ 72.949843][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.974701][ T5881] team0: Port device team_slave_0 added [ 73.011535][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.022317][ T5881] team0: Port device team_slave_1 added [ 73.055650][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.062615][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.088955][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.153587][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.162178][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.188522][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.200477][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.207805][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.233699][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.246271][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.254254][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.280356][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.303420][ T5879] team0: Port device team_slave_0 added [ 73.309907][ T5875] Bluetooth: hci1: command tx timeout [ 73.311097][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.322457][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.349148][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.384368][ T5870] Bluetooth: hci2: command tx timeout [ 73.386013][ T5875] Bluetooth: hci4: command tx timeout [ 73.390373][ T5870] Bluetooth: hci3: command tx timeout [ 73.395734][ T5875] Bluetooth: hci0: command tx timeout [ 73.409150][ T5879] team0: Port device team_slave_1 added [ 73.429814][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.436867][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.464280][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.499442][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.506656][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.513829][ T5880] bridge_slave_0: entered allmulticast mode [ 73.520733][ T5880] bridge_slave_0: entered promiscuous mode [ 73.540981][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.548558][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.575001][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.606503][ T5883] hsr_slave_0: entered promiscuous mode [ 73.613125][ T5883] hsr_slave_1: entered promiscuous mode [ 73.621241][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.628612][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.636491][ T5880] bridge_slave_1: entered allmulticast mode [ 73.643433][ T5880] bridge_slave_1: entered promiscuous mode [ 73.663318][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.670408][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.696381][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.770945][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.830377][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.866312][ T5879] hsr_slave_0: entered promiscuous mode [ 73.872484][ T5879] hsr_slave_1: entered promiscuous mode [ 73.879179][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 73.885023][ T5879] Cannot create hsr debugfs directory [ 73.896715][ T5877] hsr_slave_0: entered promiscuous mode [ 73.902931][ T5877] hsr_slave_1: entered promiscuous mode [ 73.909149][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 73.915437][ T5877] Cannot create hsr debugfs directory [ 73.925945][ T5881] hsr_slave_0: entered promiscuous mode [ 73.932156][ T5881] hsr_slave_1: entered promiscuous mode [ 73.938361][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 73.944287][ T5881] Cannot create hsr debugfs directory [ 73.986430][ T5880] team0: Port device team_slave_0 added [ 74.032260][ T5880] team0: Port device team_slave_1 added [ 74.149198][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.156649][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.182953][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.240213][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.247589][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.274628][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.449298][ T5880] hsr_slave_0: entered promiscuous mode [ 74.456315][ T5880] hsr_slave_1: entered promiscuous mode [ 74.462562][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 74.468390][ T5880] Cannot create hsr debugfs directory [ 74.652200][ T5883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.664765][ T5883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.689040][ T5883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.713561][ T5883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.817566][ T5879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.829278][ T5879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.841023][ T5879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.853722][ T5879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.957434][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.969042][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.980139][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.991898][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.100117][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.136612][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.161544][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.172950][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.200005][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.275137][ T5880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.289651][ T5880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.300260][ T5880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.313416][ T5880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.334045][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.349149][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.371610][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.378860][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.384569][ T5875] Bluetooth: hci1: command tx timeout [ 75.418649][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.425822][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.464537][ T5875] Bluetooth: hci0: command tx timeout [ 75.466550][ T5870] Bluetooth: hci3: command tx timeout [ 75.469952][ T5875] Bluetooth: hci2: command tx timeout [ 75.475794][ T5866] Bluetooth: hci4: command tx timeout [ 75.511103][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.535579][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.557301][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.579435][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.586596][ T4825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.598262][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.605394][ T4825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.618185][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.625288][ T4825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.709765][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.716900][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.761254][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.822579][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.847727][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.869041][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.899038][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.906184][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.935733][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.944163][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.951247][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.988255][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.041874][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.050907][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.098195][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.105368][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.133380][ T5883] veth0_vlan: entered promiscuous mode [ 76.161649][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.168825][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.212927][ T5881] veth0_vlan: entered promiscuous mode [ 76.251330][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.270049][ T5883] veth1_vlan: entered promiscuous mode [ 76.280844][ T5881] veth1_vlan: entered promiscuous mode [ 76.328242][ T5879] veth0_vlan: entered promiscuous mode [ 76.351855][ T5879] veth1_vlan: entered promiscuous mode [ 76.410614][ T5877] veth0_vlan: entered promiscuous mode [ 76.432838][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.457719][ T5883] veth0_macvtap: entered promiscuous mode [ 76.466499][ T5877] veth1_vlan: entered promiscuous mode [ 76.477339][ T5883] veth1_macvtap: entered promiscuous mode [ 76.506258][ T5881] veth0_macvtap: entered promiscuous mode [ 76.538978][ T5881] veth1_macvtap: entered promiscuous mode [ 76.565522][ T5879] veth0_macvtap: entered promiscuous mode [ 76.579038][ T5877] veth0_macvtap: entered promiscuous mode [ 76.591770][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.601054][ T5879] veth1_macvtap: entered promiscuous mode [ 76.624214][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.632510][ T5877] veth1_macvtap: entered promiscuous mode [ 76.659190][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.688551][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.696765][ T1341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708642][ T1341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.739841][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.749530][ T1341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.762045][ T1341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.777878][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.788840][ T5880] veth0_vlan: entered promiscuous mode [ 76.807362][ T4825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.828028][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.843590][ T4825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.852581][ T4825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.864748][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.885639][ T5880] veth1_vlan: entered promiscuous mode [ 76.892632][ T4825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.910310][ T4825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.919786][ T4825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.967284][ T4825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.977101][ T4825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.998801][ T4825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.008126][ T4825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.041808][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.052754][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.104802][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.112946][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.125765][ T4825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.134733][ T4825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.179060][ T5880] veth0_macvtap: entered promiscuous mode [ 77.231124][ T5880] veth1_macvtap: entered promiscuous mode [ 77.241203][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.251087][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.297685][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.310755][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.325899][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.348219][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.370233][ T5881] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.399343][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.440749][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.464570][ T5866] Bluetooth: hci1: command tx timeout [ 77.470767][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.478993][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.545171][ T5866] Bluetooth: hci4: command tx timeout [ 77.550619][ T5866] Bluetooth: hci3: command tx timeout [ 77.556660][ T5870] Bluetooth: hci2: command tx timeout [ 77.556679][ T5875] Bluetooth: hci0: command tx timeout [ 77.624141][ T4825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.648456][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.675452][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.688812][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.718988][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.729070][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754383][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.788718][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.816762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.159445][ T5957] FAULT_INJECTION: forcing a failure. [ 78.159445][ T5957] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.184365][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 78.184402][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.184419][ T5957] Call Trace: [ 78.184426][ T5957] [ 78.184433][ T5957] dump_stack_lvl+0x189/0x250 [ 78.184461][ T5957] ? __pfx____ratelimit+0x10/0x10 [ 78.184484][ T5957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.184502][ T5957] ? __pfx__printk+0x10/0x10 [ 78.184523][ T5957] ? __might_fault+0xb0/0x130 [ 78.184555][ T5957] should_fail_ex+0x414/0x560 [ 78.184578][ T5957] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 78.184605][ T5957] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 78.184632][ T5957] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 78.184652][ T5957] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 78.184677][ T5957] ? read_tsc+0x9/0x20 [ 78.184697][ T5957] ? ktime_get+0x1cb/0x1f0 [ 78.184720][ T5957] ? __lock_acquire+0xab9/0xd20 [ 78.184754][ T5957] ? fpu__alloc_mathframe+0xad/0x130 [ 78.184778][ T5957] get_sigframe+0x58d/0x7d0 [ 78.184806][ T5957] ? __pfx_get_sigframe+0x10/0x10 [ 78.184830][ T5957] ? irqentry_exit+0x74/0x90 [ 78.184859][ T5957] x64_setup_rt_frame+0x15b/0xd40 [ 78.184888][ T5957] ? _raw_spin_unlock_irq+0x29/0x50 [ 78.184909][ T5957] ? _raw_spin_unlock_irq+0x2e/0x50 [ 78.184927][ T5957] ? get_signal+0x1151/0x1340 [ 78.184951][ T5957] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 78.184983][ T5957] arch_do_signal_or_restart+0x3d7/0x750 [ 78.185006][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.185030][ T5957] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 78.185067][ T5957] ? exit_to_user_mode_loop+0x40/0x110 [ 78.185092][ T5957] exit_to_user_mode_loop+0x75/0x110 [ 78.185113][ T5957] do_syscall_64+0x2bd/0x3b0 [ 78.185128][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.185148][ T5957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.185164][ T5957] ? clear_bhb_loop+0x60/0xb0 [ 78.185184][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.185199][ T5957] RIP: 0033:0x7f2fed18ebe9 [ 78.185222][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.185234][ T5957] RSP: 002b:00007f2fedf1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 78.185251][ T5957] RAX: ffffffffffffff95 RBX: 00007f2fed3b6090 RCX: 00007f2fed18ebe9 [ 78.185263][ T5957] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 78.185272][ T5957] RBP: 00007f2fedf1e090 R08: 0000000000000000 R09: 0000000000000000 [ 78.185282][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.185291][ T5957] R13: 00007f2fed3b6128 R14: 00007f2fed3b6090 R15: 00007f2fed4dfa28 [ 78.185319][ T5957] [ 78.840801][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.858934][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.880254][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.904473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.951571][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.272242][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.352404][ T5977] netlink: 'syz.1.8': attribute type 29 has an invalid length. [ 79.397914][ T5977] netlink: 'syz.1.8': attribute type 29 has an invalid length. [ 79.405734][ T5980] Zero length message leads to an empty skb [ 79.549636][ T5875] Bluetooth: hci1: command tx timeout [ 79.625830][ T5875] Bluetooth: hci3: command tx timeout [ 79.632649][ T5875] Bluetooth: hci2: command tx timeout [ 79.638528][ T51] Bluetooth: hci4: command tx timeout [ 79.643996][ T51] Bluetooth: hci0: command tx timeout [ 79.936765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.952989][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 80.026840][ T5994] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.10'. [ 80.164354][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.442031][ T5868] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 80.521468][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.533034][ T30] audit: type=1326 audit(1756506121.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.4.14" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f2fb8ebe9 code=0x0 [ 80.628998][ T5868] usb 2-1: Product: syz [ 80.670396][ T5868] usb 2-1: Manufacturer: syz [ 80.687725][ T5868] usb 2-1: SerialNumber: syz [ 80.774914][ T5868] usb 2-1: config 0 descriptor?? [ 80.874362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 80.883309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 80.892742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 80.901604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.009664][ T5868] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 81.123886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.173806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 81.194551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.476850][ T5868] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 81.682635][ T919] usb 2-1: USB disconnect, device number 2 [ 81.935388][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 82.049751][ T30] audit: type=1800 audit(1756506122.590:3): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19" name="file0" dev="tmpfs" ino=38 res=0 errno=0 [ 82.147860][ T6022] pim6reg: entered allmulticast mode [ 84.373943][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.563954][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 84.604402][ T5927] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 84.613320][ T6062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.29'. [ 84.640394][ T5927] usb 3-1: config 0 has no interface number 0 [ 84.665218][ T5927] usb 3-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 85.408334][ T5927] usb 3-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid maxpacket 46246, setting to 1024 [ 85.430061][ T5927] usb 3-1: config 0 interface 149 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 85.603919][ T5927] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 85.613871][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.663888][ T5927] usb 3-1: Product: syz [ 85.671241][ T5927] usb 3-1: Manufacturer: syz [ 85.694429][ T5927] usb 3-1: SerialNumber: syz [ 85.744731][ T5927] usb 3-1: config 0 descriptor?? [ 85.752080][ T6058] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.282307][ T6085] libceph: resolve '0.0' (ret=-3): failed [ 86.661449][ T30] audit: type=1326 audit(1756506127.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.4.34" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f2fb8ebe9 code=0x0 [ 86.725599][ T1210] cfg80211: failed to load regulatory.db [ 86.804915][ T5949] usb 3-1: USB disconnect, device number 2 [ 88.123946][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.412445][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 88.438155][ T9] usb 1-1: config index 0 descriptor too short (expected 32804, got 36) [ 88.456825][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.483929][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.527951][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.146952][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.161191][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 89.243885][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.298916][ T9] usb 1-1: config 0 descriptor?? [ 89.316076][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 89.408264][ T5934] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 89.439056][ T5934] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.480447][ T5934] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.533844][ T5934] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 89.572580][ T5934] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.580863][ T6115] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 89.609496][ T9] usb 1-1: can't set config #0, error -71 [ 89.640341][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.664122][ T9] usb 1-1: USB disconnect, device number 2 [ 89.671290][ T5934] usbtmc 3-1:16.0: bulk endpoints not found [ 89.980533][ T6119] netlink: 'syz.0.42': attribute type 29 has an invalid length. [ 89.999510][ T6119] netlink: 'syz.0.42': attribute type 29 has an invalid length. [ 90.201380][ T6127] pim6reg: entered allmulticast mode [ 90.764933][ T6139] Invalid logical block size (65) [ 91.622647][ T9] usb 3-1: USB disconnect, device number 3 [ 91.649089][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.48'. [ 91.977430][ T6152] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 91.987473][ T6152] netlink: 192 bytes leftover after parsing attributes in process `syz.1.50'. [ 91.998159][ T6152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.191095][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 92.403977][ T5949] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.617785][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 92.642534][ T5949] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 92.667091][ T5949] usb 1-1: config 0 has no interface number 0 [ 92.695325][ T5949] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 92.751547][ T5949] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 92.814197][ T5949] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 92.861536][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.960297][ T5949] usb 1-1: Product: syz [ 92.976330][ T5949] usb 1-1: Manufacturer: syz [ 93.011546][ T5949] usb 1-1: SerialNumber: syz [ 93.494815][ T5949] usb 1-1: config 0 descriptor?? [ 93.537900][ T6154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.679752][ T6154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.902928][ T5949] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.180250][ T5949] usb 1-1: USB disconnect, device number 3 [ 94.364829][ T6183] udevd[6183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.889985][ T6201] mmap: syz.1.63 (6201) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.894453][ T6198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.388378][ T6205] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.114025][ T6211] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.161340][ T6211] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.218720][ T6211] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.286531][ T6211] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.293286][ T6211] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.322408][ T6211] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.335481][ T6211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.341588][ T6211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.401566][ T6211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.418653][ T6211] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.429005][ T6211] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.460663][ T6211] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.470923][ T6211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.477110][ T6211] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.485637][ T6211] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.783870][ T5949] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.169584][ T1210] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.375772][ T1210] usb 1-1: config 0 has no interfaces? [ 97.383461][ T1210] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 97.401121][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.414176][ T1210] usb 1-1: Product: syz [ 97.418227][ T5949] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 97.418336][ T1210] usb 1-1: Manufacturer: syz [ 97.432581][ T1210] usb 1-1: SerialNumber: syz [ 97.462030][ T1210] usb 1-1: config 0 descriptor?? [ 97.491369][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.540382][ T5949] usb 3-1: Product: syz [ 97.543895][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.569700][ T5949] usb 3-1: Manufacturer: syz [ 97.602778][ T5949] usb 3-1: SerialNumber: syz [ 97.611153][ T5949] usb 3-1: config 0 descriptor?? [ 97.780708][ T5949] usb 1-1: USB disconnect, device number 4 [ 97.824624][ T1210] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 97.843498][ T9] usb 3-1: USB disconnect, device number 4 [ 98.000719][ T1210] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 98.010783][ T1210] usb 2-1: config 0 has an invalid interface number: 73 but max is 0 [ 98.024490][ T1210] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 98.037268][ T1210] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 98.046408][ T1210] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 98.055663][ T1210] usb 2-1: config 0 has no interface number 0 [ 98.063209][ T1210] usb 2-1: config 0 has no interface number 1 [ 98.072050][ T1210] usb 2-1: config 0 interface 137 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 98.085430][ T1210] usb 2-1: config 0 interface 137 altsetting 247 has an endpoint descriptor with address 0x2F, changing to 0xF [ 98.098051][ T1210] usb 2-1: config 0 interface 137 altsetting 247 endpoint 0xF has invalid maxpacket 58174, setting to 64 [ 98.111355][ T1210] usb 2-1: config 0 interface 137 altsetting 247 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 98.129796][ T1210] usb 2-1: too many endpoints for config 0 interface 73 altsetting 43: 172, using maximum allowed: 30 [ 98.141985][ T1210] usb 2-1: config 0 interface 73 altsetting 43 has an invalid descriptor for endpoint zero, skipping [ 98.153549][ T1210] usb 2-1: config 0 interface 73 altsetting 43 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 98.166333][ T1210] usb 2-1: config 0 interface 73 altsetting 43 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 98.177798][ T1210] usb 2-1: config 0 interface 73 altsetting 43 has a duplicate endpoint with address 0x7, skipping [ 98.189094][ T1210] usb 2-1: config 0 interface 73 altsetting 43 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 98.200698][ T1210] usb 2-1: config 0 interface 73 altsetting 43 has 11 endpoint descriptors, different from the interface descriptor's value: 172 [ 98.214591][ T1210] usb 2-1: config 0 interface 137 has no altsetting 0 [ 98.221456][ T1210] usb 2-1: config 0 interface 73 has no altsetting 0 [ 98.238611][ T1210] usb 2-1: New USB device found, idVendor=12d1, idProduct=f713, bcdDevice=cb.bc [ 98.248055][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.257580][ T1210] usb 2-1: Product: syz [ 98.261876][ T1210] usb 2-1: Manufacturer: syz [ 98.268169][ T1210] usb 2-1: SerialNumber: syz [ 98.277369][ T1210] usb 2-1: config 0 descriptor?? [ 98.288702][ T6238] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.348008][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.424016][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.430196][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.507298][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 98.663240][ T1210] option 2-1:0.137: GSM modem (1-port) converter detected [ 98.726808][ T1210] usb 2-1: USB disconnect, device number 3 [ 98.753630][ T1210] option 2-1:0.137: device disconnected [ 98.931800][ T6251] libceph: resolve '0.0' (ret=-3): failed [ 99.734305][ T5875] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.744100][ T30] audit: type=1326 audit(1756506140.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.2.79" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55daf8ebe9 code=0x0 [ 100.426824][ T5875] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.507385][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.511554][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.615295][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 103.843845][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.849893][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.870051][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.876183][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.882192][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 104.421598][ T0] sched: DL replenish lagged too much [ 135.627458][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.646417][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.244563][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.250889][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.628151][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.634715][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.153815][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 384.160802][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6278/1:b..l P5530/1:b..l P12/1:b..l P5529/1:b..l [ 384.172266][ C1] rcu: (detected by 1, t=10502 jiffies, g=11673, q=1083 ncpus=2) [ 384.180086][ C1] task:dhcpcd state:R running task stack:24008 pid:5529 tgid:5529 ppid:1 task_flags:0x400140 flags:0x00004002 [ 384.194312][ C1] Call Trace: [ 384.197602][ C1] [ 384.200543][ C1] __schedule+0x1798/0x4cc0 [ 384.205094][ C1] ? finish_task_switch+0x266/0x950 [ 384.210280][ C1] ? __pfx___schedule+0x10/0x10 [ 384.215130][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 384.220306][ C1] ? __schedule+0x17ae/0x4cc0 [ 384.224962][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 384.230243][ C1] preempt_schedule_irq+0xb5/0x150 [ 384.235333][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 384.241033][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 384.246812][ C1] irqentry_exit+0x6f/0x90 [ 384.251205][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.257166][ C1] RIP: 0010:unwind_next_frame+0x12ea/0x2390 [ 384.263038][ C1] Code: 40 3c 88 8b 89 de e8 15 cd b4 ff e9 43 06 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 <48> 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 [ 384.282614][ C1] RSP: 0018:ffffc90003936eb8 EFLAGS: 00000206 [ 384.288654][ C1] RAX: 000000000000000a RBX: ffffffff8fbfb414 RCX: 000000000000000a [ 384.296600][ C1] RDX: ffffffff8fbfb3ec RSI: ffffffff903fd4e4 RDI: ffffffff8be337a0 [ 384.304556][ C1] RBP: ffffffff8fbfb3ec R08: 000000000000000b R09: ffffffff8172c195 [ 384.312502][ C1] R10: ffffc90003936fd8 R11: ffffffff81ac3820 R12: ffffffff8218c3ab [ 384.320446][ C1] R13: ffffffff8fbfb3ec R14: ffffc90003936f88 R15: 00000000000118c3 [ 384.328403][ C1] ? put_cpu_partial+0x17b/0x250 [ 384.333349][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.339489][ C1] ? unwind_next_frame+0xa5/0x2390 [ 384.344583][ C1] ? unwind_next_frame+0xd4/0x2390 [ 384.349673][ C1] ? unwind_next_frame+0xa5/0x2390 [ 384.354758][ C1] ? put_cpu_partial+0x17c/0x250 [ 384.359669][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.365800][ C1] arch_stack_walk+0x11c/0x150 [ 384.370544][ C1] ? put_cpu_partial+0x17c/0x250 [ 384.375454][ C1] stack_trace_save+0x9c/0xe0 [ 384.380105][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 384.385454][ C1] save_stack+0xf5/0x1f0 [ 384.389673][ C1] ? __pfx_save_stack+0x10/0x10 [ 384.394517][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 384.399779][ C1] ? __put_partials+0x156/0x1a0 [ 384.404604][ C1] ? put_cpu_partial+0x17c/0x250 [ 384.409521][ C1] ? page_ext_put+0x97/0xc0 [ 384.414001][ C1] __reset_page_owner+0x71/0x1f0 [ 384.418913][ C1] __free_frozen_pages+0xbc4/0xd30 [ 384.424004][ C1] __put_partials+0x156/0x1a0 [ 384.428668][ C1] put_cpu_partial+0x17c/0x250 [ 384.433401][ C1] ? put_cpu_partial+0x6d/0x250 [ 384.438223][ C1] __slab_free+0x2d5/0x3c0 [ 384.442623][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 384.448506][ C1] ? __phys_addr+0xd3/0x180 [ 384.452991][ C1] qlist_free_all+0x97/0x140 [ 384.457569][ C1] kasan_quarantine_reduce+0x148/0x160 [ 384.463012][ C1] __kasan_kmalloc+0x22/0xb0 [ 384.467582][ C1] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 384.473971][ C1] ? __alloc_skb+0x142/0x2d0 [ 384.478536][ C1] ? __alloc_skb+0x142/0x2d0 [ 384.483096][ C1] kmalloc_reserve+0x136/0x290 [ 384.487835][ C1] __alloc_skb+0x142/0x2d0 [ 384.492225][ C1] alloc_skb_with_frags+0xca/0x890 [ 384.497312][ C1] ? __lock_acquire+0xab9/0xd20 [ 384.502147][ C1] sock_alloc_send_pskb+0x857/0x990 [ 384.507332][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 384.513024][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 384.518199][ C1] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 384.524259][ C1] unix_dgram_sendmsg+0x461/0x1850 [ 384.529349][ C1] ? kernel_text_address+0xa5/0xe0 [ 384.534440][ C1] ? unwind_get_return_address+0x4d/0x90 [ 384.540043][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.546174][ C1] ? __lock_acquire+0xab9/0xd20 [ 384.551003][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 384.556524][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 384.562923][ C1] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 384.568444][ C1] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 384.574314][ C1] __sock_sendmsg+0x219/0x270 [ 384.578984][ C1] sock_write_iter+0x258/0x330 [ 384.583729][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 384.589000][ C1] do_iter_readv_writev+0x619/0x8b0 [ 384.594181][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 384.599878][ C1] ? common_file_perm+0x1b5/0x230 [ 384.604905][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 384.610250][ C1] ? security_file_permission+0x75/0x290 [ 384.615872][ C1] ? rw_verify_area+0x255/0x4d0 [ 384.620700][ C1] vfs_writev+0x31a/0x960 [ 384.625010][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 384.629847][ C1] do_writev+0x14d/0x2d0 [ 384.634063][ C1] ? __pfx_do_writev+0x10/0x10 [ 384.638799][ C1] ? __secure_computing+0xe2/0x2a0 [ 384.643902][ C1] do_syscall_64+0xfa/0x3b0 [ 384.648378][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.653552][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.659588][ C1] ? clear_bhb_loop+0x60/0xb0 [ 384.664237][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.670099][ C1] RIP: 0033:0x7f7e28105407 [ 384.674519][ C1] RSP: 002b:00007ffd37934e90 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 384.682907][ C1] RAX: ffffffffffffffda RBX: 00007f7e2807b740 RCX: 00007f7e28105407 [ 384.690852][ C1] RDX: 0000000000000005 RSI: 00007ffd37934ef0 RDI: 000000000000000a [ 384.698810][ C1] RBP: 000055d3761488a0 R08: 0000000000000000 R09: 0000000000000000 [ 384.706754][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d3761488a0 [ 384.714700][ C1] R13: 000000000000012c R14: 00000000ffffffff R15: 0000000000000000 [ 384.722654][ C1] [ 384.725651][ C1] task:kworker/u8:0 state:R running task stack:22760 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 384.739180][ C1] Workqueue: iou_exit io_ring_exit_work [ 384.744709][ C1] Call Trace: [ 384.747963][ C1] [ 384.750874][ C1] __schedule+0x1798/0x4cc0 [ 384.755365][ C1] ? __pfx___schedule+0x10/0x10 [ 384.760192][ C1] ? __lock_acquire+0xab9/0xd20 [ 384.765021][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 384.770281][ C1] preempt_schedule_irq+0xb5/0x150 [ 384.775371][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 384.781085][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 384.786916][ C1] irqentry_exit+0x6f/0x90 [ 384.791334][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.797303][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 384.802595][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb 11 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 384.822173][ C1] RSP: 0018:ffffc90000117310 EFLAGS: 00000206 [ 384.828214][ C1] RAX: 4384721607eccf00 RBX: 0000000000000202 RCX: 4384721607eccf00 [ 384.836165][ C1] RDX: 0000000000000003 RSI: ffffffff8dba7642 RDI: ffffffff8be33800 [ 384.844109][ C1] RBP: ffff88801ceae568 R08: ffffc90000117878 R09: 0000000000000000 [ 384.852064][ C1] R10: ffffc90000117498 R11: fffff52000022e95 R12: 0000000000000003 [ 384.860009][ C1] R13: 0000000000000003 R14: ffffffff8e139ee0 R15: ffff88801ceada00 [ 384.867977][ C1] ? unwind_next_frame+0xa5/0x2390 [ 384.873066][ C1] ? unwind_next_frame+0xa5/0x2390 [ 384.878151][ C1] unwind_next_frame+0x19a9/0x2390 [ 384.883237][ C1] ? unwind_next_frame+0xa5/0x2390 [ 384.888323][ C1] ? kmem_cache_free+0x166/0x400 [ 384.893241][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.899368][ C1] arch_stack_walk+0x11c/0x150 [ 384.904130][ C1] ? __io_req_caches_free+0x8f/0x140 [ 384.909450][ C1] stack_trace_save+0x9c/0xe0 [ 384.914117][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 384.919468][ C1] ? kthread+0x70e/0x8a0 [ 384.923693][ C1] kasan_save_track+0x3e/0x80 [ 384.928346][ C1] ? kasan_save_track+0x3e/0x80 [ 384.933167][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 384.937901][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 384.943418][ C1] ? kmem_cache_free+0x166/0x400 [ 384.948352][ C1] __kasan_kmalloc+0x93/0xb0 [ 384.952919][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 384.958267][ C1] ? kmem_cache_free+0x166/0x400 [ 384.963284][ C1] ? __io_req_caches_free+0x8f/0x140 [ 384.968558][ C1] kmem_cache_free+0x166/0x400 [ 384.973301][ C1] __io_req_caches_free+0x8f/0x140 [ 384.978386][ C1] io_req_caches_free+0x21/0x60 [ 384.983208][ C1] io_ring_exit_work+0x415/0x930 [ 384.988143][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 384.993587][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.998762][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 385.004457][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 385.010146][ C1] process_scheduled_works+0xae1/0x17b0 [ 385.015674][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.021630][ C1] worker_thread+0x8a0/0xda0 [ 385.026206][ C1] kthread+0x70e/0x8a0 [ 385.030255][ C1] ? __pfx_worker_thread+0x10/0x10 [ 385.035340][ C1] ? __pfx_kthread+0x10/0x10 [ 385.039905][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.045076][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.050248][ C1] ? __pfx_kthread+0x10/0x10 [ 385.054811][ C1] ret_from_fork+0x3f9/0x770 [ 385.059376][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 385.064461][ C1] ? __switch_to_asm+0x39/0x70 [ 385.069198][ C1] ? __switch_to_asm+0x33/0x70 [ 385.073934][ C1] ? __pfx_kthread+0x10/0x10 [ 385.078497][ C1] ret_from_fork_asm+0x1a/0x30 [ 385.083243][ C1] [ 385.086237][ C1] task:dhcpcd state:R running task stack:20168 pid:5530 tgid:5530 ppid:5529 task_flags:0x400140 flags:0x00004002 [ 385.099676][ C1] Call Trace: [ 385.102929][ C1] [ 385.105838][ C1] __schedule+0x1798/0x4cc0 [ 385.110318][ C1] ? __switch_to+0xdae/0x1670 [ 385.114970][ C1] ? __lock_acquire+0xab9/0xd20 [ 385.119801][ C1] ? __pfx___schedule+0x10/0x10 [ 385.124632][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 385.129892][ C1] preempt_schedule_irq+0xb5/0x150 [ 385.134978][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 385.140668][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 385.146535][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 385.152837][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 385.158616][ C1] irqentry_exit+0x6f/0x90 [ 385.163006][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.168972][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 385.174241][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb 11 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 385.193819][ C1] RSP: 0018:ffffc90003a1f4b0 EFLAGS: 00000206 [ 385.199862][ C1] RAX: d51952fc15134e00 RBX: 0000000000000202 RCX: d51952fc15134e00 [ 385.209135][ C1] RDX: 0000000000000001 RSI: ffffffff8dba7642 RDI: ffffffff8be33800 [ 385.218062][ C1] RBP: ffff88802eae2918 R08: ffffc90003a1f638 R09: 0000000000000000 [ 385.226300][ C1] R10: ffffc90003a1f698 R11: fffff52000743ed5 R12: 0000000000000001 [ 385.235053][ C1] R13: 0000000000000001 R14: ffffffff8e139ee0 R15: ffff88802eae1e00 [ 385.243214][ C1] ? unwind_next_frame+0xa5/0x2390 [ 385.248478][ C1] ? unwind_next_frame+0xa5/0x2390 [ 385.253587][ C1] unwind_next_frame+0x19a9/0x2390 [ 385.259288][ C1] ? unwind_next_frame+0xa5/0x2390 [ 385.266233][ C1] ? __unwind_start+0xf8/0x760 [ 385.271081][ C1] __unwind_start+0x5b9/0x760 [ 385.275847][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 385.282096][ C1] arch_stack_walk+0xe4/0x150 [ 385.286791][ C1] ? arch_stack_walk+0xe4/0x150 [ 385.291714][ C1] stack_trace_save+0x9c/0xe0 [ 385.296805][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 385.303041][ C1] save_stack+0xf5/0x1f0 [ 385.309539][ C1] ? __pfx_save_stack+0x10/0x10 [ 385.316560][ C1] ? page_ext_put+0x97/0xc0 [ 385.321060][ C1] __reset_page_owner+0x71/0x1f0 [ 385.325980][ C1] __free_frozen_pages+0xbc4/0xd30 [ 385.331084][ C1] __put_partials+0x156/0x1a0 [ 385.335748][ C1] put_cpu_partial+0x17c/0x250 [ 385.340501][ C1] ? put_cpu_partial+0x6d/0x250 [ 385.345329][ C1] __slab_free+0x2d5/0x3c0 [ 385.349733][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 385.355601][ C1] ? __phys_addr+0xd3/0x180 [ 385.360078][ C1] qlist_free_all+0x97/0x140 [ 385.364650][ C1] kasan_quarantine_reduce+0x148/0x160 [ 385.370092][ C1] __kasan_kmalloc+0x22/0xb0 [ 385.374661][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 385.380025][ C1] ? ref_tracker_alloc+0x133/0x460 [ 385.385114][ C1] ref_tracker_alloc+0x133/0x460 [ 385.390031][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 385.395483][ C1] ? sock_lock_init+0x41c/0x870 [ 385.400307][ C1] ? sk_prot_alloc+0x161/0x220 [ 385.405044][ C1] sk_alloc+0x1b1/0x370 [ 385.409187][ C1] unix_create1+0xb0/0x7c0 [ 385.413580][ C1] unix_create+0x16b/0x210 [ 385.418060][ C1] __sock_create+0x4b0/0x9f0 [ 385.422635][ C1] __sys_socketpair+0x23a/0x560 [ 385.427464][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 385.432467][ C1] do_syscall_64+0xfa/0x3b0 [ 385.437899][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.443079][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.449119][ C1] ? clear_bhb_loop+0x60/0xb0 [ 385.453771][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.459633][ C1] RIP: 0033:0x7f7e2818073a [ 385.464022][ C1] RSP: 002b:00007ffd37914de8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 385.472410][ C1] RAX: ffffffffffffffda RBX: 000055d376161be0 RCX: 00007f7e2818073a [ 385.480378][ C1] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 [ 385.488324][ C1] RBP: 00007ffd37935210 R08: 0000000000000000 R09: 0000000000000001 [ 385.496266][ C1] R10: 00007ffd37914e00 R11: 0000000000000246 R12: 00007ffd37914e00 [ 385.504223][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 000055d33c012ac0 [ 385.512175][ C1] [ 385.515171][ C1] task:kworker/0:6 state:R running task stack:25936 pid:6278 tgid:6278 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 385.528700][ C1] Workqueue: events free_obj_work [ 385.533708][ C1] Call Trace: [ 385.536962][ C1] [ 385.539883][ C1] __schedule+0x1798/0x4cc0 [ 385.544373][ C1] ? __pfx___schedule+0x10/0x10 [ 385.549207][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 385.554468][ C1] preempt_schedule_irq+0xb5/0x150 [ 385.559553][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 385.565272][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 385.571051][ C1] irqentry_exit+0x6f/0x90 [ 385.575451][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.581401][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 385.586675][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb 11 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 385.606263][ C1] RSP: 0018:ffffc9000bbf7470 EFLAGS: 00000206 [ 385.612303][ C1] RAX: 7867be56fc82b100 RBX: 0000000000000202 RCX: 7867be56fc82b100 [ 385.620246][ C1] RDX: 0000000000000002 RSI: ffffffff8dba7642 RDI: ffffffff8be33800 [ 385.628187][ C1] RBP: ffff88801eb6e540 R08: 0000000000000015 R09: ffffffff8172c195 [ 385.636149][ C1] R10: ffffc9000bbf75f8 R11: ffffffff81ac3820 R12: 0000000000000002 [ 385.644092][ C1] R13: 0000000000000002 R14: ffffffff8e139ee0 R15: ffff88801eb6da00 [ 385.652054][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 385.658197][ C1] ? unwind_next_frame+0xa5/0x2390 [ 385.663303][ C1] ? unwind_next_frame+0xa5/0x2390 [ 385.668388][ C1] ? unwind_next_frame+0xa5/0x2390 [ 385.673472][ C1] unwind_next_frame+0x19a9/0x2390 [ 385.678561][ C1] ? unwind_next_frame+0xa5/0x2390 [ 385.683644][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 385.688559][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 385.694685][ C1] arch_stack_walk+0x11c/0x150 [ 385.699429][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 385.704366][ C1] stack_trace_save+0x9c/0xe0 [ 385.709037][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 385.714393][ C1] ? stack_depot_save_flags+0x40/0x860 [ 385.719840][ C1] kasan_save_track+0x3e/0x80 [ 385.724496][ C1] ? kasan_save_track+0x3e/0x80 [ 385.729322][ C1] ? kasan_save_free_info+0x46/0x50 [ 385.734494][ C1] ? __kasan_slab_free+0x5b/0x80 [ 385.739403][ C1] ? kmem_cache_free+0x18f/0x400 [ 385.744318][ C1] ? free_obj_work+0x377/0x4a0 [ 385.749059][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 385.754748][ C1] ? worker_thread+0x8a0/0xda0 [ 385.759484][ C1] ? kthread+0x70e/0x8a0 [ 385.763721][ C1] ? ret_from_fork+0x3f9/0x770 [ 385.768472][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 385.773408][ C1] ? free_obj_work+0x377/0x4a0 [ 385.778149][ C1] kasan_save_free_info+0x46/0x50 [ 385.783149][ C1] __kasan_slab_free+0x5b/0x80 [ 385.787888][ C1] kmem_cache_free+0x18f/0x400 [ 385.792630][ C1] free_obj_work+0x377/0x4a0 [ 385.797199][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 385.802294][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.807489][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 385.813196][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 385.818900][ C1] process_scheduled_works+0xae1/0x17b0 [ 385.824462][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.830427][ C1] worker_thread+0x8a0/0xda0 [ 385.834997][ C1] ? __kthread_parkme+0x7b/0x200 [ 385.839908][ C1] kthread+0x70e/0x8a0 [ 385.843954][ C1] ? __pfx_worker_thread+0x10/0x10 [ 385.849040][ C1] ? __pfx_kthread+0x10/0x10 [ 385.853602][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.858776][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.863981][ C1] ? __pfx_kthread+0x10/0x10 [ 385.868547][ C1] ret_from_fork+0x3f9/0x770 [ 385.873121][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 385.878215][ C1] ? __switch_to_asm+0x39/0x70 [ 385.882971][ C1] ? __switch_to_asm+0x33/0x70 [ 385.887724][ C1] ? __pfx_kthread+0x10/0x10 [ 385.892287][ C1] ret_from_fork_asm+0x1a/0x30 [ 385.897037][ C1] [ 385.900047][ C1] rcu: rcu_preempt kthread starved for 10297 jiffies! g11673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 385.911237][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 385.921212][ C1] rcu: RCU grace-period kthread stack dump: [ 385.923904][ T31] INFO: task kworker/0:2:1210 blocked for more than 192 seconds. [ 385.927090][ C1] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 385.948260][ C1] Call Trace: [ 385.951546][ C1] [ 385.954488][ C1] __schedule+0x1798/0x4cc0 [ 385.959028][ C1] ? __lock_acquire+0xab9/0xd20 [ 385.963882][ C1] ? __pfx___schedule+0x10/0x10 [ 385.968749][ C1] ? schedule+0x91/0x360 [ 385.972996][ C1] schedule+0x165/0x360 [ 385.977167][ C1] schedule_timeout+0x12b/0x270 [ 385.982038][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 385.987416][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 385.993319][ C1] ? __pfx_process_timeout+0x10/0x10 [ 385.998611][ C1] ? prepare_to_swait_event+0x341/0x380 [ 386.004167][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 386.009044][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 386.015206][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 386.020497][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 386.025700][ C1] ? finish_swait+0xcd/0x1f0 [ 386.030273][ C1] rcu_gp_kthread+0x99/0x390 [ 386.034844][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.040054][ C1] ? __kthread_parkme+0x7b/0x200 [ 386.044966][ C1] ? __kthread_parkme+0x1a1/0x200 [ 386.049991][ C1] kthread+0x70e/0x8a0 [ 386.054048][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.059221][ C1] ? __pfx_kthread+0x10/0x10 [ 386.063791][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.068980][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.074158][ C1] ? __pfx_kthread+0x10/0x10 [ 386.078723][ C1] ret_from_fork+0x3f9/0x770 [ 386.083285][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 386.088371][ C1] ? __switch_to_asm+0x39/0x70 [ 386.093110][ C1] ? __switch_to_asm+0x33/0x70 [ 386.097850][ C1] ? __pfx_kthread+0x10/0x10 [ 386.102415][ C1] ret_from_fork_asm+0x1a/0x30 [ 386.107162][ C1] [ 386.110160][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 386.116493][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 386.125428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.135458][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 386.141177][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 386.160762][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 386.166808][ C1] RAX: e44e9d11f6ff7000 RBX: ffffffff819683c8 RCX: e44e9d11f6ff7000 [ 386.174752][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b81b0 RDI: ffffffff8be33800 [ 386.182695][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 386.190640][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38f30 [ 386.198586][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 386.206533][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 386.215435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.221996][ C1] CR2: 000056152543fd80 CR3: 00000000271ca000 CR4: 00000000003526f0 [ 386.229958][ C1] Call Trace: [ 386.233222][ C1] [ 386.236128][ C1] default_idle+0x13/0x20 [ 386.240431][ C1] default_idle_call+0x74/0xb0 [ 386.245168][ C1] do_idle+0x1e8/0x510 [ 386.249225][ C1] ? __pfx_do_idle+0x10/0x10 [ 386.253791][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.258972][ C1] cpu_startup_entry+0x44/0x60 [ 386.263711][ C1] start_secondary+0x101/0x110 [ 386.268453][ C1] common_startup_64+0x13e/0x147 [ 386.273372][ C1] [ 386.344555][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.350871][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.366395][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.372688][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.603930][ T31] Not tainted syzkaller #0 [ 386.608905][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.617636][ T31] task:kworker/0:2 state:D stack:23176 pid:1210 tgid:1210 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 386.630929][ T31] Workqueue: events_power_efficient crda_timeout_work [ 386.637767][ T31] Call Trace: [ 386.641054][ T31] [ 386.644036][ T31] __schedule+0x1798/0x4cc0 [ 386.648577][ T31] ? __pfx___schedule+0x10/0x10 [ 386.653456][ T31] ? schedule+0x91/0x360 [ 386.658725][ T31] schedule+0x165/0x360 [ 386.662915][ T31] schedule_preempt_disabled+0x13/0x30 [ 386.668455][ T31] __mutex_lock+0x7e6/0x1350 [ 386.673057][ T31] ? look_up_lock_class+0x74/0x170 [ 386.678381][ T31] ? __mutex_lock+0x5bb/0x1350 [ 386.683164][ T31] ? crda_timeout_work+0x15/0x50 [ 386.693881][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 386.698958][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.704603][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 386.710356][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 386.716147][ T31] crda_timeout_work+0x15/0x50 [ 386.720921][ T31] process_scheduled_works+0xae1/0x17b0 [ 386.727765][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.733832][ T31] worker_thread+0x8a0/0xda0 [ 386.738445][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.744829][ T31] ? __kthread_parkme+0x7b/0x200 [ 386.749799][ T31] kthread+0x70e/0x8a0 [ 386.753920][ T31] ? __pfx_worker_thread+0x10/0x10 [ 386.759039][ T31] ? __pfx_kthread+0x10/0x10 [ 386.763677][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.769925][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.783859][ T31] ? __pfx_kthread+0x10/0x10 [ 386.788500][ T31] ret_from_fork+0x3f9/0x770 [ 386.793074][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 386.798220][ T31] ? __switch_to_asm+0x39/0x70 [ 386.802967][ T31] ? __switch_to_asm+0x33/0x70 [ 386.807735][ T31] ? __pfx_kthread+0x10/0x10 [ 386.812305][ T31] ret_from_fork_asm+0x1a/0x30 [ 386.817200][ T31] [ 386.820234][ T31] INFO: task kworker/R-ipv6_:3201 blocked for more than 172 seconds. [ 386.829527][ T31] Not tainted syzkaller #0 [ 386.835513][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.844235][ T31] task:kworker/R-ipv6_ state:D stack:29256 pid:3201 tgid:3201 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 386.856321][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 386.862585][ T31] Call Trace: [ 386.865906][ T31] [ 386.868844][ T31] __schedule+0x1798/0x4cc0 [ 386.873382][ T31] ? __pfx___schedule+0x10/0x10 [ 386.878373][ T31] ? schedule+0x91/0x360 [ 386.882641][ T31] schedule+0x165/0x360 [ 386.886874][ T31] schedule_preempt_disabled+0x13/0x30 [ 386.892344][ T31] __mutex_lock+0x7e6/0x1350 [ 386.896986][ T31] ? __mutex_lock+0x5bb/0x1350 [ 386.901763][ T31] ? addrconf_verify_work+0x19/0x30 [ 386.907019][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 386.912067][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 386.917864][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.923083][ T31] addrconf_verify_work+0x19/0x30 [ 386.928383][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 386.935436][ T31] process_scheduled_works+0xae1/0x17b0 [ 386.941033][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.947095][ T31] ? assign_work+0x381/0x410 [ 386.951699][ T31] rescuer_thread+0x53c/0xdd0 [ 386.956418][ T31] ? rescuer_thread+0xbb/0xdd0 [ 386.961214][ T31] kthread+0x70e/0x8a0 [ 386.965368][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 386.970580][ T31] ? __pfx_kthread+0x10/0x10 [ 386.975231][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.980447][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.985790][ T31] ? __pfx_kthread+0x10/0x10 [ 386.990398][ T31] ret_from_fork+0x3f9/0x770 [ 386.995025][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 387.000148][ T31] ? __switch_to_asm+0x39/0x70 [ 387.004945][ T31] ? __switch_to_asm+0x33/0x70 [ 387.009711][ T31] ? __pfx_kthread+0x10/0x10 [ 387.014334][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.019122][ T31] [ 387.022187][ T31] INFO: task kworker/0:5:5927 blocked for more than 193 seconds. [ 387.029936][ T31] Not tainted syzkaller #0 [ 387.036200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.044930][ T31] task:kworker/0:5 state:D stack:23496 pid:5927 tgid:5927 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 387.057008][ T31] Workqueue: events reg_todo [ 387.061613][ T31] Call Trace: [ 387.064937][ T31] [ 387.067872][ T31] __schedule+0x1798/0x4cc0 [ 387.072406][ T31] ? __pfx___schedule+0x10/0x10 [ 387.077311][ T31] ? schedule+0x91/0x360 [ 387.081565][ T31] schedule+0x165/0x360 [ 387.085762][ T31] schedule_preempt_disabled+0x13/0x30 [ 387.091224][ T31] __mutex_lock+0x7e6/0x1350 [ 387.095922][ T31] ? __mutex_lock+0x5bb/0x1350 [ 387.100696][ T31] ? reg_process_self_managed_hints+0xaf/0x1c0 [ 387.106907][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 387.111938][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.118003][ T31] ? __local_bh_enable_ip+0x13e/0x1c0 [ 387.123382][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 387.129178][ T31] reg_process_self_managed_hints+0xaf/0x1c0 [ 387.135206][ T31] reg_todo+0x78d/0x890 [ 387.140666][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.146114][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 387.151845][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 387.157669][ T31] process_scheduled_works+0xae1/0x17b0 [ 387.163258][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.169322][ T31] worker_thread+0x8a0/0xda0 [ 387.173961][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.180303][ T31] ? __kthread_parkme+0x7b/0x200 [ 387.185398][ T31] kthread+0x70e/0x8a0 [ 387.193923][ T31] ? __pfx_worker_thread+0x10/0x10 [ 387.199068][ T31] ? __pfx_kthread+0x10/0x10 [ 387.203689][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.209029][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.214307][ T31] ? __pfx_kthread+0x10/0x10 [ 387.218908][ T31] ret_from_fork+0x3f9/0x770 [ 387.223503][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 387.228668][ T31] ? __switch_to_asm+0x39/0x70 [ 387.233437][ T31] ? __switch_to_asm+0x33/0x70 [ 387.239431][ T31] ? __pfx_kthread+0x10/0x10 [ 387.254002][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.258858][ T31] [ 387.261917][ T31] [ 387.261917][ T31] Showing all locks held in the system: [ 387.278460][ T31] 3 locks held by kworker/0:1/10: [ 387.283516][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.309572][ T31] #1: ffffc900000f7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.320745][ T31] #2: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 387.330396][ T31] 3 locks held by kworker/u8:0/12: [ 387.335568][ T31] 3 locks held by kworker/u8:1/13: [ 387.341939][ T31] 1 lock held by khungtaskd/31: [ 387.353869][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 387.363986][ T31] 3 locks held by kworker/u8:2/36: [ 387.369108][ T31] 3 locks held by kworker/1:1/48: [ 387.374187][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.385331][ T31] #1: ffffc90000b87bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.396788][ T31] #2: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 387.407265][ T31] 3 locks held by kworker/u8:3/49: [ 387.412387][ T31] 3 locks held by kworker/u8:4/61: [ 387.417579][ T31] 2 locks held by kswapd0/85: [ 387.422260][ T31] 3 locks held by kswapd1/87: [ 387.427009][ T31] 4 locks held by kworker/u8:5/1009: [ 387.432297][ T31] 3 locks held by kworker/0:2/1210: [ 387.437549][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.451678][ T31] #1: ffffc90003fefbc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.463677][ T31] #2: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 387.473505][ T31] 8 locks held by kworker/u8:6/1341: [ 387.479758][ T31] 3 locks held by kworker/R-ipv6_/3201: [ 387.485359][ T31] #0: ffff88802efaf148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.497535][ T31] #1: ffffc9000bae7ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.513226][ T31] #2: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 387.522827][ T31] 3 locks held by kworker/u8:7/3506: [ 387.528351][ T31] 3 locks held by kworker/u8:8/4825: [ 387.533895][ T31] 1 lock held by klogd/5224: [ 387.538510][ T31] 1 lock held by udevd/5235: [ 387.543150][ T31] 1 lock held by dhcpcd/5530: [ 387.549406][ T31] 2 locks held by crond/5607: [ 387.565169][ T31] 2 locks held by getty/5624: [ 387.569869][ T31] #0: ffff888033a020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 387.579673][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 387.590044][ T31] 2 locks held by syz-executor/5851: [ 387.595409][ T31] 4 locks held by kworker/0:5/5927: [ 387.600722][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 387.611774][ T31] #1: ffffc90004defbc0 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 387.621610][ T31] #2: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x890 [ 387.630142][ T31] #3: ffff88807aae0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xaf/0x1c0 [ 387.641145][ T31] 1 lock held by syz.0.29/6063: [ 387.646004][ T31] 3 locks held by syz.3.81/6261: [ 387.651601][ T31] 3 locks held by syz.4.82/6262: [ 387.656558][ T31] 4 locks held by syz.1.83/6263: [ 387.661474][ T31] 2 locks held by kworker/0:6/6278: [ 387.666705][ T31] 4 locks held by kworker/u8:9/6279: [ 387.671981][ T31] 3 locks held by kworker/u8:10/6280: [ 387.677367][ T31] 4 locks held by kworker/u8:11/6281: [ 387.682717][ T31] 1 lock held by kworker/u8:12/6283: [ 387.688022][ T31] [ 387.690325][ T31] ============================================= [ 387.690325][ T31] [ 387.698865][ T31] NMI backtrace for cpu 1 [ 387.698880][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 387.698891][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.698897][ T31] Call Trace: [ 387.698902][ T31] [ 387.698906][ T31] dump_stack_lvl+0x189/0x250 [ 387.698924][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.698935][ T31] ? __pfx__printk+0x10/0x10 [ 387.698954][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 387.698969][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 387.698981][ T31] ? __pfx__printk+0x10/0x10 [ 387.698996][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.699013][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 387.699026][ T31] watchdog+0xf93/0xfe0 [ 387.699042][ T31] ? watchdog+0x1de/0xfe0 [ 387.699057][ T31] kthread+0x70e/0x8a0 [ 387.699071][ T31] ? __pfx_watchdog+0x10/0x10 [ 387.699083][ T31] ? __pfx_kthread+0x10/0x10 [ 387.699095][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.699108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.699121][ T31] ? __pfx_kthread+0x10/0x10 [ 387.699132][ T31] ret_from_fork+0x3f9/0x770 [ 387.699143][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 387.699155][ T31] ? __switch_to_asm+0x39/0x70 [ 387.699166][ T31] ? __switch_to_asm+0x33/0x70 [ 387.699177][ T31] ? __pfx_kthread+0x10/0x10 [ 387.699189][ T31] ret_from_fork_asm+0x1a/0x30 [ 387.699208][ T31] [ 387.699211][ T31] Sending NMI from CPU 1 to CPUs 0: [ 387.844265][ C0] NMI backtrace for cpu 0 [ 387.844280][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 387.844296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.844305][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 387.844329][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 387.844341][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 387.844355][ C0] RAX: cad01b67e2ea4900 RBX: ffffffff819683c8 RCX: cad01b67e2ea4900 [ 387.844366][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b81b0 RDI: ffffffff8be33800 [ 387.844377][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 387.844387][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38f30 [ 387.844398][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 387.844408][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 387.844420][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.844430][ C0] CR2: 00005615254379b0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 387.844443][ C0] Call Trace: [ 387.844450][ C0] [ 387.844457][ C0] default_idle+0x13/0x20 [ 387.844471][ C0] default_idle_call+0x74/0xb0 [ 387.844486][ C0] do_idle+0x1e8/0x510 [ 387.844503][ C0] ? __pfx_do_idle+0x10/0x10 [ 387.844524][ C0] cpu_startup_entry+0x44/0x60 [ 387.844537][ C0] rest_init+0x2de/0x300 [ 387.844553][ C0] start_kernel+0x3a9/0x410 [ 387.844574][ C0] x86_64_start_reservations+0x24/0x30 [ 387.844588][ C0] x86_64_start_kernel+0x143/0x1c0 [ 387.844602][ C0] common_startup_64+0x13e/0x147 [ 387.844626][ C0] [ 387.845329][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 388.025485][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 388.034566][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.044596][ T31] Call Trace: [ 388.047854][ T31] [ 388.050763][ T31] dump_stack_lvl+0x99/0x250 [ 388.055337][ T31] ? __asan_memcpy+0x40/0x70 [ 388.059941][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.065134][ T31] ? __pfx__printk+0x10/0x10 [ 388.069732][ T31] vpanic+0x281/0x750 [ 388.073702][ T31] ? __pfx_vpanic+0x10/0x10 [ 388.078187][ T31] ? preempt_schedule+0xae/0xc0 [ 388.083016][ T31] ? preempt_schedule_common+0x83/0xd0 [ 388.088454][ T31] panic+0xb9/0xc0 [ 388.092153][ T31] ? __pfx_panic+0x10/0x10 [ 388.096544][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 388.101899][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 388.108036][ T31] watchdog+0xfd2/0xfe0 [ 388.112182][ T31] ? watchdog+0x1de/0xfe0 [ 388.116493][ T31] kthread+0x70e/0x8a0 [ 388.120545][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.125197][ T31] ? __pfx_kthread+0x10/0x10 [ 388.129764][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.134939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.140120][ T31] ? __pfx_kthread+0x10/0x10 [ 388.144687][ T31] ret_from_fork+0x3f9/0x770 [ 388.149258][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 388.154371][ T31] ? __switch_to_asm+0x39/0x70 [ 388.159114][ T31] ? __switch_to_asm+0x33/0x70 [ 388.163859][ T31] ? __pfx_kthread+0x10/0x10 [ 388.168436][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.173184][ T31] [ 388.176469][ T31] Kernel Offset: disabled [ 388.180778][ T31] Rebooting in 86400 seconds..