last executing test programs: 2m44.167003237s ago: executing program 3 (id=407): syz_emit_ethernet(0xfc1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 2m42.702506879s ago: executing program 3 (id=414): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000eb0000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 2m41.539176235s ago: executing program 3 (id=416): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r3, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x5a, 0x3e}, {0xc}, {0xc}}, {@pci, {0x0, 0x8e, 0x6679fb74bcda4679}, {0x0, 0x8f, 0x9}, {0x0, 0x90, 0x1f6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564b00000000"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r6, 0xc0106403, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m39.173161212s ago: executing program 3 (id=421): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES32=r2], 0x14e) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000200)=@ethtool_gstrings={0x1b, 0x2}}) mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m36.071904129s ago: executing program 3 (id=428): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xf) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) unshare(0x8000480) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001100)=0x12) gettid() socket$inet6_sctp(0xa, 0x1, 0x84) 2m34.417925917s ago: executing program 3 (id=432): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) 2m19.170639613s ago: executing program 32 (id=432): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xff) 17.901537318s ago: executing program 0 (id=726): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xe803}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 15.023590948s ago: executing program 0 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x20000000) 13.784901781s ago: executing program 5 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/186) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102376, 0x18fe8) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) mknodat(0xffffffffffffffff, 0x0, 0x8000, 0x3) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000400)=0x11) r8 = socket$kcm(0x2d, 0x2, 0x0) close(r8) 11.618265127s ago: executing program 1 (id=738): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 11.411189216s ago: executing program 5 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 11.305613879s ago: executing program 2 (id=740): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000340)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 11.187697285s ago: executing program 4 (id=741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) 10.938974839s ago: executing program 5 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)='>', 0x1}], 0x1}, 0x800) 10.814671348s ago: executing program 0 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40001) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) 9.804626136s ago: executing program 1 (id=744): syz_open_procfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x1}) r4 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) listen(r5, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r8 = socket$pppoe(0x18, 0x1, 0x0) bind(r8, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0xffffff72, @local, 0x3ff, 0x2}, 0x80) 9.630862207s ago: executing program 5 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = creat(0x0, 0x0) r4 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r5 = dup(r3) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)={0x28}, 0x28) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r4, 0x0, 0x4000000053d2) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x4c}}, 0x20004880) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'wlan0\x00', 0x1}, 0x18) 9.55916604s ago: executing program 0 (id=746): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.521292516s ago: executing program 4 (id=747): socket$packet(0x11, 0x2, 0x300) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 9.450342074s ago: executing program 2 (id=748): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010000", 0x7) 7.912668731s ago: executing program 1 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/186) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) mknodat(r4, 0x0, 0x8000, 0x3) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000400)=0x11) r8 = socket$kcm(0x2d, 0x2, 0x0) close(r8) 7.601218679s ago: executing program 2 (id=750): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) socket(0x10, 0x803, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.600690726s ago: executing program 5 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80, 0x121) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x772}, 0x1c) bind$inet6(r1, &(0x7f0000000040), 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 5.313261326s ago: executing program 4 (id=752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 5.288952538s ago: executing program 0 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x20000000) 5.015904435s ago: executing program 2 (id=754): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 4.651028228s ago: executing program 4 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, 0x0, &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000900)='>', 0x1}], 0x1}, 0x800) 4.175206275s ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40001) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) 4.172977574s ago: executing program 0 (id=757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000deffffffffffffff00850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x8926, 0x20001114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x726) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) socket(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x614b, 0x80) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000300)="117dba94638ba587640068c3d94f08f644b738703484be54b48a8662aeef3695db0aafd2a31783309828c2e4a34f27b69abed8080fd987bb890eaba00b3bf8280a29cebd27b0383e36bd3cf92fb49dc18a61b78b3928e72101429c09ae4391583d5f6bcc9a29f8659386d24dbeb4be3e56c170953b0c29b9d3c0532ecd857568e076f4646ad44c7ee6bfb95322718624c073845f0c825983bd63f21169c673e6e24db79a8ecac63cd935255b77e864af907b7cca055f4702d3af62eabdf3d9fe42cf5fbd2f1ebf77eaa0811e6975b45698e36d56c4c9d271132876f54b4e663255f86ef9f572175163ea68ac942edc05a3", 0xf1}], 0x1) sched_setaffinity(0x0, 0xffffffffffffff22, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0xb42}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x490}]}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 2.949613448s ago: executing program 2 (id=758): sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4004000) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x4, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.949127013s ago: executing program 4 (id=759): syz_open_procfs(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x1}) r4 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) listen(r5, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r8 = socket$pppoe(0x18, 0x1, 0x0) bind(r8, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0xffffff72, @local, 0x3ff, 0x2}, 0x80) 2.903137114s ago: executing program 1 (id=760): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010000", 0x7) 2.586806191s ago: executing program 5 (id=761): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000fc9808ffacdc137e1b1d400000000003000000950010000000000015ab"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000006208500000070000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r7, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, 0x0, 0x0) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) 304.185351ms ago: executing program 1 (id=762): socket$packet(0x11, 0x2, 0x300) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 272.665232ms ago: executing program 4 (id=763): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=764): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 82.065783][ T5829] cgroup: Unknown subsys name 'net' [ 82.194304][ T5829] cgroup: Unknown subsys name 'cpuset' [ 82.204038][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.872083][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.569430][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.581537][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.589379][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.597758][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.605329][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.616342][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.625003][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.633254][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.641410][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.649161][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.658009][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.666328][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.673756][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.682874][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.691515][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.698992][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.709900][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.739770][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.748007][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.756021][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.778619][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.780425][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.793937][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.803783][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.811911][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.543962][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 87.697842][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.801694][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 87.874878][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 87.886497][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.899103][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.907605][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.915262][ T5849] bridge_slave_0: entered allmulticast mode [ 87.923110][ T5849] bridge_slave_0: entered promiscuous mode [ 87.945476][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.952813][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.960547][ T5849] bridge_slave_1: entered allmulticast mode [ 87.967913][ T5849] bridge_slave_1: entered promiscuous mode [ 88.099322][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.146091][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.153711][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.161066][ T5844] bridge_slave_0: entered allmulticast mode [ 88.168329][ T5844] bridge_slave_0: entered promiscuous mode [ 88.193628][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.255907][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.263306][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.270915][ T5844] bridge_slave_1: entered allmulticast mode [ 88.278409][ T5844] bridge_slave_1: entered promiscuous mode [ 88.358188][ T5849] team0: Port device team_slave_0 added [ 88.417667][ T5849] team0: Port device team_slave_1 added [ 88.437555][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.445059][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.453073][ T5848] bridge_slave_0: entered allmulticast mode [ 88.461023][ T5848] bridge_slave_0: entered promiscuous mode [ 88.472394][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.486108][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.495796][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.503886][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.511368][ T5850] bridge_slave_0: entered allmulticast mode [ 88.518654][ T5850] bridge_slave_0: entered promiscuous mode [ 88.552295][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.560254][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.567746][ T5848] bridge_slave_1: entered allmulticast mode [ 88.576781][ T5848] bridge_slave_1: entered promiscuous mode [ 88.601092][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.608371][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.616845][ T5850] bridge_slave_1: entered allmulticast mode [ 88.624762][ T5850] bridge_slave_1: entered promiscuous mode [ 88.647938][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.655265][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.682237][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.695512][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.704403][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.711983][ T5839] bridge_slave_0: entered allmulticast mode [ 88.719245][ T5839] bridge_slave_0: entered promiscuous mode [ 88.731313][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.738449][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.745941][ T5839] bridge_slave_1: entered allmulticast mode [ 88.753259][ T5839] bridge_slave_1: entered promiscuous mode [ 88.770526][ T5845] Bluetooth: hci1: command tx timeout [ 88.805509][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.812633][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.839384][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.850489][ T5845] Bluetooth: hci4: command tx timeout [ 88.850504][ T5843] Bluetooth: hci2: command tx timeout [ 88.850710][ T5843] Bluetooth: hci0: command tx timeout [ 88.864239][ T5845] Bluetooth: hci3: command tx timeout [ 88.905432][ T5844] team0: Port device team_slave_0 added [ 88.945676][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.956978][ T5844] team0: Port device team_slave_1 added [ 88.994188][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.008263][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.020988][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.034210][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.045861][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.124166][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.131287][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.157699][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.173293][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.180568][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.206785][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.225276][ T5849] hsr_slave_0: entered promiscuous mode [ 89.232310][ T5849] hsr_slave_1: entered promiscuous mode [ 89.258308][ T5850] team0: Port device team_slave_0 added [ 89.321770][ T5850] team0: Port device team_slave_1 added [ 89.333467][ T5839] team0: Port device team_slave_0 added [ 89.344473][ T5848] team0: Port device team_slave_0 added [ 89.354474][ T5848] team0: Port device team_slave_1 added [ 89.384098][ T5839] team0: Port device team_slave_1 added [ 89.475945][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.484124][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.511325][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.557214][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.564602][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.591926][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.616330][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.625969][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.653338][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.665484][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.672960][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.699110][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.712280][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.720129][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.746220][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.766220][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.773350][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.799361][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.816336][ T5844] hsr_slave_0: entered promiscuous mode [ 89.823842][ T5844] hsr_slave_1: entered promiscuous mode [ 89.830565][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.838404][ T5844] Cannot create hsr debugfs directory [ 89.985998][ T5839] hsr_slave_0: entered promiscuous mode [ 89.997687][ T5839] hsr_slave_1: entered promiscuous mode [ 90.004954][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.012714][ T5839] Cannot create hsr debugfs directory [ 90.046749][ T5848] hsr_slave_0: entered promiscuous mode [ 90.055541][ T5848] hsr_slave_1: entered promiscuous mode [ 90.062037][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.069844][ T5848] Cannot create hsr debugfs directory [ 90.218262][ T5850] hsr_slave_0: entered promiscuous mode [ 90.225824][ T5850] hsr_slave_1: entered promiscuous mode [ 90.233029][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.241026][ T5850] Cannot create hsr debugfs directory [ 90.482620][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.542933][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.604473][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.655032][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.761791][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.799012][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.818804][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.838067][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.849858][ T5845] Bluetooth: hci1: command tx timeout [ 90.930267][ T5845] Bluetooth: hci0: command tx timeout [ 90.930312][ T5843] Bluetooth: hci3: command tx timeout [ 90.935716][ T5845] Bluetooth: hci4: command tx timeout [ 90.941653][ T5858] Bluetooth: hci2: command tx timeout [ 90.968913][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.982589][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.014138][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.030688][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.125876][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.136791][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.151082][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.182989][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.241504][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.298227][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.362281][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.369548][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.378478][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.403608][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.426150][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.433352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.442884][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.465950][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.477001][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.544735][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.604518][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.611818][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.645402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.652592][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.715466][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.808642][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.874258][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.881508][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.895786][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.922456][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.933312][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.940538][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.994925][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.039450][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.091362][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.099009][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.124590][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.131817][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.145341][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.152599][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.172497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.179943][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.201155][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.458058][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.488203][ T5849] veth0_vlan: entered promiscuous mode [ 92.578538][ T5849] veth1_vlan: entered promiscuous mode [ 92.663017][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.758169][ T5844] veth0_vlan: entered promiscuous mode [ 92.789406][ T5848] veth0_vlan: entered promiscuous mode [ 92.829173][ T5849] veth0_macvtap: entered promiscuous mode [ 92.868227][ T5844] veth1_vlan: entered promiscuous mode [ 92.886781][ T5849] veth1_macvtap: entered promiscuous mode [ 92.898846][ T5848] veth1_vlan: entered promiscuous mode [ 92.930891][ T5843] Bluetooth: hci1: command tx timeout [ 92.944884][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.986020][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.011745][ T5843] Bluetooth: hci3: command tx timeout [ 93.017253][ T5843] Bluetooth: hci2: command tx timeout [ 93.017583][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.022854][ T5858] Bluetooth: hci4: command tx timeout [ 93.022898][ T5858] Bluetooth: hci0: command tx timeout [ 93.058879][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.102718][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.116396][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.127631][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.140291][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167083][ T5848] veth0_macvtap: entered promiscuous mode [ 93.179426][ T5844] veth0_macvtap: entered promiscuous mode [ 93.212590][ T5848] veth1_macvtap: entered promiscuous mode [ 93.235543][ T5844] veth1_macvtap: entered promiscuous mode [ 93.309650][ T5839] veth0_vlan: entered promiscuous mode [ 93.344223][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.362958][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.375394][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.386538][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.398312][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.408351][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.422064][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.434434][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.453592][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.464865][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.476473][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.498248][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.517786][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.528052][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.539704][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.552694][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.567974][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.578794][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.589325][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.599685][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634606][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.643681][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.654599][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.663448][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.675690][ T5839] veth1_vlan: entered promiscuous mode [ 93.716037][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.733646][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.829612][ T5850] veth0_vlan: entered promiscuous mode [ 93.858931][ T5839] veth0_macvtap: entered promiscuous mode [ 93.877666][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.888909][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.911011][ T5850] veth1_vlan: entered promiscuous mode [ 93.942996][ T5839] veth1_macvtap: entered promiscuous mode [ 93.973594][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.990632][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.043009][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.056980][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.068950][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.079608][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.089468][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.100336][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.112947][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.161186][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.165115][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.169059][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.213480][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.229221][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.243574][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.254108][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.264241][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.274835][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.285937][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.305981][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.319661][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.358312][ T5850] veth0_macvtap: entered promiscuous mode [ 94.372479][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.389553][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.399446][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.413499][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.437623][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.440162][ T5850] veth1_macvtap: entered promiscuous mode [ 94.467935][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.558450][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.594263][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.610169][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.626162][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.649383][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.663893][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.674796][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.692690][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.718913][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.765320][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.777350][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.787493][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.798129][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.808349][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.835900][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.848244][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.860228][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.917999][ T5934] mmap: syz.2.3 (5934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.939140][ T5934] Zero length message leads to an empty skb [ 94.961109][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.999557][ T5933] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 95.008862][ T5933] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 95.028383][ T5845] Bluetooth: hci1: command tx timeout [ 95.090503][ T5845] Bluetooth: hci2: command tx timeout [ 95.096593][ T5858] Bluetooth: hci4: command tx timeout [ 95.103512][ T5847] Bluetooth: hci3: command tx timeout [ 95.114581][ T5843] Bluetooth: hci0: command tx timeout [ 95.257575][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.319223][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.337863][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.366426][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.609417][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.639324][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.757193][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.914683][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.933352][ T5950] process 'syz.1.9' launched './file0' with NULL argv: empty string added [ 95.942230][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.242882][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.367306][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.705495][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.726534][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.373324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.505311][ T1210] cfg80211: failed to load regulatory.db [ 97.578057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.190393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.912321][ T5984] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 98.923344][ T5984] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 99.090712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.130023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.180417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.180436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.181938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.380601][ T6001] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 102.290455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.800503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.183914][ T30] audit: type=1326 audit(1744053743.882:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 103.391451][ T30] audit: type=1326 audit(1744053743.922:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 103.416823][ T30] audit: type=1326 audit(1744053743.922:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 104.570756][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.798173][ T6020] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 105.122420][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.332829][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.590643][ T5895] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 105.685145][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.788536][ T5895] usb 3-1: config 0 descriptor?? [ 106.564883][ T5895] steelseries 0003:1038:12B6.0001: unknown main item tag 0x1 [ 106.582745][ T5895] steelseries 0003:1038:12B6.0001: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 106.752727][ T5895] steelseries 0003:1038:12B6.0001: hid_hw_raw_request() failed with -71 [ 106.791980][ T5895] usb 3-1: USB disconnect, device number 2 [ 109.705900][ T6058] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 109.715008][ T6058] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 110.457139][ T6066] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 114.239990][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 114.358919][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.401941][ T6091] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 115.098390][ T5910] IPVS: starting estimator thread 0... [ 116.170767][ T6099] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.780524][ T6113] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 116.789722][ T6113] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 117.651618][ T6118] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 118.019003][ T6121] fuse: Unknown parameter 'group_i00000000000000000000' [ 120.119319][ T6145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.493293][ T5896] IPVS: starting estimator thread 0... [ 121.661486][ T6156] IPVS: using max 25 ests per chain, 60000 per kthread [ 121.917927][ T6164] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 121.927379][ T6164] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 122.839168][ T6172] fuse: Unknown parameter 'group_i00000000000000000000' [ 127.815404][ T6217] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 127.824476][ T6217] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 128.640253][ T6222] fuse: Unknown parameter 'group_id00000000000000000000' [ 132.213322][ T6254] Bluetooth: MGMT ver 1.23 [ 133.017508][ T6255] Process accounting resumed [ 133.082982][ T6269] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 133.092250][ T6269] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 133.881412][ T6273] fuse: Unknown parameter 'group_id00000000000000000000' [ 134.997896][ T6279] input: syz1 as /devices/virtual/input/input5 [ 137.222438][ T6299] hfs: unable to load iocharset "io#harset" [ 137.477808][ T6297] Process accounting resumed [ 137.748051][ T6317] warning: `syz.4.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.113757][ T6319] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 138.122818][ T6319] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 138.307817][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.317577][ T6328] input: syz1 as /devices/virtual/input/input6 [ 140.540223][ T6337] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 140.552679][ T6337] batman_adv: batadv0: Adding interface: gretap1 [ 140.559444][ T6337] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.585149][ T6337] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 142.923244][ T6355] Process accounting resumed [ 143.596758][ T6375] input: syz1 as /devices/virtual/input/input7 [ 144.226073][ T6368] tipc: Failed to remove unknown binding: 66,1,1/0:362631503/362631505 [ 144.270747][ T6368] tipc: Failed to remove unknown binding: 66,1,1/0:362631503/362631505 [ 144.946817][ T6382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.966914][ T6382] batman_adv: batadv0: Adding interface: gretap1 [ 144.973403][ T6382] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.000358][ T6382] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 145.816252][ T6387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.782487][ T6412] Process accounting resumed [ 151.340704][ T6425] hfs: unable to load iocharset "io#harset" [ 153.251902][ T6440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.585602][ T6454] input: syz1 as /devices/virtual/input/input8 [ 155.991617][ T6465] hub 1-0:1.0: USB hub found [ 155.998812][ T6465] hub 1-0:1.0: 1 port detected [ 156.322441][ T30] audit: type=1326 audit(1744053797.022:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 156.459311][ T30] audit: type=1326 audit(1744053797.022:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 156.562197][ T30] audit: type=1326 audit(1744053797.022:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 156.640835][ T30] audit: type=1326 audit(1744053797.022:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 156.689876][ T30] audit: type=1326 audit(1744053797.022:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 158.607302][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'. [ 158.653577][ T6485] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 158.990640][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 159.152939][ T6494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.758713][ T30] audit: type=1326 audit(1744053803.462:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab9f8d169 code=0x7ffc0000 [ 162.827523][ T30] audit: type=1326 audit(1744053803.462:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab9f8d169 code=0x7ffc0000 [ 163.038802][ T30] audit: type=1326 audit(1744053803.462:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f5ab9f8d169 code=0x7ffc0000 [ 163.290269][ T30] audit: type=1326 audit(1744053803.462:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab9f8d169 code=0x7ffc0000 [ 164.325377][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.169'. [ 164.470503][ T6532] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 165.228005][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 168.168393][ T6565] netlink: 44 bytes leftover after parsing attributes in process `syz.4.182'. [ 168.698500][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 168.826760][ T6578] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 172.588703][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'. [ 174.381263][ T6628] hfs: unable to load iocharset "io#harset" [ 174.969490][ T6641] loop6: detected capacity change from 0 to 524287999 [ 174.984707][ T6641] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 3 [ 174.995896][ T6641] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 175.006242][ T6641] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 179.896172][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 182.613939][ T6687] hfs: unable to load iocharset "io#harset" [ 186.144363][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'. [ 188.213843][ T6729] hfs: unable to load iocharset "io#harset" [ 189.217837][ T30] audit: type=1326 audit(1744053829.922:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 189.249807][ T30] audit: type=1326 audit(1744053829.922:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 189.279629][ T30] audit: type=1326 audit(1744053829.952:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 189.341445][ T30] audit: type=1326 audit(1744053829.952:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 189.378098][ T30] audit: type=1326 audit(1744053829.952:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x7ffc0000 [ 189.609866][ T5842] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.429648][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 190.875309][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.234'. [ 191.275416][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.289163][ T5842] usb 5-1: no configurations [ 191.305483][ T5842] usb 5-1: can't read configurations, error -22 [ 195.325630][ T6791] hfs: unable to load iocharset "io#harset" [ 197.546213][ T6814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 198.846276][ T30] audit: type=1326 audit(1744053839.402:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.1.252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d3138d169 code=0x0 [ 199.757508][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.801894][ T6841] hfs: unable to load iocharset "io#harset" [ 201.142255][ T6843] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.272208][ T6865] fuse: Invalid rootmode [ 204.289824][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 206.376179][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 206.883066][ T6881] netlink: 'syz.1.267': attribute type 13 has an invalid length. [ 206.934834][ T6873] dvmrp1: entered allmulticast mode [ 207.160119][ T5916] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 207.832752][ T6893] hfs: unable to load iocharset "io#harset" [ 208.887399][ T6905] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 208.897817][ T6905] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 212.440360][ T5153] Bluetooth: hci4: command 0x0405 tx timeout [ 212.744814][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 212.839761][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 212.846117][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 212.852792][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 212.978399][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 213.056384][ T6932] fuse: Invalid rootmode [ 214.639336][ T6941] hfs: unable to load iocharset "io#harset" [ 215.415498][ T6956] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 215.424534][ T6956] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 220.083348][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 220.191127][ T6984] hfs: unable to load iocharset "io#harset" [ 220.494818][ T6988] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 220.854585][ T6993] fuse: Invalid rootmode [ 227.459417][ T7043] lo speed is unknown, defaulting to 1000 [ 227.470064][ T7043] lo speed is unknown, defaulting to 1000 [ 227.568434][ T7043] lo speed is unknown, defaulting to 1000 [ 227.936594][ T7043] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 228.176853][ T7043] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 229.033180][ T7043] lo speed is unknown, defaulting to 1000 [ 229.056451][ T7043] lo speed is unknown, defaulting to 1000 [ 229.126445][ T7043] lo speed is unknown, defaulting to 1000 [ 229.187337][ T7058] fuse: Bad value for 'rootmode' [ 230.132942][ T7043] lo speed is unknown, defaulting to 1000 [ 230.266938][ T7043] lo speed is unknown, defaulting to 1000 [ 231.415104][ T7074] program syz.2.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.341626][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.753376][ T30] audit: type=1800 audit(1744053873.462:20): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.325" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 233.827568][ T7095] can0: slcan on ttyS3. [ 234.260758][ T7100] fuse: Bad value for 'rootmode' [ 235.055259][ T7090] can0 (unregistered): slcan off ttyS3. [ 236.498115][ T7122] tty tty3: ldisc open failed (-12), clearing slot 2 [ 236.637507][ T7120] program syz.4.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.038812][ T7155] fuse: Bad value for 'rootmode' [ 241.883985][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.664323][ T7206] fuse: Unknown parameter 'use00000000000000000000' [ 249.792877][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 251.442005][ T7259] fuse: Unknown parameter 'use00000000000000000000' [ 254.588953][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.967066][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 259.378918][ T7325] veth1_to_team: entered promiscuous mode [ 261.185304][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.863514][ T7380] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 265.883604][ T7380] batman_adv: batadv0: Adding interface: gretap1 [ 265.890197][ T7380] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.915680][ T7380] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 266.858054][ T7386] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 266.878444][ T7386] batman_adv: batadv0: Adding interface: gretap1 [ 266.884982][ T7386] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.910643][ T7386] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 268.310524][ T7395] nbd3: detected capacity change from 0 to 510 [ 268.357130][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.416'. [ 268.449273][ T7395] block nbd3: shutting down sockets [ 268.530857][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.540110][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 268.560002][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.569374][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 268.673447][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.836324][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.484700][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.536078][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.608663][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.693225][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.784215][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.794066][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.806789][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.825161][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.833879][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.847567][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.863599][ T6884] ldm_validate_partition_table(): Disk read failed. [ 269.871120][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.884629][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.893037][ T6884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 269.906761][ T6884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.915536][ T6884] Dev nbd3: unable to read RDB block 0 [ 269.930704][ T6884] nbd3: unable to read partition table [ 269.967366][ T6884] ldm_validate_partition_table(): Disk read failed. [ 270.016237][ T6884] Dev nbd3: unable to read RDB block 0 [ 270.762172][ T6884] nbd3: unable to read partition table [ 270.932957][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 275.379837][ T7453] nbd3: detected capacity change from 0 to 510 [ 275.979964][ T5845] block nbd3: Receive control failed (result -104) [ 277.343839][ T7468] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.355162][ T7468] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 277.913786][ T5845] block nbd2: Receive control failed (result -32) [ 278.180774][ T7465] nbd2: detected capacity change from 0 to 510 [ 278.249326][ T5892] block nbd2: Dead connection, failed to find a fallback [ 278.268323][ T5892] blk_print_req_error: 27 callbacks suppressed [ 278.268343][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.276339][ T7467] block nbd2: shutting down sockets [ 278.284442][ T5892] buffer_io_error: 27 callbacks suppressed [ 278.284461][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 278.307652][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.320741][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 278.329133][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.348555][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 278.446226][ T99] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.482024][ T99] Buffer I/O error on dev nbd2, logical block 0, async page read [ 278.535732][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.582061][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 278.601270][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.848665][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 278.990344][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.096794][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 279.115397][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.156527][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 279.333814][ T5892] ldm_validate_partition_table(): Disk read failed. [ 279.349052][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.359183][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 279.369936][ T5892] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.379124][ T5892] Buffer I/O error on dev nbd2, logical block 0, async page read [ 280.256901][ T5892] Dev nbd2: unable to read RDB block 0 [ 280.276351][ T5892] nbd2: unable to read partition table [ 280.298749][ T5892] ldm_validate_partition_table(): Disk read failed. [ 280.325753][ T5892] Dev nbd2: unable to read RDB block 0 [ 280.402387][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 280.830169][ T5892] nbd2: unable to read partition table [ 281.518375][ T7497] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 281.527417][ T7497] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 287.800580][ T7530] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 287.818649][ T7530] batman_adv: batadv0: Adding interface: gretap1 [ 287.827620][ T7530] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.857301][ T7530] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 289.422326][ T7535] fuse: Bad value for 'fd' [ 289.552784][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 290.345756][ T7546] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 290.354905][ T7546] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 296.903767][ T7582] fuse: Bad value for 'fd' [ 297.198318][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.393157][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.404367][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.475433][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.882517][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.060480][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 298.076421][ T7594] netlink: 72 bytes leftover after parsing attributes in process `syz.4.466'. [ 298.146806][ T7585] lo speed is unknown, defaulting to 1000 [ 298.219751][ T7591] sp0: Synchronizing with TNC [ 299.936691][ T7591] [U] è [ 299.962172][ T7597] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 299.971368][ T7597] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 299.980379][ T5843] Bluetooth: hci5: command tx timeout [ 300.280935][ T30] audit: type=1326 audit(1744053940.992:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 300.430438][ T30] audit: type=1326 audit(1744053940.992:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 300.658048][ T30] audit: type=1326 audit(1744053940.992:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 300.991786][ T30] audit: type=1326 audit(1744053940.992:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 301.189306][ T30] audit: type=1326 audit(1744053940.992:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdfb8d169 code=0x7ffc0000 [ 302.333460][ T5843] Bluetooth: hci5: command tx timeout [ 303.340016][ T7627] fuse: Bad value for 'fd' [ 304.371424][ T5843] Bluetooth: hci5: command tx timeout [ 304.662725][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 306.105999][ T6120] block nbd3: Possible stuck request ffff8880259be8c0: control (read@0,4096B). Runtime 30 seconds [ 306.450933][ T5843] Bluetooth: hci5: command tx timeout [ 306.782663][ T7647] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 306.792494][ T7647] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 307.226594][ T7585] chnl_net:caif_netlink_parms(): no params data found [ 309.497052][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.514881][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.523189][ T7585] bridge_slave_0: entered allmulticast mode [ 309.531608][ T7585] bridge_slave_0: entered promiscuous mode [ 309.546501][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.554320][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.578477][ T7585] bridge_slave_1: entered allmulticast mode [ 309.691864][ T7585] bridge_slave_1: entered promiscuous mode [ 309.881607][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.743682][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.044357][ T7585] team0: Port device team_slave_0 added [ 311.165965][ T7585] team0: Port device team_slave_1 added [ 311.270873][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 312.430893][ T7690] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 312.430913][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.430930][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.473369][ T7690] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 313.120962][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.240820][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.248078][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.279398][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.864124][ T7585] hsr_slave_0: entered promiscuous mode [ 314.895803][ T7585] hsr_slave_1: entered promiscuous mode [ 314.944385][ T7585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.984374][ T7585] Cannot create hsr debugfs directory [ 316.632574][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 317.447407][ T7585] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.559587][ T7585] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.598731][ T7585] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.625441][ T7585] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.318386][ T7743] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 318.327373][ T7743] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 319.248513][ T7748] hfs: unable to load iocharset "io#harset" [ 319.913874][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.175535][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.266500][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.273778][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.374181][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.381910][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.252160][ T7585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.343485][ T7585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.578989][ T7768] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 322.235442][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 322.624332][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.545810][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.225034][ T7799] input: syz1 as /devices/virtual/input/input12 [ 326.262224][ T7798] syz.2.521: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 326.315879][ T7798] CPU: 0 UID: 0 PID: 7798 Comm: syz.2.521 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 326.315913][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.315931][ T7798] Call Trace: [ 326.315940][ T7798] [ 326.315949][ T7798] dump_stack_lvl+0x241/0x360 [ 326.316002][ T7798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.316033][ T7798] ? __pfx__printk+0x10/0x10 [ 326.316062][ T7798] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 326.316099][ T7798] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 326.316132][ T7798] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 326.316167][ T7798] warn_alloc+0x27c/0x410 [ 326.316195][ T7798] ? __pfx_warn_alloc+0x10/0x10 [ 326.316227][ T7798] ? bpf_uprobe_multi_link_attach+0x49c/0xde0 [ 326.316261][ T7798] ? __get_vm_area_node+0x1c8/0x2d0 [ 326.316280][ T7798] ? __get_vm_area_node+0x25c/0x2d0 [ 326.316308][ T7798] __vmalloc_node_range_noprof+0x634/0x1390 [ 326.316362][ T7798] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 326.316384][ T7798] ? __kasan_kmalloc_large+0x1a/0xa0 [ 326.316419][ T7798] ? bpf_uprobe_multi_link_attach+0x49c/0xde0 [ 326.316442][ T7798] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 326.316474][ T7798] ? bpf_uprobe_multi_link_attach+0x49c/0xde0 [ 326.316496][ T7798] ? bpf_uprobe_multi_link_attach+0x49c/0xde0 [ 326.316518][ T7798] ? bpf_uprobe_multi_link_attach+0x47d/0xde0 [ 326.316545][ T7798] bpf_uprobe_multi_link_attach+0x49c/0xde0 [ 326.316579][ T7798] ? irqentry_exit+0x63/0x90 [ 326.316607][ T7798] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 326.316644][ T7798] ? bpf_prog_attach_check_attach_type+0x42c/0x4f0 [ 326.316678][ T7798] link_create+0x6d7/0x870 [ 326.316711][ T7798] __sys_bpf+0x5ad/0x8b0 [ 326.316731][ T7798] ? trace_irq_disable+0x3b/0x120 [ 326.316755][ T7798] ? __pfx___sys_bpf+0x10/0x10 [ 326.316811][ T7798] __x64_sys_bpf+0x7c/0x90 [ 326.316831][ T7798] do_syscall_64+0xf3/0x230 [ 326.316858][ T7798] ? clear_bhb_loop+0x45/0xa0 [ 326.316881][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.316902][ T7798] RIP: 0033:0x7f9bdfb8d169 [ 326.316930][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.316948][ T7798] RSP: 002b:00007f9be0a33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.316971][ T7798] RAX: ffffffffffffffda RBX: 00007f9bdfda5fa0 RCX: 00007f9bdfb8d169 [ 326.316987][ T7798] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 326.317000][ T7798] RBP: 00007f9bdfc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 326.317014][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.317026][ T7798] R13: 0000000000000000 R14: 00007f9bdfda5fa0 R15: 00007ffc0a5b4058 [ 326.317058][ T7798] [ 326.317068][ T7798] Mem-Info: [ 326.649549][ T7798] active_anon:8084 inactive_anon:0 isolated_anon:0 [ 326.649549][ T7798] active_file:3534 inactive_file:38393 isolated_file:0 [ 326.649549][ T7798] unevictable:768 dirty:95 writeback:0 [ 326.649549][ T7798] slab_reclaimable:9662 slab_unreclaimable:100110 [ 326.649549][ T7798] mapped:37083 shmem:4313 pagetables:930 [ 326.649549][ T7798] sec_pagetables:0 bounce:0 [ 326.649549][ T7798] kernel_misc_reclaimable:0 [ 326.649549][ T7798] free:1320149 free_pcp:1322 free_cma:0 [ 326.759754][ T7798] Node 0 active_anon:32436kB inactive_anon:0kB active_file:14136kB inactive_file:153496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148332kB dirty:380kB writeback:0kB shmem:15716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11576kB pagetables:3720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 326.793207][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.885894][ T7798] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 327.037172][ T7798] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.074460][ T7798] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 327.074895][ T7585] veth0_vlan: entered promiscuous mode [ 327.082974][ T7798] Node 0 DMA32 free:1363660kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:32428kB inactive_anon:0kB active_file:14136kB inactive_file:153396kB unevictable:1536kB writepending:380kB present:3129332kB managed:2547176kB mlocked:0kB bounce:0kB free_pcp:1620kB local_pcp:1152kB free_cma:0kB [ 327.119866][ T7798] lowmem_reserve[]: 0 0 0 0 0 [ 327.125756][ T7798] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.167183][ T7585] veth1_vlan: entered promiscuous mode [ 327.202945][ T7585] veth0_macvtap: entered promiscuous mode [ 327.212242][ T7798] lowmem_reserve[]: 0 0 0 0 0 [ 327.217267][ T7798] Node 1 Normal free:3904900kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 327.255477][ T7798] lowmem_reserve[]: 0 0 0 0 0 [ 327.261963][ T7798] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 327.298672][ T7798] Node 0 DMA32: 96*4kB (UM) 271*8kB (UME) 261*16kB (UME) 197*32kB (UME) 64*64kB (UME) 16*128kB (UME) 11*256kB (M) 14*512kB (UM) 9*1024kB (UME) 1*2048kB (M) 323*4096kB (M) = 1363432kB [ 327.302681][ T7585] veth1_macvtap: entered promiscuous mode [ 327.330312][ T7798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 327.345949][ T7798] Node 1 Normal: 223*4kB (UE) 61*8kB (UME) 38*16kB (UME) 210*32kB (UME) 96*64kB (UME) 27*128kB (UME) 12*256kB (UM) 9*512kB (UM) 2*1024kB (ME) 3*2048kB (UE) 945*4096kB (M) = 3904900kB [ 327.381540][ T7798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.394108][ T7798] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 327.410791][ T7798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.439377][ T7798] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.460205][ T7798] 46243 total pagecache pages [ 327.464993][ T7798] 0 pages in swap cache [ 327.481954][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.481961][ T7798] Free swap = 124996kB [ 327.529821][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.550086][ T7798] Total swap = 124996kB [ 327.554469][ T7798] 2097051 pages RAM [ 327.565912][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.586279][ T7798] 0 pages HighMem/MovableOnly [ 327.614087][ T7798] 428599 pages reserved [ 327.618462][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.618486][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.664827][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.672799][ T7798] 0 pages cma reserved [ 327.897191][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.908741][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.932001][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.942742][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.963542][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.344867][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.379581][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.399614][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.449881][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.749579][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.760295][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.770342][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.780874][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.721667][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.768795][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.433852][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.014296][ T7585] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.069565][ T7585] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.095820][ T7585] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.105785][ T7585] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.915316][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.034942][ T7865] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 333.061516][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.791544][ T7523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.818579][ T7523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.701742][ T6120] block nbd3: Possible stuck request ffff8880259be8c0: control (read@0,4096B). Runtime 60 seconds [ 341.670840][ T7930] capability: warning: `syz.1.555' uses deprecated v2 capabilities in a way that may be insecure [ 352.121088][ T8022] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 362.288777][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 362.473707][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 362.473823][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 362.473995][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.474063][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.436336][ T6120] block nbd3: Possible stuck request ffff8880259be8c0: control (read@0,4096B). Runtime 90 seconds [ 367.729589][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 368.009810][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 368.957354][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 369.147244][ T5910] usb 5-1: USB disconnect, device number 4 [ 369.197239][ T10] usb 2-1: string descriptor 0 read error: -22 [ 369.207152][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 369.336724][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.182320][ T8177] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 374.420161][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 374.426405][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 374.545259][ T10] usb 2-1: USB disconnect, device number 2 [ 376.038961][ T8224] overlayfs: failed to resolve './file1': -2 [ 376.739314][ T8218] loop6: detected capacity change from 0 to 524287999 [ 379.470933][ T8247] netlink: 512 bytes leftover after parsing attributes in process `syz.1.643'. [ 379.669757][ T8247] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 381.907168][ T8271] loop6: detected capacity change from 0 to 524287999 [ 384.112146][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.138792][ T8294] Cannot find del_set index 0 as target [ 385.508012][ T8311] loop6: detected capacity change from 0 to 524287999 [ 389.231051][ T8343] Cannot find del_set index 0 as target [ 391.968752][ T8356] loop6: detected capacity change from 0 to 524287999 [ 397.591799][ T6120] block nbd3: Possible stuck request ffff8880259be8c0: control (read@0,4096B). Runtime 120 seconds [ 397.884636][ T8411] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.694' sets config #0 [ 402.911386][ T8463] nbd2: detected capacity change from 0 to 510 [ 403.275897][ T8463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.705'. [ 403.315267][ T8463] block nbd2: shutting down sockets [ 403.843000][ T8472] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.708' sets config #0 [ 408.399614][ T8512] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 408.680295][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 410.634183][ T8520] nbd4: detected capacity change from 0 to 510 [ 410.927880][ T8520] block nbd4: shutting down sockets [ 411.345050][ T8532] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.723' sets config #0 [ 413.423571][ T8552] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 413.458394][ T8552] batman_adv: batadv0: Adding interface: gretap1 [ 413.464988][ T8552] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.490331][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.499039][ T8552] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 415.127089][ T8561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.731'. [ 415.186203][ T8568] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 415.225841][ T8565] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.952903][ T30] audit: type=1800 audit(1744054056.652:26): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.735" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 416.128386][ T8574] can0: slcan on ttyS3. [ 417.545730][ T8571] can0 (unregistered): slcan off ttyS3. [ 418.021772][ T8584] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.738' sets config #0 [ 421.071532][ T8613] hfs: unable to load iocharset "io#harset" [ 421.178964][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.745'. [ 422.197287][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 422.911801][ T30] audit: type=1800 audit(1744054063.622:27): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.749" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 423.255079][ T8627] can0: slcan on ttyS3. [ 424.169876][ T8625] can0 (unregistered): slcan off ttyS3. [ 425.300067][ T8642] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.754' sets config #0 [ 428.768965][ T8665] hfs: unable to load iocharset "io#harset" [ 428.854663][ T6120] block nbd3: Possible stuck request ffff8880259be8c0: control (read@0,4096B). Runtime 150 seconds [ 430.130124][ T31] INFO: task syz.3.432:7451 blocked for more than 143 seconds. [ 430.743649][ T31] Not tainted 6.14.0-next-20250404-syzkaller #0 [ 431.091414][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.480589][ T31] task:syz.3.432 state:D stack:27912 pid:7451 tgid:7450 ppid:5848 task_flags:0x400140 flags:0x00004006 [ 432.010781][ T31] Call Trace: [ 432.014136][ T31] [ 432.018040][ T31] __schedule+0x1b88/0x5240 [ 432.022710][ T31] ? schedule+0x163/0x360 [ 432.027085][ T31] ? __pfx___schedule+0x10/0x10 [ 432.032129][ T31] ? schedule+0x90/0x360 [ 432.036429][ T31] ? schedule+0x90/0x360 [ 432.040779][ T31] schedule+0x163/0x360 [ 432.048883][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.056240][ T31] schedule_preempt_disabled+0x13/0x30 [ 432.061870][ T31] __mutex_lock+0x805/0x10c0 [ 432.066607][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 432.071550][ T31] ? bdev_release+0x17e/0x700 [ 432.076277][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 432.081638][ T31] ? __pfx_ima_file_free+0x10/0x10 [ 432.086819][ T31] bdev_release+0x17e/0x700 [ 432.091932][ T31] blkdev_release+0x15/0x20 [ 432.096504][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 432.102321][ T31] __fput+0x3e9/0x9f0 [ 432.106389][ T31] task_work_run+0x251/0x310 [ 432.111526][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.117738][ T31] ? __pfx_task_work_run+0x10/0x10 [ 432.124903][ T31] get_signal+0x15db/0x1730 [ 432.129984][ T31] ? __pfx_get_signal+0x10/0x10 [ 432.134906][ T31] arch_do_signal_or_restart+0x98/0x840 [ 432.159577][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 432.166944][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 432.178045][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 432.211171][ T31] do_syscall_64+0x100/0x230 [ 432.291817][ T31] ? clear_bhb_loop+0x45/0xa0 [ 432.350773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.363187][ T31] RIP: 0033:0x7f93b298d169 [ 432.593739][ T31] RSP: 002b:00007f93b3723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.729540][ T31] RAX: 0000000000000000 RBX: 00007f93b2ba5fa0 RCX: 00007f93b298d169 [ 432.738601][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 432.747007][ T31] RBP: 00007f93b2a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 432.755326][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.763629][ T31] R13: 0000000000000000 R14: 00007f93b2ba5fa0 R15: 00007fff00fe8d08 [ 432.771962][ T31] [ 432.775788][ T31] [ 432.775788][ T31] Showing all locks held in the system: [ 432.786054][ T31] 1 lock held by khungtaskd/31: [ 432.792372][ T31] #0: ffffffff8ed3e440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 432.804277][ T31] 5 locks held by kworker/u8:5/130: [ 432.809820][ T31] 2 locks held by kworker/u8:8/1164: [ 432.815400][ T31] #0: ffff888140589948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 432.829770][ T31] #1: ffffc9000405fc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 432.843273][ T31] 2 locks held by getty/5595: [ 432.854670][ T31] #0: ffff888035e8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.871839][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 432.908941][ T31] 1 lock held by syz-executor/5844: [ 432.914622][ T31] 1 lock held by udevd/6884: [ 432.919255][ T31] #0: ffff888025942358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 432.929150][ T31] 1 lock held by syz.3.432/7451: [ 432.934418][ T31] #0: ffff888025942358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x17e/0x700 [ 432.946410][ T31] 3 locks held by kworker/u8:16/8575: [ 432.951907][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 432.962163][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 432.973873][ T31] #2: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xed/0x270 [ 432.985324][ T31] [ 432.987669][ T31] ============================================= [ 432.987669][ T31] [ 432.996775][ T31] NMI backtrace for cpu 0 [ 432.996794][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 432.996821][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.996832][ T31] Call Trace: [ 432.996840][ T31] [ 432.996847][ T31] dump_stack_lvl+0x241/0x360 [ 432.996884][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.996915][ T31] ? __pfx__printk+0x10/0x10 [ 432.996956][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 432.996985][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 432.997005][ T31] ? _printk+0xd5/0x120 [ 432.997032][ T31] ? __wake_up_klogd+0xcc/0x110 [ 432.997064][ T31] ? __pfx__printk+0x10/0x10 [ 432.997096][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.997119][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 432.997144][ T31] watchdog+0x1058/0x10a0 [ 432.997170][ T31] ? watchdog+0x1ea/0x10a0 [ 432.997198][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.997220][ T31] kthread+0x7b7/0x940 [ 432.997251][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.997274][ T31] ? __pfx_kthread+0x10/0x10 [ 432.997301][ T31] ? __pfx_kthread+0x10/0x10 [ 432.997329][ T31] ? __pfx_kthread+0x10/0x10 [ 432.997357][ T31] ? __pfx_kthread+0x10/0x10 [ 432.997386][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.997414][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 432.997440][ T31] ? __pfx_kthread+0x10/0x10 [ 432.997470][ T31] ret_from_fork+0x4b/0x80 [ 432.997491][ T31] ? __pfx_kthread+0x10/0x10 [ 432.997521][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.997557][ T31] [ 432.997594][ T31] Sending NMI from CPU 0 to CPUs 1: [ 433.162523][ C1] NMI backtrace for cpu 1 [ 433.162539][ C1] CPU: 1 UID: 0 PID: 8453 Comm: kworker/u8:15 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 433.162560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.162571][ C1] Workqueue: bat_events batadv_nc_worker [ 433.162596][ C1] RIP: 0010:lock_acquire+0xce/0x2f0 [ 433.162617][ C1] Code: 00 65 48 8b 04 25 08 10 69 93 83 b8 ec 0a 00 00 00 0f 85 ca 00 00 00 48 c7 44 24 10 00 00 00 00 9c 8f 44 24 10 4c 8b 74 24 10 48 c7 c7 c3 19 77 8e e8 d5 43 92 0a 65 ff 05 4e 4d ca 11 45 31 [ 433.162631][ C1] RSP: 0018:ffffc90002f07988 EFLAGS: 00000246 [ 433.162645][ C1] RAX: ffff88801b1f1e00 RBX: ffff888066790758 RCX: 0000000000000000 [ 433.162657][ C1] RDX: 0000000000000000 RSI: ffffffff8c33e235 RDI: 1ffff1100ccf20eb [ 433.162668][ C1] RBP: ffffffff93691020 R08: 0000000000000001 R09: 0000000000000000 [ 433.162679][ C1] R10: dffffc0000000000 R11: fffffbfff20bffa7 R12: 0000000000000001 [ 433.162690][ C1] R13: 0000000000000000 R14: 0000000000000246 R15: 0000000000000000 [ 433.162701][ C1] FS: 0000000000000000(0000) GS:ffff88812508f000(0000) knlGS:0000000000000000 [ 433.162714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.162726][ C1] CR2: 00007fe69dd78ab8 CR3: 00000000344ce000 CR4: 00000000003526f0 [ 433.162740][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 433.162750][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 433.162760][ C1] Call Trace: [ 433.162767][ C1] [ 433.162777][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 433.162798][ C1] _raw_spin_lock_bh+0x35/0x50 [ 433.162816][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 433.162835][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 433.162855][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 433.162882][ C1] batadv_nc_worker+0x328/0x610 [ 433.162899][ C1] ? batadv_nc_worker+0xcb/0x610 [ 433.162919][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 433.162939][ C1] process_scheduled_works+0xac3/0x18e0 [ 433.162973][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 433.162997][ C1] ? assign_work+0x367/0x3d0 [ 433.163018][ C1] worker_thread+0x870/0xd50 [ 433.163046][ C1] ? __kthread_parkme+0x1a8/0x200 [ 433.163069][ C1] ? __pfx_worker_thread+0x10/0x10 [ 433.163090][ C1] kthread+0x7b7/0x940 [ 433.163114][ C1] ? __pfx_worker_thread+0x10/0x10 [ 433.163144][ C1] ? __pfx_kthread+0x10/0x10 [ 433.163166][ C1] ? __pfx_kthread+0x10/0x10 [ 433.163189][ C1] ? __pfx_kthread+0x10/0x10 [ 433.163211][ C1] ? __pfx_kthread+0x10/0x10 [ 433.163234][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.163251][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 433.163271][ C1] ? __pfx_kthread+0x10/0x10 [ 433.163295][ C1] ret_from_fork+0x4b/0x80 [ 433.163312][ C1] ? __pfx_kthread+0x10/0x10 [ 433.163335][ C1] ret_from_fork_asm+0x1a/0x30 [ 433.163360][ C1] [ 433.163934][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 433.451603][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) [ 433.462546][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.472608][ T31] Call Trace: [ 433.475892][ T31] [ 433.478828][ T31] dump_stack_lvl+0x241/0x360 [ 433.483524][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.488737][ T31] ? __pfx__printk+0x10/0x10 [ 433.493344][ T31] ? vscnprintf+0x5d/0x90 [ 433.497685][ T31] panic+0x349/0x880 [ 433.501591][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 433.506974][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 433.513136][ T31] ? __pfx_panic+0x10/0x10 [ 433.517569][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 433.522954][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 433.529122][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 433.535284][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 433.541449][ T31] watchdog+0x1097/0x10a0 [ 433.545792][ T31] ? watchdog+0x1ea/0x10a0 [ 433.550222][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.554908][ T31] kthread+0x7b7/0x940 [ 433.558996][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.563684][ T31] ? __pfx_kthread+0x10/0x10 [ 433.568289][ T31] ? __pfx_kthread+0x10/0x10 [ 433.572895][ T31] ? __pfx_kthread+0x10/0x10 [ 433.577501][ T31] ? __pfx_kthread+0x10/0x10 [ 433.582110][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.587319][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 433.592530][ T31] ? __pfx_kthread+0x10/0x10 [ 433.597136][ T31] ret_from_fork+0x4b/0x80 [ 433.601565][ T31] ? __pfx_kthread+0x10/0x10 [ 433.606170][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.610953][ T31] [ 433.614303][ T31] Kernel Offset: disabled [ 433.618633][ T31] Rebooting in 86400 seconds..