last executing test programs: 14.213082462s ago: executing program 2 (id=3): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002440)="bb", 0x1}], 0x1}, 0x485d) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 13.804941393s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x3, &(0x7f0000000600)=[{0x2d}, {0x2}, {0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 13.785063025s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x19}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 13.540867657s ago: executing program 0 (id=6): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESHEX], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$afs(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000004) accept$inet6(r0, 0x0, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 13.25362334s ago: executing program 2 (id=7): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)={0x24, r2, 0x101, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3], 0x8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4263da2c0986034b}, 0xc, &(0x7f0000000240)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008084) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x58, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x16}, 0x24008801) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="18570000070000000000000000001801000020646cb6be132500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000ccaeabf34b97488978e89bc1b1d2f43767845058446270334a6838ea60e09e14fc2f76dd39e151040090a7fda881574f60e138d3ed1df92450"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='fscache_volume\x00', r6, 0x0, 0x10001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x80001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) 13.11899725s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000003240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 13.079886459s ago: executing program 3 (id=8): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102376, 0x18fe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="f7030000040000008a1804"]) 12.310100919s ago: executing program 1 (id=9): sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000080)=0x8) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x80010, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sigaltstack(&(0x7f0000000200)={0xffffffffffffffff, 0x80000001, 0xffffffffffffffaf}, &(0x7f0000000240)={&(0x7f00000001c0)=""/11, 0x0, 0xb}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1, 0xd63}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x40, @empty, 0x80000003}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x84) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x4}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)) close_range(r4, 0xffffffffffffffff, 0x0) 12.202546014s ago: executing program 0 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$isdn(0x22, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x22, 0x2, 0x24) io_setup(0xeb0, &(0x7f0000000140)) 12.078165932s ago: executing program 2 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001540)={{r0}, &(0x7f00000014c0), &(0x7f0000001500)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.062868964s ago: executing program 3 (id=12): ioperm(0x0, 0xf1, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8.392466712s ago: executing program 2 (id=13): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x345}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1412, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) ptrace(0x4207, r5) 7.642028979s ago: executing program 3 (id=14): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)={0x24, r2, 0x101, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3], 0x8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4263da2c0986034b}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008084) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x58, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x16}, 0x24008801) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="18570000070000000000000000001801000020646cb6be132500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000ccaeabf34b97488978e89bc1b1d2f43767845058446270334a6838ea60e09e14fc2f76dd39e151040090a7fda881574f60e138d3ed1df92450"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='fscache_volume\x00', r6, 0x0, 0x10001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x80001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) 6.351915399s ago: executing program 0 (id=15): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r5, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 6.172946989s ago: executing program 1 (id=16): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES8, @ANYRES32], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$afs(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000004) accept$inet6(r0, 0x0, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 6.02917765s ago: executing program 2 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 4.648964989s ago: executing program 4 (id=5): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 4.629068379s ago: executing program 3 (id=18): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 3.304137635s ago: executing program 2 (id=19): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESHEX], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$afs(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000004) accept$inet6(r0, 0x0, &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3.098540372s ago: executing program 4 (id=20): kexec_load(0x7ffffffffffffffe, 0xffffffffffffff2c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xfffffffd}, &(0x7f0000000340), &(0x7f0000000480)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e23}, 0x8f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)}, 0x8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='+}[@\x00\x16\xa99\x8e\xbc\xa7M\x85\x13\a/\xf7\xd5\xab\x13\xaf\xe86\xaa\r\x00\xa4!\xc4L\xb8\xa4\xa7\v\x00'/45) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0x400454a4, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x3}) 2.806397137s ago: executing program 1 (id=21): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$alg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="9f4a255c7473e76265084c27c68b2001a4d2614e5c2337644282feff71d7cc75a6c5714653e716df831b8876a58e924ad8a00aa6c8b1699a5b8d4a5f5a4f04c5b77a7c32a3a50e935a3150cfb90f8829b64a1f8b76fa2fa0027dd1ab7f0057042b2b2559522cf6f909611f3f848f717f00db8695b13694d32e42e2340472c780df328dbcecd3263786e67fc013ff91604d1766d975dc1f3aaf0c48bb5c", 0x9d}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000640)="451ba595539799bbdbcacbc46db734a1a61230c844a2aa2015e2f142c81e0b1b1dbd145d0fed61724d0831b8b88702ee3701a056392779298bb537b3f0958cc763a19cd559a6fac67d2d89e72426eed1ae0fc46e0ae651211451afbc619fbe9bcd", 0x61}, {&(0x7f00000006c0)="111160536f40c8c59c0b1ff43c460e93d051d2b352271438610bb34f7e", 0x1d}, {&(0x7f0000000700)="d54c91acb59d14ac9df6367c457b6849a955d53ef98ad9d8c9a7f6862f5a724ba9617a2f28e35b406f4396a7e29193ce1bff7f332ca13e460f25", 0x3a}], 0x5, 0x0, 0x0, 0x90}, 0x8001) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 2.099436053s ago: executing program 0 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000940)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 775.038299ms ago: executing program 0 (id=23): ioperm(0x0, 0xf1, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 774.612828ms ago: executing program 1 (id=24): sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000080)=0x8) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x80010, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sigaltstack(&(0x7f0000000200)={0xffffffffffffffff, 0x80000001, 0xffffffffffffffaf}, &(0x7f0000000240)={&(0x7f00000001c0)=""/11, 0x0, 0xb}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1, 0xd63}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x40, @empty, 0x80000003}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x84) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x4}, 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 708.08721ms ago: executing program 4 (id=25): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)={0x24, r2, 0x101, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3], 0x8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4263da2c0986034b}, 0xc, &(0x7f0000000240)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008084) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x58, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x16}, 0x24008801) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="18570000070000000000000000001801000020646cb6be132500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000ccaeabf34b97488978e89bc1b1d2f43767845058446270334a6838ea60e09e14fc2f76dd39e151040090a7fda881574f60e138d3ed1df92450"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='fscache_volume\x00', r6, 0x0, 0x10001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x80001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) 0s ago: executing program 3 (id=26): socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8c}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d00c900"], 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. [ 75.108514][ T5819] cgroup: Unknown subsys name 'net' [ 75.217183][ T5819] cgroup: Unknown subsys name 'cpuset' [ 75.226084][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.744741][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.442370][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.450914][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.458964][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.467680][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.475603][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.515620][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.526438][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.535289][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.545747][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.553582][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.575486][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.584394][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.596371][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.604546][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.612676][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.689829][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.703694][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.711445][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.719833][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.727976][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.749462][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.758709][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.766434][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.774813][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.782469][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.102364][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 80.373992][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 80.476891][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.484303][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.491650][ T5833] bridge_slave_0: entered allmulticast mode [ 80.499699][ T5833] bridge_slave_0: entered promiscuous mode [ 80.511727][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.520650][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.528621][ T5833] bridge_slave_1: entered allmulticast mode [ 80.538353][ T5833] bridge_slave_1: entered promiscuous mode [ 80.561732][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 80.585150][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 80.663598][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.672832][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 80.726725][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.829936][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.837515][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.844817][ T5829] bridge_slave_0: entered allmulticast mode [ 80.851999][ T5829] bridge_slave_0: entered promiscuous mode [ 80.869229][ T5833] team0: Port device team_slave_0 added [ 80.878456][ T5833] team0: Port device team_slave_1 added [ 80.918123][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.925354][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.932497][ T5829] bridge_slave_1: entered allmulticast mode [ 80.940830][ T5829] bridge_slave_1: entered promiscuous mode [ 80.978067][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.986401][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.994015][ T5844] bridge_slave_0: entered allmulticast mode [ 81.001274][ T5844] bridge_slave_0: entered promiscuous mode [ 81.067416][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.075599][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.082780][ T5844] bridge_slave_1: entered allmulticast mode [ 81.090701][ T5844] bridge_slave_1: entered promiscuous mode [ 81.111052][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.118626][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.125953][ T5837] bridge_slave_0: entered allmulticast mode [ 81.133355][ T5837] bridge_slave_0: entered promiscuous mode [ 81.142798][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.149852][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.176327][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.234634][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.244508][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.251644][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.259569][ T5837] bridge_slave_1: entered allmulticast mode [ 81.267589][ T5837] bridge_slave_1: entered promiscuous mode [ 81.275308][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.282281][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.309737][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.321270][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.329058][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.341106][ T5842] bridge_slave_0: entered allmulticast mode [ 81.348551][ T5842] bridge_slave_0: entered promiscuous mode [ 81.358919][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.373548][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.385702][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.416457][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.424346][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.431530][ T5842] bridge_slave_1: entered allmulticast mode [ 81.438883][ T5842] bridge_slave_1: entered promiscuous mode [ 81.534614][ T5844] team0: Port device team_slave_0 added [ 81.543965][ T5829] team0: Port device team_slave_0 added [ 81.568780][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.580507][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.590037][ T55] Bluetooth: hci1: command tx timeout [ 81.590229][ T55] Bluetooth: hci0: command tx timeout [ 81.604288][ T5844] team0: Port device team_slave_1 added [ 81.612238][ T5829] team0: Port device team_slave_1 added [ 81.632438][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.658018][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.667757][ T5834] Bluetooth: hci2: command tx timeout [ 81.716968][ T5833] hsr_slave_0: entered promiscuous mode [ 81.724886][ T5833] hsr_slave_1: entered promiscuous mode [ 81.785062][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.792054][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.818152][ T5834] Bluetooth: hci4: command tx timeout [ 81.824144][ T5834] Bluetooth: hci3: command tx timeout [ 81.830694][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.858802][ T5837] team0: Port device team_slave_0 added [ 81.867362][ T5837] team0: Port device team_slave_1 added [ 81.877028][ T5842] team0: Port device team_slave_0 added [ 81.884087][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.891047][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.917776][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.930153][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.937743][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.964012][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.004608][ T5842] team0: Port device team_slave_1 added [ 82.024005][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.030985][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.057516][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.119148][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.126560][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.153113][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.208798][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.215892][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.242620][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.256561][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.263600][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.289568][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.301897][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.308944][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.335346][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.356583][ T5844] hsr_slave_0: entered promiscuous mode [ 82.362764][ T5844] hsr_slave_1: entered promiscuous mode [ 82.369397][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.377461][ T5844] Cannot create hsr debugfs directory [ 82.439804][ T5829] hsr_slave_0: entered promiscuous mode [ 82.446273][ T5829] hsr_slave_1: entered promiscuous mode [ 82.452293][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.459935][ T5829] Cannot create hsr debugfs directory [ 82.503682][ T5837] hsr_slave_0: entered promiscuous mode [ 82.510150][ T5837] hsr_slave_1: entered promiscuous mode [ 82.516588][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.524469][ T5837] Cannot create hsr debugfs directory [ 82.648913][ T5842] hsr_slave_0: entered promiscuous mode [ 82.655636][ T5842] hsr_slave_1: entered promiscuous mode [ 82.661769][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.669988][ T5842] Cannot create hsr debugfs directory [ 83.059510][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.079497][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.106472][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.132652][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.166242][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.180408][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.194843][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.206711][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.300562][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.311432][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.342420][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.359500][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.459704][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.479597][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.490131][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.524810][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.531828][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.645740][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.653369][ T5834] Bluetooth: hci0: command tx timeout [ 83.654060][ T55] Bluetooth: hci1: command tx timeout [ 83.677699][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.688045][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.706240][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.726121][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.733629][ T55] Bluetooth: hci2: command tx timeout [ 83.754761][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.775614][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.798382][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.805778][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.821042][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.828222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.862317][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.878917][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.897796][ T55] Bluetooth: hci3: command tx timeout [ 83.897804][ T5834] Bluetooth: hci4: command tx timeout [ 83.917525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.924684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.954228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.961362][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.988553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.995785][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.032458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.039716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.137457][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.198783][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.272743][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.279926][ T4535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.320671][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.328321][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.442489][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.547992][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.586413][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.610054][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.617258][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.669725][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.677091][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.733785][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.777151][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.910715][ T5833] veth0_vlan: entered promiscuous mode [ 84.929643][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.965786][ T5833] veth1_vlan: entered promiscuous mode [ 85.019911][ T5844] veth0_vlan: entered promiscuous mode [ 85.032632][ T5829] veth0_vlan: entered promiscuous mode [ 85.051195][ T5844] veth1_vlan: entered promiscuous mode [ 85.109707][ T5829] veth1_vlan: entered promiscuous mode [ 85.170525][ T5833] veth0_macvtap: entered promiscuous mode [ 85.210746][ T5837] veth0_vlan: entered promiscuous mode [ 85.221657][ T5833] veth1_macvtap: entered promiscuous mode [ 85.242219][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.291177][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.305908][ T5844] veth0_macvtap: entered promiscuous mode [ 85.319638][ T5837] veth1_vlan: entered promiscuous mode [ 85.356993][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.371352][ T5829] veth0_macvtap: entered promiscuous mode [ 85.394120][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.402992][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.420671][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.429970][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.444233][ T5844] veth1_macvtap: entered promiscuous mode [ 85.480818][ T5829] veth1_macvtap: entered promiscuous mode [ 85.550606][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.566109][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.580001][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.606501][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.618874][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.638175][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.648690][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.660223][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.674401][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.686506][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.698107][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.733330][ T55] Bluetooth: hci0: command tx timeout [ 85.747093][ T55] Bluetooth: hci1: command tx timeout [ 85.752383][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.764334][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.774292][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.785315][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.797098][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.811792][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.821490][ T55] Bluetooth: hci2: command tx timeout [ 85.824384][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.836095][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.844874][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857064][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.866641][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.875504][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.884300][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.898698][ T5837] veth0_macvtap: entered promiscuous mode [ 85.909765][ T5837] veth1_macvtap: entered promiscuous mode [ 85.925433][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.943698][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.973818][ T55] Bluetooth: hci3: command tx timeout [ 85.974018][ T5834] Bluetooth: hci4: command tx timeout [ 86.041150][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.052543][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.063505][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.074177][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.084079][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.094652][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.105975][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.137428][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.148102][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.158485][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.169571][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.179513][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.190130][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.201834][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.215718][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.220970][ T5842] veth0_vlan: entered promiscuous mode [ 86.230251][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.259700][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.268858][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.277998][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.287049][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.337130][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.346101][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.392922][ T5842] veth1_vlan: entered promiscuous mode [ 86.429219][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.457262][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.466580][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.528899][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.552746][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.596022][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.610538][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.709815][ T5842] veth0_macvtap: entered promiscuous mode [ 86.758125][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.790106][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.812153][ T5842] veth1_macvtap: entered promiscuous mode [ 86.885845][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.922226][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.927644][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.964301][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.981999][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.002284][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.026002][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.041036][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.059506][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.072133][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.088525][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.151170][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.167137][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.206822][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.229361][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.253127][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.281311][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.302742][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.330241][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.367518][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.414441][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.434399][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.457887][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.490573][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.713516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.823853][ T5834] Bluetooth: hci1: command tx timeout [ 87.823900][ T5834] Bluetooth: hci0: command tx timeout [ 87.851364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.893743][ T55] Bluetooth: hci2: command tx timeout [ 87.953719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.053368][ T55] Bluetooth: hci4: command tx timeout [ 88.059563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.069010][ T5834] Bluetooth: hci3: command tx timeout [ 88.343349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.352584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.413293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.423392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.481289][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.527585][ T5934] program syz.3.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.538468][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.664023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.673295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 88.709386][ T5939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.383543][ T24] cfg80211: failed to load regulatory.db [ 93.466285][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.518589][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.527076][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.878399][ T5946] delete_channel: no stack [ 93.883806][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.924796][ T5965] loop0: detected capacity change from 0 to 128 [ 94.932470][ T5965] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.748014][ T5965] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.442140][ T5979] loop3: detected capacity change from 0 to 128 [ 97.469430][ T5979] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.571411][ T5979] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.270079][ T5992] trusted_key: syz.1.21 sent an empty control message without MSG_MORE. [ 99.476734][ T5989] loop4: detected capacity change from 0 to 8 [ 100.079600][ T6002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.416590][ T5993] ================================================================== [ 101.424709][ T5993] BUG: KASAN: slab-use-after-free in idr_get_free+0x959/0xac0 [ 101.432202][ T5993] Read of size 8 at addr ffff888148c9cfe8 by task syz.2.19/5993 [ 101.439841][ T5993] [ 101.442175][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz.2.19 Not tainted 6.15.0-rc1-next-20250410-syzkaller #0 PREEMPT(full) [ 101.442194][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.442206][ T5993] Call Trace: [ 101.442213][ T5993] [ 101.442219][ T5993] dump_stack_lvl+0x241/0x360 [ 101.442246][ T5993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.442268][ T5993] ? rcu_is_watching+0x15/0xb0 [ 101.442285][ T5993] ? __virt_addr_valid+0x183/0x530 [ 101.442304][ T5993] ? lock_release+0x4e/0x3e0 [ 101.442319][ T5993] ? __virt_addr_valid+0x183/0x530 [ 101.442337][ T5993] ? __virt_addr_valid+0x183/0x530 [ 101.442357][ T5993] print_report+0x16e/0x5b0 [ 101.442375][ T5993] ? __virt_addr_valid+0x183/0x530 [ 101.442393][ T5993] ? __virt_addr_valid+0x183/0x530 [ 101.442410][ T5993] ? __virt_addr_valid+0x45f/0x530 [ 101.442428][ T5993] ? __phys_addr+0xba/0x170 [ 101.442446][ T5993] ? idr_get_free+0x959/0xac0 [ 101.442461][ T5993] kasan_report+0x143/0x180 [ 101.442490][ T5993] ? idr_get_free+0x959/0xac0 [ 101.442506][ T5993] idr_get_free+0x959/0xac0 [ 101.442524][ T5993] idr_alloc_u32+0x197/0x330 [ 101.442540][ T5993] ? __pfx_idr_alloc_u32+0x10/0x10 [ 101.442558][ T5993] idr_alloc_cyclic+0x108/0x310 [ 101.442574][ T5993] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 101.442589][ T5993] ? __rwlock_init+0x44/0x150 [ 101.442616][ T5993] afs_lookup_cell+0xfad/0x18b0 [ 101.442653][ T5993] ? __pfx_afs_lookup_cell+0x10/0x10 [ 101.442681][ T5993] ? __fs_parse+0x4e0/0x710 [ 101.442705][ T5993] afs_parse_param+0x6f4/0x970 [ 101.442733][ T5993] ? __pfx_afs_parse_param+0x10/0x10 [ 101.442754][ T5993] ? strcmp+0x8a/0xa0 [ 101.442771][ T5993] ? static_key_count+0x41/0x70 [ 101.442787][ T5993] vfs_parse_fs_param+0x1a5/0x420 [ 101.442809][ T5993] vfs_parse_fs_string+0x170/0x230 [ 101.442831][ T5993] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 101.442851][ T5993] ? afs_init_fs_context+0xaf/0x3b0 [ 101.442868][ T5993] ? alloc_fs_context+0x6a0/0x800 [ 101.442884][ T5993] do_new_mount+0x26c/0xb70 [ 101.442905][ T5993] ? __pfx_do_new_mount+0x10/0x10 [ 101.442928][ T5993] __se_sys_mount+0x38c/0x400 [ 101.442951][ T5993] ? __pfx___se_sys_mount+0x10/0x10 [ 101.442973][ T5993] ? __x64_sys_mount+0x20/0xc0 [ 101.442994][ T5993] do_syscall_64+0xf3/0x230 [ 101.443010][ T5993] ? clear_bhb_loop+0x45/0xa0 [ 101.443032][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.443057][ T5993] RIP: 0033:0x7ff4a198d169 [ 101.443077][ T5993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.443089][ T5993] RSP: 002b:00007ff4a2759038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.443104][ T5993] RAX: ffffffffffffffda RBX: 00007ff4a1ba6240 RCX: 00007ff4a198d169 [ 101.443115][ T5993] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 101.443124][ T5993] RBP: 00007ff4a1a0e990 R08: 0000000000000000 R09: 0000000000000000 [ 101.443133][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.443141][ T5993] R13: 0000000000000000 R14: 00007ff4a1ba6240 R15: 00007ffda7d56bf8 [ 101.443156][ T5993] [ 101.443161][ T5993] [ 101.748652][ T5993] Allocated by task 5997: [ 101.752990][ T5993] kasan_save_track+0x3f/0x80 [ 101.757687][ T5993] __kasan_slab_alloc+0x66/0x80 [ 101.762549][ T5993] kmem_cache_alloc_noprof+0x1e1/0x390 [ 101.768014][ T5993] radix_tree_node_alloc+0x8b/0x3c0 [ 101.773217][ T5993] idr_get_free+0x296/0xac0 [ 101.777745][ T5993] idr_alloc_u32+0x197/0x330 [ 101.782351][ T5993] idr_alloc_cyclic+0x108/0x310 [ 101.787197][ T5993] afs_lookup_cell+0xfad/0x18b0 [ 101.792048][ T5993] afs_parse_param+0x6f4/0x970 [ 101.796807][ T5993] vfs_parse_fs_param+0x1a5/0x420 [ 101.801835][ T5993] vfs_parse_fs_string+0x170/0x230 [ 101.806992][ T5993] do_new_mount+0x26c/0xb70 [ 101.811495][ T5993] __se_sys_mount+0x38c/0x400 [ 101.816174][ T5993] do_syscall_64+0xf3/0x230 [ 101.820673][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.826581][ T5993] [ 101.828894][ T5993] Freed by task 6003: [ 101.832859][ T5993] kasan_save_track+0x3f/0x80 [ 101.837531][ T5993] kasan_save_free_info+0x40/0x50 [ 101.842561][ T5993] __kasan_slab_free+0x59/0x70 [ 101.847319][ T5993] kmem_cache_free+0x197/0x410 [ 101.852076][ T5993] rcu_core+0xaac/0x17a0 [ 101.856306][ T5993] handle_softirqs+0x2d6/0x9b0 [ 101.861070][ T5993] __irq_exit_rcu+0xfb/0x220 [ 101.865663][ T5993] irq_exit_rcu+0x9/0x30 [ 101.869918][ T5993] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 101.875547][ T5993] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.881527][ T5993] [ 101.883844][ T5993] Last potentially related work creation: [ 101.889543][ T5993] kasan_save_stack+0x3f/0x60 [ 101.894221][ T5993] kasan_record_aux_stack+0xbf/0xd0 [ 101.899423][ T5993] call_rcu+0x172/0xad0 [ 101.903601][ T5993] delete_node+0x1b2/0x780 [ 101.908012][ T5993] radix_tree_delete_item+0x2e6/0x3f0 [ 101.913407][ T5993] afs_cell_destroy+0x175/0x2c0 [ 101.918255][ T5993] rcu_core+0xaac/0x17a0 [ 101.922489][ T5993] handle_softirqs+0x2d6/0x9b0 [ 101.927263][ T5993] run_ksoftirqd+0xcf/0x130 [ 101.931772][ T5993] smpboot_thread_fn+0x576/0xaa0 [ 101.936699][ T5993] kthread+0x7b7/0x940 [ 101.940760][ T5993] ret_from_fork+0x4b/0x80 [ 101.945171][ T5993] ret_from_fork_asm+0x1a/0x30 [ 101.949927][ T5993] [ 101.952241][ T5993] The buggy address belongs to the object at ffff888148c9cdc0 [ 101.952241][ T5993] which belongs to the cache radix_tree_node of size 576 [ 101.966644][ T5993] The buggy address is located 552 bytes inside of [ 101.966644][ T5993] freed 576-byte region [ffff888148c9cdc0, ffff888148c9d000) [ 101.980434][ T5993] [ 101.982760][ T5993] The buggy address belongs to the physical page: [ 101.989184][ T5993] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148c9c [ 101.998030][ T5993] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.006517][ T5993] memcg:ffff88814d1de401 [ 102.010755][ T5993] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 102.018743][ T5993] page_type: f5(slab) [ 102.022709][ T5993] raw: 057ff00000000040 ffff88801b04bdc0 ffffea0005231f00 dead000000000003 [ 102.031294][ T5993] raw: 0000000000000000 0000000000170017 00000000f5000000 ffff88814d1de401 [ 102.039884][ T5993] head: 057ff00000000040 ffff88801b04bdc0 ffffea0005231f00 dead000000000003 [ 102.048568][ T5993] head: 0000000000000000 0000000000170017 00000000f5000000 ffff88814d1de401 [ 102.057225][ T5993] head: 057ff00000000002 ffffea0005232701 00000000ffffffff 00000000ffffffff [ 102.065884][ T5993] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 102.074546][ T5993] page dumped because: kasan: bad access detected [ 102.080959][ T5993] page_owner tracks the page as allocated [ 102.086666][ T5993] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x52830(GFP_ATOMIC|__GFP_RECLAIMABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 8730373092, free_ts 0 [ 102.105946][ T5993] post_alloc_hook+0x1f4/0x240 [ 102.110712][ T5993] get_page_from_freelist+0x349b/0x3630 [ 102.116250][ T5993] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 102.122044][ T5993] alloc_pages_mpol+0x339/0x690 [ 102.126892][ T5993] allocate_slab+0x8f/0x3a0 [ 102.131388][ T5993] ___slab_alloc+0xc3b/0x1500 [ 102.136094][ T5993] __slab_alloc+0x58/0xa0 [ 102.140412][ T5993] kmem_cache_alloc_noprof+0x270/0x390 [ 102.145863][ T5993] radix_tree_node_alloc+0x19a/0x3c0 [ 102.151142][ T5993] idr_get_free+0x296/0xac0 [ 102.155652][ T5993] idr_alloc_u32+0x197/0x330 [ 102.160240][ T5993] idr_alloc_cyclic+0x108/0x310 [ 102.165081][ T5993] __kernfs_new_node+0x12a/0x890 [ 102.170008][ T5993] kernfs_new_node+0x114/0x220 [ 102.174780][ T5993] kernfs_create_dir_ns+0x43/0x120 [ 102.179884][ T5993] internal_create_group+0x528/0x1320 [ 102.185254][ T5993] page_owner free stack trace missing [ 102.190613][ T5993] [ 102.192930][ T5993] Memory state around the buggy address: [ 102.198545][ T5993] ffff888148c9ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.206591][ T5993] ffff888148c9cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.214636][ T5993] >ffff888148c9cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.222698][ T5993] ^ [ 102.230142][ T5993] ffff888148c9d000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.238195][ T5993] ffff888148c9d080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 102.246264][ T5993] ================================================================== [ 102.437389][ T5993] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.444730][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.2.19 Not tainted 6.15.0-rc1-next-20250410-syzkaller #0 PREEMPT(full) [ 102.456030][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.466106][ T5993] Call Trace: [ 102.469406][ T5993] [ 102.472362][ T5993] dump_stack_lvl+0x241/0x360 [ 102.477104][ T5993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.482330][ T5993] ? __pfx__printk+0x10/0x10 [ 102.486932][ T5993] ? vprintk_emit+0x81f/0xa40 [ 102.491617][ T5993] ? vscnprintf+0x5d/0x90 [ 102.495964][ T5993] panic+0x349/0x880 [ 102.499869][ T5993] ? check_panic_on_warn+0x21/0xb0 [ 102.504984][ T5993] ? __pfx_panic+0x10/0x10 [ 102.509420][ T5993] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 102.515417][ T5993] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 102.521748][ T5993] check_panic_on_warn+0x86/0xb0 [ 102.526704][ T5993] ? idr_get_free+0x959/0xac0 [ 102.531388][ T5993] end_report+0x77/0x160 [ 102.535646][ T5993] kasan_report+0x154/0x180 [ 102.540197][ T5993] ? idr_get_free+0x959/0xac0 [ 102.544878][ T5993] idr_get_free+0x959/0xac0 [ 102.549387][ T5993] idr_alloc_u32+0x197/0x330 [ 102.553991][ T5993] ? __pfx_idr_alloc_u32+0x10/0x10 [ 102.559103][ T5993] idr_alloc_cyclic+0x108/0x310 [ 102.563953][ T5993] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 102.569320][ T5993] ? __rwlock_init+0x44/0x150 [ 102.574007][ T5993] afs_lookup_cell+0xfad/0x18b0 [ 102.578871][ T5993] ? __pfx_afs_lookup_cell+0x10/0x10 [ 102.584164][ T5993] ? __fs_parse+0x4e0/0x710 [ 102.588669][ T5993] afs_parse_param+0x6f4/0x970 [ 102.593455][ T5993] ? __pfx_afs_parse_param+0x10/0x10 [ 102.598749][ T5993] ? strcmp+0x8a/0xa0 [ 102.602745][ T5993] ? static_key_count+0x41/0x70 [ 102.607602][ T5993] vfs_parse_fs_param+0x1a5/0x420 [ 102.612639][ T5993] vfs_parse_fs_string+0x170/0x230 [ 102.617774][ T5993] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 102.623417][ T5993] ? afs_init_fs_context+0xaf/0x3b0 [ 102.628618][ T5993] ? alloc_fs_context+0x6a0/0x800 [ 102.633663][ T5993] do_new_mount+0x26c/0xb70 [ 102.638181][ T5993] ? __pfx_do_new_mount+0x10/0x10 [ 102.643221][ T5993] __se_sys_mount+0x38c/0x400 [ 102.647914][ T5993] ? __pfx___se_sys_mount+0x10/0x10 [ 102.653135][ T5993] ? __x64_sys_mount+0x20/0xc0 [ 102.657927][ T5993] do_syscall_64+0xf3/0x230 [ 102.662436][ T5993] ? clear_bhb_loop+0x45/0xa0 [ 102.667239][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.673154][ T5993] RIP: 0033:0x7ff4a198d169 [ 102.677580][ T5993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.697218][ T5993] RSP: 002b:00007ff4a2759038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.705667][ T5993] RAX: ffffffffffffffda RBX: 00007ff4a1ba6240 RCX: 00007ff4a198d169 [ 102.713646][ T5993] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 102.721623][ T5993] RBP: 00007ff4a1a0e990 R08: 0000000000000000 R09: 0000000000000000 [ 102.729600][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.737576][ T5993] R13: 0000000000000000 R14: 00007ff4a1ba6240 R15: 00007ffda7d56bf8 [ 102.745564][ T5993] [ 102.748904][ T5993] Kernel Offset: disabled [ 102.753236][ T5993] Rebooting in 86400 seconds..