last executing test programs: 23.919095668s ago: executing program 0 (id=163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000300)={0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) 22.836848589s ago: executing program 0 (id=165): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x4000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 19.486472979s ago: executing program 0 (id=171): iopl(0x3) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) 18.715167211s ago: executing program 0 (id=175): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 17.100351509s ago: executing program 2 (id=178): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) epoll_create(0x207ffd) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x19) 15.623095039s ago: executing program 3 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x100, 0x0) socket$unix(0x1, 0x5, 0x0) 13.737166494s ago: executing program 3 (id=183): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x3d, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x200}, @typed={0xd, 0x9, 0x0, 0x0, @binary="f463163c2a66215fe6"}]}, 0x28}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0xf4, 0x9, 0x1, 0x6c, 0x81, 0xc8, 0x0, 0x9, 0x9, 0x5, 0x2, 0xd5, 0x9}, 0xe) 12.62747163s ago: executing program 3 (id=184): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 12.570274937s ago: executing program 1 (id=185): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000300)={0xfffffffffffffffc, 0x4000007, 0x0}, 0x0, 0x8, &(0x7f0000000280)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000003, 0x2) 11.626572767s ago: executing program 4 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000700)={[&(0x7f0000000500)='//\x00']}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 10.906956371s ago: executing program 1 (id=187): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002a00000000dbd4250700000020000184060001000400fc01ffffffffdfc0f9b493876ea0b16735de0600000000000000000000000000009d910000"], 0x34}}, 0x4000) 9.998341543s ago: executing program 4 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x5}}, 0x14}}, 0x0) 9.829059477s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_extract_tcp_res(0x0, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x20004014) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x10000, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 9.046963656s ago: executing program 1 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff"], 0x48) 8.645047789s ago: executing program 2 (id=191): socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x0, 0x4a, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 8.391994065s ago: executing program 3 (id=192): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() r1 = epoll_create1(0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat(0xffffffffffffff9c, 0x0, 0x183203, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, 0xffffffffffffffff, 0x11, 0x0, r2, @void, @value}, 0x11) r3 = syz_open_procfs(0x0, 0x0) getdents(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x40004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x6169380b529ab93a) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 8.390758649s ago: executing program 4 (id=193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}}) 8.113994982s ago: executing program 0 (id=194): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(r0, 0x0, 0x0, 0x1, &(0x7f0000000580)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x22000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8810) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 7.323969692s ago: executing program 1 (id=195): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_open_pts(0xffffffffffffffff, 0x22000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 6.20586838s ago: executing program 4 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='cq_process\x00', r0, 0x0, 0x7fffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000240)={'team0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) 6.185840266s ago: executing program 2 (id=197): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x47f9, 0x0, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000b7e20000000000000000711217000000000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5.751646379s ago: executing program 3 (id=198): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r0, 0xffffd000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.535137273s ago: executing program 1 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 3.646053071s ago: executing program 2 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x0, 0x24e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.608638784s ago: executing program 4 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$dri(0x0, 0x1, 0x100) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) 3.542360116s ago: executing program 1 (id=202): dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x0, &(0x7f00000017c0)}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x8, 0x30313953, 0x0, 0xa, [{}, {0x6bed8250}], 0x0, 0x9, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 1.709958204s ago: executing program 2 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 1.390167409s ago: executing program 4 (id=204): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, 0x0, 0x0) listen(r2, 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000500)="ab", 0x1, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x0, 0x207, 0x0, 0x0, 0x9, 0x3, 0x3}, 0x20) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.305192094s ago: executing program 0 (id=205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 0s ago: executing program 2 (id=206): socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r4}, 0x1}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 58.295883][ T5810] cgroup: Unknown subsys name 'net' [ 58.435844][ T5810] cgroup: Unknown subsys name 'cpuset' [ 58.443520][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.796494][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.860309][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.868793][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.876511][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.884605][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.892404][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.900074][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.007653][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.015844][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.033385][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.041308][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.049060][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.056370][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.064643][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.072204][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.080320][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.094412][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.101974][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.109294][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.153255][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.162603][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.170428][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.179085][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.186880][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.194272][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.241979][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.250360][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.257997][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.269218][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.277754][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.286960][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.426283][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.628306][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.636067][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.644980][ T5820] bridge_slave_0: entered allmulticast mode [ 62.651611][ T5820] bridge_slave_0: entered promiscuous mode [ 62.660731][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.667927][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.675094][ T5820] bridge_slave_1: entered allmulticast mode [ 62.681916][ T5820] bridge_slave_1: entered promiscuous mode [ 62.737154][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 62.801897][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.813221][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 62.827994][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 62.849650][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.899003][ T5820] team0: Port device team_slave_0 added [ 62.934898][ T5820] team0: Port device team_slave_1 added [ 62.940759][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.948622][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.956095][ T5826] bridge_slave_0: entered allmulticast mode [ 62.962678][ T5826] bridge_slave_0: entered promiscuous mode [ 62.990008][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.997173][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.004832][ T5826] bridge_slave_1: entered allmulticast mode [ 63.011300][ T5826] bridge_slave_1: entered promiscuous mode [ 63.018246][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 63.061580][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.068595][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.094634][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.121381][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.143645][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.150598][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.177275][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.196234][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.213030][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.220120][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.227825][ T5827] bridge_slave_0: entered allmulticast mode [ 63.234629][ T5827] bridge_slave_0: entered promiscuous mode [ 63.282181][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.289386][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.297102][ T5827] bridge_slave_1: entered allmulticast mode [ 63.303921][ T5827] bridge_slave_1: entered promiscuous mode [ 63.332632][ T5826] team0: Port device team_slave_0 added [ 63.355503][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.362575][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.369944][ T5833] bridge_slave_0: entered allmulticast mode [ 63.376927][ T5833] bridge_slave_0: entered promiscuous mode [ 63.387177][ T5820] hsr_slave_0: entered promiscuous mode [ 63.393911][ T5820] hsr_slave_1: entered promiscuous mode [ 63.410364][ T5826] team0: Port device team_slave_1 added [ 63.420788][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.430184][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.437643][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.444848][ T5833] bridge_slave_1: entered allmulticast mode [ 63.451329][ T5833] bridge_slave_1: entered promiscuous mode [ 63.481491][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.546536][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.557563][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.565923][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.573344][ T5836] bridge_slave_0: entered allmulticast mode [ 63.580236][ T5836] bridge_slave_0: entered promiscuous mode [ 63.587873][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.597329][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.623715][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.648094][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.657377][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.665840][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.673058][ T5836] bridge_slave_1: entered allmulticast mode [ 63.679586][ T5836] bridge_slave_1: entered promiscuous mode [ 63.695535][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.702493][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.728769][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.742700][ T5827] team0: Port device team_slave_0 added [ 63.752207][ T5827] team0: Port device team_slave_1 added [ 63.781669][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.814256][ T5833] team0: Port device team_slave_0 added [ 63.829135][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.857068][ T5833] team0: Port device team_slave_1 added [ 63.864077][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.871081][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.897218][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.909725][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.916782][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.942954][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.963858][ T54] Bluetooth: hci0: command tx timeout [ 64.005611][ T5836] team0: Port device team_slave_0 added [ 64.014198][ T5826] hsr_slave_0: entered promiscuous mode [ 64.020146][ T5826] hsr_slave_1: entered promiscuous mode [ 64.026679][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.034499][ T5826] Cannot create hsr debugfs directory [ 64.069606][ T5827] hsr_slave_0: entered promiscuous mode [ 64.075910][ T5827] hsr_slave_1: entered promiscuous mode [ 64.081736][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.089871][ T5827] Cannot create hsr debugfs directory [ 64.097138][ T5836] team0: Port device team_slave_1 added [ 64.123877][ T54] Bluetooth: hci1: command tx timeout [ 64.123884][ T5824] Bluetooth: hci2: command tx timeout [ 64.136423][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.143456][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.169477][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.181660][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.188679][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.215804][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.236801][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.243890][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.269835][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.283030][ T54] Bluetooth: hci3: command tx timeout [ 64.312766][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.320082][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.346198][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.362932][ T54] Bluetooth: hci4: command tx timeout [ 64.426191][ T5833] hsr_slave_0: entered promiscuous mode [ 64.432142][ T5833] hsr_slave_1: entered promiscuous mode [ 64.438718][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.446763][ T5833] Cannot create hsr debugfs directory [ 64.518135][ T5836] hsr_slave_0: entered promiscuous mode [ 64.524606][ T5836] hsr_slave_1: entered promiscuous mode [ 64.530487][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.538709][ T5836] Cannot create hsr debugfs directory [ 64.612181][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.624375][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.648556][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.679537][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.766542][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.795351][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.807865][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.835943][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.875989][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.899203][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.918497][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.928461][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.984955][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.998435][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.022067][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.031228][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.079892][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.101225][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.124617][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.149103][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.179784][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.235137][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.260423][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.267691][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.282222][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.298972][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.321317][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.328623][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.358960][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.395457][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.402550][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.411347][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.418486][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.449441][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.466495][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.495355][ T254] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.502434][ T254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.519227][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.551245][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.562007][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.569109][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.587835][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.621344][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.628488][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.665419][ T254] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.672506][ T254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.700685][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.734051][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.741183][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.781323][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.788520][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.863762][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.032590][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.044389][ T54] Bluetooth: hci0: command tx timeout [ 66.061122][ T5820] veth0_vlan: entered promiscuous mode [ 66.095387][ T5820] veth1_vlan: entered promiscuous mode [ 66.135650][ T5820] veth0_macvtap: entered promiscuous mode [ 66.184013][ T5820] veth1_macvtap: entered promiscuous mode [ 66.203162][ T54] Bluetooth: hci2: command tx timeout [ 66.203374][ T5824] Bluetooth: hci1: command tx timeout [ 66.265702][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.310189][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.346334][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.363990][ T5824] Bluetooth: hci3: command tx timeout [ 66.371639][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.406849][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.418238][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.432389][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.442102][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.452050][ T5824] Bluetooth: hci4: command tx timeout [ 66.461445][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.507046][ T5827] veth0_vlan: entered promiscuous mode [ 66.569721][ T5827] veth1_vlan: entered promiscuous mode [ 66.589619][ T5826] veth0_vlan: entered promiscuous mode [ 66.617820][ T5836] veth0_vlan: entered promiscuous mode [ 66.635661][ T5833] veth0_vlan: entered promiscuous mode [ 66.649551][ T5836] veth1_vlan: entered promiscuous mode [ 66.660375][ T5826] veth1_vlan: entered promiscuous mode [ 66.699719][ T5827] veth0_macvtap: entered promiscuous mode [ 66.711821][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.712478][ T5833] veth1_vlan: entered promiscuous mode [ 66.729378][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.747889][ T5827] veth1_macvtap: entered promiscuous mode [ 66.778287][ T5826] veth0_macvtap: entered promiscuous mode [ 66.809827][ T5826] veth1_macvtap: entered promiscuous mode [ 66.821973][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.831006][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.840906][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.855064][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.867415][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.885157][ T5836] veth0_macvtap: entered promiscuous mode [ 66.894674][ T5836] veth1_macvtap: entered promiscuous mode [ 66.903454][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.917201][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.928099][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.939516][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.950694][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.964306][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.975642][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.986912][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.999737][ T5833] veth0_macvtap: entered promiscuous mode [ 67.013880][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.024962][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.035481][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.046445][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.057479][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.061947][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.089173][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.098327][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.108274][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.117355][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.138124][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.148876][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.159151][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.170353][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.180830][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.191308][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.203310][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.217663][ T5833] veth1_macvtap: entered promiscuous mode [ 67.233805][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.243136][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251843][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.272715][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.296410][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.308459][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.313053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.325219][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.338397][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.352888][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.389029][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.540539][ T5903] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.573495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.823539][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.834311][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.844270][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.853291][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.863368][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.930677][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.946210][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.967398][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.984461][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.995150][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.005903][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.016073][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.032118][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.052556][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.118808][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.132003][ T5824] Bluetooth: hci0: command tx timeout [ 68.147059][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.160383][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.176177][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.189876][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.207262][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.223071][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.235112][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.245934][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.283185][ T5824] Bluetooth: hci1: command tx timeout [ 68.283290][ T54] Bluetooth: hci2: command tx timeout [ 68.442983][ T54] Bluetooth: hci3: command tx timeout [ 68.532927][ T54] Bluetooth: hci4: command tx timeout [ 68.937733][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.948614][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.961741][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.971914][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.062512][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.084286][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.110911][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.175420][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.185212][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.225330][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.236912][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.296192][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.304558][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.798750][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.823182][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.860491][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.892643][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.966007][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.004481][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.012328][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.027524][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.043761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.225221][ T54] Bluetooth: hci0: command tx timeout [ 70.389505][ T54] Bluetooth: hci2: command tx timeout [ 70.389603][ T5824] Bluetooth: hci1: command tx timeout [ 70.453097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.523669][ T5824] Bluetooth: hci3: command tx timeout [ 70.603200][ T5824] Bluetooth: hci4: command tx timeout [ 70.740147][ T5925] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 71.567068][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.632932][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.693474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.693945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.795231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 73.748670][ T5947] bridge_slave_0: left allmulticast mode [ 73.754590][ T5947] bridge_slave_0: left promiscuous mode [ 73.764408][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.963260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.149689][ T5947] bridge_slave_1: left allmulticast mode [ 74.321992][ T5947] bridge_slave_1: left promiscuous mode [ 74.361502][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.466335][ T5947] bond0: (slave bond_slave_0): Releasing backup interface [ 75.489142][ T5947] bond0: (slave bond_slave_1): Releasing backup interface [ 77.020175][ T5947] team0: Port device team_slave_0 removed [ 77.441542][ T5947] team0: Port device team_slave_1 removed [ 77.484378][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.527407][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.544575][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.552139][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.970900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.077391][ T5952] pim6reg: entered allmulticast mode [ 78.093549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.101181][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.143036][ T5956] pim6reg: left allmulticast mode [ 79.562508][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 79.745743][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 80.647642][ T5991] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.656555][ T5991] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.665383][ T5991] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.674145][ T5991] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.887130][ T5991] vxlan0: entered promiscuous mode [ 81.905635][ T25] cfg80211: failed to load regulatory.db [ 83.393144][ T6017] Illegal XDP return value 1755958346 on prog (id 9) dev N/A, expect packet loss! [ 84.194182][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 84.373580][ C0] vcan0: j1939_session_tx_dat: 0xffff88807bba5c00: queue data error: -100 [ 84.473729][ T975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.718136][ T975] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 84.847498][ T975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.079429][ T975] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.112946][ T975] usb 1-1: config 1 has no interface number 0 [ 85.141895][ T975] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.166395][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 85.174949][ T975] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 85.183186][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 85.214167][ T975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.249330][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.259084][ T6029] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.33'. [ 85.436925][ T975] usb 1-1: Product: syz [ 85.441727][ T975] usb 1-1: Manufacturer: syz [ 85.446651][ T975] usb 1-1: SerialNumber: syz [ 85.507982][ T975] usb 1-1: selecting invalid altsetting 1 [ 86.253693][ T6034] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.405239][ T975] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 86.471202][ T975] cdc_ncm 1-1:1.1: bind() failure [ 87.747842][ T6041] pim6reg: entered allmulticast mode [ 87.954119][ T6051] pim6reg: left allmulticast mode [ 88.043643][ T6049] capability: warning: `syz.4.38' uses deprecated v2 capabilities in a way that may be insecure [ 88.066008][ T8] usb 1-1: USB disconnect, device number 2 [ 88.360808][ T6056] libceph: resolve 'c' (ret=-3): failed [ 93.564266][ T6086] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 93.570981][ T6086] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.639226][ T6086] vhci_hcd vhci_hcd.0: Device attached [ 96.043368][ T6089] vhci_hcd: connection closed [ 96.056397][ T1107] vhci_hcd: stop threads [ 96.067703][ T1107] vhci_hcd: release socket [ 96.073142][ T1107] vhci_hcd: disconnect device [ 96.086051][ T9] usb 38-1: SetAddress Request (2) to port 0 [ 97.046968][ T9] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 97.252983][ T9] usb 38-1: enqueue for inactive port 0 [ 98.921154][ T9] usb usb38-port1: attempt power cycle [ 99.623640][ T9] usb usb38-port1: unable to enumerate USB device [ 102.330630][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.983552][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.71'. [ 104.992523][ T6182] netlink: 72 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.001492][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.71'. [ 105.010300][ T6182] netlink: 72 bytes leftover after parsing attributes in process `syz.3.71'. [ 108.399989][ T6212] xt_recent: Unsupported userspace flags (000000da) [ 108.937298][ T6210] Bluetooth: MGMT ver 1.23 [ 109.109969][ T6216] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 110.009864][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 110.047575][ T6227] vlan2: entered promiscuous mode [ 110.073286][ T6227] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 110.128088][ T6227] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 110.213090][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.392899][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 110.411144][ T9] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 110.438173][ T9] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.479828][ T9] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 110.495942][ T9] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.518873][ T9] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 110.529835][ T9] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.569057][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.590076][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.601193][ T9] usb 4-1: Product: syz [ 110.618538][ T9] usb 4-1: Manufacturer: syz [ 110.629226][ T9] usb 4-1: SerialNumber: syz [ 111.037082][ T9] adutux 4-1:168.0: interrupt endpoints not found [ 111.484043][ T9] usb 4-1: USB disconnect, device number 2 [ 113.671607][ T6248] bridge_slave_0: left allmulticast mode [ 113.731362][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 113.746264][ T6248] bridge_slave_0: left promiscuous mode [ 113.766063][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.941051][ T6248] bridge_slave_1: left allmulticast mode [ 113.947095][ T6248] bridge_slave_1: left promiscuous mode [ 113.954178][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.465598][ T6248] bond0: (slave bond_slave_0): Releasing backup interface [ 114.693386][ T6248] bond0: (slave bond_slave_1): Releasing backup interface [ 116.513398][ T6248] team0: Port device team_slave_0 removed [ 116.753676][ T6248] team0: Port device team_slave_1 removed [ 116.788772][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.543103][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.566167][ T6248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.583013][ T6248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.615475][ T6257] ip6_vti0: entered promiscuous mode [ 117.831224][ T6257] team0: Port device ip6_vti0 added [ 121.830328][ T6309] delete_channel: no stack [ 122.456617][ T6322] process 'syz.1.105' launched './file0' with NULL argv: empty string added [ 125.830523][ T6341] warning: `syz.0.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.876187][ T6363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 133.005685][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.019276][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.665163][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 140.438167][ T6434] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 141.762022][ T5824] Bluetooth: hci1: unexpected cc 0x042f length: 1 < 7 [ 148.337472][ T6483] xt_nat: multiple ranges no longer supported [ 150.593262][ T6488] netlink: 88 bytes leftover after parsing attributes in process `syz.1.152'. [ 152.958315][ T6511] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 153.033439][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.040928][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.097128][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.104430][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.111910][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.120006][ T6511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.184106][ T6511] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.395879][ T6516] netlink: 'syz.4.158': attribute type 1 has an invalid length. [ 153.433201][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.472746][ T6523] ======================================================= [ 153.472746][ T6523] WARNING: The mand mount option has been deprecated and [ 153.472746][ T6523] and is ignored by this kernel. Remove the mand [ 153.472746][ T6523] option from the mount to silence this warning. [ 153.472746][ T6523] ======================================================= [ 153.531834][ T6523] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.563426][ T6524] syz.4.158: attempt to access beyond end of device [ 153.563426][ T6524] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 153.576319][ T6524] (syz.4.158,6524,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 153.583878][ T6524] (syz.4.158,6524,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 153.592281][ T6524] (syz.4.158,6524,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 153.600881][ T6524] (syz.4.158,6524,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 153.604393][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.659324][ T25] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 153.699682][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.735106][ T25] usb 2-1: config 0 descriptor?? [ 154.032115][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 154.063100][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 154.110707][ T25] usb 2-1: USB disconnect, device number 2 [ 154.785674][ T6532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.888645][ T6547] : entered promiscuous mode [ 158.513414][ T6561] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.175171][ T29] audit: type=1326 audit(1739723201.498:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 166.525061][ T6613] netlink: 'syz.3.184': attribute type 4 has an invalid length. [ 166.575180][ T29] audit: type=1326 audit(1739723201.498:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 166.809265][ T29] audit: type=1326 audit(1739723201.498:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 166.839886][ T29] audit: type=1326 audit(1739723201.498:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 166.890957][ T29] audit: type=1326 audit(1739723201.498:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 167.584075][ T29] audit: type=1326 audit(1739723201.498:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 167.606541][ T29] audit: type=1326 audit(1739723201.508:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 167.628729][ T29] audit: type=1326 audit(1739723201.508:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 167.650717][ T29] audit: type=1326 audit(1739723201.508:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f93b878cde9 code=0x7ffc0000 [ 167.685627][ T29] audit: type=1326 audit(1739723201.508:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6614 comm="syz.1.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 169.434231][ T6640] Zero length message leads to an empty skb [ 171.684259][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 171.691848][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 171.738979][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 171.935566][ T6654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.078459][ T6654] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.725679][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 174.138415][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 174.144957][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 174.184583][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 174.631247][ C1] hrtimer: interrupt took 217554 ns [ 175.656839][ T6654] wlan0 speed is unknown, defaulting to 1000 [ 176.781668][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 177.603820][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 177.854060][ T6693] ------------[ cut here ]------------ [ 177.859950][ T6693] WARNING: CPU: 0 PID: 6693 at ./include/net/sock.h:1711 mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 177.870445][ T6693] Modules linked in: [ 177.874461][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.0.205 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 177.885257][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.895442][ T6693] RIP: 0010:mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 177.902032][ T6693] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 ca 7b d3 f5 eb b9 e8 c3 7b d3 f5 90 0f 0b 90 e9 dd fb ff ff e8 b5 7b d3 f5 90 <0f> 0b 90 e9 3e fb ff ff 44 89 f1 80 e1 07 38 c1 0f 8c eb fb ff ff [ 177.921859][ T6693] RSP: 0000:ffffc900034f6f60 EFLAGS: 00010283 [ 177.928116][ T6693] RAX: ffffffff8bee3c2b RBX: 0000000000000001 RCX: 0000000000080000 [ 177.937083][ T6693] RDX: ffffc90004d42000 RSI: 000000000000a407 RDI: 000000000000a408 [ 177.945254][ T6693] RBP: ffffc900034f7030 R08: ffffffff8bee37f6 R09: 0100000000000000 [ 177.953373][ T6693] R10: dffffc0000000000 R11: ffffed100bcc62e4 R12: ffff88805e6316e0 [ 177.961497][ T6693] R13: ffff88805e630c00 R14: dffffc0000000000 R15: ffff88805e630c00 [ 177.969633][ T6693] FS: 00007f7e9a7e96c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 177.978713][ T6693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.985360][ T6693] CR2: 0000001b2fd18ff8 CR3: 0000000032c24000 CR4: 00000000003526f0 [ 177.993474][ T6693] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.001611][ T6693] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.009714][ T6693] Call Trace: [ 178.013085][ T6693] [ 178.016104][ T6693] ? __warn+0x165/0x4d0 [ 178.020437][ T6693] ? mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 178.026348][ T6693] ? report_bug+0x2b3/0x500 [ 178.030992][ T6693] ? mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 178.036891][ T6693] ? handle_bug+0x60/0x90 [ 178.041350][ T6693] ? exc_invalid_op+0x1a/0x50 [ 178.046122][ T6693] ? asm_exc_invalid_op+0x1a/0x20 [ 178.051320][ T6693] ? mptcp_pm_nl_addr_send_ack+0x146/0x610 [ 178.057279][ T6693] ? mptcp_pm_nl_addr_send_ack+0x57b/0x610 [ 178.063216][ T6693] ? mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 178.069132][ T6693] ? __pfx_mptcp_pm_nl_addr_send_ack+0x10/0x10 [ 178.075384][ T6693] ? mptcp_pm_remove_addr+0xea/0x1d0 [ 178.080771][ T6693] mptcp_pm_remove_addr+0x103/0x1d0 [ 178.086176][ T6693] mptcp_pm_remove_anno_addr+0x1f4/0x2f0 [ 178.091905][ T6693] ? __pfx_mptcp_pm_remove_anno_addr+0x10/0x10 [ 178.098240][ T6693] mptcp_pm_nl_del_addr_doit+0x118d/0x1af0 [ 178.104223][ T6693] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 178.110460][ T6693] ? __pfx___nla_validate_parse+0x10/0x10 [ 178.116438][ T6693] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 178.122900][ T6693] genl_rcv_msg+0xb1f/0xec0 [ 178.127572][ T6693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.132684][ T6693] ? mark_lock+0x9a/0x360 [ 178.137192][ T6693] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.143299][ T6693] ? lockdep_hardirqs_on+0x99/0x150 [ 178.148639][ T6693] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 178.154892][ T6693] netlink_rcv_skb+0x206/0x480 [ 178.159833][ T6693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.164952][ T6693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.170394][ T6693] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 178.175980][ T6693] genl_rcv+0x28/0x40 [ 178.180064][ T6693] netlink_unicast+0x7f6/0x990 [ 178.184949][ T6693] ? __pfx_netlink_unicast+0x10/0x10 [ 178.190329][ T6693] ? __virt_addr_valid+0x45f/0x530 [ 178.195514][ T6693] ? __phys_addr_symbol+0x2f/0x70 [ 178.200693][ T6693] ? __check_object_size+0x47a/0x730 [ 178.206085][ T6693] netlink_sendmsg+0x8de/0xcb0 [ 178.211019][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.216444][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.221860][ T6693] __sock_sendmsg+0x221/0x270 [ 178.226642][ T6693] ____sys_sendmsg+0x53a/0x860 [ 178.231494][ T6693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.236955][ T6693] ? __fget_files+0x2a/0x410 [ 178.241639][ T6693] ? __fget_files+0x2a/0x410 [ 178.246394][ T6693] __sys_sendmsg+0x269/0x350 [ 178.251110][ T6693] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.256476][ T6693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.262887][ T6693] ? do_syscall_64+0x100/0x230 [ 178.267854][ T6693] ? do_syscall_64+0xb6/0x230 [ 178.272640][ T6693] do_syscall_64+0xf3/0x230 [ 178.277359][ T6693] ? clear_bhb_loop+0x35/0x90 [ 178.282120][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.288144][ T6693] RIP: 0033:0x7f7e9998cde9 [ 178.292663][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.312427][ T6693] RSP: 002b:00007f7e9a7e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.320989][ T6693] RAX: ffffffffffffffda RBX: 00007f7e99ba5fa0 RCX: 00007f7e9998cde9 [ 178.329091][ T6693] RDX: 000000002000c094 RSI: 0000400000000000 RDI: 0000000000000007 [ 178.337156][ T6693] RBP: 00007f7e99a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.345260][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.353327][ T6693] R13: 0000000000000000 R14: 00007f7e99ba5fa0 R15: 00007fff49231088 [ 178.361463][ T6693] [ 178.364594][ T6693] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.371891][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.0.205 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 178.382480][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.392530][ T6693] Call Trace: [ 178.395809][ T6693] [ 178.398734][ T6693] dump_stack_lvl+0x241/0x360 [ 178.403407][ T6693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.408596][ T6693] ? __pfx__printk+0x10/0x10 [ 178.413183][ T6693] ? vscnprintf+0x5d/0x90 [ 178.417515][ T6693] panic+0x349/0x880 [ 178.421406][ T6693] ? __warn+0x174/0x4d0 [ 178.425558][ T6693] ? __pfx_panic+0x10/0x10 [ 178.429977][ T6693] ? __warn+0x174/0x4d0 [ 178.434126][ T6693] ? __warn+0x32c/0x4d0 [ 178.438278][ T6693] __warn+0x344/0x4d0 [ 178.442252][ T6693] ? mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 178.448053][ T6693] report_bug+0x2b3/0x500 [ 178.452382][ T6693] ? mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 178.458181][ T6693] handle_bug+0x60/0x90 [ 178.462329][ T6693] exc_invalid_op+0x1a/0x50 [ 178.466821][ T6693] asm_exc_invalid_op+0x1a/0x20 [ 178.471662][ T6693] RIP: 0010:mptcp_pm_nl_addr_send_ack+0x57c/0x610 [ 178.478071][ T6693] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 ca 7b d3 f5 eb b9 e8 c3 7b d3 f5 90 0f 0b 90 e9 dd fb ff ff e8 b5 7b d3 f5 90 <0f> 0b 90 e9 3e fb ff ff 44 89 f1 80 e1 07 38 c1 0f 8c eb fb ff ff [ 178.497671][ T6693] RSP: 0000:ffffc900034f6f60 EFLAGS: 00010283 [ 178.503736][ T6693] RAX: ffffffff8bee3c2b RBX: 0000000000000001 RCX: 0000000000080000 [ 178.511698][ T6693] RDX: ffffc90004d42000 RSI: 000000000000a407 RDI: 000000000000a408 [ 178.519657][ T6693] RBP: ffffc900034f7030 R08: ffffffff8bee37f6 R09: 0100000000000000 [ 178.527619][ T6693] R10: dffffc0000000000 R11: ffffed100bcc62e4 R12: ffff88805e6316e0 [ 178.535582][ T6693] R13: ffff88805e630c00 R14: dffffc0000000000 R15: ffff88805e630c00 [ 178.543551][ T6693] ? mptcp_pm_nl_addr_send_ack+0x146/0x610 [ 178.549348][ T6693] ? mptcp_pm_nl_addr_send_ack+0x57b/0x610 [ 178.555156][ T6693] ? __pfx_mptcp_pm_nl_addr_send_ack+0x10/0x10 [ 178.561300][ T6693] ? mptcp_pm_remove_addr+0xea/0x1d0 [ 178.566582][ T6693] mptcp_pm_remove_addr+0x103/0x1d0 [ 178.571778][ T6693] mptcp_pm_remove_anno_addr+0x1f4/0x2f0 [ 178.577405][ T6693] ? __pfx_mptcp_pm_remove_anno_addr+0x10/0x10 [ 178.583556][ T6693] mptcp_pm_nl_del_addr_doit+0x118d/0x1af0 [ 178.589361][ T6693] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 178.595511][ T6693] ? __pfx___nla_validate_parse+0x10/0x10 [ 178.601260][ T6693] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 178.607585][ T6693] genl_rcv_msg+0xb1f/0xec0 [ 178.612093][ T6693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.617200][ T6693] ? mark_lock+0x9a/0x360 [ 178.621528][ T6693] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.627507][ T6693] ? lockdep_hardirqs_on+0x99/0x150 [ 178.632697][ T6693] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 178.638852][ T6693] netlink_rcv_skb+0x206/0x480 [ 178.643629][ T6693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.648657][ T6693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.653951][ T6693] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 178.659420][ T6693] genl_rcv+0x28/0x40 [ 178.663403][ T6693] netlink_unicast+0x7f6/0x990 [ 178.668172][ T6693] ? __pfx_netlink_unicast+0x10/0x10 [ 178.673455][ T6693] ? __virt_addr_valid+0x45f/0x530 [ 178.678564][ T6693] ? __phys_addr_symbol+0x2f/0x70 [ 178.683583][ T6693] ? __check_object_size+0x47a/0x730 [ 178.688866][ T6693] netlink_sendmsg+0x8de/0xcb0 [ 178.693637][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.698936][ T6693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.704318][ T6693] __sock_sendmsg+0x221/0x270 [ 178.709006][ T6693] ____sys_sendmsg+0x53a/0x860 [ 178.713778][ T6693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.719092][ T6693] ? __fget_files+0x2a/0x410 [ 178.723681][ T6693] ? __fget_files+0x2a/0x410 [ 178.728274][ T6693] __sys_sendmsg+0x269/0x350 [ 178.732868][ T6693] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.738008][ T6693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.744342][ T6693] ? do_syscall_64+0x100/0x230 [ 178.749108][ T6693] ? do_syscall_64+0xb6/0x230 [ 178.753780][ T6693] do_syscall_64+0xf3/0x230 [ 178.758276][ T6693] ? clear_bhb_loop+0x35/0x90 [ 178.762954][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.768842][ T6693] RIP: 0033:0x7f7e9998cde9 [ 178.773253][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.792889][ T6693] RSP: 002b:00007f7e9a7e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.801305][ T6693] RAX: ffffffffffffffda RBX: 00007f7e99ba5fa0 RCX: 00007f7e9998cde9 [ 178.809276][ T6693] RDX: 000000002000c094 RSI: 0000400000000000 RDI: 0000000000000007 [ 178.817244][ T6693] RBP: 00007f7e99a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.825221][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.833195][ T6693] R13: 0000000000000000 R14: 00007f7e99ba5fa0 R15: 00007fff49231088 [ 178.841177][ T6693] [ 178.844442][ T6693] Kernel Offset: disabled [ 178.848839][ T6693] Rebooting in 86400 seconds..