last executing test programs: 58.465185149s ago: executing program 3 (id=24): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 54.744105127s ago: executing program 3 (id=27): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 54.51297237s ago: executing program 3 (id=32): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe}]}]}, 0xfc}}, 0x0) sendmsg$can_bcm(r1, 0x0, 0x40) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x57, 0x6, 0x0, {0x0, 0x5}, {0x1}, @ramp}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x21}) 52.043452477s ago: executing program 3 (id=36): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000037000b63446a80648c2594f90e24fc60", 0x14}], 0x1}, 0x0) 51.828322095s ago: executing program 3 (id=38): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000040)="57a1", &(0x7f0000000100)=""/213}, 0x20) 51.676312888s ago: executing program 3 (id=42): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) 34.410820915s ago: executing program 2 (id=116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000004000000002000000040014000d00", 0x26}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 34.348282643s ago: executing program 0 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 34.281175035s ago: executing program 0 (id=118): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x121001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = inotify_init() readv(r4, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 33.908141615s ago: executing program 2 (id=120): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16aef0a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d2434b1bfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde4990000000e000000010000000000000000000000000000000000000000000cabbdebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c19bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d30586ae00460a6a6caf5741e39e5cb6a193"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r1 = dup(r0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, r1, 0x0, 0x8a002) 32.620388811s ago: executing program 2 (id=123): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x2}, {0x10000002, 0x5, 0x0, 0x8}], 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="ee", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}, 0x847f) 31.372191588s ago: executing program 2 (id=126): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x408, 0x1f0, 0x1f0, 0xe8, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@private, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="bd22fdd68c29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "0d6581a280a9fd38cc0cd92b7c41598c1625a223e855c9fbc1389f5d44ef17d4f24b7890dbf5909d70031d8427048dc1646921eaa7e6ac8400"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 28.394534147s ago: executing program 2 (id=137): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) 26.433430368s ago: executing program 2 (id=142): openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001d00)={0x0, 0x0, {}, {0xffffffffffffffff}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x4010) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000100)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x6) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001440)={r6, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xbe0b}]}}]}, 0x44}}, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000012c0), 0x9, 0x0) read$msr(r10, &(0x7f0000001300), 0x0) 26.104291934s ago: executing program 0 (id=144): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe}]}]}, 0xfc}}, 0x0) sendmsg$can_bcm(r1, 0x0, 0x40) close(0xffffffffffffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x57, 0x6, 0x0, {0x0, 0x5}, {0x1}, @ramp}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x21}) 24.672189008s ago: executing program 0 (id=148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r2 = dup(r1) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendfile(r7, r2, 0x0, 0x8a002) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000a80)={0x14, 0x14, 0x1, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f00000067c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000740)="c0b59e3d1f37", 0x6}], 0x1}}], 0x3, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) 23.412107073s ago: executing program 0 (id=151): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x38}, 0x0) 23.23207097s ago: executing program 0 (id=153): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x121001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = inotify_init() readv(r4, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4.200342315s ago: executing program 1 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) r4 = dup2(r0, r2) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8085}, 0x40000) 4.167200983s ago: executing program 1 (id=196): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x0, 0x6, 0x4}) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000000)=0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x541b, 0x0) socket$inet6(0xa, 0x806, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) 3.674174378s ago: executing program 1 (id=197): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x121001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) gettid() r3 = inotify_init() readv(r3, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.84138356s ago: executing program 4 (id=199): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x17, 0xf, 0x7a, 0x0}) ioctl(r0, 0x100, &(0x7f0000000380)="4f3d81db442832341a91b0df638fe89f3e34434a3d2efbc0638395d9847fd886f59bd9c70efe16f1389c5327b6d29fe65947d42ee6e98bdd248cbfd7d1e255b716e5dae1b47df9163bc18876d4f450315683b5b304107b06ad9206ad50d6d6eac77fa440e7dbd989d72933751bad14cf8e350a2f5b55a61a01c7936b5934a121d75e561a8fc770e574c36181aa921cb9845863e07724907433015c24547bd7c4cd74e65f9b9c420f7d3e318a6210d1b014a0ca67c06758c654aed299c2f66d012de7ca51b78e3d6d8ae83774fc13eecf63d52925c3c802d469e979e4ce") syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000340)=0x80) kcmp(r2, r5, 0x1, r3, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) sync() 1.870693553s ago: executing program 4 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = creat(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001", @ANYRES16=r1], 0x1c}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x1000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x903d01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2778) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xb, @none, 0x400, 0x2}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x32}, 0x6}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x2, 0x1, 0xc}}, 0x30) socket$can_bcm(0x1d, 0x2, 0x2) 654.396868ms ago: executing program 4 (id=201): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, 0x0, 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 540.910769ms ago: executing program 1 (id=202): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 448.228811ms ago: executing program 4 (id=203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) r4 = dup2(r0, r2) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8085}, 0x40000) 447.948123ms ago: executing program 1 (id=204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x0, 0x6, 0x4}) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000000)=0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x541b, 0x0) socket$inet6(0xa, 0x806, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) 361.618026ms ago: executing program 4 (id=205): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004e50077b9c300400000000500"], 0x48) 231.887433ms ago: executing program 4 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 0s ago: executing program 1 (id=207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 49.714685][ T5218] cgroup: Unknown subsys name 'net' [ 49.839169][ T5218] cgroup: Unknown subsys name 'cpuset' [ 49.847822][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.172388][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.217687][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.226250][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.247239][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.255347][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.263572][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.271751][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.280996][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.289937][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.298504][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.308030][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.326859][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.336843][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.344953][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.353377][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.353943][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.372150][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.375183][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.387137][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.550202][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.560057][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.571095][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.581695][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.592154][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.599846][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.607455][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.607715][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.622143][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.623887][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.639516][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.648579][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.849915][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 53.880048][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 53.974426][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 54.060709][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.069096][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.076675][ T5228] bridge_slave_0: entered allmulticast mode [ 54.083940][ T5228] bridge_slave_0: entered promiscuous mode [ 54.125187][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.134149][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.141553][ T5228] bridge_slave_1: entered allmulticast mode [ 54.148659][ T5228] bridge_slave_1: entered promiscuous mode [ 54.168404][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.175508][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.182957][ T5236] bridge_slave_0: entered allmulticast mode [ 54.190149][ T5236] bridge_slave_0: entered promiscuous mode [ 54.218176][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.225287][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.232999][ T5236] bridge_slave_1: entered allmulticast mode [ 54.240890][ T5236] bridge_slave_1: entered promiscuous mode [ 54.282314][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.294915][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 54.329442][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.344226][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.353907][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.361245][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.368762][ T5233] bridge_slave_0: entered allmulticast mode [ 54.375363][ T5233] bridge_slave_0: entered promiscuous mode [ 54.383799][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.391022][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.398325][ T5233] bridge_slave_1: entered allmulticast mode [ 54.404852][ T5233] bridge_slave_1: entered promiscuous mode [ 54.438394][ T5228] team0: Port device team_slave_0 added [ 54.445809][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.502708][ T5228] team0: Port device team_slave_1 added [ 54.516131][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.548850][ T5236] team0: Port device team_slave_0 added [ 54.556966][ T5236] team0: Port device team_slave_1 added [ 54.564303][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.581703][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 54.629708][ T5233] team0: Port device team_slave_0 added [ 54.646096][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.654069][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.680642][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.705316][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.712399][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.738405][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.751279][ T5233] team0: Port device team_slave_1 added [ 54.770902][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.781097][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.807435][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.835210][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.842245][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.868392][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.886110][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.893309][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.901064][ T5241] bridge_slave_0: entered allmulticast mode [ 54.908031][ T5241] bridge_slave_0: entered promiscuous mode [ 54.938549][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.945717][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.973919][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.987619][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.994638][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.021012][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.033323][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.040814][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.048329][ T5241] bridge_slave_1: entered allmulticast mode [ 55.054984][ T5241] bridge_slave_1: entered promiscuous mode [ 55.112407][ T5228] hsr_slave_0: entered promiscuous mode [ 55.120256][ T5228] hsr_slave_1: entered promiscuous mode [ 55.150203][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.164419][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.183105][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.190737][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.198565][ T5243] bridge_slave_0: entered allmulticast mode [ 55.205135][ T5243] bridge_slave_0: entered promiscuous mode [ 55.215179][ T5236] hsr_slave_0: entered promiscuous mode [ 55.221641][ T5236] hsr_slave_1: entered promiscuous mode [ 55.229526][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.237376][ T5236] Cannot create hsr debugfs directory [ 55.277625][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.285137][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.292997][ T5243] bridge_slave_1: entered allmulticast mode [ 55.299899][ T5243] bridge_slave_1: entered promiscuous mode [ 55.338159][ T5233] hsr_slave_0: entered promiscuous mode [ 55.345962][ T5233] hsr_slave_1: entered promiscuous mode [ 55.352119][ T5231] Bluetooth: hci0: command tx timeout [ 55.358593][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.366762][ T5233] Cannot create hsr debugfs directory [ 55.386721][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.403265][ T5241] team0: Port device team_slave_0 added [ 55.427452][ T5231] Bluetooth: hci2: command tx timeout [ 55.427460][ T5235] Bluetooth: hci1: command tx timeout [ 55.446610][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.459964][ T5241] team0: Port device team_slave_1 added [ 55.527380][ T5243] team0: Port device team_slave_0 added [ 55.560073][ T5243] team0: Port device team_slave_1 added [ 55.569704][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.576936][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.602954][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.632646][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.644845][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.666319][ T5235] Bluetooth: hci4: command tx timeout [ 55.671702][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.676692][ T5231] Bluetooth: hci3: command tx timeout [ 55.719097][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.726067][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.753731][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.769609][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.776831][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.803435][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.852223][ T5241] hsr_slave_0: entered promiscuous mode [ 55.859203][ T5241] hsr_slave_1: entered promiscuous mode [ 55.865900][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.873675][ T5241] Cannot create hsr debugfs directory [ 55.967236][ T5243] hsr_slave_0: entered promiscuous mode [ 55.974001][ T5243] hsr_slave_1: entered promiscuous mode [ 55.984551][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.992468][ T5243] Cannot create hsr debugfs directory [ 56.014128][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.042796][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.052372][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.081473][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.200924][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.210205][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.219978][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.256599][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.314000][ T5233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.323656][ T5233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.343976][ T5233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.353679][ T5233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.429869][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.439856][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.455633][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.465386][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.482062][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.548628][ T5243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.574015][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.587258][ T5243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.609833][ T5243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.620756][ T5243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.634485][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.641776][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.684884][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.692123][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.785993][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.802876][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.853959][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.865705][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.890012][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.916286][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.923407][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.933098][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.940351][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.970735][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.993588][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.000897][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.021075][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.028248][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.070604][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.077825][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.107556][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.114698][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.153490][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.183751][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.232686][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.298210][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.332452][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.339734][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.394363][ T5241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.417800][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.428612][ T5231] Bluetooth: hci0: command tx timeout [ 57.449096][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.456291][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.483575][ T5228] veth0_vlan: entered promiscuous mode [ 57.508143][ T5231] Bluetooth: hci2: command tx timeout [ 57.513767][ T5231] Bluetooth: hci1: command tx timeout [ 57.539662][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.563688][ T5228] veth1_vlan: entered promiscuous mode [ 57.584792][ T5243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.602006][ T5243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.646004][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.719231][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.743852][ T5233] veth0_vlan: entered promiscuous mode [ 57.746593][ T5235] Bluetooth: hci4: command tx timeout [ 57.751175][ T5231] Bluetooth: hci3: command tx timeout [ 57.833641][ T5228] veth0_macvtap: entered promiscuous mode [ 57.850110][ T5233] veth1_vlan: entered promiscuous mode [ 57.860397][ T5236] veth0_vlan: entered promiscuous mode [ 57.883215][ T5228] veth1_macvtap: entered promiscuous mode [ 57.902889][ T5236] veth1_vlan: entered promiscuous mode [ 57.917903][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.937105][ T5241] veth0_vlan: entered promiscuous mode [ 57.969742][ T5241] veth1_vlan: entered promiscuous mode [ 58.013393][ T5233] veth0_macvtap: entered promiscuous mode [ 58.036078][ T5233] veth1_macvtap: entered promiscuous mode [ 58.047144][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.057314][ T5236] veth0_macvtap: entered promiscuous mode [ 58.088582][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.099997][ T5241] veth0_macvtap: entered promiscuous mode [ 58.119785][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.141412][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.153797][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.171539][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.180711][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.190306][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.200301][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.211295][ T5236] veth1_macvtap: entered promiscuous mode [ 58.220605][ T5241] veth1_macvtap: entered promiscuous mode [ 58.239647][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.250809][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.262580][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.287983][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.297570][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.308050][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.317282][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.341245][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.352943][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.364698][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.375534][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.388851][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.428099][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.439313][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.450003][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.461163][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.471770][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.483301][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.494740][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.502729][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.513390][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.523758][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.534301][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.545460][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.583318][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.592435][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.602973][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.612445][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.624549][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.635923][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.646615][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.657112][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.667054][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.677639][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.688791][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.713490][ T5243] veth0_vlan: entered promiscuous mode [ 58.765734][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.774942][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.784654][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.798558][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.818896][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.827736][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.845676][ T5243] veth1_vlan: entered promiscuous mode [ 58.902803][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.913413][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.934321][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.946012][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.015881][ T5243] veth0_macvtap: entered promiscuous mode [ 59.026394][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.030928][ T5228] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.034224][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.060713][ T5243] veth1_macvtap: entered promiscuous mode [ 59.121166][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.134966][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.151383][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.177033][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.206375][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.217509][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.227803][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.238879][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.256121][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.274101][ T5308] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.2'. [ 59.298787][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.326322][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.348103][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.371504][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.390121][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.404509][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.414508][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.425341][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.437615][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.453407][ T5312] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6'. [ 59.471566][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.483424][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.503029][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.513502][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.522163][ T5312] openvswitch: netlink: Message has 3074 unknown bytes. [ 59.534444][ T5243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.543836][ T5231] Bluetooth: hci0: command tx timeout [ 59.586910][ T5243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.587829][ T5231] Bluetooth: hci1: command tx timeout [ 59.596647][ T5243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.610350][ T5243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.610422][ T5235] Bluetooth: hci2: command tx timeout [ 59.759631][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.867944][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.915607][ T5235] Bluetooth: hci4: command tx timeout [ 59.921904][ T5231] Bluetooth: hci3: command tx timeout [ 60.428568][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.431507][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.450845][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.473248][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.749740][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.757883][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.935533][ T5339] netlink: 'syz.2.15': attribute type 29 has an invalid length. [ 60.966379][ T5339] netlink: 'syz.2.15': attribute type 29 has an invalid length. [ 61.024136][ T5339] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.15'. [ 61.083525][ T5339] netlink: 'syz.2.15': attribute type 29 has an invalid length. [ 61.643460][ T5231] Bluetooth: hci0: command tx timeout [ 61.693685][ T5231] Bluetooth: hci2: command tx timeout [ 61.712624][ T5231] Bluetooth: hci1: command tx timeout [ 61.996463][ T5235] Bluetooth: hci3: command tx timeout [ 62.030351][ T5231] Bluetooth: hci4: command tx timeout [ 64.868308][ T5371] openvswitch: netlink: Actions may not be safe on all matching packets [ 66.262126][ T5375] netlink: 'syz.3.27': attribute type 13 has an invalid length. [ 66.331493][ T5375] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.27'. [ 67.708951][ T5392] netlink: 'syz.2.33': attribute type 2 has an invalid length. [ 69.022903][ T5402] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.37'. [ 69.881628][ T5428] openvswitch: netlink: Actions may not be safe on all matching packets [ 71.637386][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.644042][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.694310][ T5467] netlink: 'syz.0.61': attribute type 3 has an invalid length. [ 73.702617][ T5467] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.61'. [ 74.209580][ T5472] openvswitch: netlink: Actions may not be safe on all matching packets [ 76.135237][ T5478] netlink: 'syz.4.65': attribute type 29 has an invalid length. [ 76.164341][ T5482] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 76.187915][ T5478] netlink: 'syz.4.65': attribute type 29 has an invalid length. [ 76.207038][ T5478] netlink: 'syz.4.65': attribute type 29 has an invalid length. [ 76.215254][ T5482] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 76.232658][ T5478] netlink: 'syz.4.65': attribute type 29 has an invalid length. [ 76.244667][ T5487] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 76.269449][ T5482] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 76.278550][ T5482] netlink: 'syz.0.66': attribute type 29 has an invalid length. [ 77.289284][ T25] cfg80211: failed to load regulatory.db [ 77.611867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.714339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.726456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.816130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.976470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.306685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.386559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 78.417305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.425037][ T5523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.81'. [ 78.443503][ T5523] bridge0: port 3(syz_tun) entered blocking state [ 78.450943][ T5524] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.468529][ T5523] bridge0: port 3(syz_tun) entered disabled state [ 78.485197][ T5523] syz_tun: entered allmulticast mode [ 78.513921][ T5523] syz_tun: entered promiscuous mode [ 78.539000][ T5523] bridge0: port 3(syz_tun) entered blocking state [ 78.545859][ T5523] bridge0: port 3(syz_tun) entered forwarding state [ 80.174112][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.190987][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.200608][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.208791][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.226279][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.241478][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.586678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.965666][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.020263][ T5541] chnl_net:caif_netlink_parms(): no params data found [ 81.077329][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.326450][ T5231] Bluetooth: hci5: command tx timeout [ 82.416528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.535970][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.747077][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.892344][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.905769][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.925948][ T5541] bridge_slave_0: entered allmulticast mode [ 82.945589][ T5541] bridge_slave_0: entered promiscuous mode [ 83.062107][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.082297][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.089997][ T5541] bridge_slave_1: entered allmulticast mode [ 83.097404][ T5541] bridge_slave_1: entered promiscuous mode [ 83.248119][ T35] bridge_slave_1: left allmulticast mode [ 83.254537][ T35] bridge_slave_1: left promiscuous mode [ 83.262520][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.331625][ T35] bridge_slave_0: left allmulticast mode [ 83.394468][ T35] bridge_slave_0: left promiscuous mode [ 83.414225][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.408267][ T5231] Bluetooth: hci5: command tx timeout [ 85.466746][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.491281][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.514185][ T35] bond0 (unregistering): Released all slaves [ 85.590584][ T5620] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.607985][ T5620] netlink: 256 bytes leftover after parsing attributes in process `syz.0.113'. [ 86.368837][ T5541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.388746][ T5541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.439835][ T5541] team0: Port device team_slave_0 added [ 86.447753][ T5541] team0: Port device team_slave_1 added [ 86.468349][ T5231] Bluetooth: hci5: command tx timeout [ 86.515893][ T5614] validate_nla: 2 callbacks suppressed [ 86.515913][ T5614] netlink: 'syz.4.111': attribute type 39 has an invalid length. [ 86.853371][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.921293][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.954835][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.525119][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.292071][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.318401][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.677655][ T5653] netlink: 256 bytes leftover after parsing attributes in process `syz.4.124'. [ 89.363167][ T5231] Bluetooth: hci5: command tx timeout [ 89.512719][ T5541] hsr_slave_0: entered promiscuous mode [ 89.520178][ T5541] hsr_slave_1: entered promiscuous mode [ 89.526860][ T5541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.545431][ T5541] Cannot create hsr debugfs directory [ 90.033822][ T35] hsr_slave_0: left promiscuous mode [ 90.096947][ T35] hsr_slave_1: left promiscuous mode [ 90.152078][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.176725][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.208410][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.215903][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.520663][ T35] veth1_macvtap: left promiscuous mode [ 90.566576][ T35] veth0_macvtap: left promiscuous mode [ 90.572234][ T35] veth1_vlan: left promiscuous mode [ 90.578693][ T35] veth0_vlan: left promiscuous mode [ 91.739484][ T5697] netlink: 256 bytes leftover after parsing attributes in process `syz.1.134'. [ 93.822161][ T35] team0 (unregistering): Port device team_slave_1 removed [ 93.934212][ T35] team0 (unregistering): Port device team_slave_0 removed [ 94.475865][ T5707] netlink: 'syz.4.138': attribute type 29 has an invalid length. [ 94.499355][ T5717] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 94.556926][ T5718] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 94.582462][ T5719] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 94.750191][ T5720] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 98.050235][ T5541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.092334][ T5541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.135666][ T5541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.174985][ T5541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.250607][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.430761][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.477628][ T5541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.889427][ T5541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.912789][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.919934][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.929399][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.936608][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.095286][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.972850][ T5541] veth0_vlan: entered promiscuous mode [ 103.065105][ T5541] veth1_vlan: entered promiscuous mode [ 103.195080][ T5541] veth0_macvtap: entered promiscuous mode [ 103.273858][ T5541] veth1_macvtap: entered promiscuous mode [ 103.329866][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.383650][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.417298][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.449496][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.486556][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.544190][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.605227][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.645257][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.709727][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.761038][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.775987][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.053282][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.188630][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.199803][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.216335][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.236765][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.248624][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.963604][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.998019][ T5541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.048896][ T5541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.097494][ T5541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.136049][ T5541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.260135][ T5887] syz.1.174 uses obsolete (PF_INET,SOCK_PACKET) [ 108.298777][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.360556][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.555121][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.600758][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.124614][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 109.133444][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.147090][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.159700][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 109.162479][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.173990][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 109.192272][ T4624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 109.200542][ T4624] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 109.209541][ T4624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 109.227000][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.234758][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.031405][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.420824][ T4624] Bluetooth: hci2: command tx timeout [ 112.427841][ T4624] Bluetooth: hci6: command tx timeout [ 113.628964][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 113.841523][ T5902] chnl_net:caif_netlink_parms(): no params data found [ 113.874355][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.914398][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.932365][ T5904] bridge_slave_0: entered allmulticast mode [ 114.229767][ T5904] bridge_slave_0: entered promiscuous mode [ 114.385809][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.399175][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.411103][ T5904] bridge_slave_1: entered allmulticast mode [ 114.434693][ T5904] bridge_slave_1: entered promiscuous mode [ 114.472585][ T5231] Bluetooth: hci6: command tx timeout [ 114.478873][ T4624] Bluetooth: hci2: command tx timeout [ 114.727182][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.911894][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.953419][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.983620][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.002000][ T5902] bridge_slave_0: entered allmulticast mode [ 115.012028][ T5902] bridge_slave_0: entered promiscuous mode [ 116.556704][ T5231] Bluetooth: hci6: command tx timeout [ 116.562340][ T5231] Bluetooth: hci2: command tx timeout [ 117.897990][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.915343][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.923734][ T5902] bridge_slave_1: entered allmulticast mode [ 117.940991][ T5902] bridge_slave_1: entered promiscuous mode [ 118.208521][ T1074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.241280][ T5904] team0: Port device team_slave_0 added [ 118.259549][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.260668][ T5904] team0: Port device team_slave_1 added [ 118.301534][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.344023][ T1074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.383191][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.390960][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.425483][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.459973][ T5902] team0: Port device team_slave_0 added [ 118.513704][ T1074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.541478][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.551790][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.577779][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.590430][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.616182][ T5902] team0: Port device team_slave_1 added [ 118.626653][ T5231] Bluetooth: hci6: command tx timeout [ 118.626837][ T4624] Bluetooth: hci2: command tx timeout [ 118.680124][ T1074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.742887][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.751245][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.777249][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.784627][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.837338][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.844735][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.872056][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.962465][ T5904] hsr_slave_0: entered promiscuous mode [ 118.975822][ T5904] hsr_slave_1: entered promiscuous mode [ 118.983768][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.991886][ T5904] Cannot create hsr debugfs directory [ 119.063540][ T5902] hsr_slave_0: entered promiscuous mode [ 119.072430][ T5902] hsr_slave_1: entered promiscuous mode [ 119.099705][ T5902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.125002][ T5902] Cannot create hsr debugfs directory [ 119.823024][ T1074] bridge_slave_1: left allmulticast mode [ 119.842855][ T1074] bridge_slave_1: left promiscuous mode [ 119.864721][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.905968][ T1074] bridge_slave_0: left allmulticast mode [ 119.925051][ T1074] bridge_slave_0: left promiscuous mode [ 119.945060][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.989180][ C0] BUG: unable to handle page fault for address: fffffbfffb11e000 [ 120.997001][ C0] #PF: supervisor read access in kernel mode [ 121.002976][ C0] #PF: error_code(0x0000) - not-present page [ 121.008933][ C0] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 121.015442][ C0] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 121.021504][ C0] CPU: 0 UID: 0 PID: 1074 Comm: kworker/u8:6 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 121.031803][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.042012][ C0] Workqueue: netns cleanup_net [ 121.046948][ C0] RIP: 0010:kasan_check_range+0x82/0x290 [ 121.052561][ C0] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 121.072614][ C0] RSP: 0018:ffffc90000007998 EFLAGS: 00010286 [ 121.078835][ C0] RAX: 0000000000000001 RBX: 1ffffffffb11e000 RCX: ffffffff81cf410f [ 121.086967][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffd88f0000 [ 121.095007][ C0] RBP: ffffffffffffffff R08: ffffffffd88f0007 R09: 1ffffffffb11e000 [ 121.102970][ C0] R10: dffffc0000000000 R11: fffffbfffb11e000 R12: ffffffffd88f0000 [ 121.111027][ C0] R13: 0000000000000008 R14: dffffc0000000001 R15: fffffbfffb11e001 [ 121.119032][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 121.127972][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.134710][ C0] CR2: fffffbfffb11e000 CR3: 00000000694b4000 CR4: 00000000003526f0 [ 121.142680][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.150664][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.158623][ C0] Call Trace: [ 121.161885][ C0] [ 121.164723][ C0] ? __die_body+0x5f/0xb0 [ 121.169036][ C0] ? page_fault_oops+0x8e4/0xcc0 [ 121.173969][ C0] ? __pfx_page_fault_oops+0x10/0x10 [ 121.179232][ C0] ? is_prefetch+0x4ed/0x780 [ 121.183825][ C0] ? deref_stack_reg+0x17c/0x210 [ 121.188827][ C0] ? __pfx_is_prefetch+0x10/0x10 [ 121.193744][ C0] ? __bad_area_nosemaphore+0x118/0x770 [ 121.199273][ C0] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 121.205154][ C0] ? spurious_kernel_fault+0x119/0x5a0 [ 121.210608][ C0] ? exc_page_fault+0x5c8/0x8c0 [ 121.215441][ C0] ? asm_exc_page_fault+0x26/0x30 [ 121.220446][ C0] ? copy_from_kernel_nofault+0x6f/0x2f0 [ 121.226062][ C0] ? kasan_check_range+0x82/0x290 [ 121.231074][ C0] copy_from_kernel_nofault+0x6f/0x2f0 [ 121.236620][ C0] bpf_probe_read_compat+0x10f/0x180 [ 121.241890][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 121.246728][ C0] bpf_prog_737a72641ece9b26+0x43/0x45 [ 121.252188][ C0] bpf_trace_run2+0x2ec/0x540 [ 121.256847][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 121.262028][ C0] ? slab_free_after_rcu_debug+0x62/0x280 [ 121.267742][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 121.272752][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 121.278369][ C0] ? slab_free_after_rcu_debug+0x62/0x280 [ 121.284070][ C0] ? slab_free_after_rcu_debug+0x62/0x280 [ 121.289852][ C0] kfree+0x378/0x420 [ 121.293747][ C0] ? rcu_core+0xaaa/0x17a0 [ 121.298344][ C0] slab_free_after_rcu_debug+0x62/0x280 [ 121.303867][ C0] ? rcu_core+0xa37/0x17a0 [ 121.308264][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 121.314397][ C0] rcu_core+0xaaa/0x17a0 [ 121.318706][ C0] ? __pfx_rcu_core+0x10/0x10 [ 121.323361][ C0] ? sched_balance_domains+0x91b/0xa90 [ 121.328924][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 121.334401][ C0] ? __pfx_sched_balance_domains+0x10/0x10 [ 121.340216][ C0] handle_softirqs+0x2c5/0x980 [ 121.344978][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 121.349795][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 121.355101][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 121.360286][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 121.364858][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 121.370035][ C0] irq_exit_rcu+0x9/0x30 [ 121.374262][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 121.379878][ C0] [ 121.382796][ C0] [ 121.385819][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 121.391783][ C0] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 121.398068][ C0] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 45 30 93 f5 e8 50 98 cc f5 fb bf 01 00 00 00 85 ac ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 35 ba 2e f6 48 [ 121.417742][ C0] RSP: 0018:ffffc90003e675e0 EFLAGS: 00000282 [ 121.423815][ C0] RAX: b38e563f09993600 RBX: 1ffff920007ccec4 RCX: ffffffff8170b62a [ 121.431767][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0acac0 RDI: 0000000000000001 [ 121.439739][ C0] RBP: ffffc90003e676a0 R08: ffffffff942d280f R09: 1ffffffff285a501 [ 121.447704][ C0] R10: dffffc0000000000 R11: fffffbfff285a502 R12: 1ffff920007ccebc [ 121.455676][ C0] R13: 1ffff920007ccec0 R14: ffffc90003e67600 R15: dffffc0000000000 [ 121.463665][ C0] ? mark_lock+0x9a/0x360 [ 121.468272][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 121.473992][ C0] irqentry_exit+0x5e/0x90 [ 121.478405][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 121.483853][ C0] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 121.489994][ C0] Code: 28 94 48 c7 c6 60 94 70 81 e8 0f 46 0a 00 e8 7a 5a 0a 00 e9 e5 fb ff ff e8 40 44 57 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 121.509585][ C0] RSP: 0018:ffffc90003e67760 EFLAGS: 00000246 [ 121.515633][ C0] RAX: dffffc0000000000 RBX: 1ffff920007ccef4 RCX: ffffffff9a3d9903 [ 121.523589][ C0] RDX: 0000000000000001 RSI: ffffffff8c0ad7a0 RDI: ffffffff8c610c20 [ 121.531628][ C0] RBP: ffffc90003e67838 R08: ffffffff942a38d7 R09: 1ffffffff285471a [ 121.539586][ C0] R10: dffffc0000000000 R11: fffffbfff285471b R12: ffffc90003e677a0 [ 121.547542][ C0] R13: 1ffff920007ccef0 R14: 0000000000000000 R15: 0000000000000203 [ 121.555520][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 121.561496][ C0] ? rcu_is_watching+0x15/0xb0 [ 121.566258][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 121.570831][ C0] __qdisc_destroy+0x165/0x410 [ 121.575594][ C0] dev_shutdown+0x9b/0x450 [ 121.580012][ C0] unregister_netdevice_many_notify+0x995/0x1da0 [ 121.586341][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 121.593087][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 121.598978][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 121.605201][ C0] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 121.611174][ C0] cleanup_net+0x75d/0xcc0 [ 121.615570][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 121.620502][ C0] ? process_scheduled_works+0x976/0x1850 [ 121.626215][ C0] process_scheduled_works+0xa63/0x1850 [ 121.631761][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 121.637722][ C0] ? assign_work+0x364/0x3d0 [ 121.642293][ C0] worker_thread+0x870/0xd30 [ 121.646866][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 121.652736][ C0] ? __kthread_parkme+0x169/0x1d0 [ 121.657760][ C0] ? __pfx_worker_thread+0x10/0x10 [ 121.662853][ C0] kthread+0x2f0/0x390 [ 121.666900][ C0] ? __pfx_worker_thread+0x10/0x10 [ 121.671996][ C0] ? __pfx_kthread+0x10/0x10 [ 121.676561][ C0] ret_from_fork+0x4b/0x80 [ 121.680958][ C0] ? __pfx_kthread+0x10/0x10 [ 121.685523][ C0] ret_from_fork_asm+0x1a/0x30 [ 121.690268][ C0] [ 121.693285][ C0] Modules linked in: [ 121.697171][ C0] CR2: fffffbfffb11e000 [ 121.701317][ C0] ---[ end trace 0000000000000000 ]--- [ 121.701356][ T6000] BUG: unable to handle page fault for address: fffffbfffb11e000 [ 121.706808][ C0] RIP: 0010:kasan_check_range+0x82/0x290 [ 121.714506][ T6000] #PF: supervisor read access in kernel mode [ 121.720108][ C0] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 121.726059][ T6000] #PF: error_code(0x0000) - not-present page [ 121.745646][ C0] RSP: 0018:ffffc90000007998 EFLAGS: 00010286 [ 121.751613][ T6000] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 [ 121.757661][ C0] [ 121.757672][ C0] RAX: 0000000000000001 RBX: 1ffffffffb11e000 RCX: ffffffff81cf410f [ 121.763628][ T6000] PMD 0 [ 121.765938][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffd88f0000 [ 121.773885][ T6000] [ 121.773895][ T6000] Oops: Oops: 0000 [#2] PREEMPT SMP KASAN PTI [ 121.776714][ C0] RBP: ffffffffffffffff R08: ffffffffd88f0007 R09: 1ffffffffb11e000 [ 121.784663][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.1.207 Tainted: G D 6.12.0-rc1-next-20241003-syzkaller #0 [ 121.786961][ C0] R10: dffffc0000000000 R11: fffffbfffb11e000 R12: ffffffffd88f0000 [ 121.793003][ T6000] Tainted: [D]=DIE [ 121.801030][ C0] R13: 0000000000000008 R14: dffffc0000000001 R15: fffffbfffb11e001 [ 121.812533][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.820575][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 121.824271][ T6000] RIP: 0010:kasan_check_range+0x82/0x290 [ 121.832211][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.842251][ T6000] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 121.851168][ C0] CR2: fffffbfffb11e000 CR3: 00000000694b4000 CR4: 00000000003526f0 [ 121.856773][ T6000] RSP: 0018:ffffc900032ef2f8 EFLAGS: 00010286 [ 121.863334][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.883173][ T6000] [ 121.883181][ T6000] RAX: 0000000000000001 RBX: 1ffffffffb11e000 RCX: ffffffff81cf410f [ 121.891572][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.897609][ T6000] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffd88f0000 [ 121.905646][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 122.991396][ C0] Shutting down cpus with NMI [ 123.027381][ C0] Kernel Offset: disabled [ 123.031694][ C0] Rebooting in 86400 seconds..