last executing test programs: 13.959017572s ago: executing program 1 (id=102): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)) 12.899304299s ago: executing program 3 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES8=r1], 0xe4}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0, 0x5, 0x100, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x8, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB="9cc6e807a6c21392c817b5b1bd9135909c1673febd5d45d6c0b678d0e8ae0a436bd1e3fd1d9aafcc2450831cb98a4bbc28b6b1c935f743572889f8ce1a6c06bd5368869a5c090e1dfce4bed6d255b2cdac0bc779bfb91459526fe8358c72fe5057199510b8f28680cec0aa146196cbcde4c2fc807ec455ebd67e0536d0ddbe3ed0478de7780ec773c97b785885dd692c927187f430c0aefe132e01c3321a4412aad4bf3db1f92c7c266401a064071a11621717665d92007a48306f38d9831cca768fedab3203f32318748e7970b84efa", @ANYBLOB="0000000000000000ff7c61f0b703000000000000850000000000b700000000000000010000000000000087997f5a6943296dd101953b42bbc3dfc7e43f59e8044fb7e6712067a75cb9cb83fc931725fc4c08be3627d4f70664d4fe8e7e828a7cc1b067ceb13b65288043a88bdf5d3725bd3a066016e490a3d46059e3c30dd17d71cdfa7921b00e72d4385b00e3a58a237dfc2ed1072245eadfbd95f16ff7ba0dcdc2d1e2b86e38f503f74c896b081d210b3d1f4229f0ec512eb1568950b99d1256f83b7a9f378147d51967082c246e1b9bb11afbe16de8488636a5242d23d8dbb6cf0f30e16262a290ddc0e6f70e7b2950990975009f6139841f7de7e11e6672c0093240445a57d0d6b7044cbcc9e9bde77c3bebfa4931a1a99e0b0420d4f0bfe6c2de2425e99344184f3772632478f1a6f75a66"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="050003"], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) r8 = socket(0x11, 0xa, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r8}, 0x20) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="aac6be871dce2eed972d42d881527588f18d37f46ab7a1b4fd76884ea282d46de5c480c0998752db22f01a6527b389aa3d9283ea8bb1e03d1e3a28015a5196e65d529563d1e9015d427f059f5be5896b4e010a95fe8a804985412c", 0x5b}, 0x1, 0x0, 0x0, 0x1000}, 0x140) 12.860876134s ago: executing program 1 (id=106): open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 12.796261548s ago: executing program 2 (id=107): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(0x0, r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x88efa964645774f0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5f79ac56}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x48800) unshare(0x6a040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc080) sendmmsg$inet6(r6, 0x0, 0x0, 0x4001c00) 12.551191558s ago: executing program 3 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r5) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 10.591157823s ago: executing program 3 (id=113): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c2000002ca544f600b58a82401dbcf893fbf6a88000000000000080045010000000011907800000000e000000100004e200010907822c0000100000000", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESDEC=r2], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 9.307061545s ago: executing program 2 (id=117): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 9.116540103s ago: executing program 1 (id=119): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) 6.728181642s ago: executing program 3 (id=121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pselect6(0x40, &(0x7f0000000480)={0x1, 0x5, 0xfffe, 0x9, 0x40000004, 0x10000006, 0x8000000000000000, 0x7d}, &(0x7f00000001c0)={0x6, 0x6, 0x7, 0xa241, 0xffffffffffffffff, 0xfffffffffffffffc, 0x7, 0xbb0}, 0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)={[0x3ff]}, 0x8}) 6.601703659s ago: executing program 1 (id=122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x7b85, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x8080, &(0x7f0000000800)=ANY=[@ANYRES8=r1, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a7, &(0x7f00000004c0)="$eJzs3cFqK2UUAOAzSZpGXaSIG0VwQBeuSuvWTaNUELtSIqgLLbYFSUKhhYAVjF31CVz6Hj6CGze+geBWcNcuKnOZmUyTtmlvaXNTuP2+1en8c85/Mn9JVjn57u1Bb2c/iePTv6PVSqK2ERtxlsRK1KLySzQCAHh5nGVZ/JfdJ7NRm383AMAilJ//pcfuBQBYjC+++vqzztbW5udp2oo32yfDbhIRg5Nht1zv7MUP0Y/dWIt2nEdkF8r4k0+3NqOR5lbivcFo2M0zB9/+Oa7f+TeiyF+PdqzMzl9PSxf5r1bdpdHZW6r+aMcbs/M/uJofg1F0m/H+u1P9r0Y7/vo+9qMfO5HnTvJ/Xk/Tj7NfT3/6Jt8mz09q0V0u7pvI6gs6EgAAAAAAAAAAAAAAAAAAAAAAnoDVNE3K8T3F/J78UjE/Z9itnxfrq2ller7PqJoPlFSFyvlAWYxH9Iyy+K2ar7OWpmk2HuMzyW/EWw0/LAAAAAAAAAAAAAAAAAAAAAC5wx+Petv9/u7BXIJqGkD1tf771tmYuvJOHPW26zcXXL77XtPTBvJeb705Go24slTlzvGJFcEreT/zLFgEy5PD/TLKoDqYue71+kdl0aPednrtQSXP26tVHdzv00vNeGhjWfEvcZ5dPtPWRauXs5pzehrN12Yu/Z9l2d3qfPhPeUbjK0kxYuNuuy+Ng5kvMA9a18/ij5sL3viWUX/oew4AAAAAAAAAAAAAAAAAADDb5Eu/MxaPb02tvbCmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDBJr//XwWtiLh85VowGiffds84aMbB4SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6AZwEAAP//+CJK2Q==") r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xc) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x2000, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000480)='nfs\x00', 0x800, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc770xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x0, &(0x7f00000000c0)={0x5, 0x8}, &(0x7f0000000100)) 5.394276372s ago: executing program 0 (id=127): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb847", 0x82}], 0x1}}], 0x1, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 5.336680584s ago: executing program 1 (id=128): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32], 0x254}}, 0x0) 5.149298783s ago: executing program 0 (id=129): open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 5.076418755s ago: executing program 2 (id=130): r0 = socket$kcm(0x11, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"], 0x18, 0x4004048}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x47}, 0x80, 0x0}, 0x8000) r2 = socket(0x6, 0x80000, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000900)="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", 0x3e7}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc2418408", 0x1e}], 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0xe21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) accept(r4, 0xfffffffffffffffd, &(0x7f0000000680)=0x12) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000540), 0x8e23733bdb6aa000) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x40) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000002c0)=0x5, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000fcdbdf2509000000040003"], 0x24}}, 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="000625bd7000fedbdf2506000000c2fe2e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x40000) 5.003196247s ago: executing program 1 (id=131): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c2000002ca544f600b58a82401dbcf893fbf6a88000000000000080045010000000011907800000000e000000100004e200010907822c0000100000000", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESDEC=r2], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 4.879422286s ago: executing program 4 (id=132): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) 2.182599597s ago: executing program 4 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) sendmsg$nl_generic(r0, 0x0, 0x0) 2.073657398s ago: executing program 2 (id=134): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r2, 0x80000000}, 0x8) 1.87146801s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c2000002ca544f600b58a82401dbcf893fbf6a88000000000000080045010000000011907800000000e000000100004e200010907822c0000100000000", @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRESDEC=r1], 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r5 = syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x200010, &(0x7f0000000040)=ANY=[], 0x0, 0x663, &(0x7f0000000540)="$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") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRES64=r5, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") 1.651894723s ago: executing program 0 (id=136): sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800c000) 1.6285316s ago: executing program 4 (id=137): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 1.335478124s ago: executing program 0 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x7b85, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x8080, &(0x7f0000000800)=ANY=[@ANYRES8=r1, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a7, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xc) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x2000, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000480)='nfs\x00', 0x800, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc770xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 925.693638ms ago: executing program 4 (id=141): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}}, 0x20000000) 843.732809ms ago: executing program 2 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="14000000030101030000"], 0x14}}, 0x20020084) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000001480)=ANY=[@ANYBLOB="1400000015"], 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x44004080) 177.90576ms ago: executing program 0 (id=143): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) 0s ago: executing program 2 (id=144): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 102.524977][ T107] cfg80211: failed to load regulatory.db [ 104.019697][ T5811] cgroup: Unknown subsys name 'net' [ 104.177094][ T5811] cgroup: Unknown subsys name 'cpuset' [ 104.187657][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 106.023628][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.603289][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.617495][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.628800][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.638174][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.647815][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.658293][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.668357][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.676720][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.686052][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.692740][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.695866][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.712343][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.712419][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.723806][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.730886][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.737837][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.748116][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.767864][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.771265][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.778742][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.791049][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.795008][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.803835][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.819580][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.819959][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.559302][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 109.714001][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 109.848670][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 110.029446][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 110.065054][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.076129][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.085728][ T5825] bridge_slave_0: entered allmulticast mode [ 110.095448][ T5825] bridge_slave_0: entered promiscuous mode [ 110.128894][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 110.150786][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.161487][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.169016][ T5825] bridge_slave_1: entered allmulticast mode [ 110.178880][ T5825] bridge_slave_1: entered promiscuous mode [ 110.333770][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.341550][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.351201][ T5826] bridge_slave_0: entered allmulticast mode [ 110.359769][ T5826] bridge_slave_0: entered promiscuous mode [ 110.401220][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.412470][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.421682][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.430277][ T5826] bridge_slave_1: entered allmulticast mode [ 110.440497][ T5826] bridge_slave_1: entered promiscuous mode [ 110.457444][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.465462][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.474378][ T5830] bridge_slave_0: entered allmulticast mode [ 110.483269][ T5830] bridge_slave_0: entered promiscuous mode [ 110.502661][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.554796][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.565189][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.573951][ T5830] bridge_slave_1: entered allmulticast mode [ 110.582147][ T5830] bridge_slave_1: entered promiscuous mode [ 110.674089][ T5825] team0: Port device team_slave_0 added [ 110.685541][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.746047][ T5825] team0: Port device team_slave_1 added [ 110.756609][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.769470][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.778537][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.787265][ T5827] bridge_slave_0: entered allmulticast mode [ 110.796054][ T5827] bridge_slave_0: entered promiscuous mode [ 110.808899][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.821186][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.829628][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.839012][ T5834] bridge_slave_0: entered allmulticast mode [ 110.847022][ T5840] Bluetooth: hci3: command tx timeout [ 110.849243][ T5834] bridge_slave_0: entered promiscuous mode [ 110.855449][ T52] Bluetooth: hci0: command tx timeout [ 110.918165][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.926638][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.934500][ T5829] Bluetooth: hci1: command tx timeout [ 110.935383][ T5827] bridge_slave_1: entered allmulticast mode [ 110.942105][ T52] Bluetooth: hci4: command tx timeout [ 110.950214][ T5827] bridge_slave_1: entered promiscuous mode [ 110.956242][ T5840] Bluetooth: hci2: command tx timeout [ 110.985120][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.995994][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.004137][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.012309][ T5834] bridge_slave_1: entered allmulticast mode [ 111.021230][ T5834] bridge_slave_1: entered promiscuous mode [ 111.030463][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.039963][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.069859][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.145829][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.154147][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.184950][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.202566][ T5826] team0: Port device team_slave_0 added [ 111.214682][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.269550][ T5826] team0: Port device team_slave_1 added [ 111.278683][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.306854][ T5830] team0: Port device team_slave_0 added [ 111.316791][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.376498][ T5830] team0: Port device team_slave_1 added [ 111.386714][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.399597][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.407791][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.438535][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.455696][ T5827] team0: Port device team_slave_0 added [ 111.506954][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.515845][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.548417][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.565543][ T5827] team0: Port device team_slave_1 added [ 111.651136][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.659579][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.695197][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.715097][ T5825] hsr_slave_0: entered promiscuous mode [ 111.723985][ T5825] hsr_slave_1: entered promiscuous mode [ 111.734931][ T5834] team0: Port device team_slave_0 added [ 111.746555][ T5834] team0: Port device team_slave_1 added [ 111.785042][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.793123][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.828012][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.863430][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.872616][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.904658][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.958953][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.966665][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.998555][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.012032][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.048367][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.079210][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.122233][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.132324][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.162146][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.205656][ T5826] hsr_slave_0: entered promiscuous mode [ 112.215291][ T5826] hsr_slave_1: entered promiscuous mode [ 112.223791][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 112.230854][ T5826] Cannot create hsr debugfs directory [ 112.305253][ T5830] hsr_slave_0: entered promiscuous mode [ 112.313613][ T5830] hsr_slave_1: entered promiscuous mode [ 112.321022][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 112.328273][ T5830] Cannot create hsr debugfs directory [ 112.366299][ T5827] hsr_slave_0: entered promiscuous mode [ 112.374272][ T5827] hsr_slave_1: entered promiscuous mode [ 112.381272][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 112.388179][ T5827] Cannot create hsr debugfs directory [ 112.510736][ T5834] hsr_slave_0: entered promiscuous mode [ 112.520897][ T5834] hsr_slave_1: entered promiscuous mode [ 112.528393][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 112.535795][ T5834] Cannot create hsr debugfs directory [ 112.923768][ T52] Bluetooth: hci0: command tx timeout [ 112.929929][ T5840] Bluetooth: hci3: command tx timeout [ 113.004062][ T5829] Bluetooth: hci1: command tx timeout [ 113.010373][ T52] Bluetooth: hci4: command tx timeout [ 113.013287][ T5840] Bluetooth: hci2: command tx timeout [ 113.192667][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.210496][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.229908][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.269399][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.379199][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.400917][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.414061][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.458179][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.593835][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.607816][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.625266][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.668286][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.816770][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.837118][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.862163][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.877136][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.927760][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.055792][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.068552][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.093936][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.108251][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.130100][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.172178][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.180502][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.227454][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.236239][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.309309][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.408333][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.425591][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.480173][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.488654][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.530390][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.549861][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.557840][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.592244][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.601745][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.625455][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.634124][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.667141][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.813523][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.825723][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.872731][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.881756][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.931011][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.939215][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.968894][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.980595][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.003078][ T5840] Bluetooth: hci3: command tx timeout [ 115.007969][ T52] Bluetooth: hci0: command tx timeout [ 115.052804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.060859][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.084365][ T52] Bluetooth: hci2: command tx timeout [ 115.085300][ T5840] Bluetooth: hci4: command tx timeout [ 115.091351][ T5829] Bluetooth: hci1: command tx timeout [ 115.115495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.124023][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.467486][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.532055][ T5825] veth0_vlan: entered promiscuous mode [ 115.597484][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.626107][ T5825] veth1_vlan: entered promiscuous mode [ 115.804644][ T5825] veth0_macvtap: entered promiscuous mode [ 115.814840][ T5830] veth0_vlan: entered promiscuous mode [ 115.851106][ T5825] veth1_macvtap: entered promiscuous mode [ 115.879434][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.928040][ T5830] veth1_vlan: entered promiscuous mode [ 115.952409][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.988776][ T5827] veth0_vlan: entered promiscuous mode [ 116.018010][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.079954][ T474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.095280][ T474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.117311][ T5827] veth1_vlan: entered promiscuous mode [ 116.131636][ T474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.153694][ T474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.169951][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.291432][ T5830] veth0_macvtap: entered promiscuous mode [ 116.346912][ T5830] veth1_macvtap: entered promiscuous mode [ 116.427649][ T5827] veth0_macvtap: entered promiscuous mode [ 116.452299][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.465361][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.490161][ T5827] veth1_macvtap: entered promiscuous mode [ 116.507115][ T5834] veth0_vlan: entered promiscuous mode [ 116.550011][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.570787][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.581117][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.620864][ T5834] veth1_vlan: entered promiscuous mode [ 116.630783][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.691353][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.705556][ T474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.727114][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.729432][ T474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.757950][ T5826] veth0_vlan: entered promiscuous mode [ 116.769147][ T474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.792136][ T474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.839815][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.933184][ T5826] veth1_vlan: entered promiscuous mode [ 116.990272][ T5834] veth0_macvtap: entered promiscuous mode [ 117.001425][ T1140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.017393][ T1140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.039364][ T1140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.060861][ T1140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.083575][ T52] Bluetooth: hci3: command tx timeout [ 117.089693][ T5829] Bluetooth: hci0: command tx timeout [ 117.115548][ T5834] veth1_macvtap: entered promiscuous mode [ 117.164372][ T52] Bluetooth: hci2: command tx timeout [ 117.164492][ T5840] Bluetooth: hci4: command tx timeout [ 117.171104][ T5829] Bluetooth: hci1: command tx timeout [ 117.192299][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 117.206071][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6'. [ 117.241058][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.257143][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.385905][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.430874][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.442516][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 117.458555][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.460281][ T5826] veth0_macvtap: entered promiscuous mode [ 117.467846][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.515345][ T5826] veth1_macvtap: entered promiscuous mode [ 117.565140][ T474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.578907][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.592372][ T474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.609395][ T474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.633097][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.654995][ T474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.775630][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.788074][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.800829][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.832155][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.875045][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.921397][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.950518][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.969078][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.989575][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.109056][ T5956] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 118.225213][ T5959] gretap0: entered promiscuous mode [ 118.231308][ T5956] IPv6: Can't replace route, no match found [ 118.242047][ T5959] gretap0: left promiscuous mode [ 118.536856][ T5950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.548767][ T5950] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 118.803273][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.834529][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.925659][ T474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.958458][ T474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.060744][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.076669][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.306906][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.385953][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.442177][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 120.479530][ T5995] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.530067][ T5995] Zero length message leads to an empty skb [ 121.738102][ T6025] block nbd1: not configured, cannot reconfigure [ 121.929907][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 122.208104][ T5945] udevd[5945]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 122.229459][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 122.920848][ T6060] loop0: detected capacity change from 0 to 512 [ 122.939015][ T6060] EXT4-fs: Ignoring removed nobh option [ 123.009406][ T6060] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.47: iget: bad i_size value: 38620345925642 [ 123.040180][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.067232][ T6060] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.47: couldn't read orphan inode 15 (err -117) [ 123.147570][ T6060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.542092][ T30] audit: type=1804 audit(1764044892.046:2): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.47" name="/newroot/12/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 124.093109][ T6084] syz_tun: entered allmulticast mode [ 124.196524][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.455049][ T6087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.798548][ T6087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.908389][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 124.973889][ T6082] syz_tun: left allmulticast mode [ 125.117686][ T6087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.266781][ T6107] loop0: detected capacity change from 0 to 512 [ 125.293391][ T6107] EXT4-fs: Ignoring removed nobh option [ 125.348193][ T6087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.416753][ T6107] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.64: iget: bad i_size value: 38620345925642 [ 125.458904][ T6107] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.64: couldn't read orphan inode 15 (err -117) [ 125.509473][ T6107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.579377][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.827498][ T30] audit: type=1804 audit(1764044894.406:3): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.64" name="/newroot/16/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 125.875515][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.016334][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.120246][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.414319][ T6120] loop1: detected capacity change from 0 to 16 [ 126.541315][ T6120] erofs (device loop1): mounted with root inode @ nid 36. [ 126.571981][ T6120] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 126.600073][ T6120] erofs (device loop1): read error -117 @ 43 of nid 36 [ 126.628724][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.075492][ T6131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.959862][ T6147] loop2: detected capacity change from 0 to 1024 [ 128.098225][ T6147] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 128.265725][ T6147] loop2: detected capacity change from 0 to 1024 [ 128.277284][ T6147] hfsplus: Bad value for 'gid' [ 128.755817][ T6149] loop3: detected capacity change from 0 to 512 [ 128.806946][ T6149] EXT4-fs: Ignoring removed nobh option [ 129.387687][ T6149] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.78: iget: bad i_size value: 38620345925642 [ 129.424807][ T6132] lec:lec_atm_close: lec0: Shut down! [ 129.454518][ T6149] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.78: couldn't read orphan inode 15 (err -117) [ 129.545435][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.905794][ T30] audit: type=1804 audit(1764044898.486:4): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.78" name="/newroot/19/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 130.574321][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.976594][ T6196] netlink: set zone limit has 8 unknown bytes [ 131.941284][ T6215] loop0: detected capacity change from 0 to 512 [ 132.004564][ T6215] EXT4-fs: Ignoring removed nobh option [ 132.280090][ T6215] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.93: iget: bad i_size value: 38620345925642 [ 132.393938][ T6215] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.93: couldn't read orphan inode 15 (err -117) [ 132.521683][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.378676][ T30] audit: type=1804 audit(1764044901.666:5): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.93" name="/newroot/23/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 133.418110][ T6161] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 133.771167][ T6237] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.895569][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.895570][ T6237] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 135.148276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 136.089844][ T6273] netlink: 'syz.2.107': attribute type 13 has an invalid length. [ 136.117083][ T6283] loop4: detected capacity change from 0 to 256 [ 136.162096][ T6283] vfat: Unknown parameter 'ÿÒ<ö앳¸ ±ú#3”Æ' [ 137.481690][ T6289] syzkaller0: entered promiscuous mode [ 137.503369][ T6289] syzkaller0: entered allmulticast mode [ 137.716845][ T6305] syzkaller0: entered promiscuous mode [ 137.742911][ T6305] syzkaller0: entered allmulticast mode [ 138.381735][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.389764][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.414948][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 139.020569][ T6331] syz_tun: entered allmulticast mode [ 139.164304][ T6334] netlink: 300 bytes leftover after parsing attributes in process `syz.4.116'. [ 139.853386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.263019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 140.286678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 140.673047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 141.791760][ T6330] syz_tun: left allmulticast mode [ 142.194800][ T6356] loop1: detected capacity change from 0 to 256 [ 142.283312][ T6356] vfat: Unknown parameter 'ÿÒ<ö앳¸ ±ú#3”Æ' [ 143.323878][ T6379] netlink: 300 bytes leftover after parsing attributes in process `syz.1.128'. [ 143.448944][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 143.459621][ C0] lec:lec_tx_timeout: lec0 [ 144.763739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 144.774058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.973059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 144.982269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 145.383136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 146.422536][ T5490] lec:lec_start_xmit: lec0:No lecd attached [ 146.828227][ T6406] loop4: detected capacity change from 0 to 1024 [ 146.846310][ T6406] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 147.347606][ T6412] loop0: detected capacity change from 0 to 256 [ 147.380091][ T6412] vfat: Unknown parameter 'ÿÒ<ö앳¸ ±ú#3”Æ' [ 148.418114][ T6421] lo speed is unknown, defaulting to 1000 [ 148.468752][ T6421] lo speed is unknown, defaulting to 1000 [ 148.492634][ T6421] lo speed is unknown, defaulting to 1000 [ 151.432912][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 151.443323][ C0] lec:lec_tx_timeout: lec0 [ 151.483175][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 156.492889][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 156.501386][ C0] lec:lec_tx_timeout: lec0 [ 156.522944][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 162.682839][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6160 ms [ 162.691826][ C0] lec:lec_tx_timeout: lec0 [ 162.702884][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 168.442835][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 168.451631][ C0] lec:lec_tx_timeout: lec0 [ 171.643497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 177.322884][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 177.331598][ C0] lec:lec_tx_timeout: lec0 [ 177.342893][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 182.352858][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 182.360923][ C0] lec:lec_tx_timeout: lec0 [ 186.762853][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 192.283018][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 192.291281][ C0] lec:lec_tx_timeout: lec0 [ 192.302824][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 197.322897][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 197.330942][ C0] lec:lec_tx_timeout: lec0 [ 201.883159][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.322869][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5440 ms [ 207.331612][ C0] lec:lec_tx_timeout: lec0 [ 207.342819][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 212.352808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 212.361060][ C0] lec:lec_tx_timeout: lec0 [ 217.002888][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 222.282848][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 222.291252][ C0] lec:lec_tx_timeout: lec0 [ 222.302855][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 227.322867][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 227.331101][ C0] lec:lec_tx_timeout: lec0 [ 232.122921][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 237.322833][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 237.331487][ C0] lec:lec_tx_timeout: lec0 [ 237.337120][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 242.352802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 242.360982][ C0] lec:lec_tx_timeout: lec0 [ 247.242938][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 252.282809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 252.291239][ C0] lec:lec_tx_timeout: lec0 [ 253.652775][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 253.659893][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6425/1:b..l [ 253.668274][ C0] rcu: (detected by 0, t=10502 jiffies, g=16593, q=692 ncpus=2) [ 253.676178][ C0] task:syz.0.143 state:R running task stack:24160 pid:6425 tgid:6423 ppid:5825 task_flags:0x400040 flags:0x00080000 [ 253.690855][ C0] Call Trace: [ 253.694389][ C0] [ 253.697354][ C0] __schedule+0x14bc/0x5030 [ 253.702021][ C0] ? __pfx___schedule+0x10/0x10 [ 253.707000][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 253.712321][ C0] preempt_schedule_irq+0xb5/0x150 [ 253.717562][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 253.723471][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 253.730020][ C0] irqentry_exit+0x5d8/0x660 [ 253.734833][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 253.741045][ C0] RIP: 0010:lock_acquire+0x16c/0x350 [ 253.746371][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 54 ec d7 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 253.765988][ C0] RSP: 0018:ffffc9000bc56bf8 EFLAGS: 00000206 [ 253.772188][ C0] RAX: 4935cd04f8998c00 RBX: 0000000000000000 RCX: 4935cd04f8998c00 [ 253.780284][ C0] RDX: 0000000000000000 RSI: ffffffff8d977664 RDI: ffffffff8bbf7760 [ 253.788281][ C0] RBP: ffffffff81745035 R08: 0000000000000000 R09: ffffffff81745035 [ 253.796352][ C0] R10: ffffc9000bc56db8 R11: ffffffff81adcc30 R12: 0000000000000002 [ 253.804330][ C0] R13: ffffffff8df3d700 R14: 0000000000000000 R15: 0000000000000246 [ 253.812756][ C0] ? unwind_next_frame+0xa5/0x2390 [ 253.818514][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 253.824736][ C0] ? unwind_next_frame+0xa5/0x2390 [ 253.829936][ C0] ? unwind_next_frame+0xa5/0x2390 [ 253.835178][ C0] ? post_alloc_hook+0x234/0x290 [ 253.840147][ C0] ? unwind_next_frame+0xa5/0x2390 [ 253.845283][ C0] unwind_next_frame+0xc2/0x2390 [ 253.850253][ C0] ? unwind_next_frame+0xa5/0x2390 [ 253.855555][ C0] ? unwind_next_frame+0xa5/0x2390 [ 253.860682][ C0] ? __set_page_owner+0x8d/0x4c0 [ 253.865753][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 253.872026][ C0] arch_stack_walk+0x11c/0x150 [ 253.876827][ C0] ? post_alloc_hook+0x234/0x290 [ 253.881974][ C0] stack_trace_save+0x9c/0xe0 [ 253.886671][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 253.892148][ C0] save_stack+0xf5/0x1f0 [ 253.896411][ C0] ? __pfx_save_stack+0x10/0x10 [ 253.901448][ C0] ? post_alloc_hook+0x234/0x290 [ 253.906704][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 253.913156][ C0] __set_page_owner+0x8d/0x4c0 [ 253.918216][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 253.923708][ C0] post_alloc_hook+0x234/0x290 [ 253.928501][ C0] get_page_from_freelist+0x2365/0x2440 [ 253.934490][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 253.940600][ C0] ? prepare_alloc_pages+0x22b/0x650 [ 253.946017][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 253.951943][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 253.958475][ C0] ? policy_nodemask+0x27c/0x720 [ 253.963444][ C0] alloc_pages_mpol+0x232/0x4a0 [ 253.968341][ C0] folio_alloc_mpol_noprof+0x39/0x70 [ 253.973761][ C0] shmem_alloc_and_add_folio+0x423/0xf40 [ 253.979424][ C0] ? filemap_get_entry+0xad/0x2f0 [ 253.984489][ C0] ? filemap_get_entry+0xad/0x2f0 [ 253.989562][ C0] ? shmem_huge_global_enabled+0x293/0x320 [ 253.995376][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 254.001679][ C0] ? shmem_allowable_huge_orders+0x4c0/0x4e0 [ 254.007886][ C0] shmem_get_folio_gfp+0x59d/0x1660 [ 254.013553][ C0] shmem_fault+0x179/0x390 [ 254.018041][ C0] __do_fault+0x138/0x390 [ 254.022485][ C0] do_pte_missing+0x2209/0x3380 [ 254.027370][ C0] ? handle_mm_fault+0xdb/0x32c0 [ 254.032445][ C0] handle_mm_fault+0x1b48/0x32c0 [ 254.037439][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 254.042937][ C0] ? handle_mm_fault+0xdb/0x32c0 [ 254.048002][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 254.053380][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 254.058442][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 254.063953][ C0] __get_user_pages+0x1650/0x29f0 [ 254.069209][ C0] populate_vma_page_range+0x29f/0x3a0 [ 254.074826][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 254.080935][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 254.087236][ C0] ? down_read+0x1ad/0x2e0 [ 254.092231][ C0] __mm_populate+0x24c/0x380 [ 254.097305][ C0] ? __pfx___mm_populate+0x10/0x10 [ 254.103424][ C0] ? up_write+0x1a8/0x430 [ 254.107867][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 254.112490][ C0] ? __se_sys_futex+0x36f/0x400 [ 254.117457][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 254.122700][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 254.127622][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 254.132674][ C0] do_syscall_64+0xfa/0xfa0 [ 254.137237][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.143415][ C0] ? clear_bhb_loop+0x60/0xb0 [ 254.148115][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.154101][ C0] RIP: 0033:0x7fbe44d8f749 [ 254.158664][ C0] RSP: 002b:00007fbe45c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 254.167123][ C0] RAX: ffffffffffffffda RBX: 00007fbe44fe6090 RCX: 00007fbe44d8f749 [ 254.175297][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 254.183373][ C0] RBP: 00007fbe44e13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 254.191351][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 254.199689][ C0] R13: 00007fbe44fe6128 R14: 00007fbe44fe6090 R15: 00007fff7c15f878 [ 254.208312][ C0] [ 254.211589][ C0] rcu: rcu_preempt kthread starved for 10553 jiffies! g16593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 254.223252][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 254.233350][ C0] rcu: RCU grace-period kthread stack dump: [ 254.239263][ C0] task:rcu_preempt state:R running task stack:27064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 254.252777][ C0] Call Trace: [ 254.256088][ C0] [ 254.259040][ C0] __schedule+0x14bc/0x5030 [ 254.263578][ C0] ? __lock_acquire+0xab9/0xd20 [ 254.268444][ C0] ? __pfx___schedule+0x10/0x10 [ 254.273483][ C0] ? schedule+0x91/0x360 [ 254.277770][ C0] schedule+0x165/0x360 [ 254.281943][ C0] schedule_timeout+0x12b/0x270 [ 254.286805][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 254.292445][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 254.298357][ C0] ? __pfx_process_timeout+0x10/0x10 [ 254.303787][ C0] ? prepare_to_swait_event+0x341/0x380 [ 254.309355][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 254.314230][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.319437][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 254.325600][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 254.331029][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 254.336364][ C0] ? finish_swait+0xcd/0x1f0 [ 254.341081][ C0] rcu_gp_kthread+0x99/0x390 [ 254.345691][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 254.350918][ C0] ? __kthread_parkme+0x7b/0x200 [ 254.355872][ C0] ? __kthread_parkme+0x1a1/0x200 [ 254.360908][ C0] kthread+0x711/0x8a0 [ 254.364980][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 254.370191][ C0] ? __pfx_kthread+0x10/0x10 [ 254.374974][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.380193][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.385567][ C0] ? __pfx_kthread+0x10/0x10 [ 254.390374][ C0] ret_from_fork+0x599/0xb30 [ 254.395173][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 254.400319][ C0] ? __switch_to_asm+0x39/0x70 [ 254.405420][ C0] ? __switch_to_asm+0x33/0x70 [ 254.410416][ C0] ? __pfx_kthread+0x10/0x10 [ 254.415661][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.420473][ C0] [ 254.423497][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 254.429828][ C0] Sending NMI from CPU 0 to CPUs 1: [ 254.435073][ C1] NMI backtrace for cpu 1 [ 254.435102][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 254.435129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.435144][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 254.435168][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 40 0c 00 f3 0f 1e fa fb f4 c8 f2 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 254.435182][ C1] RSP: 0000:ffffc90000197de0 EFLAGS: 000002c6 [ 254.435198][ C1] RAX: 34a044250a91f100 RBX: ffffffff8197a977 RCX: 34a044250a91f100 [ 254.435211][ C1] RDX: 0000000000000001 RSI: ffffffff8d790e8f RDI: ffffffff8bbf7760 [ 254.435223][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 254.435236][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f7df370 [ 254.435248][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039dcb70 [ 254.435259][ C1] FS: 0000000000000000(0000) GS:ffff888125fb8000(0000) knlGS:0000000000000000 [ 254.435273][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.435284][ C1] CR2: 00007fe170d85e93 CR3: 0000000075d28000 CR4: 00000000003526f0 [ 254.435300][ C1] Call Trace: [ 254.435308][ C1] [ 254.435315][ C1] default_idle+0x13/0x20 [ 254.435335][ C1] default_idle_call+0x73/0xb0 [ 254.435358][ C1] do_idle+0x1e7/0x510 [ 254.435383][ C1] ? irqentry_exit+0x5ba/0x660 [ 254.435403][ C1] ? __pfx_do_idle+0x10/0x10 [ 254.435436][ C1] cpu_startup_entry+0x44/0x60 [ 254.435460][ C1] start_secondary+0x101/0x110 [ 254.435480][ C1] common_startup_64+0x13e/0x147 [ 254.435506][ C1]