last executing test programs: 11.66250415s ago: executing program 3 (id=265): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) 11.490996844s ago: executing program 3 (id=269): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0x10003) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r7, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) 10.160373777s ago: executing program 3 (id=271): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000002000000000000030000001827be11", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000009e000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.004932036s ago: executing program 1 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x9e8}, {0x3, 0x20, 0x0, 0x78}, {0x0, 0x5}, {0x9, 0xee, 0x80}]}) 7.893573664s ago: executing program 0 (id=280): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 6.603611556s ago: executing program 0 (id=282): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x12) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_eee={0x50, 0xc, 0x990c, 0x1, 0x8, 0x9, 0x80, 0x3, [0xfff, 0x7]}}) 6.469486539s ago: executing program 1 (id=283): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r1, 0x0, r0}, 0x10) 6.431131s ago: executing program 3 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.257509814s ago: executing program 0 (id=285): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x64, 0xfffffffffffffffd}, 0x10) 6.189426946s ago: executing program 3 (id=286): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000300), &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.04716361s ago: executing program 1 (id=287): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) listen(0xffffffffffffffff, 0x5) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r7, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x1}) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5.877517754s ago: executing program 3 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 5.585334481s ago: executing program 0 (id=289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0x10003) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r7, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) 4.947443367s ago: executing program 1 (id=290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.878380479s ago: executing program 1 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 3.780281956s ago: executing program 0 (id=292): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x50) 3.357437107s ago: executing program 1 (id=293): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c00fe08000e40000200875a65969ff57b00ff02"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 2.557266997s ago: executing program 0 (id=294): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(0x0, 0x12) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_eee={0x50, 0xc, 0x990c, 0x1, 0x8, 0x9, 0x80, 0x3, [0xfff, 0x7]}}) 2.0454181s ago: executing program 2 (id=296): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x6, &(0x7f00000009c0)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x6e}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) 1.972532671s ago: executing program 2 (id=297): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x500, 0x4) 1.791499016s ago: executing program 2 (id=298): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) listen(0xffffffffffffffff, 0x5) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r7, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0x1, 0x321, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x1}) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.480021213s ago: executing program 2 (id=299): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000300), &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r3}, 0x20) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.22849694s ago: executing program 2 (id=300): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0x10003) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r7, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) 0s ago: executing program 2 (id=301): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x64, 0xfffffffffffffffd}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 79.736071][ T5762] cgroup: Unknown subsys name 'net' [ 79.876021][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.544264][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.203012][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.218896][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.226506][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.235001][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.243950][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.251464][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.259870][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.267010][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.274852][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.282975][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.291070][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.307726][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.315809][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.321456][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.326797][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.338220][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.345961][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.353374][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.375170][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.382466][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.400624][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.409485][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.426249][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.434666][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.872305][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.976422][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.132619][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.140860][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.148320][ T5778] bridge_slave_0: entered allmulticast mode [ 84.155369][ T5778] bridge_slave_0: entered promiscuous mode [ 84.168691][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.199535][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.206780][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.214413][ T5778] bridge_slave_1: entered allmulticast mode [ 84.222070][ T5778] bridge_slave_1: entered promiscuous mode [ 84.229462][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.253571][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.260885][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.268153][ T5775] bridge_slave_0: entered allmulticast mode [ 84.275135][ T5775] bridge_slave_0: entered promiscuous mode [ 84.284580][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.291841][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.299123][ T5775] bridge_slave_1: entered allmulticast mode [ 84.306495][ T5775] bridge_slave_1: entered promiscuous mode [ 84.382699][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.428547][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.440666][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.485858][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.542681][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.552716][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.560737][ T5774] bridge_slave_0: entered allmulticast mode [ 84.567856][ T5774] bridge_slave_0: entered promiscuous mode [ 84.581979][ T5778] team0: Port device team_slave_0 added [ 84.599102][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.606275][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.613911][ T5776] bridge_slave_0: entered allmulticast mode [ 84.621389][ T5776] bridge_slave_0: entered promiscuous mode [ 84.639710][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.646863][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.656284][ T5774] bridge_slave_1: entered allmulticast mode [ 84.664209][ T5774] bridge_slave_1: entered promiscuous mode [ 84.683417][ T5778] team0: Port device team_slave_1 added [ 84.704396][ T5775] team0: Port device team_slave_0 added [ 84.711444][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.718789][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.725994][ T5776] bridge_slave_1: entered allmulticast mode [ 84.733327][ T5776] bridge_slave_1: entered promiscuous mode [ 84.773312][ T5775] team0: Port device team_slave_1 added [ 84.795398][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.806406][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.813782][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.840251][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.882497][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.894093][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.914155][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.924476][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.950889][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.962794][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.969979][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.996157][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.011030][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.042092][ T5774] team0: Port device team_slave_0 added [ 85.067910][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.074905][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.101199][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.124211][ T5774] team0: Port device team_slave_1 added [ 85.164124][ T5778] hsr_slave_0: entered promiscuous mode [ 85.170837][ T5778] hsr_slave_1: entered promiscuous mode [ 85.204694][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.211851][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.237902][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.264243][ T5776] team0: Port device team_slave_0 added [ 85.282936][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.292125][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.318477][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.344103][ T5776] team0: Port device team_slave_1 added [ 85.408112][ T5784] Bluetooth: hci3: command tx timeout [ 85.408131][ T5084] Bluetooth: hci2: command tx timeout [ 85.420756][ T5775] hsr_slave_0: entered promiscuous mode [ 85.427808][ T5775] hsr_slave_1: entered promiscuous mode [ 85.433942][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.441897][ T5775] Cannot create hsr debugfs directory [ 85.465340][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.472345][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.498461][ T5784] Bluetooth: hci0: command tx timeout [ 85.498699][ T5784] Bluetooth: hci1: command tx timeout [ 85.510498][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.549770][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.556762][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.583015][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.606378][ T5774] hsr_slave_0: entered promiscuous mode [ 85.613216][ T5774] hsr_slave_1: entered promiscuous mode [ 85.620862][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.629042][ T5774] Cannot create hsr debugfs directory [ 85.784885][ T5776] hsr_slave_0: entered promiscuous mode [ 85.791723][ T5776] hsr_slave_1: entered promiscuous mode [ 85.798279][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.805869][ T5776] Cannot create hsr debugfs directory [ 85.981668][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.021637][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.032942][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.050251][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.217935][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.232717][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.242964][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.258852][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.344757][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.366452][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.384986][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.395589][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.470474][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.482166][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.493820][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.505309][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.524700][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.555315][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.585707][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.593091][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.629466][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.636588][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.683425][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.746314][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.795816][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.802985][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.825328][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.832547][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.933543][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.996648][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.071344][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.095131][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.139192][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.146362][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.205763][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.213128][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.239415][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.246589][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.295858][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.303111][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.443520][ T5776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.474426][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.487654][ T5084] Bluetooth: hci3: command tx timeout [ 87.489904][ T5784] Bluetooth: hci2: command tx timeout [ 87.569175][ T5784] Bluetooth: hci1: command tx timeout [ 87.574801][ T5784] Bluetooth: hci0: command tx timeout [ 87.670105][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.809619][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.849252][ T5778] veth0_vlan: entered promiscuous mode [ 87.930299][ T5778] veth1_vlan: entered promiscuous mode [ 88.045526][ T5775] veth0_vlan: entered promiscuous mode [ 88.103635][ T5775] veth1_vlan: entered promiscuous mode [ 88.124851][ T5778] veth0_macvtap: entered promiscuous mode [ 88.181070][ T5778] veth1_macvtap: entered promiscuous mode [ 88.215258][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.247035][ T5775] veth0_macvtap: entered promiscuous mode [ 88.264513][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.277158][ T5775] veth1_macvtap: entered promiscuous mode [ 88.298015][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.308817][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.326130][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.340258][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.350604][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.360799][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.396822][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.411944][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.424060][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.441586][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.452255][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.464621][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.489641][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.500924][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.510117][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.520469][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.595358][ T5776] veth0_vlan: entered promiscuous mode [ 88.606356][ T5774] veth0_vlan: entered promiscuous mode [ 88.645831][ T5776] veth1_vlan: entered promiscuous mode [ 88.672230][ T5774] veth1_vlan: entered promiscuous mode [ 88.728232][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.741049][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.774792][ T5776] veth0_macvtap: entered promiscuous mode [ 88.811304][ T5776] veth1_macvtap: entered promiscuous mode [ 88.845186][ T4753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.853276][ T4753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.914318][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.938335][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.954609][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.965412][ T5774] veth0_macvtap: entered promiscuous mode [ 88.976841][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.989010][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.000357][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.012332][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.027941][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.044885][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.071144][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.086927][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.103255][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.114255][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.127806][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.139983][ T5774] veth1_macvtap: entered promiscuous mode [ 89.163315][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.184514][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.194641][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.205267][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.232900][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.249038][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.259913][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.270859][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.288069][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.302303][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.329879][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.406077][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.438597][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.455037][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.467148][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.489167][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.504559][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.516729][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.529719][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.539011][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.549800][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.559408][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.568995][ T5784] Bluetooth: hci3: command tx timeout [ 89.577871][ T5784] Bluetooth: hci2: command tx timeout [ 89.648654][ T5784] Bluetooth: hci0: command tx timeout [ 89.648654][ T5084] Bluetooth: hci1: command tx timeout [ 90.481909][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.490507][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.600794][ T5764] Process accounting resumed [ 90.792134][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.392094][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.444879][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.460386][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.662620][ T5084] Bluetooth: hci2: command tx timeout [ 91.662632][ T5784] Bluetooth: hci3: command tx timeout [ 91.718414][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.726385][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.736374][ T5784] Bluetooth: hci1: command tx timeout [ 91.743652][ T5084] Bluetooth: hci0: command tx timeout [ 92.008584][ T27] cfg80211: failed to load regulatory.db [ 93.033494][ T5844] Process accounting resumed [ 93.806221][ T5874] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 93.817238][ T5874] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 94.325181][ T5817] Process accounting resumed [ 96.170180][ T5895] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.647750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.777526][ T5900] syz.3.17[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.463397][ T5822] Process accounting resumed [ 100.509123][ T27] Process accounting resumed [ 102.321016][ T5928] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 104.239435][ T5937] Zero length message leads to an empty skb [ 104.351157][ T5937] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 104.951688][ T5822] Process accounting resumed [ 107.273805][ T5764] Process accounting resumed [ 108.088301][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 108.112405][ T5965] batadv0: entered promiscuous mode [ 111.285030][ T5822] Process accounting resumed [ 112.220930][ T5977] loop1: detected capacity change from 0 to 32768 [ 112.898525][ T5995] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 113.088509][ T9] Process accounting resumed [ 114.977443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 116.740697][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 116.847270][ T23] Process accounting resumed [ 118.066094][ T23] Process accounting resumed [ 120.097455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.843782][ T23] Process accounting resumed [ 124.108421][ T27] Process accounting resumed [ 127.537431][ T23] Process accounting resumed [ 128.771633][ T23] Process accounting resumed [ 131.844762][ T27] Process accounting resumed [ 132.654912][ T6130] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 132.946315][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960637][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.025667][ T5764] Process accounting resumed [ 134.625295][ T23] Process accounting resumed [ 135.047678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 135.777569][ T6165] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 136.896989][ T5817] Process accounting resumed [ 137.691697][ T6181] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 138.380851][ T5817] Process accounting resumed [ 139.326376][ T6198] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 139.934274][ T5822] Process accounting resumed [ 140.577379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.515843][ T6228] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 142.806417][ T9] Process accounting resumed [ 143.989294][ T27] Process accounting resumed [ 146.212435][ T6264] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 146.614543][ T5844] Process accounting resumed [ 148.175492][ T5844] Process accounting resumed [ 151.798410][ T27] Process accounting resumed [ 152.836677][ T6308] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 153.410497][ T174] Process accounting resumed [ 156.203844][ T5817] Process accounting resumed [ 156.738644][ T5817] Process accounting resumed [ 157.616233][ T6343] syzkaller0: entered promiscuous mode [ 157.626557][ T6343] syzkaller0: entered allmulticast mode [ 159.110311][ T23] Process accounting resumed [ 161.057388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 162.381812][ T5817] Process accounting resumed [ 163.290347][ T5822] Process accounting resumed [ 163.617391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 166.457222][ T5764] Process accounting resumed [ 168.328082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 168.878162][ T5844] Process accounting resumed [ 171.297606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 171.732222][ T27] Process accounting resumed [ 174.421876][ T27] Process accounting resumed [ 177.060298][ T174] Process accounting resumed [ 178.847487][ T27] Process accounting resumed [ 180.720815][ T6574] warning: `syz.3.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.940888][ T5844] Process accounting resumed [ 184.097408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 185.350518][ T5822] Process accounting resumed [ 188.737919][ T5844] Process accounting resumed [ 192.951545][ T174] Process accounting resumed [ 194.548917][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.555298][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.698216][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 206.699203][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 206.704630][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 206.717363][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 255.811305][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817824][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.252287][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.258785][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.047474][ T29] INFO: task jbd2/sda1-8:5101 blocked for more than 143 seconds. [ 346.055289][ T29] Not tainted syzkaller #0 [ 346.060430][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.069209][ T29] task:jbd2/sda1-8 state:D stack:24808 pid:5101 ppid:2 flags:0x00004000 [ 346.078533][ T29] Call Trace: [ 346.081859][ T29] [ 346.084846][ T29] __schedule+0x15ae/0x4660 [ 346.093149][ T29] ? asan.module_dtor+0x20/0x20 [ 346.101548][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 346.106676][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 346.112785][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 346.119221][ T29] schedule+0xbd/0x170 [ 346.123384][ T29] io_schedule+0x80/0xd0 [ 346.127721][ T29] bit_wait_io+0x11/0xd0 [ 346.132022][ T29] __wait_on_bit+0x9f/0x2c0 [ 346.136586][ T29] ? bit_wait+0xd0/0xd0 [ 346.140865][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 346.146392][ T29] ? bit_wait+0xd0/0xd0 [ 346.150982][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 346.155805][ T29] ? do_raw_write_lock+0x11e/0x260 [ 346.161074][ T29] ? bit_waitqueue+0x30/0x30 [ 346.165728][ T29] ? do_raw_read_unlock+0x3d/0x80 [ 346.170938][ T29] jbd2_journal_commit_transaction+0x2e8d/0x5ad0 [ 346.177914][ T29] ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0 [ 346.184760][ T29] ? lock_chain_count+0x20/0x20 [ 346.189877][ T29] ? _raw_spin_unlock+0x40/0x40 [ 346.194810][ T29] ? __try_to_del_timer_sync+0x1c2/0x280 [ 346.207508][ T29] ? __timer_delete_sync+0x23d/0x2e0 [ 346.212886][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 346.221890][ T29] ? timer_delete_sync+0x20/0x20 [ 346.226984][ T29] ? do_raw_read_unlock+0x80/0x80 [ 346.233369][ T29] ? prepare_to_wait+0x1aa/0x200 [ 346.239577][ T29] kjournald2+0x40f/0x810 [ 346.244014][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 346.249382][ T29] ? wake_bit_function+0x200/0x200 [ 346.254564][ T29] ? _raw_spin_unlock+0x40/0x40 [ 346.259770][ T29] ? __kthread_parkme+0x71/0x1c0 [ 346.264767][ T29] ? __kthread_parkme+0x15b/0x1c0 [ 346.269953][ T29] kthread+0x2fa/0x390 [ 346.274074][ T29] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 346.279389][ T29] ? kthread_blkcg+0xd0/0xd0 [ 346.284040][ T29] ret_from_fork+0x48/0x80 [ 346.288582][ T29] ? kthread_blkcg+0xd0/0xd0 [ 346.293228][ T29] ret_from_fork_asm+0x11/0x20 [ 346.298142][ T29] [ 346.302897][ T29] INFO: task syz-executor:5762 blocked for more than 143 seconds. [ 346.315246][ T29] Not tainted syzkaller #0 [ 346.322577][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.335364][ T29] task:syz-executor state:D stack:22888 pid:5762 ppid:5761 flags:0x00004002 [ 346.346773][ T29] Call Trace: [ 346.354391][ T29] [ 346.358564][ T29] __schedule+0x15ae/0x4660 [ 346.363194][ T29] ? mark_lock+0x94/0x320 [ 346.371145][ T29] ? asan.module_dtor+0x20/0x20 [ 346.376069][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 346.382337][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 346.388456][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 346.393715][ T29] schedule+0xbd/0x170 [ 346.404266][ T29] io_schedule+0x80/0xd0 [ 346.408653][ T29] bit_wait_io+0x11/0xd0 [ 346.412945][ T29] __wait_on_bit+0x9f/0x2c0 [ 346.422809][ T29] ? bit_wait+0xd0/0xd0 [ 346.427038][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 346.432675][ T29] ? bit_wait+0xd0/0xd0 [ 346.436881][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 346.452819][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 346.458116][ T29] ? bit_waitqueue+0x30/0x30 [ 346.462995][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 346.473492][ T29] do_get_write_access+0x5c9/0xe00 [ 346.479028][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 346.485072][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 346.495684][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 346.501999][ T29] ? __might_sleep+0xe0/0xe0 [ 346.513127][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 346.518843][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 346.524408][ T29] ext4_dirty_inode+0xcb/0x110 [ 346.535834][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 346.542152][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 346.549460][ T29] file_update_time+0x187/0x1a0 [ 346.554373][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 346.559624][ T29] ? do_wp_page+0x4ce/0x34d0 [ 346.565129][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 346.571567][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 346.576640][ T29] do_page_mkwrite+0x153/0x3f0 [ 346.581619][ T29] do_wp_page+0xd4d/0x34d0 [ 346.586100][ T29] ? folio_put+0xd0/0xd0 [ 346.590610][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 346.595682][ T29] ? __rwlock_init+0x150/0x150 [ 346.600544][ T29] handle_mm_fault+0x1306/0x4a50 [ 346.606915][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 346.612023][ T29] ? numa_migrate_prep+0x350/0x350 [ 346.617191][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 346.624915][ T29] do_user_addr_fault+0x736/0x12d0 [ 346.630164][ T29] exc_page_fault+0x64/0x100 [ 346.634800][ T29] ? clear_bhb_loop+0x40/0x90 [ 346.642860][ T29] asm_exc_page_fault+0x26/0x30 [ 346.647827][ T29] RIP: 0033:0x7f67c8270163 [ 346.652315][ T29] RSP: 002b:00007ffd19ef7660 EFLAGS: 00010206 [ 346.658646][ T29] RAX: 00007f67c4dfce2c RBX: 00007ffd19ef7790 RCX: 0000000000000000 [ 346.666672][ T29] RDX: 00007f67c4dfce28 RSI: 0000000000000008 RDI: 00007ffd19ef7790 [ 346.674790][ T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 346.682883][ T29] R10: 00007ffd19ef7770 R11: 0000000000000000 R12: 0000000000000000 [ 346.691282][ T29] R13: 00000000000031d4 R14: ffffffffffffce2c R15: 0000000000000000 [ 346.699806][ T29] [ 346.702916][ T29] INFO: task syz.2.301:6706 blocked for more than 144 seconds. [ 346.713401][ T29] Not tainted syzkaller #0 [ 346.718665][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.727674][ T29] task:syz.2.301 state:D stack:27560 pid:6706 ppid:5778 flags:0x00004004 [ 346.736933][ T29] Call Trace: [ 346.740349][ T29] [ 346.743319][ T29] __schedule+0x15ae/0x4660 [ 346.747996][ T29] ? asan.module_dtor+0x20/0x20 [ 346.752898][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 346.758048][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 346.763998][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 346.769520][ T29] schedule+0xbd/0x170 [ 346.773801][ T29] io_schedule+0x80/0xd0 [ 346.778134][ T29] bit_wait_io+0x11/0xd0 [ 346.782429][ T29] __wait_on_bit+0x9f/0x2c0 [ 346.786987][ T29] ? bit_wait+0xd0/0xd0 [ 346.791312][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 346.796825][ T29] ? bit_wait+0xd0/0xd0 [ 346.801055][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 346.805836][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 346.812126][ T29] ? bit_waitqueue+0x30/0x30 [ 346.816802][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 346.822185][ T29] do_get_write_access+0x5c9/0xe00 [ 346.827609][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 346.833650][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 346.839938][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 346.846161][ T29] ? __might_sleep+0xe0/0xe0 [ 346.851188][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 346.856806][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 346.862397][ T29] ext4_dirty_inode+0xcb/0x110 [ 346.867259][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 346.873243][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 346.878385][ T29] file_update_time+0x187/0x1a0 [ 346.883291][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 346.888453][ T29] ? filemap_fault+0x103c/0x1540 [ 346.893449][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 346.899262][ T29] ? pte_alloc_one+0x3b6/0x540 [ 346.904092][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 346.910500][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 346.916483][ T29] do_page_mkwrite+0x153/0x3f0 [ 346.921561][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 346.926551][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 346.932578][ T29] ? numa_migrate_prep+0x350/0x350 [ 346.937818][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 346.943166][ T29] do_user_addr_fault+0x736/0x12d0 [ 346.948497][ T29] exc_page_fault+0x64/0x100 [ 346.953226][ T29] ? clear_bhb_loop+0x40/0x90 [ 346.958006][ T29] asm_exc_page_fault+0x26/0x30 [ 346.962895][ T29] RIP: 0033:0x7f5f3406ba23 [ 346.967420][ T29] RSP: 002b:00007ffeda331f10 EFLAGS: 00010246 [ 346.973537][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d864000 [ 346.981591][ T29] RDX: 0000001b2d824000 RSI: 0000000000600000 RDI: 00007f5f343e0708 [ 346.989701][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.997856][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 347.005889][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeda3321a0 [ 347.014120][ T29] [ 347.018244][ T29] [ 347.018244][ T29] Showing all locks held in the system: [ 347.026064][ T29] 1 lock held by khungtaskd/29: [ 347.031212][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 347.041188][ T29] 6 locks held by kworker/u4:8/3470: [ 347.046490][ T29] #0: ffff88814325d138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 347.057961][ T29] #1: ffffc9000cb57d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 347.070615][ T29] #2: ffff88814e7700e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 347.081307][ T29] #3: ffff88814e772c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 347.091950][ T29] #4: ffff88814e774990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 347.101799][ T29] #5: ffff8880781d9688 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 347.111712][ T29] 2 locks held by getty/5531: [ 347.116429][ T29] #0: ffff88802d37b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 347.129600][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 347.140072][ T29] 3 locks held by syz-executor/5762: [ 347.145391][ T29] #0: ffff88802e3160a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 347.155483][ T29] #1: ffff88814e770510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 347.165392][ T29] #2: ffff88814e774990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 347.175198][ T29] 3 locks held by syz.2.301/6706: [ 347.180330][ T29] #0: ffff88807be28b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 347.190385][ T29] #1: ffff88814e770510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 347.200258][ T29] #2: ffff88814e774990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 347.210039][ T29] [ 347.212400][ T29] ============================================= [ 347.212400][ T29] [ 347.221812][ T29] NMI backtrace for cpu 0 [ 347.226197][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 347.233433][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.243517][ T29] Call Trace: [ 347.246823][ T29] [ 347.249776][ T29] dump_stack_lvl+0x18c/0x250 [ 347.254485][ T29] ? __wake_up_klogd+0xd9/0x100 [ 347.259369][ T29] ? show_regs_print_info+0x20/0x20 [ 347.264591][ T29] ? load_image+0x420/0x420 [ 347.269135][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 347.274102][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 347.280287][ T29] ? load_image+0x420/0x420 [ 347.284823][ T29] ? wq_watchdog_touch+0xef/0x170 [ 347.289877][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 347.295990][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 347.301993][ T29] watchdog+0xf59/0xfa0 [ 347.306190][ T29] ? watchdog+0x1e1/0xfa0 [ 347.310588][ T29] kthread+0x2fa/0x390 [ 347.314699][ T29] ? hungtask_pm_notify+0x50/0x50 [ 347.319781][ T29] ? kthread_blkcg+0xd0/0xd0 [ 347.324395][ T29] ret_from_fork+0x48/0x80 [ 347.328861][ T29] ? kthread_blkcg+0xd0/0xd0 [ 347.333482][ T29] ret_from_fork_asm+0x11/0x20 [ 347.338291][ T29] [ 347.342550][ T29] Sending NMI from CPU 0 to CPUs 1: [ 347.348087][ C1] NMI backtrace for cpu 1 [ 347.348097][ C1] CPU: 1 PID: 1085 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 347.348113][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.348122][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 347.348144][ C1] RIP: 0010:preempt_count_sub+0x3f/0x160 [ 347.348170][ C1] Code: 2f 97 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 bd 00 00 00 83 3d 72 5a d2 15 00 75 25 65 8b 05 31 ce a6 7e 89 c1 81 e1 ff ff ff 7f <39> cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 [ 347.348184][ C1] RSP: 0018:ffffc9000472f910 EFLAGS: 00000202 [ 347.348196][ C1] RAX: 0000000080000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 347.348212][ C1] RDX: 0000000000000000 RSI: ffff8881400009c0 RDI: 0000000000000001 [ 347.348222][ C1] RBP: 00000000ffffffff R08: ffff888023aeb10f R09: 1ffff1100475d621 [ 347.348233][ C1] R10: dffffc0000000000 R11: ffffed100475d622 R12: ffff88813fffc340 [ 347.348244][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 347.348253][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 347.348266][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.348276][ C1] CR2: 000055b2720f8168 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 347.348290][ C1] Call Trace: [ 347.348295][ C1] [ 347.348301][ C1] ___slab_alloc+0xc3b/0x12f0 [ 347.348319][ C1] ? __alloc_skb+0x138/0x2c0 [ 347.348339][ C1] __kmem_cache_alloc_node+0x11f/0x250 [ 347.348363][ C1] ? __alloc_skb+0x138/0x2c0 [ 347.348380][ C1] ? __alloc_skb+0x138/0x2c0 [ 347.348394][ C1] __kmalloc_node_track_caller+0xa4/0x230 [ 347.348419][ C1] ? rcu_is_watching+0x15/0xb0 [ 347.348441][ C1] ? __alloc_skb+0x138/0x2c0 [ 347.348456][ C1] kmalloc_reserve+0x116/0x240 [ 347.348474][ C1] __alloc_skb+0x138/0x2c0 [ 347.348492][ C1] nsim_dev_trap_report_work+0x253/0xa90 [ 347.348515][ C1] ? process_scheduled_works+0x975/0x1600 [ 347.348537][ C1] process_scheduled_works+0xa60/0x1600 [ 347.348571][ C1] ? worker_attach_to_pool+0x370/0x370 [ 347.348595][ C1] ? assign_work+0x3cc/0x5d0 [ 347.348617][ C1] worker_thread+0xa5e/0xfe0 [ 347.348650][ C1] kthread+0x2fa/0x390 [ 347.348665][ C1] ? pr_cont_work+0x550/0x550 [ 347.348684][ C1] ? kthread_blkcg+0xd0/0xd0 [ 347.348700][ C1] ret_from_fork+0x48/0x80 [ 347.348719][ C1] ? kthread_blkcg+0xd0/0xd0 [ 347.348736][ C1] ret_from_fork_asm+0x11/0x20 [ 347.348765][ C1] [ 347.355011][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 347.601077][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 347.608272][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.618325][ T29] Call Trace: [ 347.621605][ T29] [ 347.624653][ T29] dump_stack_lvl+0x18c/0x250 [ 347.629361][ T29] ? show_regs_print_info+0x20/0x20 [ 347.634591][ T29] ? load_image+0x420/0x420 [ 347.639185][ T29] panic+0x2ca/0x720 [ 347.643099][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 347.647617][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 347.653172][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 347.658554][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 347.664807][ T29] watchdog+0xf98/0xfa0 [ 347.668976][ T29] ? watchdog+0x1e1/0xfa0 [ 347.673338][ T29] kthread+0x2fa/0x390 [ 347.677424][ T29] ? hungtask_pm_notify+0x50/0x50 [ 347.682476][ T29] ? kthread_blkcg+0xd0/0xd0 [ 347.687075][ T29] ret_from_fork+0x48/0x80 [ 347.691500][ T29] ? kthread_blkcg+0xd0/0xd0 [ 347.696094][ T29] ret_from_fork_asm+0x11/0x20 [ 347.700878][ T29] [ 347.704073][ T29] Kernel Offset: disabled [ 347.708415][ T29] Rebooting in 86400 seconds..