last executing test programs: 32.078346193s ago: executing program 1 (id=25): socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) unshare(0xc000080) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000002c0)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x0, 0x182, 0x4e}, 0x2c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xf942d3a5c2b8544b) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181) fcntl$setlease(r3, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='stack :'], 0xb1) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x4941, 0x400, 0x0, 0x1d6, 0x0, r5}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x50, 0x4004, @fd, 0x0, 0x0}) io_uring_enter(r7, 0x5951, 0x7a89, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 31.060080093s ago: executing program 1 (id=30): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) 30.432008464s ago: executing program 1 (id=33): syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x840) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xe74c}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) 30.03379749s ago: executing program 1 (id=34): socket$kcm(0x10, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'wrr\x00', 0x37}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2008c0d4, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) 6.211902693s ago: executing program 4 (id=112): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000480)={0x1}, 0x4, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x8008af26, &(0x7f0000001040)=0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r6 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x30, r6, 0x3000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000a40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x0, 0x1}}) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1eb77e2a3c00801403e9860d786ded54c3e8a356561493cb1cc668e65ab243bc5e91bb07150707494da76f3f3685dcd547b1e08f99c75c9a49190b38743b27ed5d54d7b5965137b2c8160b9ccf27469b4904e82278afbc15c5fc89984842dae8f3a37aa323b2042f87b3a1838a02353a0706382c4160551d657cc1", @ANYRES16=r8, @ANYBLOB="00082bbd7000fddbdf2501000000640108804400078008000500826cc146080006003500000008000600a2000000080006002900000008000600400000000800060055000000080006000e00000008000600930000002c000780080006004800000008000600410000000800060065000000080005007086be710800050014a95e41240007800800050014ac970b08000500a9d0ba6708000600de000000080005003b0d3a4f54000780080005003b0afe5808000600e800000008000600cf000000080006001a000000080006003100000008000600fb000000080006003500000008000500b5a4a10408000600620000000800050006ccf8493400078008000500d9775d7b080005004f826f32080005008b0f741e0800060037000000080006000800000008000600aa0000000c00078008000600110000000c000780080006009a0000002c000780080005003f8fc201080005005b5de02408000500c0fed15b0800050016ece92408000500c1442e3208000100030000001c000480050003000500000005000300060000000500030000000000c4000c8034000b80080009007b8c2f76080009002246901d08000a0002da000008000a00534e00000800090001b7d45a08000a00a0c600000c000b8008000900edf2a8092c000b80080009003064773c080009002349c42008000a0000f0000008000900b024756a08000900916c255954000b8008000a004f9e000008000900c7893f3708000a005c28000008000a006821000008000900dcad084008000a00ac1b0000080009000315930408000900a4315458080009000748b87a080009005427ef0e30010c800c000b8008000a009b9d00003c000b8008000a0075dc0000080009007ff3ef4d08000a0064cf0000080009006c72c54508000a008905000008000a006baf000008000900da67252324000b8008000a006114000008000a001bbc000008000900b7dcf40e0800090068cc775924000b800800090057adb62108000a004538000008000a00fc34000008000a00796e00000c000b80080009001a3ab33344000b800800090062ee477a08000a00e928000008000a00632f0000080009003d581b0708000a00a387000008000a003508000008000a00e87d000008000900afa109260c000b8008000a0051a700002c000b8008000a0053ae000008000a00b8c3000008000a00ca0c000008000a008b54000008000a00e91a000014000b800800090032e50146080009005ac6176a680008801400078008000500a7a04b65080006003a00000014000780080006007700000008000500cde1ef5c3c0007800800060084000000080006007700000008000500fd5bac0b080006000100000008000600bd00000008000600db0000000800060001000000"], 0x3f8}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SYNC(r9, 0x5006, 0x0) 5.499611633s ago: executing program 3 (id=113): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) tee(r0, r1, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r4, r3, 0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.294722619s ago: executing program 1 (id=64): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r8, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @multicast1}}}], 0x20}}, {{&(0x7f0000001340)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {&(0x7f0000001740)="eb2240c3f748fae38da58c5b037c0d5565ce497cad5496cecdc521a77b02b9feb2030b177de311c7fc5c9c678c0e3ecd03852ef93c7a64a9164eebb12ecb7c3aff950e7d6f322b2cc9a19602b0197476ab2ffccda32ba6a213881ea39528ad4aa2cf42e84129f46ef535841915452aa8c76bd1c1f0d53c4a412eb59c08893c19e87dc9c84bcc496d5bc1d4439da7e4946b9511c55c29a028a827fc48c277a44442d3aacd72950fd1a90876265e2d9f60a36298a5433336364e3c588499503ec2bb6ffde3ae9bf5cb716fd63f883ddcdb52d902d7a4df0ddca94254e98206ceee3056db9d1fd187ae95e14c692649e70f2ac5fb362b1ba66a60a5f810ffa75a74a33661fe5cad65e02706a8aeb924a6e4899a90cf59430de9d84e6d23a2c04880c6ed3c57a4856ca51f921d67fa2f51b7643883f4d3f7c305334f3c8650703d8bd1b59e30c312d7cfe647766f41577dd0a16de431087bc8ca0555b80645a92066ba93889090f6f651c4a6bb1e8751ba4fdfded62c3ad3d10b7b9349650256025d04ab7f52c9de2439c09405466b4df67f6b17226434520ea8c84740ebbde0251c5e03ab8cab3e032ee33a39ec6514d314e4ff6755fcba6f3e14aecb2877ec662dfa05028d302f0e22159802b7bfda3d40e5bbabdbde40353b9a4438c84ec2663cd9163218b3f477e56ac1e2e16e98f8e81bbe8b0fef409e80686b4ef20b78c48d65c31f512e4acc22b5e09f9befc1d74c6ae70d08c8d4453a936b15e92169137128b8f4c0adbd9b1b2321bb0a4aab9339a5620103ed3c6d506d495c1cb75723c596a7fa2817da8baffc493460b9b0b891ff689123c16d4a6aec5d96d779435668f2e230db79025f567092b0bc8353fe8634040f35e427c5c316e64d3721404f6c53ebf554104c9bcd6718fad673402306e332a5bbcd2d883b87ab453312e888f515799591975f7fd74a5e4af0053156d04b5ad04eb752e117b701dece15135f75e327e8a87ff029647398c7e06ea1952d99cbc6f3636d795050cb350a40fbf425bdae83f7a727ae91fd6e88d5703256d1d1eadb8e42541c1f0d660aa45912dc3bbcc68bfea5ff124788df92ad1fabd867effe68628465811a5f0d6538ec2d8493bb67cbbba4bea0b7aa6aaa9e26fd45664a2b90999fbb99455d780a3e111999c38f800021d575eb0332b9b382659e674e8a91de2543bd44eb55f55a330713245cc86067edd0274d7271950b4ffb1f28e00383b2891e87ec38a4ddb6537cccd3c473715bb4ba51cce556344d476773f7b3a5d6dfc84bd451ce1ca49f4a46b0ccf5bb816368cda4fc6e82fe1b868a8fb82a62f9ab9d0d5f2a852c02658f9a25981163d3ea6145aea3a5bd73206520cf623e53ba54237c50fba5f7bdfec93770ff99d9181e90d188a639e45612a058377a603ddf13b849b5d076d83e5a45b6964fb4d57d7687cc4682ff5a465270b82c27c13b231b88b8143d26f55408099a86d9d36df28b9992938897b361c42413296d6a4f6742a9fbd9f93afbe333f8608d391e7c7c43438d17a103063f5a79d60901b5821b90f06174f6536f81abbffa2a2ccc12a9e20d7010e0faccf49049f5df608f43d5692fc21661e1dd867e2db80f915198f7436047baa2105960e800fe0f057827757549f028a2392eb250049f8b388d5b9ffff7a2d7844e17510559fbff42cb5d4ca424d5180fe9cb18d594cae1f8ab0d93d425a06cb69b18ddbee9e298accd157309cf880b72ba8b0baa42a66f3cb62a490e646f181d63bdf293710a5a77e3cc7ed3ecbe5ac32ee52a892488e12d8fd9d271aa18c98d1ad5222f5f770d669a0fa5cc2edaad5d39013815688318a10be823cc9a78e178b1bfbc3576ab2fb4729f33e5ef060ce3d862e86c051f074f2b18d25ee9d1aa6af6a984b9a42bb65f0b08580b8597a936ae6a10e3b38bb344be7b0e1935ef73bb7f33012ecb6ad3921ccb7b0c6673f12b4007312c7c777a731cf60e900ded63cd0c4b8825a52bfd75db7c2990e31be0ffff88649efa1998d394f828974abfdc2cd4f3e134b6a206d9c31f3ac442b4e7c2d94371850d6c205b0b2bc43a754b228a807ed768d1b4f2c1fb2ebf1df3ac8ca45a78ce303bb5b55d203e7127c32155f0c8eed85311b59e23e18d09115a38c0e63a075d3dd921d74f32642fe6a190bbc8462d00b014b4410b9088856f7e0a424eba1d3ab1c9850f1eca6efa0611dc7d531bac219e3537e657f5c53c4648eb7487706ebd866ce7abc88d8abdc4b777ad45c82f7589c43d9a678c0a2c8ba89fa220433403c96f3a7a6a34887ee0d8cb1aa891f4bd819cdfb3747fe19696d2492c9ab1d33b0ac95243a6ff0e56149ffafb88dea2cc5640a6e4e5c28339b88ce7e79ec9f07f808533641bf258c06c1efabce4063fe2dd74031b4d56b08818f9beb6309b559fa02ee1cfd3ec6d0147355395e28eced4bb7becccaf9fe094f4fd8cad036707fd0420e045435af2711f64ae4f9cfebb61ce2f4bba2e8595b3bb18ecc38e1f7b3fdcf29ded2c7e818c01b431bc0efe8c0cb639d964a2ad7e0954bbb9a0a4935f03947bf6acec19235daa10eac0dd6697db24946231dc333e77c98f1d4e38de26576345a4749c813ed4a1b56009d74563022f91c65e8e940c5eaa82113adb2af2b99912a56b29415e7cd6a3722dbcf5666362417ca11579d955adba862953aaca092504b480be5da3ad310fb4c2de5a6e08b2b6f807b64533f3461babddd4ebc70ed27647f50ffd95e223893652dd474daa23ac3c9270244a644603c7316a4e172295692748d9c964c9be076c7a35639d846b0b0173eb9e677a68bb267ed5e9c0fa5132f660e8a6ae71a2e2605aba4fef2ca22f1e5621c08383543b44ae4f25625a5be8c81f4f26ad2dfe7af419978201b0f57ff976b14bb946cfb59cf496527012192359356fce72b97fa0de4320236ac7d4496db7a71a", 0x830}, {&(0x7f0000002740)}], 0x4}}, {{&(0x7f0000002940)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002b40)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}], 0x3, 0x0) 5.155875406s ago: executing program 0 (id=115): syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x15, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 4.98597512s ago: executing program 0 (id=116): io_setup(0x6, &(0x7f00000000c0)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x1a1081, 0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 4.686073177s ago: executing program 2 (id=117): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffc}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x455, &(0x7f0000000880)="$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") sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4.414381134s ago: executing program 3 (id=118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="139b17548d63dc86e81bf0540ce8dde8648f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r0, @ANYRES8=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x9aa9, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r10, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/82, 0x52}], 0x1}, 0x76f}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2df0, 0x4000, 0x0, 0x0, 0x0) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000180)={0x8000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ppoll(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000440)="128e12ba3bf7", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)="4b9d12e8a695", 0x6}], 0x1}}], 0x2, 0x40080) socket$inet_sctp(0x2, 0x5, 0x84) 4.19472281s ago: executing program 1 (id=119): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x48}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) socket$netlink(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, @void}, 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x121680, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x10000, 0xffff, 0x6, 0x1ff, 0x8]}, &(0x7f0000000240)=0x54) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x344, 0x20a, 0x278, 0x344, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x188, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x9, 0x381, 'syz0\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xec, 0x154, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0xdac5, 0x800, 0x4, 0x9, 0xc34d, 0x5f, 0xff, 0x2, 0x582, 0xa1, 0xc73, 0x9, 0x9, 0x8, 0x1, 0xfe9], 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x1, 0x2, 'syz1\x00', 'syz1\x00', {0x1000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000180)=0x84f05) 3.444013903s ago: executing program 2 (id=120): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3.40512363s ago: executing program 0 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="3800fffffffffffffff70000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0xfffffffb}}) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xc92) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000003c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x678, 0x3dc, 0x4a4, 0x134, 0x134, 0x244, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000400), {[{{@uncond, 0x0, 0x110, 0x134, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x0, 0x1, [0x80, 0x6, 0x68c4, 0x0, 0x0, 0x6, 0x8, 0x2, 0x3, 0x3, 0xe, 0x52, 0xd, 0xf00, 0x2, 0x3], 0x7}}, @inet=@rpfilter={{0x24}, {0x4}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [0x0, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'vxcan1\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x33, 0x9, 0x4}, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x6}}, @common=@icmp6={{0x24}, {0x12, 'y!'}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x154, 0x198, 0x0, {}, [@common=@srh1={{0x8c}, {0x6c, 0x2, 0x0, 0x5, 0x8, @mcast2, @private1, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 0x120}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2b}, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1c, 0x29, 0x9}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0xff000000, 0xff000000, 0xff], [0xff000000, 0xff, 0xffffffff, 0xffffff00], 'pimreg0\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x2c, 0x5, 0x2}, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x24}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], 'pimreg\x00', 'ip6_vti0\x00', {0xff}, {}, 0x11, 0x6, 0x1}, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@private=0xa010102, 0x1c, 0x1b, 0x1cf9}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6d4) sched_getaffinity(0x0, 0x8, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x3}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x40, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x0, 0x0) 3.366725745s ago: executing program 4 (id=122): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)}], 0x1) preadv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000005c0)=""/234, 0xea}], 0x2, 0x0, 0x0) 2.619065473s ago: executing program 4 (id=123): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x8000, 0x53c76351, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) 2.616332434s ago: executing program 3 (id=124): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$lock(r2, 0x26, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x8008662c, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 2.486134724s ago: executing program 0 (id=125): ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x9d3c, 0x93, 0x1, 0x3, 0xd59f7d, 0x7, 0x7, 0x19ef, 0x3, 0x7, 0x2800, 0x6, 0x2, 0xbb6, 0x8, 0x18, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2.367890013s ago: executing program 2 (id=126): syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, 0x0, 0x0, 0x15, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 2.243924291s ago: executing program 3 (id=127): mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000051b0e9f7c1e1329667f5c712e754f9e44c3cd2218780b4c640618104e19ec39e7354da1fa70150e2b239da03f47bfc4eadbd5621cec007736b652f6a3424b1be87fd965e50281f3cb21334e3a711902be599d05f44526030d05901e801c169a5ff6dc874ae39889c290b24a6d675805873"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000001c0), &(0x7f0000000200)=""/158}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 2.243607096s ago: executing program 2 (id=128): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) tee(r0, r1, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000dfff0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r4, r3, 0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.243446069s ago: executing program 0 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x144, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xe8, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x144}}, 0x0) 2.000479895s ago: executing program 4 (id=130): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffc}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x455, &(0x7f0000000880)="$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") sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.846480281s ago: executing program 0 (id=131): io_setup(0x6, &(0x7f00000000c0)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x1a1081, 0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 1.236678442s ago: executing program 3 (id=132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000eaff0000000000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) r4 = userfaultfd(0x80001) r5 = socket(0x25, 0x1, 0x0) recvfrom$packet(r5, 0x0, 0x0, 0x1f, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0x0, 0x5, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) fcntl$dupfd(r7, 0x0, r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) 1.086294673s ago: executing program 2 (id=133): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x7, 0x974, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001440), 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f00000003c0)="1543f73bc21df20164f49041314836660f5c31104cc998320dab2dfeddf7d95deddf1e7136aba077283970cd7b1949c2751837bdc887727824a1922586ef42a480cbd581ce10f59bb8f3f04d43c9d71f05709859e99a00505392eb134b0ca320", &(0x7f0000000440)=""/204}, 0x20) semop(0x0, &(0x7f0000000000)=[{0x0, 0xff0b}], 0x1) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x401, 0x1800}, {0x0, 0x3, 0x1800}], 0x2, &(0x7f0000000180)={0x0, 0x989680}) semctl$IPC_RMID(0x0, 0x0, 0x10) 788.036329ms ago: executing program 4 (id=134): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)}], 0x1) preadv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000005c0)=""/234, 0xea}], 0x2, 0x0, 0x0) 202.822546ms ago: executing program 2 (id=135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023050000340200001c00000008000100", @ANYRES32, @ANYBLOB="080004"], 0x2c}}, 0x0) 94.888957ms ago: executing program 4 (id=136): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 3 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x68, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) geteuid() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 50.323769][ T5222] cgroup: Unknown subsys name 'net' [ 50.477523][ T5222] cgroup: Unknown subsys name 'cpuset' [ 50.485495][ T5222] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.771837][ T5222] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.992628][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.013096][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.019626][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.023185][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.028302][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.042678][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.051589][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.059569][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.065281][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.074518][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.074757][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.088016][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.096274][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.104402][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.113303][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.120703][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.120783][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.129808][ T5253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.139285][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.144590][ T5253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.151125][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.157346][ T5253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.164135][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.171990][ T5253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.186079][ T5253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.191459][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.193615][ T5253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.214509][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.227344][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.236835][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.587460][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 54.739112][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 54.770703][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 54.798459][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 54.842169][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 54.862584][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.871270][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.881157][ T5241] bridge_slave_0: entered allmulticast mode [ 54.888535][ T5241] bridge_slave_0: entered promiscuous mode [ 54.898143][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.905614][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.912797][ T5241] bridge_slave_1: entered allmulticast mode [ 54.919669][ T5241] bridge_slave_1: entered promiscuous mode [ 55.029780][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.042400][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.069363][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.076639][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.083836][ T5244] bridge_slave_0: entered allmulticast mode [ 55.090474][ T5244] bridge_slave_0: entered promiscuous mode [ 55.099153][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.106434][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.113702][ T5244] bridge_slave_1: entered allmulticast mode [ 55.121008][ T5244] bridge_slave_1: entered promiscuous mode [ 55.134798][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.141922][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.149287][ T5234] bridge_slave_0: entered allmulticast mode [ 55.157020][ T5234] bridge_slave_0: entered promiscuous mode [ 55.198311][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.205672][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.212862][ T5234] bridge_slave_1: entered allmulticast mode [ 55.220110][ T5234] bridge_slave_1: entered promiscuous mode [ 55.242367][ T5241] team0: Port device team_slave_0 added [ 55.278975][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.289546][ T5241] team0: Port device team_slave_1 added [ 55.303972][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.311083][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.318823][ T5238] bridge_slave_0: entered allmulticast mode [ 55.326023][ T5238] bridge_slave_0: entered promiscuous mode [ 55.343702][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.356078][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.372205][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.379742][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.406066][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.419496][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.427073][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.434471][ T5238] bridge_slave_1: entered allmulticast mode [ 55.441047][ T5238] bridge_slave_1: entered promiscuous mode [ 55.448233][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.455484][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.462672][ T5232] bridge_slave_0: entered allmulticast mode [ 55.470193][ T5232] bridge_slave_0: entered promiscuous mode [ 55.478922][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.505542][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.512544][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.538830][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.568592][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.575893][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.583054][ T5232] bridge_slave_1: entered allmulticast mode [ 55.590627][ T5232] bridge_slave_1: entered promiscuous mode [ 55.605352][ T5234] team0: Port device team_slave_0 added [ 55.621407][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.633717][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.668379][ T5244] team0: Port device team_slave_0 added [ 55.677517][ T5234] team0: Port device team_slave_1 added [ 55.685170][ T5244] team0: Port device team_slave_1 added [ 55.714352][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.746879][ T5238] team0: Port device team_slave_0 added [ 55.753287][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.760725][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.787076][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.807646][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.841646][ T5238] team0: Port device team_slave_1 added [ 55.848198][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.858422][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.885271][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.903531][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.910764][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.937098][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.949704][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.956991][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.983339][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.997581][ T5241] hsr_slave_0: entered promiscuous mode [ 56.004455][ T5241] hsr_slave_1: entered promiscuous mode [ 56.024773][ T5232] team0: Port device team_slave_0 added [ 56.052551][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.059713][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.086055][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.110214][ T5232] team0: Port device team_slave_1 added [ 56.141303][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.149030][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.175370][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.202573][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.209777][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.236008][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.249500][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.257382][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.257405][ T5250] Bluetooth: hci1: command tx timeout [ 56.290122][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.290191][ T5245] Bluetooth: hci3: command tx timeout [ 56.301088][ T5239] Bluetooth: hci0: command tx timeout [ 56.307140][ T5250] Bluetooth: hci2: command tx timeout [ 56.331799][ T5244] hsr_slave_0: entered promiscuous mode [ 56.334815][ T5250] Bluetooth: hci4: command tx timeout [ 56.343263][ T5244] hsr_slave_1: entered promiscuous mode [ 56.349844][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.358103][ T5244] Cannot create hsr debugfs directory [ 56.376304][ T5234] hsr_slave_0: entered promiscuous mode [ 56.382675][ T5234] hsr_slave_1: entered promiscuous mode [ 56.389090][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.396831][ T5234] Cannot create hsr debugfs directory [ 56.432808][ T5238] hsr_slave_0: entered promiscuous mode [ 56.439047][ T5238] hsr_slave_1: entered promiscuous mode [ 56.445811][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.453397][ T5238] Cannot create hsr debugfs directory [ 56.502258][ T5232] hsr_slave_0: entered promiscuous mode [ 56.508756][ T5232] hsr_slave_1: entered promiscuous mode [ 56.515271][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.522841][ T5232] Cannot create hsr debugfs directory [ 56.819738][ T5241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.832070][ T5241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.841754][ T5241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.865795][ T5241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.927464][ T5232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.936608][ T5232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.959096][ T5232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.969539][ T5232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.053654][ T5244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.063719][ T5244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.087700][ T5244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.096920][ T5244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.118490][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.139217][ T5238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.155083][ T5238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.176976][ T5238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.189518][ T5238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.222981][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.254853][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.262165][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.287209][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.294353][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.344339][ T5234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.359212][ T5234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.396373][ T5234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.432573][ T5234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.443192][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.483816][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.499580][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.548989][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.569555][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.583578][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.599166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.606324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.636333][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.643468][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.676989][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.684181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.698986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.706106][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.744332][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.765578][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.772677][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.781672][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.788821][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.815470][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.912517][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.989302][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.012341][ T5241] veth0_vlan: entered promiscuous mode [ 58.071053][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.088413][ T5241] veth1_vlan: entered promiscuous mode [ 58.149963][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.166435][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.218530][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.225746][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.251231][ T5241] veth0_macvtap: entered promiscuous mode [ 58.291141][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.298324][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.316324][ T5241] veth1_macvtap: entered promiscuous mode [ 58.335301][ T5250] Bluetooth: hci2: command tx timeout [ 58.335417][ T5245] Bluetooth: hci3: command tx timeout [ 58.340736][ T5239] Bluetooth: hci1: command tx timeout [ 58.346285][ T53] Bluetooth: hci0: command tx timeout [ 58.385049][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.399154][ T5238] veth0_vlan: entered promiscuous mode [ 58.414640][ T53] Bluetooth: hci4: command tx timeout [ 58.425147][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.442139][ T5238] veth1_vlan: entered promiscuous mode [ 58.453496][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.467566][ T5241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.476643][ T5241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.486149][ T5241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.496297][ T5241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.515736][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.651860][ T5238] veth0_macvtap: entered promiscuous mode [ 58.715653][ T5238] veth1_macvtap: entered promiscuous mode [ 58.740330][ T5232] veth0_vlan: entered promiscuous mode [ 58.809741][ T5232] veth1_vlan: entered promiscuous mode [ 58.831892][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.844732][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.869468][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.882358][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.901828][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.932371][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.944359][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.955995][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.982048][ T5238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.991412][ T5238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.000581][ T5238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.009468][ T5238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.022597][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.026883][ T5244] veth0_vlan: entered promiscuous mode [ 59.036983][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.071122][ T5244] veth1_vlan: entered promiscuous mode [ 59.083725][ T5232] veth0_macvtap: entered promiscuous mode [ 59.116494][ T5232] veth1_macvtap: entered promiscuous mode [ 59.116936][ T5241] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.181830][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.251890][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.319794][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.330382][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.349583][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.362258][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.384379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.419919][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.440872][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.447202][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.458696][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.471253][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.483111][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.503702][ T5244] veth0_macvtap: entered promiscuous mode [ 59.551182][ T5244] veth1_macvtap: entered promiscuous mode [ 59.566564][ T5232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.577129][ T5232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.588373][ T5232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.597720][ T5232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.617142][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.648435][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.651300][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.673596][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.689574][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.701784][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.712279][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.729744][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.752209][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.796242][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.812031][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.828203][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.840011][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.851154][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.862416][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.892013][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.965192][ T5244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.981262][ T5244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.999349][ T5244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.009581][ T5244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.036303][ T5234] veth0_vlan: entered promiscuous mode [ 60.122680][ T5234] veth1_vlan: entered promiscuous mode [ 60.173822][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.194020][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.232820][ T5234] veth0_macvtap: entered promiscuous mode [ 60.299126][ T5234] veth1_macvtap: entered promiscuous mode [ 60.323988][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.331848][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.364191][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.373985][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.415197][ T53] Bluetooth: hci3: command tx timeout [ 60.420036][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.420672][ T53] Bluetooth: hci1: command tx timeout [ 60.436697][ T5250] Bluetooth: hci0: command tx timeout [ 60.436754][ T5245] Bluetooth: hci2: command tx timeout [ 60.483949][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.499096][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.509883][ T5245] Bluetooth: hci4: command tx timeout [ 60.534031][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.547502][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.558070][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.575105][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.590504][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.611572][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.674599][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.686953][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.695002][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.723967][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.733828][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.774277][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.786767][ T5327] binder: 5326:5327 ioctl c0306201 20000080 returned -14 [ 60.793917][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.793940][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.793951][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.793964][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.795744][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.859359][ T5327] binder_alloc: 5326: binder_alloc_buf, no vma [ 60.878739][ T5234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.887957][ T5234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.899855][ T5234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.924039][ T5234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.204743][ T5336] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 61.217413][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.260128][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.360190][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.384193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.455266][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.054279][ T5317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.183647][ T5360] netlink: 248 bytes leftover after parsing attributes in process `syz.2.14'. [ 62.239446][ T5317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.261958][ T5317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.340675][ T5317] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 62.423964][ T5317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.475102][ T5317] usb 4-1: config 0 descriptor?? [ 62.494534][ T5245] Bluetooth: hci2: command tx timeout [ 62.496281][ T5239] Bluetooth: hci1: command tx timeout [ 62.499974][ T5245] Bluetooth: hci0: command tx timeout [ 62.505372][ T53] Bluetooth: hci3: command tx timeout [ 62.552435][ T5367] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.574540][ T5245] Bluetooth: hci4: command tx timeout [ 62.785653][ T5361] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 62.819854][ T5361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 62.895456][ T5317] hid (null): bogus close delimiter [ 62.954046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.984283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.045252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.053582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.101055][ T5317] usb 4-1: language id specifier not provided by device, defaulting to English [ 63.243976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.294454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.322871][ T5347] loop3: detected capacity change from 0 to 512 [ 63.354164][ T5347] ======================================================= [ 63.354164][ T5347] WARNING: The mand mount option has been deprecated and [ 63.354164][ T5347] and is ignored by this kernel. Remove the mand [ 63.354164][ T5347] option from the mount to silence this warning. [ 63.354164][ T5347] ======================================================= [ 63.401949][ T5347] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 63.434234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 63.443415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 63.799214][ T5377] syz.3.11[5377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.799576][ T5377] syz.3.11[5377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.811309][ T5377] syz.3.11[5377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.904661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.638556][ T5317] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 65.670151][ T5317] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 65.842814][ T5317] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 65.863026][ T5317] usb 4-1: USB disconnect, device number 2 [ 66.895216][ T5399] process 'syz.2.23' launched './file0' with NULL argv: empty string added [ 67.240300][ T5317] IPVS: starting estimator thread 0... [ 67.305835][ T5410] tipc: Started in network mode [ 67.312701][ T5410] tipc: Node identity ac1414aa, cluster identity 4711 [ 67.368154][ T5410] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 67.384277][ T5407] IPVS: using max 32 ests per chain, 76800 per kthread [ 67.397788][ T5410] tipc: Enabled bearer , priority 10 [ 67.494815][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 67.633996][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 67.774480][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 67.917273][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 68.054401][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 68.193978][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 68.334809][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 68.362733][ T5425] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.475363][ T5356] tipc: Node number set to 2886997162 [ 68.614045][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 68.883960][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 69.333980][ T5285] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.413971][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 69.456180][ T5438] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 69.474249][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 69.506909][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.523800][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 69.545500][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.646259][ T5285] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.705844][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.770844][ T29] audit: type=1326 audit(1729157623.117:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 69.776474][ T5447] block nbd0: NBD_DISCONNECT [ 69.841249][ T5285] usb 5-1: config 0 descriptor?? [ 70.009057][ T29] audit: type=1326 audit(1729157623.117:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 70.054339][ T5447] netlink: 'syz.0.38': attribute type 4 has an invalid length. [ 70.062230][ T29] audit: type=1326 audit(1729157623.137:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 70.093618][ T29] audit: type=1326 audit(1729157623.137:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 70.125037][ T29] audit: type=1326 audit(1729157623.157:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 70.160406][ T29] audit: type=1326 audit(1729157623.157:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 70.200153][ T5445] block nbd0: Disconnected due to user request. [ 70.212816][ T5445] block nbd0: shutting down sockets [ 70.239577][ T29] audit: type=1326 audit(1729157623.157:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 70.309542][ T29] audit: type=1326 audit(1729157623.157:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 70.343458][ T29] audit: type=1326 audit(1729157623.157:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 71.093490][ T5285] hid (null): bogus close delimiter [ 71.620956][ T29] audit: type=1326 audit(1729157623.157:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa66497dff9 code=0x7ffc0000 [ 71.622432][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.653165][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.109577][ T5285] usb 5-1: language id specifier not provided by device, defaulting to English [ 72.190410][ T5462] loop3: detected capacity change from 0 to 1768 [ 72.427769][ T5434] loop4: detected capacity change from 0 to 512 [ 72.457147][ T5434] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 72.863267][ T5473] syz.4.32[5473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.864138][ T5473] syz.4.32[5473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.876428][ T5473] syz.4.32[5473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.613955][ C0] net_ratelimit: 3 callbacks suppressed [ 73.613977][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 74.224282][ T5285] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 74.234606][ T5285] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 74.242180][ T5285] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 74.294416][ T5285] usb 5-1: USB disconnect, device number 2 [ 74.423515][ T5480] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.653959][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 75.694059][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 76.204532][ T5503] loop3: detected capacity change from 0 to 1768 [ 76.436143][ T5508] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.744696][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 76.851299][ T937] cfg80211: failed to load regulatory.db [ 77.783945][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 77.806332][ T5521] loop2: detected capacity change from 0 to 512 [ 78.214043][ T5522] netlink: 108 bytes leftover after parsing attributes in process `syz.3.60'. [ 78.267827][ T5522] netlink: 108 bytes leftover after parsing attributes in process `syz.3.60'. [ 78.372259][ T5521] ext4: Bad value for 'barrier' [ 78.391317][ T5522] netlink: 84 bytes leftover after parsing attributes in process `syz.3.60'. [ 78.823940][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 79.177486][ T5512] loop0: detected capacity change from 0 to 40427 [ 79.191105][ T5532] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.782830][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.793563][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.804244][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.813010][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.821003][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.828560][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.853954][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 80.300865][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 80.300882][ T29] audit: type=1326 audit(1729157633.657:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5543 comm="syz.2.67" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde2157dff9 code=0x0 [ 80.480989][ T5392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.601669][ T5392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.756300][ T5392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.904885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 80.982601][ T5392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.349984][ T5536] chnl_net:caif_netlink_parms(): no params data found [ 81.629999][ T5566] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.804782][ T5392] bridge_slave_1: left allmulticast mode [ 81.811184][ T5392] bridge_slave_1: left promiscuous mode [ 81.817749][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.889047][ T5239] Bluetooth: hci5: command tx timeout [ 81.913837][ T5392] bridge_slave_0: left allmulticast mode [ 81.934134][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 81.944976][ T5392] bridge_slave_0: left promiscuous mode [ 81.972517][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.974014][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 83.887631][ T5392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.931475][ T5392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.934182][ T5239] Bluetooth: hci5: command tx timeout [ 83.953758][ T5392] bond0 (unregistering): Released all slaves [ 84.014019][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 84.027111][ T5605] netlink: 2 bytes leftover after parsing attributes in process `syz.4.79'. [ 84.057330][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.122318][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.134084][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.145170][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.155149][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.166067][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.176621][ T5605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.187243][ T5605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.203331][ T5605] batadv_slave_1: entered promiscuous mode [ 84.272247][ T5392] tipc: Disabling bearer [ 84.296692][ T5392] tipc: Left network mode [ 84.296828][ T5536] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.364091][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.371822][ T5536] bridge_slave_0: entered allmulticast mode [ 84.405485][ T5536] bridge_slave_0: entered promiscuous mode [ 84.420881][ T5536] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.455237][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 84.465179][ T5536] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.473313][ T5536] bridge_slave_1: entered allmulticast mode [ 84.515136][ T5536] bridge_slave_1: entered promiscuous mode [ 84.810965][ T5536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.863787][ T5627] loop4: detected capacity change from 0 to 512 [ 84.901774][ T5536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.982262][ T5627] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 85.105262][ T5630] input: syz0 as /devices/virtual/input/input5 [ 85.311963][ T5536] team0: Port device team_slave_0 added [ 85.345230][ T5536] team0: Port device team_slave_1 added [ 85.726341][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.739515][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.829616][ T5536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.844866][ T5647] libceph: resolve '. [ 85.844866][ T5647] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 85.844866][ T5647] ' (ret=-3): failed [ 85.848223][ T5650] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.950286][ T5392] hsr_slave_0: left promiscuous mode [ 85.952277][ T5392] hsr_slave_1: left promiscuous mode [ 85.959534][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.959613][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.005800][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.005832][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.014076][ T5239] Bluetooth: hci5: command tx timeout [ 86.072891][ T5613] loop0: detected capacity change from 0 to 40427 [ 86.107053][ T5633] dccp_close: ABORT with 32 bytes unread [ 86.116791][ T5392] veth1_macvtap: left promiscuous mode [ 86.304593][ T5392] veth0_macvtap: left promiscuous mode [ 86.310307][ T5392] veth1_vlan: left promiscuous mode [ 86.365018][ T5392] veth0_vlan: left promiscuous mode [ 86.400921][ T5655] fuse: Bad value for 'fd' [ 86.855757][ T5239] Bluetooth: hci0: hardware error 0x00 [ 87.714428][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 88.056541][ T5392] team0 (unregistering): Port device team_slave_1 removed [ 88.095311][ T5245] Bluetooth: hci5: command tx timeout [ 88.115251][ T5392] team0 (unregistering): Port device team_slave_0 removed [ 88.597281][ T5674] loop0: detected capacity change from 0 to 512 [ 88.624629][ T5674] EXT4-fs (loop0): bad geometry: first data block 1 is beyond end of filesystem (0) [ 88.880327][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.888982][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.921938][ T5536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.975779][ T5239] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 89.036280][ T5659] infiniband syz1: set active [ 89.041311][ T5659] infiniband syz1: added veth1_vlan [ 89.048273][ T5659] syz1: rxe_create_cq: returned err = -12 [ 89.055375][ T5659] infiniband syz1: Couldn't create ib_mad CQ [ 89.061564][ T5659] infiniband syz1: Couldn't open port 1 [ 89.240854][ T5536] hsr_slave_0: entered promiscuous mode [ 89.250680][ T5536] hsr_slave_1: entered promiscuous mode [ 89.313739][ T5659] RDS/IB: syz1: added [ 89.322859][ T5659] smc: adding ib device syz1 with port count 1 [ 89.370162][ T5659] smc: ib device syz1 port 1 has pnetid [ 89.767622][ T5392] IPVS: stop unused estimator thread 0... [ 90.152421][ T5698] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.686729][ T5536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.743695][ T5536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.804986][ T5536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.882503][ T5536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.059075][ T5536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.072965][ T5536] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.113918][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.121107][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.180028][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.187223][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.779102][ T5536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.822281][ T5536] veth0_vlan: entered promiscuous mode [ 91.835494][ T5536] veth1_vlan: entered promiscuous mode [ 91.861302][ T5536] veth0_macvtap: entered promiscuous mode [ 91.870626][ T5536] veth1_macvtap: entered promiscuous mode [ 91.886010][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.896577][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.906479][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.917036][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.927002][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.937828][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.948410][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.959845][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.971113][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.980787][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.991337][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.001244][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.012080][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.022018][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.032537][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.042447][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.053595][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.066902][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.077100][ T5536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.085997][ T5536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.096146][ T5536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.105624][ T5536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.183019][ T5726] loop2: detected capacity change from 0 to 512 [ 92.222073][ T5726] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 92.679346][ T5729] loop2: detected capacity change from 0 to 40427 [ 92.695645][ T5729] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 92.704449][ T5729] F2FS-fs (loop2): Image doesn't support compression [ 92.711247][ T5729] F2FS-fs (loop2): Image doesn't support compression [ 92.741053][ T5729] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 92.805935][ T5729] F2FS-fs (loop2): invalid crc value [ 92.903775][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.988692][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.009915][ T5729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.596370][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.634062][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.739590][ T5729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.894012][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.139483][ T5763] overlayfs: missing 'lowerdir' [ 94.246756][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 94.265884][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.309560][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.331270][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.342491][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.434633][ T46] usb 5-1: Product: syz [ 94.443958][ T46] usb 5-1: Manufacturer: syz [ 94.448613][ T46] usb 5-1: SerialNumber: syz [ 94.471256][ T5232] syz-executor: attempt to access beyond end of device [ 94.471256][ T5232] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.530635][ T5232] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 94.805020][ T46] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.961789][ T8] usb 5-1: USB disconnect, device number 3 [ 94.990213][ T8] usblp0: removed [ 95.316544][ T5801] loop2: detected capacity change from 0 to 512 [ 95.576567][ T5801] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 97.993089][ T5849] loop4: detected capacity change from 0 to 512 [ 98.023678][ T5849] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 99.199537][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 109.793739][ T5222] ================================================================== [ 109.801854][ T5222] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0xfa/0x540 [ 109.809426][ T5222] Read of size 8 at addr ffff88807e1f8d18 by task syz-executor/5222 [ 109.817431][ T5222] [ 109.819789][ T5222] CPU: 0 UID: 0 PID: 5222 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 109.830242][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.840325][ T5222] Call Trace: [ 109.843637][ T5222] [ 109.846578][ T5222] dump_stack_lvl+0x241/0x360 [ 109.851287][ T5222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.856509][ T5222] ? __pfx__printk+0x10/0x10 [ 109.861127][ T5222] ? _printk+0xd5/0x120 [ 109.865312][ T5222] ? __virt_addr_valid+0x183/0x530 [ 109.870446][ T5222] ? __virt_addr_valid+0x183/0x530 [ 109.875570][ T5222] print_report+0x169/0x550 [ 109.880172][ T5222] ? __virt_addr_valid+0x183/0x530 [ 109.885300][ T5222] ? __virt_addr_valid+0x183/0x530 [ 109.890437][ T5222] ? __virt_addr_valid+0x45f/0x530 [ 109.895573][ T5222] ? __phys_addr+0xba/0x170 [ 109.900101][ T5222] ? bpf_trace_run2+0xfa/0x540 [ 109.904892][ T5222] kasan_report+0x143/0x180 [ 109.909421][ T5222] ? bpf_trace_run2+0xfa/0x540 [ 109.914217][ T5222] bpf_trace_run2+0xfa/0x540 [ 109.918837][ T5222] ? arch_do_signal_or_restart+0x51f/0x860 [ 109.927198][ T5222] ? __pfx_lock_release+0x10/0x10 [ 109.932775][ T5222] ? __pfx_bpf_trace_run2+0x10/0x10 [ 109.938012][ T5222] ? __might_fault+0xc6/0x120 [ 109.942732][ T5222] ? trace_sys_enter+0x9d/0x150 [ 109.947611][ T5222] __bpf_trace_sys_enter+0x38/0x60 [ 109.952765][ T5222] trace_sys_enter+0xd9/0x150 [ 109.957562][ T5222] syscall_trace_enter+0xf8/0x150 [ 109.962614][ T5222] do_syscall_64+0xcc/0x230 [ 109.967148][ T5222] ? clear_bhb_loop+0x35/0x90 [ 109.971846][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.977776][ T5222] RIP: 0033:0x7f509e119959 [ 109.982211][ T5222] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 110.001851][ T5222] RSP: 002b:00007ffd38855880 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 110.010284][ T5222] RAX: ffffffffffffffda RBX: 00007ffd38855f30 RCX: 00007f509e119959 [ 110.018341][ T5222] RDX: 00007ffd38855880 RSI: 00007ffd388559b0 RDI: 0000000000000011 [ 110.026304][ T5222] RBP: 0000000000000000 R08: 000000002843af58 R09: 7fffffffffffffff [ 110.034285][ T5222] R10: 00007f509efa50b8 R11: 0000000000000246 R12: 00007ffd38856230 [ 110.042244][ T5222] R13: 0000000000000004 R14: 00007ffd38855e3c R15: 00007ffd38855ed0 [ 110.050230][ T5222] [ 110.053234][ T5222] [ 110.055544][ T5222] Allocated by task 5881: [ 110.059868][ T5222] kasan_save_track+0x3f/0x80 [ 110.064556][ T5222] __kasan_kmalloc+0x98/0xb0 [ 110.069146][ T5222] __kmalloc_cache_noprof+0x243/0x390 [ 110.074530][ T5222] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 110.079913][ T5222] bpf_raw_tracepoint_open+0x177/0x1f0 [ 110.085379][ T5222] __sys_bpf+0x3c0/0x810 [ 110.089609][ T5222] __x64_sys_bpf+0x7c/0x90 [ 110.094016][ T5222] do_syscall_64+0xf3/0x230 [ 110.098514][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.104391][ T5222] [ 110.106699][ T5222] Freed by task 5234: [ 110.110656][ T5222] kasan_save_track+0x3f/0x80 [ 110.115316][ T5222] kasan_save_free_info+0x40/0x50 [ 110.120324][ T5222] __kasan_slab_free+0x59/0x70 [ 110.125074][ T5222] kfree+0x1a0/0x460 [ 110.128957][ T5222] rcu_core+0xaaa/0x17a0 [ 110.133178][ T5222] handle_softirqs+0x2c5/0x980 [ 110.137942][ T5222] __irq_exit_rcu+0xf4/0x1c0 [ 110.142517][ T5222] irq_exit_rcu+0x9/0x30 [ 110.146744][ T5222] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 110.152362][ T5222] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.158341][ T5222] [ 110.160652][ T5222] Last potentially related work creation: [ 110.166345][ T5222] kasan_save_stack+0x3f/0x60 [ 110.171019][ T5222] __kasan_record_aux_stack+0xac/0xc0 [ 110.176439][ T5222] call_rcu+0x167/0xa70 [ 110.180580][ T5222] bpf_link_release+0x78/0x90 [ 110.185246][ T5222] __fput+0x23c/0xa50 [ 110.189213][ T5222] task_work_run+0x24f/0x310 [ 110.193783][ T5222] get_signal+0x15e8/0x1740 [ 110.198268][ T5222] arch_do_signal_or_restart+0x96/0x860 [ 110.203798][ T5222] syscall_exit_to_user_mode+0xc9/0x370 [ 110.209354][ T5222] do_syscall_64+0x100/0x230 [ 110.213935][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.219814][ T5222] [ 110.222121][ T5222] The buggy address belongs to the object at ffff88807e1f8d00 [ 110.222121][ T5222] which belongs to the cache kmalloc-128 of size 128 [ 110.236156][ T5222] The buggy address is located 24 bytes inside of [ 110.236156][ T5222] freed 128-byte region [ffff88807e1f8d00, ffff88807e1f8d80) [ 110.249847][ T5222] [ 110.252177][ T5222] The buggy address belongs to the physical page: [ 110.258585][ T5222] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e1f8 [ 110.267339][ T5222] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 110.274796][ T5222] page_type: f5(slab) [ 110.278792][ T5222] raw: 00fff00000000000 ffff88801ac41a00 ffffea0000b4e5c0 dead000000000003 [ 110.287359][ T5222] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 110.295929][ T5222] page dumped because: kasan: bad access detected [ 110.302342][ T5222] page_owner tracks the page as allocated [ 110.308042][ T5222] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5241, tgid 5241 (syz-executor), ts 67150102164, free_ts 67049597440 [ 110.327581][ T5222] post_alloc_hook+0x1f3/0x230 [ 110.332346][ T5222] get_page_from_freelist+0x3123/0x3270 [ 110.337909][ T5222] __alloc_pages_noprof+0x292/0x710 [ 110.344058][ T5222] alloc_slab_page+0x59/0x120 [ 110.348719][ T5222] allocate_slab+0x5a/0x2f0 [ 110.353202][ T5222] ___slab_alloc+0xcd1/0x14b0 [ 110.357886][ T5222] __slab_alloc+0x58/0xa0 [ 110.362198][ T5222] __kmalloc_node_noprof+0x2ee/0x4d0 [ 110.367482][ T5222] alloc_slab_obj_exts+0x3a/0xa0 [ 110.372403][ T5222] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 110.378566][ T5222] kmem_cache_alloc_noprof+0x287/0x380 [ 110.384029][ T5222] vm_area_dup+0x27/0x290 [ 110.388358][ T5222] copy_mm+0xc94/0x1f80 [ 110.392500][ T5222] copy_process+0x1845/0x3d50 [ 110.397163][ T5222] kernel_clone+0x226/0x8f0 [ 110.401667][ T5222] __x64_sys_clone+0x258/0x2a0 [ 110.406446][ T5222] page last free pid 5388 tgid 5380 stack trace: [ 110.412753][ T5222] free_unref_page+0xcfb/0xf20 [ 110.417511][ T5222] tlb_finish_mmu+0x11f/0x200 [ 110.422173][ T5222] exit_mmap+0x496/0xc40 [ 110.426402][ T5222] __mmput+0x115/0x390 [ 110.430482][ T5222] exit_mm+0x220/0x310 [ 110.434532][ T5222] do_exit+0x9b2/0x28e0 [ 110.438686][ T5222] do_group_exit+0x207/0x2c0 [ 110.443276][ T5222] get_signal+0x16a3/0x1740 [ 110.447905][ T5222] arch_do_signal_or_restart+0x96/0x860 [ 110.453452][ T5222] syscall_exit_to_user_mode+0xc9/0x370 [ 110.458993][ T5222] do_syscall_64+0x100/0x230 [ 110.463568][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.469471][ T5222] [ 110.471779][ T5222] Memory state around the buggy address: [ 110.477401][ T5222] ffff88807e1f8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.485469][ T5222] ffff88807e1f8c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.493516][ T5222] >ffff88807e1f8d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.501560][ T5222] ^ [ 110.506465][ T5222] ffff88807e1f8d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.514515][ T5222] ffff88807e1f8e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 110.522564][ T5222] ================================================================== [ 110.531916][ T5222] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.539142][ T5222] CPU: 0 UID: 0 PID: 5222 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 110.549469][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.559558][ T5222] Call Trace: [ 110.562831][ T5222] [ 110.565758][ T5222] dump_stack_lvl+0x241/0x360 [ 110.570467][ T5222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.575663][ T5222] ? __pfx__printk+0x10/0x10 [ 110.580273][ T5222] ? vscnprintf+0x5d/0x90 [ 110.584625][ T5222] panic+0x349/0x880 [ 110.588531][ T5222] ? check_panic_on_warn+0x21/0xb0 [ 110.593649][ T5222] ? __pfx_panic+0x10/0x10 [ 110.598063][ T5222] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 110.603957][ T5222] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 110.609864][ T5222] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.616201][ T5222] ? print_report+0x502/0x550 [ 110.620889][ T5222] check_panic_on_warn+0x86/0xb0 [ 110.625824][ T5222] ? bpf_trace_run2+0xfa/0x540 [ 110.630598][ T5222] end_report+0x77/0x160 [ 110.634842][ T5222] kasan_report+0x154/0x180 [ 110.639340][ T5222] ? bpf_trace_run2+0xfa/0x540 [ 110.644106][ T5222] bpf_trace_run2+0xfa/0x540 [ 110.648690][ T5222] ? arch_do_signal_or_restart+0x51f/0x860 [ 110.654928][ T5222] ? __pfx_lock_release+0x10/0x10 [ 110.659947][ T5222] ? __pfx_bpf_trace_run2+0x10/0x10 [ 110.665148][ T5222] ? __might_fault+0xc6/0x120 [ 110.669841][ T5222] ? trace_sys_enter+0x9d/0x150 [ 110.674715][ T5222] __bpf_trace_sys_enter+0x38/0x60 [ 110.679835][ T5222] trace_sys_enter+0xd9/0x150 [ 110.684530][ T5222] syscall_trace_enter+0xf8/0x150 [ 110.689565][ T5222] do_syscall_64+0xcc/0x230 [ 110.694064][ T5222] ? clear_bhb_loop+0x35/0x90 [ 110.698736][ T5222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.704624][ T5222] RIP: 0033:0x7f509e119959 [ 110.709029][ T5222] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 110.728632][ T5222] RSP: 002b:00007ffd38855880 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 110.737065][ T5222] RAX: ffffffffffffffda RBX: 00007ffd38855f30 RCX: 00007f509e119959 [ 110.745043][ T5222] RDX: 00007ffd38855880 RSI: 00007ffd388559b0 RDI: 0000000000000011 [ 110.753019][ T5222] RBP: 0000000000000000 R08: 000000002843af58 R09: 7fffffffffffffff [ 110.760987][ T5222] R10: 00007f509efa50b8 R11: 0000000000000246 R12: 00007ffd38856230 [ 110.769042][ T5222] R13: 0000000000000004 R14: 00007ffd38855e3c R15: 00007ffd38855ed0 [ 110.777034][ T5222] [ 110.780198][ T5222] Kernel Offset: disabled [ 110.784522][ T5222] Rebooting in 86400 seconds..