last executing test programs: 6m36.542675017s ago: executing program 32 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a31000000000c000280080001000a"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff"], 0x528}}, 0xc000) 6m35.565582214s ago: executing program 33 (id=239): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) 6m33.991126868s ago: executing program 34 (id=246): r0 = inotify_init1(0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000100)={0x4, 0x3, {0x9, @struct={0x5, 0xc}, 0x0, 0x7, 0x1000, 0x0, 0x3, 0x1000, 0xb, @struct={0x101, 0x1}, 0x8, 0x3, [0x7a2, 0x6, 0x7fffffffffffffff, 0x2, 0x7, 0x7]}, {0x6, @usage=0x40, 0x0, 0x6, 0x1, 0x7, 0x200000000000, 0x1f, 0xc9, @struct={0x8, 0x6}, 0x3, 0xa, [0x0, 0x3, 0x1, 0x25b6347b, 0x3, 0x162]}, {0x7, @usage=0x483, 0x0, 0x10000, 0x6, 0x8000000000000000, 0x3, 0x5, 0x80, @usage=0xff, 0xfffffff7, 0x9, [0x4, 0x19, 0x1, 0x8, 0x6]}, {0x7, 0x80000001, 0x5d1dae4c}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={r1, 0x7, 0x400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fchdir(r0) (async, rerun: 32) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x7fffff, 0x1000000000000, 0x2}, &(0x7f00000000c0)={0x98, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0) 6m32.957359s ago: executing program 35 (id=254): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x0, 0x7, 0x4, 0x800, 0x6, {}, {0x7, 0x8, 0x7, 0x1, 0x3d, 0x3, "0ef83291"}, 0x6, 0x4, {0x0}}) (fail_nth: 2) 6m28.180991201s ago: executing program 36 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x3, 0xfe, 0x0, 0x22, 0x6, 0xfe, 0x40, 0x1, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0xc0, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r3, 0x0, 0x41, 0x7ffffe, 0x0, 0x4) r4 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x80}, 0x0, 0x7}}) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x0, 0xa1ffffff}, {0xfbfffffa}]}}) 6m17.477839505s ago: executing program 37 (id=269): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x9800}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d6, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x2, 0xca}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) process_mrelease(r1, 0x0) 6m14.516552579s ago: executing program 38 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x70bd2b, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0xa, 0xff1}}, 0x20, 0x0, @device_b, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c0}, 0x1000) 6m14.494145863s ago: executing program 39 (id=279): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xd7b, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) io_setup(0x202, &(0x7f0000000200)=0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80046601, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r0, 0x0}]) 6m1.059662824s ago: executing program 40 (id=311): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r1, &(0x7f0000000140)=[@l={0x92, 0x7, 0xe0, 0x1f, 0x7, 0x80, 0x800}, @l={0x92, 0x0, 0xd0, 0xe, 0x4, 0x81, 0x7}], 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = syz_io_uring_setup(0x407a, &(0x7f00000003c0)={0x0, 0x9c18, 0x0, 0xffffffff, 0x2}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x9, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x40, 0x20) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r13, 0x0, 0x1) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=ANY=[@ANYRESOCT=r7, @ANYRES32=r12, @ANYBLOB="0b000080976b6408686030000c00018008000000", @ANYRES32=r12, @ANYBLOB], 0x30}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) 5m55.71677921s ago: executing program 41 (id=331): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = eventfd(0x401) io_setup(0x4004, &(0x7f0000000400)=0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000140)={0x5, "9fec0de6d604be4aa815706022d0e2a87d57432599688f86f74ef788a8ecfe7c", 0x2, 0xfffffffa, 0x8000, 0xe0, 0x2}) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x7f, r4, &(0x7f0000000480)="9c64a2fb2a9ce06f6c89c65c96fc3ed3", 0x10, 0x7}]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3a3d0d9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_getaddr={0x60, 0x16, 0x20, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x597d9e1f953f5b94, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x124}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x14, 0x2, @private1}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x60}}, 0x0) 5m50.179443405s ago: executing program 42 (id=346): r0 = memfd_secret(0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0xfae89000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff0000}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1d85) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/icmp\x00') pread64(r2, &(0x7f0000000000)=""/117, 0x75, 0x9) pread64(r2, &(0x7f0000000700)=""/199, 0xc7, 0xe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='oom_score_adj\x00') readv(r3, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/149, 0x95}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000180)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3a9}, 0x0, 0x0) 5m25.992260369s ago: executing program 43 (id=444): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e3ddef20501da1603fa1010203010902120001000000000904000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x1, 0xc9f, 0x7, 0x7ff, 0xfffd, 0xffff, 0xfffc, 0x81, 0x9, 0x8, 0xdb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syslog(0x2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="2001000000d65085b8bfdec1a58600"], 0x0, 0x0}) rseq(&(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x208f3d63}}, 0x20, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m22.152936927s ago: executing program 44 (id=462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @multicast2, 0x5d9, "04d8fdfb55d1a8ef"}]}}}}}}}}, 0x0) (fail_nth: 2) 5m19.61372038s ago: executing program 45 (id=473): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@local, 0x308b}) memfd_secret(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$kcm(0xa, 0x1, 0x106) write$sequencer(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x42901, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f00000000c0)) 5m11.219098774s ago: executing program 46 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m8.105306565s ago: executing program 47 (id=506): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001400)=[{0x0, 0xdd12}, {0x0, 0x708}], 0x2}, 0x0) 4m58.433074071s ago: executing program 48 (id=531): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4e20, 0xd, @loopback={0x7ffffffb}, 0x2}, 0x1c, 0x0}, 0x20008000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xa6ef}]}) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r2, 0x0, 0x0) syz_usb_connect(0x5, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x79, 0xc9, 0xfa, 0x10, 0x15c2, 0x39, 0xec67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa7, 0x0, 0x0, 0x5f, 0xab, 0x99, 0x0, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4, 0x9, "b5a339fe5cb786"}]}, @generic={0x4f, 0x24, "a54b1676c9779aa347171803edd5c5a370fb25dc51a2cdf0841478b45859c67d4d7b8ae923b69c8edd0fa920285b9adc1631bb76e026b5f3c2fd6972fbddf1ade1525d0b9507712468b384029a"}]}}]}}]}}, 0x0) 4m51.465277067s ago: executing program 49 (id=556): r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) mbind(&(0x7f0000126000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000040)=0x4, 0x12000, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/nfsfs\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0x11012, r1, 0x0) syz_clone(0x16000, 0x0, 0xfffffffffffffe29, 0x0, 0x0, 0x0) 4m46.100652263s ago: executing program 50 (id=576): socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x82002, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010000000000000000000200000100000000001000000800", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x20004000) 4m34.392988847s ago: executing program 51 (id=614): truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4m30.883437944s ago: executing program 52 (id=635): r0 = socket(0x10, 0x3, 0x0) r1 = socket$isdn(0x22, 0x3, 0x2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8, &(0x7f0000000240)=[{}, {0x8, 0x6, 0x3}], 0x2, 0x1, 0x0, 0x2, 0x0, 0x2}) r4 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNAPSHOT_FREE(r4, 0x3305) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000001700)={0x0, 0x1000, 0x6e, 0x0, 0x9, 0x80, 0x8, 0xa, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x5, 0x3, 0x9, 0x7fffffff, 0x1ff}}, &(0x7f00000017c0)=0xb0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x40, 0x12, 0x2fa9ccd93d5c0297, 0x70bd3d, 0x0, {0x7}, [@IFLA_MAP={0x20, 0xe, {0xffffffffffffe8ff, 0x4, 0x5, 0x4, 0x7f, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) 4m27.786594334s ago: executing program 53 (id=649): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000200)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 4m6.092097276s ago: executing program 54 (id=712): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200), 0x0) 4m1.556770978s ago: executing program 55 (id=740): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x6, 0x0}) 4m1.071906501s ago: executing program 56 (id=744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) 3m48.538763605s ago: executing program 57 (id=777): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x28020104, 0x9, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c2c0)="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", 0x2000, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) 3m34.496666298s ago: executing program 58 (id=805): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x81}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x9a5, 0x8, 0x2, 0x5, 0xffff8591, 0xeca, 0xffff, 0xb983, 0x200, 0xfffffff8, 0xf04, 0x4, 0x3ff, 0x7, 0x2, 0x3ff, 0xd, 0x1000, 0x9, 0x4, 0x4, 0x7, 0x8, 0xfff, 0x1, 0x1, 0x3, 0x5, 0x9, 0x3, 0x6, 0x9, 0x7fffffff, 0x4, 0x10001, 0x6cf, 0x3, 0xf09, 0x0, 0x0, 0x8, 0x2, 0xc, 0x4, 0x7fffffff, 0x0, 0x8, 0x3, 0xff, 0x2, 0x7, 0x3, 0x1, 0xffff, 0x8, 0x1, 0x0, 0x9, 0x0, 0x10001, 0x800, 0x8001, 0x9, 0xfffffff7, 0x29, 0x1, 0x0, 0x81, 0x9, 0x400, 0x5, 0x5, 0x7, 0xaefd, 0x5e, 0x7f, 0x40000, 0x5, 0x7fff, 0x9, 0x5, 0xb, 0xeba3, 0x2, 0x7, 0x8, 0x7fff, 0x1, 0xff, 0x0, 0xc091, 0x0, 0x3, 0x707, 0xfffffe00, 0x100, 0x5, 0x7, 0x1, 0x4, 0xe9, 0x8, 0x0, 0x1ff, 0x9, 0x2, 0x8, 0x4a9f, 0xffffffc0, 0x5, 0xec2, 0x7100, 0x30, 0xc, 0xfffffffc, 0x0, 0xe, 0x6, 0x9, 0x2, 0x1, 0xfffffffd, 0x8, 0x4, 0xfd9d, 0xffffffd7, 0x9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x4, 0xffffff38, 0x81, 0x3, 0x4, 0xffff, 0x10001, 0xd1, 0x9, 0x2, 0x6, 0x0, 0x4, 0x12f1, 0x81, 0x3ff, 0x1000, 0x1000, 0xe, 0x6f6bc2c3, 0x5, 0xacd, 0x7fffffff, 0x9, 0x3, 0xa557, 0x7, 0xe22, 0xffffffff, 0x7f, 0x6, 0x0, 0x10, 0x3, 0x80000001, 0x4, 0x747, 0x7f, 0x1, 0x2000000, 0xbd, 0x100, 0x5, 0x4, 0x8, 0x9, 0x2, 0x0, 0x8001, 0x9, 0x2, 0x5, 0x6, 0x7ff, 0x8, 0x8, 0x80000001, 0xbe55, 0x5, 0x1, 0x0, 0x6, 0x2, 0x1, 0xf, 0xb6, 0x1ff, 0xffffffff, 0x8001, 0x4, 0x4, 0x7, 0x3, 0x8d1, 0xa, 0x40, 0x81, 0x9, 0x7fff, 0x8, 0x8b, 0x5, 0x6, 0x5, 0x2, 0x8, 0x43, 0x689, 0x8, 0x7dc, 0x27, 0x1, 0x1, 0x9, 0x8df, 0x5, 0x1ff, 0x7, 0x4, 0x0, 0x1, 0x2d, 0x800, 0x7, 0x2, 0xec61, 0x7, 0x3ff, 0xec0, 0x80000001, 0xbf, 0x9, 0x0, 0x4bd8da6e, 0x4, 0x2, 0xc, 0x6, 0x9, 0x23b, 0x9, 0x2, 0x9, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x63, 0x0, 0x0, 0x3, 0x5, 0xfffffffb}, {0x66, 0x0, 0x5, 0x6, 0x101, 0x5}, 0xef48, 0x1, 0x4c3}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, r3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000020801"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 3m19.344503867s ago: executing program 59 (id=867): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000002980)=""/4110, 0x100e}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2m6.842728293s ago: executing program 9 (id=1339): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x4}, 0x2) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @remote}, @mptcp=@mp_fclose={0x1e, 0xc, 0x68, 0x0, 0xed}]}}}}}}}}, 0x0) write$char_usb(r0, &(0x7f0000000040)="4973b6e733a0b3258f2dd724280de079", 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x13}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m6.433067457s ago: executing program 9 (id=1340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000150a01080000000000000010000000000900020073797a08000000000800000060083b9dfccdf563e34b59c286fcffeab79d6f7b5f39c6662cb63d3c00b608443c447b5b8e3f661d719c6b488c30a6c47f904a3cce287fc0cb1409"], 0x28}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2m5.970737733s ago: executing program 60 (id=1340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000150a01080000000000000010000000000900020073797a08000000000800000060083b9dfccdf563e34b59c286fcffeab79d6f7b5f39c6662cb63d3c00b608443c447b5b8e3f661d719c6b488c30a6c47f904a3cce287fc0cb1409"], 0x28}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m31.687976201s ago: executing program 61 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@ipv6_newroute={0x1c, 0x18, 0x105, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x2, 0x0, 0x9, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x2, 0xfb, 0xb, 0xfffff9f8}, {0x3, 0x8, 0x5, 0x9}, {0x0, 0xbc, 0x2, 0x51}, {0xf, 0x1, 0x3, 0x7}, {0x7, 0x6, 0xbd, 0xfc5d}, {0x2, 0x4, 0x0, 0x4}]}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, '\x00', {'ip_vti0\x00'}, 0x8000}) 1m12.682762775s ago: executing program 62 (id=1651): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009703000000000000000007000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x103, 0x0, {0x8, 0x2, 0xb, 0x1}}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000039c0)=""/4101, 0x1005}], 0x0, 0x1}, 0x20) 1m2.085127677s ago: executing program 5 (id=1703): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x81}, 0x8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet(r4, &(0x7f0000001340)={&(0x7f0000001140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001280)=[{&(0x7f00000011c0)='z', 0x1}], 0x1}, 0x18840) sendto$inet6(r4, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/oss_mixer\x00', 0x80040, 0x408) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}, 0x1c) (async) shutdown(r0, 0x1) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r2}, &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x81}, 0x8) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmsg$inet(r4, &(0x7f0000001340)={&(0x7f0000001140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001280)=[{&(0x7f00000011c0)='z', 0x1}], 0x1}, 0x18840) (async) sendto$inet6(r4, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c) (async) shutdown(r4, 0x1) (async) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card1/oss_mixer\x00', 0x80040, 0x408) (async) 1m1.846729644s ago: executing program 5 (id=1704): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',r'], 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = dup(r3) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x45) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0xc}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m1.574765199s ago: executing program 63 (id=1704): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',r'], 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = dup(r3) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x45) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0xc}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 45.739180312s ago: executing program 4 (id=1785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r3) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf000000000068df170101c0"]) 45.450526883s ago: executing program 4 (id=1787): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="4e419c35b914771596b5b9e615913547e29fc510fccaa475ce2b19fcc933aee0535bbf5da0991ea6d3aaae416b1e8375a26cc498c800e9a4f07de2d00a171fd936494618e54353202a2ee5aab4adeac8b564d0f9e15199d7fab0c4bb37863e221d7a48633d04a6defc9ad5dfd4545752af1f01175bea7a52ae9a6c9781a0b6e09f9f068923617fa2b50161a5850a3035e9041b604fb52703e2213ecb20485ae4734bd2cce49b67ddefa6776d5b9337ac17900dd2ca4f05293b89c51dd797db0969da7753a5aedba421fb073b2ef502bf3eccaba210aa2e512ca5851905c432165d222698ec06223ddceb870fbcdcf76d336e8b478c38d0"], 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0x9, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x1d, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}], &(0x7f00000002c0)='syzkaller\x00', 0x800, 0x91, &(0x7f0000000300)=""/145, 0x40f00, 0x4, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x8, 0x98e, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x0, 0x5, 0x2, 0x4}, {0x5, 0x4, 0xf, 0x6}, {0x4, 0x2, 0x7, 0x8}, {0x0, 0x2, 0xb, 0x7}, {0x1, 0x1, 0xe, 0xa}, {0x1, 0x4, 0xa, 0xb}, {0x3, 0x2, 0x10}, {0x1, 0x1, 0xc}], 0x10, 0x8, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x24, &(0x7f0000000400)={0x20, 0x17, 0x2, "d1d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 45.252997756s ago: executing program 4 (id=1788): r0 = openat$sequencer(0xffffff9c, &(0x7f0000004500), 0x200, 0x0) poll(&(0x7f00000049c0)=[{r0, 0x20}], 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = memfd_create(&(0x7f0000000380)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf9\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xccd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4hi\v\x00\x00\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xeb\x05\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x\x004]PZ\x9e\xd5Y\xf0L\xa4\xbc\x86\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x01\x04\x00\x00\x00\x00\x00\x00h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2\x05\x00\x00\x00\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\xbc\x8d\xed\xf3\x98\x96\x84\xd7\xc2\x88\b\xcc6\xa44\xd7\xed\xc1\x8f\xa7K\xc9KeEk\xd1\xb7\xfb\x88\x12\xd0i\xef(\xddUP\xee;Dk\x84\xfcD\xf0\xd6\xe9\x96B!\x8c\xb8\xc6\'~\x99\x1d2\xdb\xfd=\xa7\x86\x06\x03\xc6Y\xc6\x87\xd13\xd0Y\x90\xe9*~$jQ\xb9\x84\xec\xe9{\xa8%}/\xcaP\xb1a\xa6\xd9\xb2\xe9\xa7\x1b\x00\xb8\x9d\xb0\x01\x04Y6\xcb\xaa\xa9\vE\xd0Q\xcd/#%J\x0f\x97\x96\xa0\xeeb\xe2R\xf5\x16\x1f\xe554q\xbdp\x0f)\x99\xec\xe4\xf9~\x91\x00[B$p\x92\x03i\x7f\x1c\xaf\x06\t\xda\xff\xb8\xf1\xc9\xd7\xc3\xfaN\xeel 40XJ\xe1\xe4Hv=\x81\xdaZ\xd6\aT\x86\xf5\x13+\xa9\x14x\xe7\x19?\xa9#2\xba\x7f1\xf2\xb8$\xa2\xb5*\xef\xd3\x8d\xe4Q\xe6C\xb3AU\xcb\xae\xdcN\xb7Mp\xc8\x04]\x84\x7f\x19\xd3#\x8b@\x9d\x1a\xc5\xc8n^e\xeak\xea9\x15\x9b\x1d\xb7\xe8\xca\xac;\n\\\xa9{B&uO\xb6\xd8\xa6\xb8\xfaA\x1f\xfb\xdcm)}q\x17\x7f\x86b\x1bq\xcb\x81\r\xc2\bb\xd9\xc7t\x88Y\f/\x0f_\x0e\xae\x92\x91\xf8B{\x16\x8a\xa7\xed\x01\x8c\xe9%', 0x7) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000340)="d5f5", 0x2}], 0x1}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x7) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000080)=0x2) socket(0x10, 0x3, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r9, 0x111, 0x2, 0x20000000, 0x4) 44.863434358s ago: executing program 64 (id=1788): r0 = openat$sequencer(0xffffff9c, &(0x7f0000004500), 0x200, 0x0) poll(&(0x7f00000049c0)=[{r0, 0x20}], 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = memfd_create(&(0x7f0000000380)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf9\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xccd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4hi\v\x00\x00\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xeb\x05\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x\x004]PZ\x9e\xd5Y\xf0L\xa4\xbc\x86\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x01\x04\x00\x00\x00\x00\x00\x00h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2\x05\x00\x00\x00\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\xbc\x8d\xed\xf3\x98\x96\x84\xd7\xc2\x88\b\xcc6\xa44\xd7\xed\xc1\x8f\xa7K\xc9KeEk\xd1\xb7\xfb\x88\x12\xd0i\xef(\xddUP\xee;Dk\x84\xfcD\xf0\xd6\xe9\x96B!\x8c\xb8\xc6\'~\x99\x1d2\xdb\xfd=\xa7\x86\x06\x03\xc6Y\xc6\x87\xd13\xd0Y\x90\xe9*~$jQ\xb9\x84\xec\xe9{\xa8%}/\xcaP\xb1a\xa6\xd9\xb2\xe9\xa7\x1b\x00\xb8\x9d\xb0\x01\x04Y6\xcb\xaa\xa9\vE\xd0Q\xcd/#%J\x0f\x97\x96\xa0\xeeb\xe2R\xf5\x16\x1f\xe554q\xbdp\x0f)\x99\xec\xe4\xf9~\x91\x00[B$p\x92\x03i\x7f\x1c\xaf\x06\t\xda\xff\xb8\xf1\xc9\xd7\xc3\xfaN\xeel 40XJ\xe1\xe4Hv=\x81\xdaZ\xd6\aT\x86\xf5\x13+\xa9\x14x\xe7\x19?\xa9#2\xba\x7f1\xf2\xb8$\xa2\xb5*\xef\xd3\x8d\xe4Q\xe6C\xb3AU\xcb\xae\xdcN\xb7Mp\xc8\x04]\x84\x7f\x19\xd3#\x8b@\x9d\x1a\xc5\xc8n^e\xeak\xea9\x15\x9b\x1d\xb7\xe8\xca\xac;\n\\\xa9{B&uO\xb6\xd8\xa6\xb8\xfaA\x1f\xfb\xdcm)}q\x17\x7f\x86b\x1bq\xcb\x81\r\xc2\bb\xd9\xc7t\x88Y\f/\x0f_\x0e\xae\x92\x91\xf8B{\x16\x8a\xa7\xed\x01\x8c\xe9%', 0x7) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000340)="d5f5", 0x2}], 0x1}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x7) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000080)=0x2) socket(0x10, 0x3, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r9, 0x111, 0x2, 0x20000000, 0x4) 44.507640676s ago: executing program 3 (id=1794): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0x20) 44.216168104s ago: executing program 3 (id=1795): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000003500010026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 43.978002402s ago: executing program 3 (id=1797): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 43.806073629s ago: executing program 3 (id=1798): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)=0xe3b) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xbf56fd38fd97d412, 0x20, 0x270, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x2, {0xffffffffffffffff, 0x1e000, 0x0, {0x6, 0xfffffffffffffffd, 0x4, 0x7ffffdfe, 0xe, 0xabe2, 0x0, 0xff, 0x400e6, 0x1000, 0x401, r5, r6, 0xea, 0x27c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r7}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030100010000000009040000025c291d00090509000000000d000926eeb5cc7657d3bfd4fdd10492d592c353a94e2bf2727bf94c94267b6262026c892c52712895882b48ae2b1e637f9560c61acce17d630dc61ccdb45e0de8dad025ddbb67690cf55e3104d904aa81bd33ae7d1d5fdad5c5326ffb82d81ec59c8504a21093a67cbe4164e138fa747531cd3caba7a1be36ccadd132f69bff347ee96a40b6cdeaa857946bc5b2086911fd3b5d6d292ef344de9c6018579a3845d0"], 0x0) 40.674425316s ago: executing program 3 (id=1810): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x7}}]}]}, 0x2c}}, 0x0) (async) r3 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c00098008"], 0x34}}, 0x24004001) syz_usb_control_io(r0, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x219) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = fanotify_init(0x200, 0x101000) r7 = dup(r6) write$USERIO_CMD_SEND_INTERRUPT(r7, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_loaded', 0x240000, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newlink={0x38, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40332}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VF_PORTS={0x4}]}, 0x38}}, 0x0) ioctl$BLKFRASET(r9, 0x1264, &(0x7f00000000c0)=0xfdd8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) symlink(&(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00') read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r11}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004240)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x90, 0x0, 0x4, {0x1, 0x0, 0x9d3, 0x3, 0x8, 0x2, {0x5, 0x80000000, 0x6, 0x10000, 0xf5ef, 0x1, 0xa, 0x801, 0xffff3181, 0xa000, 0x10000, r12, 0x0, 0x9, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 31.330730104s ago: executing program 7 (id=1852): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r2, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) umount2(&(0x7f0000000040)='./file0/file0/..\x00', 0x0) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x24ce80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000280)=0x323b668f) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@s={0x5, @SEQ_MIDIPUTC=0x88, 0x0, 0x80}) userfaultfd(0xc01) 30.684695742s ago: executing program 7 (id=1855): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@typedef={0x5}, @enum={0xe, 0xa, 0x0, 0x6, 0x4, [{0x0, 0x81}, {0x5, 0x2}, {0x1, 0xfe}, {0x0, 0x3}, {0x7, 0x6be6}, {0xe, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0xf, 0x9b86}, {0x9, 0x2}]}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0xffff, [{0x0, 0x4, 0xa8d7}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x8}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000100)=""/215, 0xc7, 0xd7, 0x3, 0x4, 0x10000, @value=r0}, 0x28) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 30.258248907s ago: executing program 66 (id=1855): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x3, [@typedef={0x5}, @enum={0xe, 0xa, 0x0, 0x6, 0x4, [{0x0, 0x81}, {0x5, 0x2}, {0x1, 0xfe}, {0x0, 0x3}, {0x7, 0x6be6}, {0xe, 0x9}, {0x0, 0x2}, {0x4, 0x5}, {0xf, 0x9b86}, {0x9, 0x2}]}, @struct={0x5, 0x1, 0x0, 0x4, 0x1, 0xffff, [{0x0, 0x4, 0xa8d7}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x8}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000100)=""/215, 0xc7, 0xd7, 0x3, 0x4, 0x10000, @value=r0}, 0x28) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 29.099019092s ago: executing program 6 (id=1859): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x8, 0x5, &(0x7f0000000000)={0xd, "4c07d50dbc8c9a0e7f2361788f1965b737e1f720034e0c8e38a490313860889a32"}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r3 = socket$inet(0x2b, 0x801, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000480)={0x6000000, 0x800, 0x8}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 28.858106638s ago: executing program 6 (id=1862): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf000000000068df170101c0"]) 28.418965389s ago: executing program 6 (id=1866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x40000000, &(0x7f0000000200)={0x11, 0x888e, r6, 0x1, 0x8, 0x6, @local}, 0x14) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="03c900c9085da3f41ca46b5c5dbbcff54779fcfcb102c50652f3afccf4f78d3d71"], 0xcd) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x5, 0xb5, 0xf, 0x0, 0x9, 0x8, 0x6, 0x6, 0x4, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa0f, 0xb, 0xff, 0x6, 0x4, '\x00', 0x92, 0x5}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27.949449116s ago: executing program 6 (id=1867): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010023070000000000000a20000000000a0300000000000000000001000000099192b132f343f8ad7974ffabf354cf94b53b3885fd5c566e13f99362c2f2f236f0d4e188bde817680700f9c87ddd8da5434ee803f725d9a9110b0974efad40ded1fad92f3429c5cf5e4fe260a1"], 0xec}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x12}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e31000000000000000000000014000000110001"], 0xa4}}, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r1}, 0x14) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="19ac34ef0dedf469e4f5cef5e7e8d435c45252f1a1a6c9673851c9feed300f2c4d66c72306ec8e669131b909c20137d1ecbee0b0670f3c91dfcdef7b9b8847f95e96ec2d1f6f0036f58abd335a87806a5d16de5830190959826804adbfa7113986db70119f27b7606bc0306e04018498cfa8f3afa37bbfd0db92769e2a4f63319e595ffc861be274a5b09392f99354f530fcd67d325fec7538b462ecf86b3b37699a83ffc8589ce9ebc966c3aa5e29d6f92bdf66512bb8f6a97716820ac1b7d612de6fcb21932f38343441499b90125be0a62286254f266f6c03ba", &(0x7f0000000240)=""/43, &(0x7f0000000580)="570675b395e052031fd6844bbf1d460099cbe625514f6dd726053fdef0e3d61438ad724b6c96a8ed79fbfadf8bd5ebd655b5679d6b617a08969f25a22a4c6a74e275993a1ebb663a920c", &(0x7f0000000600)="8de1c65b7b9d6f6f0849841fadbc2aa2bb916816eeb181484bb65504aa4fec353996121867de4007a70affc05719a602af8cdf08690095f1adec39f95e74cb540ea07b94c550c4999844670a7e99677785a0dd092da55f6f414328cf15624d99aed01dcb0cca7f21a6d5138e7eda9d61f8ce7970333c1c5d1220fee32e2fd933d3fd5abdd6b0a94b4572e70ae8316859f5a1d3434dbfacc2d70e883c2848764eb9645086dd1bbe7562c3ed6f6cc746f8e6806fda39854818415dbb6b21591f297e93151c002220a369c2dbc1", 0x2, r2, 0x4}, 0x38) bind$rxrpc(r0, &(0x7f00000020c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @empty, 0x16f}}, 0x24) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x5, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 27.385583725s ago: executing program 67 (id=1867): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010023070000000000000a20000000000a0300000000000000000001000000099192b132f343f8ad7974ffabf354cf94b53b3885fd5c566e13f99362c2f2f236f0d4e188bde817680700f9c87ddd8da5434ee803f725d9a9110b0974efad40ded1fad92f3429c5cf5e4fe260a1"], 0xec}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x12}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e31000000000000000000000014000000110001"], 0xa4}}, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r1}, 0x14) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="19ac34ef0dedf469e4f5cef5e7e8d435c45252f1a1a6c9673851c9feed300f2c4d66c72306ec8e669131b909c20137d1ecbee0b0670f3c91dfcdef7b9b8847f95e96ec2d1f6f0036f58abd335a87806a5d16de5830190959826804adbfa7113986db70119f27b7606bc0306e04018498cfa8f3afa37bbfd0db92769e2a4f63319e595ffc861be274a5b09392f99354f530fcd67d325fec7538b462ecf86b3b37699a83ffc8589ce9ebc966c3aa5e29d6f92bdf66512bb8f6a97716820ac1b7d612de6fcb21932f38343441499b90125be0a62286254f266f6c03ba", &(0x7f0000000240)=""/43, &(0x7f0000000580)="570675b395e052031fd6844bbf1d460099cbe625514f6dd726053fdef0e3d61438ad724b6c96a8ed79fbfadf8bd5ebd655b5679d6b617a08969f25a22a4c6a74e275993a1ebb663a920c", &(0x7f0000000600)="8de1c65b7b9d6f6f0849841fadbc2aa2bb916816eeb181484bb65504aa4fec353996121867de4007a70affc05719a602af8cdf08690095f1adec39f95e74cb540ea07b94c550c4999844670a7e99677785a0dd092da55f6f414328cf15624d99aed01dcb0cca7f21a6d5138e7eda9d61f8ce7970333c1c5d1220fee32e2fd933d3fd5abdd6b0a94b4572e70ae8316859f5a1d3434dbfacc2d70e883c2848764eb9645086dd1bbe7562c3ed6f6cc746f8e6806fda39854818415dbb6b21591f297e93151c002220a369c2dbc1", 0x2, r2, 0x4}, 0x38) bind$rxrpc(r0, &(0x7f00000020c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @empty, 0x16f}}, 0x24) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x5, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 27.363523017s ago: executing program 9 (id=1869): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) (fail_nth: 2) 24.954204378s ago: executing program 9 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf000000000068df170101c0"]) 24.639244582s ago: executing program 68 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cf000000000068df170101c0"]) 17.820960188s ago: executing program 1 (id=1893): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x1be, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/446], 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200), &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0x5dba2000) sync_file_range(0xffffffffffffffff, 0x200, 0xfffffffa, 0x1) io_uring_enter(r2, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) 16.783098989s ago: executing program 1 (id=1895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) 16.29992348s ago: executing program 1 (id=1896): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x1be, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/446], 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0x5dba2000) sync_file_range(0xffffffffffffffff, 0x200, 0xfffffffa, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x4) io_uring_enter(r2, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) 15.005105873s ago: executing program 1 (id=1899): mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xbf56fd38fd97d412, 0x20, 0x270, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) 14.109195134s ago: executing program 1 (id=1900): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x4400) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x1ff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x4, "59bb9851e2b02ab0a7207652ea70d1b9dcd91f6e35cb728ded188a329e49626a"}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x6) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x7, 0x617, 0x1ff, 0x6, 0x8, 0x6, 0x1ccd, 0xc2cc, 0x3, 0x314, 0x5, 0x67f, 0x0, 0x38000000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000280)={{r5, 0x3ff, 0x1, 0xfffffffffffffffe, 0x6, 0x1ff, 0xdf, 0x9, 0x5, 0x0, 0x8, 0x200, 0x0, 0x1, 0xfff}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r6 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000340)={0x0, r6}) syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x101200) clock_adjtime(0x7, &(0x7f00000003c0)={0x1, 0x4, 0x81, 0x9, 0x2, 0x7, 0x5, 0x4, 0x57b, 0x1000, 0x554f, 0x8, 0x3, 0x1, 0x5, 0x1000, 0x6, 0x3, 0x4, 0xff, 0x4, 0x5, 0xb044, 0xfffffff8, 0x9, 0x400}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x8, 0x7a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x4e49ae804becb6b2, 0x3b5f, 0x1}}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r7, 0x25, 0x16, @void}, 0x10) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x200000e, 0x13, r2, 0x8000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f0000000540)="1f09195e4f07cee7849382c3213dfbd97f1a726094ddfeb5f66eab1da899bd3421d77ffe66d78b15fa2bd117867a11641b0b89124f2112c047e50d8fc3237e6e85ec46e0762d85455e44511987d137bb5d006d26fee7210b3af30ec80c6c3e239773fe8436cc9520fb5c5406e65a73dec46f875cceaf9e714dcffa4a53ea332b275780b7f9eaacad4e7ced0190de77aff7c3", 0x92, 0x2001, 0x0, {0x0, r10}}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000780)={r11, r12, 0x0, 0xb, 0x9}) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r8}, 0x8) sendmsg$nl_route(r13, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_newaddr={0x20, 0x14, 0x200, 0x70bd2c, 0x25dfdbfe, {0xa, 0x17, 0x2, 0x0, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8a9}]}, 0x20}, 0x1, 0x0, 0x0, 0x44020}, 0x8008) clock_adjtime(0x0, &(0x7f0000000900)={0x9, 0x1, 0x0, 0xc, 0xc8d, 0x4, 0xe, 0x1, 0x6, 0x3, 0x5, 0x9, 0x6e677d24, 0x9, 0xd, 0x7f, 0x1, 0xce9, 0x7ff, 0x8, 0x7, 0x0, 0x4, 0x6, 0x9, 0x2}) syz_clone(0x10000000, &(0x7f0000000980)="70e54645007296f2d8f6198f2f8959adb9add6ba9c166a1c9917f8bb7ab49ae229d63690f486a2a317685696ca5b4698d0cbf8a52b51f7f28cf756c0227dcc06ca76c23138a2e556ec1f4c1731fb5eae7b5157a2ad02511106cffa47c02e5027c9de7fda281db9132e7cba0858af5f7b5bb0164090926703f056051e50c199bf9915ad6ceafd64ba13e0f37563690519f8277d52d2175c3d63eec5b313009f7e", 0xa0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) ioctl$SOUND_MIXER_READ_RECSRC(r13, 0x80044dff, &(0x7f0000000b00)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000b40)={0x0, 0x80, 0x20}, &(0x7f0000000b80)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000bc0)={r14, 0x8}, 0x8) 13.222940927s ago: executing program 1 (id=1902): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x1be, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/446], 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200), &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0x5dba2000) sync_file_range(0xffffffffffffffff, 0x200, 0xfffffffa, 0x1) io_uring_enter(r2, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) 12.724961235s ago: executing program 69 (id=1902): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x1be, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/446], 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r1}, &(0x7f0000000200), &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0x5dba2000) sync_file_range(0xffffffffffffffff, 0x200, 0xfffffffa, 0x1) io_uring_enter(r2, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) 6.375606081s ago: executing program 0 (id=1914): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 6.163451391s ago: executing program 0 (id=1915): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x2}, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX], 0x20) 6.110514749s ago: executing program 2 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xee4c45a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008880) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e21, 0x2, @local, 0x2}}, 0x0, 0x0, 0x44, 0x0, "dc214e10bae8d1c5462e7c2887ddffc7da60e9babda876b26ec8baefcf91a095136a7b23d1816c9c7b9fd8771d537992eea56a358a1cfcc29e4474c1ca65445edcdb36ed317c905773ccd13f471b01c0"}, 0xd8) tee(r2, r0, 0x80000000, 0x7cdcb4e090b7ff33) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) 5.707000835s ago: executing program 0 (id=1916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x80000006, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r3 = dup(r2) read(r3, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f0000000800)={0xd, 0x1, 0x8, 0x9, 0x8, 0x2cc, 0x0, 0xac83}, 0x0, 0x0, 0x0, 0x0) 5.527089024s ago: executing program 0 (id=1917): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x9d, 0xc3, 0x20, 0x12d1, 0x7ef3, 0x5468, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x10, [{{0x9, 0x4, 0x59, 0x0, 0x2, 0xff, 0x6, 0x3d, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, &(0x7f0000000280), r1, 0x0, 0x800, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xdac, 0x0, 0x10}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x9}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=@deltfilter={0xc84, 0x2d, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x0, 0xb}, {0xb, 0xffe0}}, [@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x0, 0x7fff}, {0x3, 0xfa7, 0x8001}, 0x73, 0x91, 0xdc}}]}}, @f_rsvp={{0x9}, {0xc24, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0xa9, 0xbba, 0x7, 0x7f, 0x9, 0x7ff, 0xa588, 0xfffeffff, 0x73, 0x400, 0x7, 0xb, 0x1, 0x9, 0x8, 0x8, 0xfffffff9, 0x2, 0x6fe7f3de, 0x1ff, 0x7f3, 0x3, 0x6, 0x4, 0x4, 0x7fff, 0x7ff, 0x5, 0xa, 0x7, 0x0, 0xc, 0x3f9b, 0x9, 0x99, 0x40, 0x7198, 0x7, 0x5, 0x1, 0x8, 0x7, 0x8, 0x81, 0x15748c71, 0x0, 0x0, 0x4, 0x2, 0x85e2, 0x1, 0x8, 0x2, 0x1, 0x2, 0x3, 0x1, 0x7fffffff, 0x200, 0x3, 0x9, 0xef, 0x9d44, 0x1, 0x3, 0x5, 0x10001, 0x7f, 0xf96, 0x6, 0x9, 0x1fb7, 0x3, 0x3, 0x1ae, 0x9, 0x80, 0x2, 0x7, 0x6, 0x1, 0x400, 0x85ad, 0xffffffff, 0x3, 0x1, 0xfffffffa, 0x80000000, 0x492, 0x9, 0x10001, 0x9, 0x1, 0xfffffff9, 0x40, 0x1, 0x3, 0xe6, 0x9, 0x5, 0xcf, 0x3, 0x8, 0x8, 0x7, 0x3ff, 0x4, 0xf84, 0x61c5, 0x4, 0x9, 0x8, 0xd, 0x3, 0x40, 0x2, 0x7f, 0xff, 0x1, 0x6, 0x2, 0xbab, 0x5, 0x1, 0x2000, 0x8, 0x7, 0xe, 0x9, 0x8c, 0x8f, 0x0, 0xff, 0xd, 0x8, 0x6a4, 0x800, 0x0, 0x5, 0x8000, 0x475, 0x2, 0x9, 0x4, 0x61, 0x5, 0xf19, 0x9e2f, 0x9, 0x8, 0x101, 0xffff, 0x80000001, 0x2800000, 0x2, 0x200, 0x7fff, 0x1000, 0x8, 0x6, 0xfffffff9, 0x3ff, 0x6, 0x9, 0xe9, 0xffffff00, 0x5, 0xc0, 0x5, 0xd5, 0xc, 0x0, 0xff, 0x4, 0x8, 0x4, 0x8, 0x81, 0x400, 0x8000, 0x1000, 0x3116, 0xb41, 0x4, 0x1, 0x7, 0x380, 0x7, 0x7, 0x7a5d2c7d, 0xffffffff, 0x4, 0x800, 0xdb4, 0x1, 0x9, 0x80b, 0x1e, 0x2, 0x2e, 0x40, 0x0, 0x5, 0x401, 0x4, 0x69df, 0x7, 0x5, 0x400, 0x0, 0x0, 0xd9fb, 0x5, 0x800, 0x2, 0x4, 0x6, 0x3, 0x4, 0x7, 0x2, 0x2, 0xe9, 0x0, 0x9, 0x1, 0x3, 0x3, 0xf9, 0x1, 0x1156, 0x4, 0x3, 0x9, 0x10000, 0x3, 0x7, 0xff, 0x1c00000, 0x3, 0x3, 0x5, 0x2, 0x5, 0x8, 0x3, 0x5, 0x1, 0x5, 0x14000, 0x1, 0xe2, 0x8, 0x8]}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4d7, 0x9, 0x0, 0x7fff, 0xffff, 0x0, 0x3, 0x80000001, 0x7, 0xfff, 0x5, 0x2, 0x3, 0x2, 0x2, 0xdd, 0x0, 0x10000000, 0xbb, 0x10001, 0x7, 0xf, 0x6, 0xb1, 0x9, 0xc, 0x6, 0x2, 0x10001, 0x7, 0x1, 0xafd, 0x2, 0xfffffff4, 0x3, 0x3, 0x81, 0x31b2, 0xc233, 0x3, 0x7, 0xfffffff9, 0x4, 0x8000, 0x800, 0x4, 0x8001, 0x9, 0x7, 0x4, 0x4, 0xf, 0xfffff5ec, 0x3, 0xd, 0x0, 0x59000000, 0xebe4, 0x4, 0x9, 0xbc, 0x7, 0xd, 0x9, 0x7fffffff, 0x9, 0x1, 0x6, 0x7fff, 0x2, 0xf0, 0x7, 0x10, 0x5, 0x2, 0x0, 0x40, 0x3ff, 0x2, 0xa208, 0x3, 0x6, 0x9, 0x7, 0x285, 0x0, 0x91a7, 0xa48, 0x40, 0xe, 0x8, 0x3, 0x0, 0x4, 0x5, 0x6, 0x8, 0x8, 0x8001, 0x9, 0x40, 0x8000, 0x8, 0xc13, 0x4, 0xfffffff7, 0x235, 0xb847, 0x2, 0x8000, 0x6, 0x4, 0x3, 0x0, 0x5, 0x7, 0x200, 0x0, 0x10, 0x10001, 0x5af, 0xe8b7, 0x80, 0x3, 0xffff, 0xa84, 0x8, 0xd1, 0x6, 0x7, 0x800, 0x1, 0x1, 0x2, 0xa7de, 0x4, 0x5, 0x7, 0x5f2d, 0x80000001, 0x3, 0xfa, 0x1, 0x3, 0x2, 0x100, 0x0, 0x9dc5, 0x3, 0x1, 0x3, 0x8, 0xffffffff, 0x10001, 0xcc2, 0x18b, 0x682d, 0x9, 0x1, 0x5, 0x8, 0xff, 0xaf, 0x1, 0x6, 0x4, 0x4, 0x6, 0xb, 0x80000000, 0x2, 0x2e8, 0x7, 0x0, 0x4, 0x1, 0x6, 0x1, 0xd, 0x1, 0x3, 0x1ff, 0x6, 0x5b56, 0x10, 0x5, 0xa, 0xfffffff8, 0x400, 0x1, 0xd9, 0x8, 0x200, 0x3, 0xfffffff2, 0x7, 0x6, 0xc3e, 0x7, 0xfffffff7, 0x5, 0x6c3, 0x2650, 0x5, 0x6, 0xb2, 0xa1, 0x4, 0x80, 0x1, 0x200, 0x3, 0x2, 0x7, 0x0, 0x2, 0x0, 0xd, 0x1, 0x7, 0xcc0, 0x8, 0x81, 0x2, 0x3, 0x1, 0x180, 0xf8, 0x5, 0x7, 0x4, 0x2, 0x6, 0x7, 0x4, 0x80000000, 0x100, 0xdf6c, 0x200, 0x8, 0xdb65, 0x81, 0x9, 0x3, 0x58e5, 0x4, 0x8, 0x4, 0x5, 0x2, 0x80, 0x10000, 0x10001, 0x10, 0x2, 0x2]}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x889, 0x376, 0xfff, 0x9, 0x1, 0xff, 0x2, 0x73e, 0xffffff73, 0x5, 0xfff, 0x5, 0x5, 0x9, 0x101, 0x9, 0x0, 0xe69, 0x9, 0x10000, 0x100, 0x0, 0xe, 0x7ff, 0x1bfc6, 0xffffffbe, 0x282a, 0x9, 0x4, 0x8, 0xb4fa, 0x6, 0x800, 0x9, 0xc, 0x80, 0x4, 0x2, 0x55dc, 0x2f7, 0x6, 0x0, 0x1, 0x6, 0x3, 0x1ff, 0x9, 0x3ff, 0x4, 0x5, 0x7f, 0x6, 0x8000, 0x10, 0xb, 0x1, 0x5, 0x3, 0x7, 0x80000001, 0xa5ed, 0x10, 0x1, 0x8000, 0x10, 0x9, 0x4, 0x2, 0x5, 0x5, 0x1, 0x3, 0x4, 0x100, 0x8, 0x79, 0x0, 0x9, 0x3, 0x7, 0x80000001, 0x7, 0xff, 0x3, 0x1, 0xb37f, 0x3, 0xdd, 0x9, 0x9, 0x10000, 0x10000, 0x8, 0x5, 0xe752, 0x6, 0xf, 0x8, 0x81, 0x400, 0x2, 0x3ff, 0x6, 0x800, 0x0, 0x10001, 0x0, 0x5, 0x7fff, 0x81, 0x401, 0x7f, 0x8, 0x5, 0x4, 0x9, 0xffffffff, 0x7f, 0x7, 0x9, 0xffffffad, 0x2, 0x8001, 0x2b1d, 0x9, 0xf, 0x0, 0xfffffffd, 0x6, 0x10001, 0x7, 0x2f24, 0x8, 0x0, 0xe0000000, 0xffff8000, 0xe00000, 0x80000001, 0xf, 0xa, 0x3, 0x267, 0x400, 0x60bc, 0x7, 0x5, 0x7, 0x4, 0x0, 0x401, 0x434d, 0x5, 0x6, 0x6, 0x1a2c3469, 0x2, 0x8, 0x4, 0x8, 0xcfd, 0x9, 0x6, 0x2, 0x8, 0x3, 0x0, 0x6, 0xd6, 0x9, 0x0, 0x9437, 0x4, 0xfff, 0x3ff, 0xb, 0x8, 0x6d8, 0xffffffff, 0x4, 0x7ff, 0x9, 0x7, 0xffffffff, 0x3ff, 0x5, 0x6, 0x490b, 0x40, 0x8, 0x100, 0x0, 0x1, 0x44, 0x9, 0x9, 0x641, 0x81, 0x1, 0x80000000, 0x9, 0xbc9, 0xfffffffc, 0x9, 0x7, 0x9, 0x4, 0x8, 0x7f, 0xb9, 0x0, 0x0, 0x9, 0x5, 0x8000, 0x7fff, 0x8, 0xbb0f, 0x1f9, 0x14ba, 0x7, 0xde1c, 0x1, 0x4, 0x3, 0xdcdc, 0xc55, 0x9, 0x4, 0x1, 0x9, 0x2, 0x5, 0x3, 0x2, 0xaf, 0x1, 0x9, 0x9, 0x3, 0x5, 0x387846ec, 0x2, 0x1, 0x1, 0x4, 0x69, 0xa7c, 0x9, 0x0, 0x4, 0xc, 0x1, 0x80000001, 0xde]}]}]}}]}, 0xc84}, 0x1, 0x0, 0x0, 0x800}, 0x24008004) 5.159594007s ago: executing program 2 (id=1918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.846514892s ago: executing program 2 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (fail_nth: 1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.522630283s ago: executing program 5 (id=1876): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfd, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7ff, 0x29}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x61e}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 4.123036371s ago: executing program 2 (id=1920): io_uring_setup(0x1950, &(0x7f00000000c0)={0x0, 0x400, 0x10c0, 0xfffffffc, 0xfffffffc}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2, 0x6, 0xdcef, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pim6reg1\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000054000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x104, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x20008041) 3.578452897s ago: executing program 2 (id=1922): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x2}, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX], 0x20) 3.435363414s ago: executing program 8 (id=1923): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x4400) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x1ff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x4, "59bb9851e2b02ab0a7207652ea70d1b9dcd91f6e35cb728ded188a329e49626a"}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0x6) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000200)={{0x0, 0x7, 0x617, 0x1ff, 0x6, 0x8, 0x6, 0x1ccd, 0xc2cc, 0x3, 0x314, 0x5, 0x67f, 0x0, 0x38000000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000280)={{r5, 0x3ff, 0x1, 0xfffffffffffffffe, 0x6, 0x1ff, 0xdf, 0x9, 0x5, 0x0, 0x8, 0x200, 0x0, 0x1, 0xfff}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r6 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000340)={0x0, r6}) syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x101200) clock_adjtime(0x7, &(0x7f00000003c0)={0x1, 0x4, 0x81, 0x9, 0x2, 0x7, 0x5, 0x4, 0x57b, 0x1000, 0x554f, 0x8, 0x3, 0x1, 0x5, 0x1000, 0x6, 0x3, 0x4, 0xff, 0x4, 0x5, 0xb044, 0xfffffff8, 0x9, 0x400}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x8, 0x7a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x4e49ae804becb6b2, 0x3b5f, 0x1}}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r7, 0x25, 0x16, @void}, 0x10) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x200000e, 0x13, r2, 0x8000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f0000000540)="1f09195e4f07cee7849382c3213dfbd97f1a726094ddfeb5f66eab1da899bd3421d77ffe66d78b15fa2bd117867a11641b0b89124f2112c047e50d8fc3237e6e85ec46e0762d85455e44511987d137bb5d006d26fee7210b3af30ec80c6c3e239773fe8436cc9520fb5c5406e65a73dec46f875cceaf9e714dcffa4a53ea332b275780b7f9eaacad4e7ced0190de77aff7c3", 0x92, 0x2001, 0x0, {0x0, r10}}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000780)={r11, r12, 0x0, 0xb, 0x9}) r13 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r8}, 0x8) sendmsg$nl_route(r13, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_newaddr={0x20, 0x14, 0x200, 0x70bd2c, 0x25dfdbfe, {0xa, 0x17, 0x2, 0x0, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8a9}]}, 0x20}, 0x1, 0x0, 0x0, 0x44020}, 0x8008) clock_adjtime(0x0, &(0x7f0000000900)={0x9, 0x1, 0x0, 0xc, 0xc8d, 0x4, 0xe, 0x1, 0x6, 0x3, 0x5, 0x9, 0x6e677d24, 0x9, 0xd, 0x7f, 0x1, 0xce9, 0x7ff, 0x8, 0x7, 0x0, 0x4, 0x6, 0x9, 0x2}) syz_clone(0x10000000, &(0x7f0000000980)="70e54645007296f2d8f6198f2f8959adb9add6ba9c166a1c9917f8bb7ab49ae229d63690f486a2a317685696ca5b4698d0cbf8a52b51f7f28cf756c0227dcc06ca76c23138a2e556ec1f4c1731fb5eae7b5157a2ad02511106cffa47c02e5027c9de7fda281db9132e7cba0858af5f7b5bb0164090926703f056051e50c199bf9915ad6ceafd64ba13e0f37563690519f8277d52d2175c3d63eec5b313009f7e", 0xa0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) ioctl$SOUND_MIXER_READ_RECSRC(r13, 0x80044dff, &(0x7f0000000b00)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000b40)={0x0, 0x80, 0x20}, &(0x7f0000000b80)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000bc0)={r14, 0x8}, 0x8) 3.171363299s ago: executing program 8 (id=1924): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x2}, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX], 0x20) 2.942578009s ago: executing program 4 (id=1904): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x4000000000000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0x80885659, 0x0) fsopen(&(0x7f0000000000)='ubifs\x00', 0x1) close(0x3) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x14480) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f00000000c0)=0x3ff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x1, 0x4}, {0x6e, 0x4}}]}}, 0x11) 2.767113992s ago: executing program 4 (id=1925): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x18141, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2b, 0x80801, 0x1) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) sendmsg$inet(r3, 0x0, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a80)="ff", 0x1}], 0x1}, 0x24008081) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2, 0x7, 0x1b1d, 0x6ff, 0x19, "080c070021ab0e18a70d8d0900b1fa4dc1e957"}) 2.766907394s ago: executing program 8 (id=1926): ppoll(&(0x7f0000000700)=[{}], 0x1, 0x0, 0x0, 0x0) 2.386294216s ago: executing program 0 (id=1927): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) 2.262828962s ago: executing program 5 (id=1928): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0xffe5}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2cf, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x7}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000860000/0x2000)=nil, r3, 0x1000006, 0x4003831, 0xffffffffffffffff, 0x0) r4 = mmap$KVM_VCPU(&(0x7f00007ff000/0x800000)=nil, r3, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f000092a000/0x4000)=nil, &(0x7f000058c000/0x2000)=nil, 0x4000, 0x1}) 2.25228088s ago: executing program 0 (id=1929): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff2bbd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067726574617000"], 0x4c}}, 0x8080) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') syz_usb_connect(0x2, 0xc77, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x7, 0x7, 0xd, 0x40, 0x7}, 0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="050f2e00040710020605feff03100b0b10012e200002060500f614100405d204815d04"]}) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x92, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x7, 0x1b5a, @name="e67c1569026ddb976f7130504b359ff575b46af5472eaa6f795641d8cc141f64"}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) r5 = getpgid(0xffffffffffffffff) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000040)={'\x00', 0x2, 0x1, 0x40, 0x0, 0xffffffff, r5}) 1.890449961s ago: executing program 2 (id=1930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) openat(0xffffffffffffffff, 0x0, 0x54d042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0xa9080, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 1.745449416s ago: executing program 4 (id=1931): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f00006c5000/0x1000)=nil, 0x1000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x2af8, 0x0, &(0x7f0000000100), &(0x7f0000000080)) io_pgetevents(0x0, 0x2, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000440)=@multiplanar_mmap={0xffff, 0x1, 0x4, 0x20, 0x3, {0x77359400}, {0x3, 0x2, 0x2, 0xb6, 0xfd, 0x7, "68007d1e"}, 0x1, 0x1, {0x0}, 0x8}) unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r2, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in6=@private1}, {@in, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8}, @lifetime_val={0x24}]}, 0x164}}, 0x0) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) 1.745228662s ago: executing program 8 (id=1932): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x8, 0x5, &(0x7f0000000000)={0xd, "4c07d50dbc8c9a0e7f2361788f1965b737e1f720034e0c8e38a490313860889a32"}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) unshare(0x400) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000480)={0x6000000, 0x800, 0x8}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 1.744266613s ago: executing program 5 (id=1933): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (fail_nth: 2) 1.218464392s ago: executing program 8 (id=1934): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 195.057777ms ago: executing program 5 (id=1935): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (fail_nth: 1) 0s ago: executing program 8 (id=1936): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): d0 [ 447.767821][T14312] ? __pfx___read_swap_cache_async+0x10/0x10 [ 447.773838][T14312] swap_cluster_readahead+0x59c/0x710 [ 447.779245][T14312] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 447.785164][T14312] ? __pfx_lock_release+0x10/0x10 [ 447.790219][T14312] swapin_readahead+0x1ba/0xd30 [ 447.795087][T14312] ? filemap_get_entry+0x328/0x3b0 [ 447.800230][T14312] ? __pfx_swapin_readahead+0x10/0x10 [ 447.805625][T14312] ? __pfx_lock_release+0x10/0x10 [ 447.810680][T14312] ? __filemap_get_folio+0x848/0x940 [ 447.815993][T14312] ? swap_cache_get_folio+0xa5/0x3c0 [ 447.821304][T14312] do_swap_page+0x5a0/0x5d90 [ 447.825947][T14312] ? do_swap_page+0x1f4/0x5d90 [ 447.830738][T14312] ? __pfx_do_swap_page+0x10/0x10 [ 447.835807][T14312] ? rcu_is_watching+0x15/0xb0 [ 447.840598][T14312] ? ___pte_offset_map+0x2c4/0x380 [ 447.845742][T14312] ? __pfx____pte_offset_map+0x10/0x10 [ 447.851229][T14312] ? __pfx_default_wake_function+0x10/0x10 [ 447.857056][T14312] ? pte_offset_map_rw_nolock+0xc4/0x140 [ 447.862699][T14312] handle_pte_fault+0x5af/0x5ed0 [ 447.867658][T14312] ? __pfx_handle_pte_fault+0x10/0x10 [ 447.873033][T14312] ? __lock_acquire+0x1397/0x2100 [ 447.878105][T14312] ? mt_find+0x2a9/0x920 [ 447.882375][T14312] ? __pfx_lock_release+0x10/0x10 [ 447.887427][T14312] handle_mm_fault+0x1106/0x1bb0 [ 447.892395][T14312] ? mt_find+0x2a9/0x920 [ 447.896672][T14312] ? __pfx_handle_mm_fault+0x10/0x10 [ 447.901958][T14312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.908296][T14312] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 447.913609][T14312] exc_page_fault+0x2b9/0x8b0 [ 447.918324][T14312] asm_exc_page_fault+0x26/0x30 [ 447.923198][T14312] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 447.929026][T14312] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 447.948656][T14312] RSP: 0018:ffffc90003ac76d8 EFLAGS: 00050206 [ 447.954748][T14312] RAX: 000008230000000b RBX: 0000000020000240 RCX: 0000000000000038 [ 447.962741][T14312] RDX: 0000000000000000 RSI: ffff8880409cc000 RDI: 0000000020000240 [ 447.970731][T14312] RBP: ffffc90003ac7850 R08: ffff8880409cc037 R09: 1ffff11008139806 [ 447.978719][T14312] R10: dffffc0000000000 R11: ffffed1008139807 R12: 1ffff92000758f3b [ 447.986707][T14312] R13: ffffc90003ac79d8 R14: 0000000000000038 R15: ffff8880409cc000 [ 447.994702][T14312] _copy_to_iter+0x267/0x1c50 [ 447.999392][T14312] ? __virt_addr_valid+0x183/0x530 [ 448.004522][T14312] ? __pfx_lock_release+0x10/0x10 [ 448.009563][T14312] ? __pfx__copy_to_iter+0x10/0x10 [ 448.014680][T14312] ? __virt_addr_valid+0x183/0x530 [ 448.019813][T14312] ? __virt_addr_valid+0x183/0x530 [ 448.024929][T14312] ? __virt_addr_valid+0x45f/0x530 [ 448.030043][T14312] ? __phys_addr_symbol+0x2f/0x70 [ 448.035068][T14312] ? __check_object_size+0x47a/0x730 [ 448.040368][T14312] bcm_recvmsg+0x171/0x630 [ 448.044806][T14312] ? __pfx_aa_sk_perm+0x10/0x10 [ 448.049675][T14312] ? __pfx_bcm_recvmsg+0x10/0x10 [ 448.054622][T14312] ? aa_sock_msg_perm+0x91/0x160 [ 448.059570][T14312] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 448.064862][T14312] ? __pfx_bcm_recvmsg+0x10/0x10 [ 448.069815][T14312] sock_recvmsg+0x22f/0x280 [ 448.074333][T14312] sock_read_iter+0x2c4/0x3d0 [ 448.079023][T14312] ? __pfx_sock_read_iter+0x10/0x10 [ 448.084248][T14312] do_iter_readv_writev+0x600/0x880 [ 448.089459][T14312] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 448.095183][T14312] ? bpf_lsm_file_permission+0x9/0x10 [ 448.100557][T14312] ? security_file_permission+0x74/0x280 [ 448.106199][T14312] ? rw_verify_area+0x55e/0x6f0 [ 448.111055][T14312] vfs_readv+0x2b3/0xa80 [ 448.115322][T14312] ? __pfx_vfs_readv+0x10/0x10 [ 448.120116][T14312] ? __pfx_vfs_write+0x10/0x10 [ 448.124889][T14312] ? __fget_files+0x2a/0x410 [ 448.129482][T14312] ? __fget_files+0x395/0x410 [ 448.134166][T14312] ? __fget_files+0x2a/0x410 [ 448.138774][T14312] do_readv+0x1b6/0x360 [ 448.142940][T14312] ? __pfx_do_readv+0x10/0x10 [ 448.147636][T14312] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 448.154251][T14312] ? lockdep_hardirqs_on+0x99/0x150 [ 448.159471][T14312] __do_fast_syscall_32+0xb4/0x110 [ 448.164586][T14312] ? exc_page_fault+0x590/0x8b0 [ 448.169439][T14312] do_fast_syscall_32+0x34/0x80 [ 448.174287][T14312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.180613][T14312] RIP: 0023:0xf714d579 [ 448.184685][T14312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 448.204311][T14312] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 448.212742][T14312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200026c0 [ 448.220717][T14312] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.228684][T14312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.236654][T14312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 448.244620][T14312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.252610][T14312] [ 448.267845][ T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 448.278270][ T54] Bluetooth: hci1: Injecting HCI hardware error event [ 448.289568][ T54] Bluetooth: hci1: hardware error 0x00 [ 448.296284][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 448.303874][ T5892] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 448.312839][ T5892] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 448.323098][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.334936][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.365404][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 448.442306][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.494857][ T5892] usb 5-1: Product: syz [ 448.509133][ T5892] usb 5-1: Manufacturer: syz [ 448.522300][ T5892] usb 5-1: SerialNumber: syz [ 448.825120][ T5892] usb 5-1: 0:2 : does not exist [ 448.882486][ T5892] usb 5-1: USB disconnect, device number 24 [ 449.175297][ T7875] udevd[7875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.752559][ T5846] Bluetooth: hci4: command tx timeout [ 449.809896][ T11] team0 (unregistering): Port device team_slave_1 removed [ 449.953472][ T11] team0 (unregistering): Port device team_slave_0 removed [ 450.029372][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079720800: rx timeout, send abort [ 450.472664][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 450.537632][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079720800: abort rx timeout. Force session deactivation [ 450.937569][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1725'. [ 451.316052][T14195] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.336366][T14195] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.347827][T14195] bridge_slave_0: entered allmulticast mode [ 451.368901][T14195] bridge_slave_0: entered promiscuous mode [ 451.382861][T14374] SET target dimension over the limit! [ 451.404381][T14195] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.451661][T14195] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.478603][T14195] bridge_slave_1: entered allmulticast mode [ 451.506897][T14195] bridge_slave_1: entered promiscuous mode [ 451.640155][T14195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.671768][T14195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.712048][T14386] netlink: 'syz.4.1741': attribute type 10 has an invalid length. [ 451.832401][ T54] Bluetooth: hci4: command tx timeout [ 451.845806][T14386] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 451.906520][T14195] team0: Port device team_slave_0 added [ 451.943232][T14195] team0: Port device team_slave_1 added [ 452.034971][T14395] wg1: entered promiscuous mode [ 452.086962][T14195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.098732][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.134661][T14195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.157127][T14195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.169145][T14195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.226835][T14195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.244065][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 452.368919][T14195] hsr_slave_0: entered promiscuous mode [ 452.375761][T14381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.394760][T14195] hsr_slave_1: entered promiscuous mode [ 452.410616][T14195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.421505][T14195] Cannot create hsr debugfs directory [ 452.671070][T14420] FAULT_INJECTION: forcing a failure. [ 452.671070][T14420] name failslab, interval 1, probability 0, space 0, times 0 [ 452.710216][T14420] CPU: 1 UID: 0 PID: 14420 Comm: syz.1.1749 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 452.721018][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 452.731094][T14420] Call Trace: [ 452.734392][T14420] [ 452.737342][T14420] dump_stack_lvl+0x241/0x360 [ 452.742051][T14420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.747279][T14420] ? __pfx__printk+0x10/0x10 [ 452.751897][T14420] ? kmem_cache_alloc_noprof+0x48/0x380 [ 452.757474][T14420] ? __pfx___might_resched+0x10/0x10 [ 452.762788][T14420] should_fail_ex+0x3b0/0x4e0 [ 452.767510][T14420] should_failslab+0xac/0x100 [ 452.772210][T14420] ? vm_area_dup+0x27/0x290 [ 452.776741][T14420] kmem_cache_alloc_noprof+0x70/0x380 [ 452.782146][T14420] vm_area_dup+0x27/0x290 [ 452.786502][T14420] __split_vma+0x1cb/0xc50 [ 452.790956][T14420] ? __pfx___split_vma+0x10/0x10 [ 452.795936][T14420] vma_modify+0x144/0x330 [ 452.800289][T14420] vma_modify_policy+0x3a2/0x430 [ 452.805252][T14420] ? __pfx_vma_modify_policy+0x10/0x10 [ 452.810760][T14420] mbind_range+0x2cf/0x830 [ 452.815198][T14420] ? mas_find+0x950/0xbb0 [ 452.819536][T14420] __se_sys_mbind+0xbe8/0x18d0 [ 452.824312][T14420] ? __pfx___se_sys_mbind+0x10/0x10 [ 452.829504][T14420] ? __mutex_unlock_slowpath+0x21e/0x790 [ 452.835143][T14420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 452.841120][T14420] ? __fget_files+0x2a/0x410 [ 452.845727][T14420] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 452.852314][T14420] ? __ia32_sys_mbind+0x21/0xf0 [ 452.857168][T14420] __do_fast_syscall_32+0xb4/0x110 [ 452.862284][T14420] ? exc_page_fault+0x590/0x8b0 [ 452.867148][T14420] do_fast_syscall_32+0x34/0x80 [ 452.871994][T14420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.878316][T14420] RIP: 0023:0xf709d579 [ 452.882378][T14420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 452.901986][T14420] RSP: 002b:00000000f508f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 452.910403][T14420] RAX: ffffffffffffffda RBX: 00000000200a2000 RCX: 0000000000004000 [ 452.918380][T14420] RDX: 0000000000004003 RSI: 0000000020000040 RDI: 0000000000000005 [ 452.926352][T14420] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 452.934316][T14420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 452.942279][T14420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.950264][T14420] [ 453.271725][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'. [ 454.854067][T14462] loop2: detected capacity change from 0 to 7 [ 454.862561][T14462] Dev loop2: unable to read RDB block 7 [ 454.868192][T14462] loop2: AHDI p3 [ 454.902546][T14462] loop2: partition table partially beyond EOD, truncated [ 455.098143][T14195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 455.162492][T14195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 455.194277][T14468] wg1: entered promiscuous mode [ 455.211423][T14195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 455.252712][T14195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 455.421115][T14482] tipc: Started in network mode [ 455.442564][T14482] tipc: Node identity 7, cluster identity 4711 [ 455.448764][T14482] tipc: Node number set to 7 [ 455.549416][T14195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.625238][T14195] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.656758][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.663938][ T3551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.723228][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.730390][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.795264][T14502] FAULT_INJECTION: forcing a failure. [ 455.795264][T14502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.839037][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.0.1764 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 455.849832][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 455.859915][T14502] Call Trace: [ 455.863212][T14502] [ 455.866157][T14502] dump_stack_lvl+0x241/0x360 [ 455.870875][T14502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.876104][T14502] ? __pfx__printk+0x10/0x10 [ 455.880725][T14502] ? __pfx_lock_release+0x10/0x10 [ 455.885780][T14502] should_fail_ex+0x3b0/0x4e0 [ 455.890500][T14502] _copy_from_user+0x2f/0xc0 [ 455.895121][T14502] get_compat_msghdr+0xae/0x730 [ 455.900004][T14502] ? __pfx_get_compat_msghdr+0x10/0x10 [ 455.905523][T14502] __sys_sendmsg+0x233/0x350 [ 455.910136][T14502] ? __pfx_lock_release+0x10/0x10 [ 455.915188][T14502] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.920334][T14502] ? __pfx_vfs_write+0x10/0x10 [ 455.925149][T14502] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 455.931768][T14502] ? lockdep_hardirqs_on+0x99/0x150 [ 455.937004][T14502] __do_fast_syscall_32+0xb4/0x110 [ 455.942134][T14502] ? exc_page_fault+0x590/0x8b0 [ 455.947008][T14502] do_fast_syscall_32+0x34/0x80 [ 455.951932][T14502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.958264][T14502] RIP: 0023:0xf714d579 [ 455.962326][T14502] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 455.981933][T14502] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 455.990348][T14502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 455.998315][T14502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.006278][T14502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.014242][T14502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 456.022206][T14502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.030179][T14502] [ 456.077168][T14195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.117900][T14195] veth0_vlan: entered promiscuous mode [ 456.128888][T14195] veth1_vlan: entered promiscuous mode [ 456.181090][T14195] veth0_macvtap: entered promiscuous mode [ 456.195255][T14195] veth1_macvtap: entered promiscuous mode [ 456.221209][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.232088][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.256586][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.280742][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.315079][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.325873][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.357318][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.397191][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.409689][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.432276][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.453459][T14195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.506168][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.557207][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.597952][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.601831][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 456.618533][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.651932][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.746527][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.767814][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.802809][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.822355][T14195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.849447][T14195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.871711][T14195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.895314][T14195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.920564][T14195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.936228][T14195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.966118][T14195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.194745][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.224368][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.306756][T14550] wg1: entered promiscuous mode [ 457.351251][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.373761][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.167199][T14586] netlink: 'syz.3.1777': attribute type 10 has an invalid length. [ 458.242455][ T5894] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 458.270502][T14586] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 458.482785][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 458.509783][T14595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1782'. [ 458.520248][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.536535][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'. [ 458.545808][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.567639][ T5894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.577064][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.585192][ T5894] usb 2-1: Product: syz [ 458.589405][ T5894] usb 2-1: Manufacturer: syz [ 458.594597][ T5894] usb 2-1: SerialNumber: syz [ 458.714857][T14603] loop2: detected capacity change from 0 to 7 [ 458.721987][T14603] Dev loop2: unable to read RDB block 7 [ 458.728348][T14603] loop2: unable to read partition table [ 458.735217][T14603] loop2: partition table beyond EOD, truncated [ 458.741708][T14603] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 458.872904][T14583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.873729][ T5894] usb 2-1: 0:2 : does not exist [ 458.907947][ T5894] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 458.940099][ T5894] usb 2-1: USB disconnect, device number 41 [ 458.946837][T14607] vivid-004: disconnect [ 458.963982][T14606] vivid-004: reconnect [ 459.172990][ T7875] udevd[7875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.385821][ T996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.554608][ T996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.662575][ T996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.847061][ T996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.921516][T14634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.928837][T14634] IPv6: NLM_F_CREATE should be set when creating new route [ 459.936165][T14634] IPv6: NLM_F_CREATE should be set when creating new route [ 459.943459][T14634] IPv6: NLM_F_CREATE should be set when creating new route [ 460.227928][ T996] bridge_slave_1: left allmulticast mode [ 460.242320][ T996] bridge_slave_1: left promiscuous mode [ 460.263344][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.294103][ T996] bridge_slave_0: left allmulticast mode [ 460.299781][ T996] bridge_slave_0: left promiscuous mode [ 460.333358][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.429735][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 460.456774][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 460.467059][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 460.476542][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 460.486157][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 460.493660][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 460.632017][T14662] loop2: detected capacity change from 0 to 7 [ 460.658260][T14662] Dev loop2: unable to read RDB block 7 [ 460.664216][T14662] loop2: unable to read partition table [ 460.670241][T14662] loop2: partition table beyond EOD, truncated [ 460.682553][T14662] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 460.943421][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.959337][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.969954][ T996] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 460.982069][ T996] bond0 (unregistering): Released all slaves [ 461.297989][ T996] hsr_slave_0: left promiscuous mode [ 461.334362][ T996] hsr_slave_1: left promiscuous mode [ 461.350868][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.377470][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.396419][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.422396][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.504757][ T996] veth1_macvtap: left promiscuous mode [ 461.514170][ T996] veth0_macvtap: left promiscuous mode [ 461.519779][ T996] veth1_vlan: left promiscuous mode [ 461.525854][ T996] veth0_vlan: left promiscuous mode [ 461.529429][T14685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1800'. [ 461.557252][T14685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 462.318939][ T996] team0 (unregistering): Port device team_slave_1 removed [ 462.389181][ T996] team0 (unregistering): Port device team_slave_0 removed [ 462.552385][ T5846] Bluetooth: hci3: command tx timeout [ 462.782246][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1806'. [ 462.814513][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1806'. [ 462.992684][T14719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1805'. [ 463.012747][T14660] chnl_net:caif_netlink_parms(): no params data found [ 463.198104][T14660] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.206560][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.213982][T14660] bridge_slave_0: entered allmulticast mode [ 463.220571][T14660] bridge_slave_0: entered promiscuous mode [ 463.229707][T14660] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.240872][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.248660][T14660] bridge_slave_1: entered allmulticast mode [ 463.255370][T14660] bridge_slave_1: entered promiscuous mode [ 463.292826][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.304017][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.326576][T14660] team0: Port device team_slave_0 added [ 463.334516][T14660] team0: Port device team_slave_1 added [ 463.352000][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.359544][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.386355][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.421064][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.441222][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.494800][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.627029][T14660] hsr_slave_0: entered promiscuous mode [ 463.646727][T14660] hsr_slave_1: entered promiscuous mode [ 463.668583][T14660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.697478][T14660] Cannot create hsr debugfs directory [ 464.473111][ T5894] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 464.541787][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.633405][ T5846] Bluetooth: hci3: command tx timeout [ 464.642796][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 464.656485][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.672574][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.684468][ T5894] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice=ff.eb [ 464.693698][ T5894] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 464.702053][ T5894] usb 2-1: Product: syz [ 464.706872][ T5894] usb 2-1: Manufacturer: syz [ 464.714326][ T5894] usb 2-1: config 0 descriptor?? [ 464.771756][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.934631][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.114453][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.125508][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.134970][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.143188][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.144120][ T5894] lua 0003:1E7D:2C2E.0015: global environment stack underflow [ 465.163073][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.175196][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 465.179675][ T5894] lua 0003:1E7D:2C2E.0015: item 0 0 1 11 parsing failed [ 465.201102][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.215661][ T5894] lua 0003:1E7D:2C2E.0015: parse failed [ 465.228626][ T5894] lua 0003:1E7D:2C2E.0015: probe with driver lua failed with error -22 [ 465.346947][ T35] bridge_slave_1: left allmulticast mode [ 465.354958][ T35] bridge_slave_1: left promiscuous mode [ 465.360697][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.378340][ T46] usb 2-1: USB disconnect, device number 42 [ 465.392124][ T35] bridge_slave_0: left allmulticast mode [ 465.401297][ T35] bridge_slave_0: left promiscuous mode [ 465.408369][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.770251][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.781240][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.792840][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 465.807447][ T35] bond0 (unregistering): Released all slaves [ 465.948954][T14660] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.125765][T14660] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.167356][T14660] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.176050][T14794] FAULT_INJECTION: forcing a failure. [ 466.176050][T14794] name failslab, interval 1, probability 0, space 0, times 0 [ 466.226063][T14660] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 466.242710][T14794] CPU: 1 UID: 0 PID: 14794 Comm: syz.1.1816 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 466.253502][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 466.263571][T14794] Call Trace: [ 466.266864][T14794] [ 466.269809][T14794] dump_stack_lvl+0x241/0x360 [ 466.274517][T14794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.279734][T14794] ? __pfx__printk+0x10/0x10 [ 466.284331][T14794] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 466.290310][T14794] ? __pfx___might_resched+0x10/0x10 [ 466.295595][T14794] should_fail_ex+0x3b0/0x4e0 [ 466.300277][T14794] should_failslab+0xac/0x100 [ 466.304952][T14794] kmem_cache_alloc_node_noprof+0x77/0x380 [ 466.310755][T14794] ? __alloc_skb+0x1c3/0x440 [ 466.315517][T14794] __alloc_skb+0x1c3/0x440 [ 466.319932][T14794] ? __pfx___alloc_skb+0x10/0x10 [ 466.324865][T14794] ? netlink_autobind+0xd6/0x2f0 [ 466.329796][T14794] ? netlink_autobind+0x2b0/0x2f0 [ 466.334817][T14794] netlink_sendmsg+0x638/0xcb0 [ 466.339583][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.344864][T14794] ? __pfx_lock_release+0x10/0x10 [ 466.349896][T14794] ? aa_sock_msg_perm+0x91/0x160 [ 466.354829][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.360106][T14794] __sock_sendmsg+0x221/0x270 [ 466.364782][T14794] ____sys_sendmsg+0x52a/0x7e0 [ 466.369545][T14794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.374836][T14794] __sys_sendmsg+0x269/0x350 [ 466.379422][T14794] ? __pfx_lock_release+0x10/0x10 [ 466.384446][T14794] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.389566][T14794] ? __pfx_vfs_write+0x10/0x10 [ 466.394344][T14794] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 466.400929][T14794] ? lockdep_hardirqs_on+0x99/0x150 [ 466.406127][T14794] __do_fast_syscall_32+0xb4/0x110 [ 466.411232][T14794] ? exc_page_fault+0x590/0x8b0 [ 466.416343][T14794] do_fast_syscall_32+0x34/0x80 [ 466.421185][T14794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.427510][T14794] RIP: 0023:0xf709d579 [ 466.431577][T14794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 466.451190][T14794] RSP: 002b:00000000f508f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 466.459604][T14794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200012c0 [ 466.467569][T14794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.475533][T14794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.483502][T14794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.491478][T14794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.499453][T14794] [ 466.715298][ T5846] Bluetooth: hci3: command tx timeout [ 466.907119][T14775] chnl_net:caif_netlink_parms(): no params data found [ 466.934199][ T35] hsr_slave_0: left promiscuous mode [ 466.942000][T14814] SET target dimension over the limit! [ 466.980097][ T35] hsr_slave_1: left promiscuous mode [ 466.999493][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.032485][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.059392][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.079185][T14816] FAULT_INJECTION: forcing a failure. [ 467.079185][T14816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.082419][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.098388][T14816] CPU: 0 UID: 0 PID: 14816 Comm: syz.6.1821 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 467.110938][T14816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 467.121002][T14816] Call Trace: [ 467.124296][T14816] [ 467.127244][T14816] dump_stack_lvl+0x241/0x360 [ 467.131954][T14816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.137169][T14816] ? __pfx__printk+0x10/0x10 [ 467.141833][T14816] ? __pfx_lock_release+0x10/0x10 [ 467.146878][T14816] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.152102][T14816] should_fail_ex+0x3b0/0x4e0 [ 467.156819][T14816] _copy_from_user+0x2f/0xc0 [ 467.161437][T14816] snd_seq_write+0x314/0xaa0 [ 467.166060][T14816] ? __pfx_snd_seq_write+0x10/0x10 [ 467.171186][T14816] ? bpf_lsm_file_permission+0x9/0x10 [ 467.176576][T14816] ? security_file_permission+0x74/0x280 [ 467.182231][T14816] ? rw_verify_area+0x1c3/0x6f0 [ 467.187092][T14816] ? __pfx_snd_seq_write+0x10/0x10 [ 467.192223][T14816] vfs_write+0x2a3/0xd30 [ 467.196489][T14816] ? __pfx_vfs_write+0x10/0x10 [ 467.201275][T14816] ? __fget_files+0x2a/0x410 [ 467.205896][T14816] ? __fget_files+0x395/0x410 [ 467.210597][T14816] ? __fget_files+0x2a/0x410 [ 467.215567][T14816] ksys_write+0x18f/0x2b0 [ 467.219913][T14816] ? __pfx_ksys_write+0x10/0x10 [ 467.224776][T14816] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 467.231391][T14816] ? lockdep_hardirqs_on+0x99/0x150 [ 467.236622][T14816] __do_fast_syscall_32+0xb4/0x110 [ 467.241747][T14816] ? exc_page_fault+0x590/0x8b0 [ 467.246622][T14816] do_fast_syscall_32+0x34/0x80 [ 467.251484][T14816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.257830][T14816] RIP: 0023:0xf706d579 [ 467.261923][T14816] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 467.281549][T14816] RSP: 002b:00000000f505f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 467.289978][T14816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200001c0 [ 467.297964][T14816] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 467.305953][T14816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.313942][T14816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 467.321920][T14816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.329913][T14816] [ 467.344118][ T5846] Bluetooth: hci4: command tx timeout [ 467.405411][ T35] veth1_macvtap: left promiscuous mode [ 467.410952][ T35] veth0_macvtap: left promiscuous mode [ 467.463396][ T35] veth1_vlan: left promiscuous mode [ 467.472559][ T35] veth0_vlan: left promiscuous mode [ 467.585622][T14822] FAULT_INJECTION: forcing a failure. [ 467.585622][T14822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.600062][T14822] CPU: 1 UID: 0 PID: 14822 Comm: syz.6.1824 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 467.610850][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 467.620902][T14822] Call Trace: [ 467.624180][T14822] [ 467.627105][T14822] dump_stack_lvl+0x241/0x360 [ 467.631786][T14822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.636989][T14822] ? __pfx__printk+0x10/0x10 [ 467.641575][T14822] ? __pfx_lock_release+0x10/0x10 [ 467.646602][T14822] should_fail_ex+0x3b0/0x4e0 [ 467.651283][T14822] _copy_from_user+0x2f/0xc0 [ 467.655872][T14822] get_old_timespec32+0x113/0x280 [ 467.660898][T14822] ? __pfx_get_old_timespec32+0x10/0x10 [ 467.666447][T14822] ? __mutex_unlock_slowpath+0x21e/0x790 [ 467.672083][T14822] ? __pfx_vfs_write+0x10/0x10 [ 467.676851][T14822] do_compat_pselect+0x127/0x3b0 [ 467.681789][T14822] ? __fget_files+0x2a/0x410 [ 467.686377][T14822] ? __pfx_do_compat_pselect+0x10/0x10 [ 467.691836][T14822] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.697824][T14822] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.704152][T14822] __ia32_compat_sys_pselect6_time32+0x14c/0x190 [ 467.710482][T14822] ? lockdep_hardirqs_on+0x99/0x150 [ 467.715690][T14822] __do_fast_syscall_32+0xb4/0x110 [ 467.720799][T14822] ? exc_page_fault+0x590/0x8b0 [ 467.725652][T14822] do_fast_syscall_32+0x34/0x80 [ 467.730500][T14822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.736824][T14822] RIP: 0023:0xf706d579 [ 467.740883][T14822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 467.760483][T14822] RSP: 002b:00000000f505f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000134 [ 467.768898][T14822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 467.776866][T14822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 467.784831][T14822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.792810][T14822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 467.800781][T14822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.808768][T14822] [ 468.353108][T14835] FAULT_INJECTION: forcing a failure. [ 468.353108][T14835] name failslab, interval 1, probability 0, space 0, times 0 [ 468.368122][T14835] CPU: 0 UID: 0 PID: 14835 Comm: syz.0.1829 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 468.378913][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 468.388980][T14835] Call Trace: [ 468.392252][T14835] [ 468.395179][T14835] dump_stack_lvl+0x241/0x360 [ 468.399872][T14835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.405063][T14835] ? __pfx__printk+0x10/0x10 [ 468.409648][T14835] ? __kmalloc_noprof+0xb5/0x4c0 [ 468.414610][T14835] ? __pfx___might_resched+0x10/0x10 [ 468.419889][T14835] should_fail_ex+0x3b0/0x4e0 [ 468.424581][T14835] should_failslab+0xac/0x100 [ 468.429276][T14835] __kmalloc_noprof+0xdd/0x4c0 [ 468.434041][T14835] ? sock_kmalloc+0xd7/0x160 [ 468.438626][T14835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 468.443830][T14835] sock_kmalloc+0xd7/0x160 [ 468.448245][T14835] hash_sendmsg+0x80a/0x1110 [ 468.452842][T14835] ? __pfx_hash_sendmsg+0x10/0x10 [ 468.457857][T14835] __sock_sendmsg+0x221/0x270 [ 468.462543][T14835] ____sys_sendmsg+0x52a/0x7e0 [ 468.467308][T14835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.472612][T14835] __sys_sendmmsg+0x46a/0x720 [ 468.477304][T14835] ? __pfx___sys_sendmmsg+0x10/0x10 [ 468.482506][T14835] ? __pfx_lock_acquire+0x10/0x10 [ 468.487546][T14835] ? get_pid_task+0x23/0x1f0 [ 468.492144][T14835] ? __pfx_lock_release+0x10/0x10 [ 468.497181][T14835] ? kstrtouint_from_user+0x128/0x190 [ 468.502577][T14835] ? ksys_write+0x22a/0x2b0 [ 468.507097][T14835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 468.513451][T14835] ? __fget_files+0x2a/0x410 [ 468.518045][T14835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.524027][T14835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.530365][T14835] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 468.535924][T14835] __do_fast_syscall_32+0xb4/0x110 [ 468.541035][T14835] ? exc_page_fault+0x590/0x8b0 [ 468.545888][T14835] do_fast_syscall_32+0x34/0x80 [ 468.550731][T14835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.557058][T14835] RIP: 0023:0xf714d579 [ 468.561124][T14835] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 468.580727][T14835] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 468.589139][T14835] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001200 [ 468.597104][T14835] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.605069][T14835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.613037][T14835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 468.621006][T14835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.628982][T14835] [ 468.787927][ T35] team0 (unregistering): Port device team_slave_1 removed [ 468.795418][ T5846] Bluetooth: hci3: command tx timeout [ 468.879199][ T35] team0 (unregistering): Port device team_slave_0 removed [ 469.357480][ T5846] Bluetooth: hci4: command tx timeout [ 469.545317][T14775] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.553504][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.560764][T14775] bridge_slave_0: entered allmulticast mode [ 469.568000][T14775] bridge_slave_0: entered promiscuous mode [ 469.578130][T14775] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.585345][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.592916][T14775] bridge_slave_1: entered allmulticast mode [ 469.599641][T14775] bridge_slave_1: entered promiscuous mode [ 469.667550][T14775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.704184][T14775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.738927][T14660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.765900][T14660] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.797678][T14775] team0: Port device team_slave_0 added [ 469.859028][T14775] team0: Port device team_slave_1 added [ 469.876103][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.883271][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.893870][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.900976][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.979665][T14775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.987262][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.016363][T14775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.030771][T14775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.041996][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.071231][T14775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.144118][T14775] hsr_slave_0: entered promiscuous mode [ 470.150724][T14775] hsr_slave_1: entered promiscuous mode [ 470.157708][T14775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.166978][T14775] Cannot create hsr debugfs directory [ 470.244526][T14660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.417743][T14775] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.479717][T14660] veth0_vlan: entered promiscuous mode [ 470.491087][T14660] veth1_vlan: entered promiscuous mode [ 470.526134][T14775] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.584642][T14660] veth0_macvtap: entered promiscuous mode [ 470.629223][T14775] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.651436][T14660] veth1_macvtap: entered promiscuous mode [ 470.681348][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.692111][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.709668][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.732378][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.747209][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.778745][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.788874][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.800527][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.811710][T14660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.839311][T14775] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.855190][T14860] netlink: 'syz.1.1839': attribute type 21 has an invalid length. [ 470.874533][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.898416][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.910962][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.936971][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.949495][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.961055][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.969511][T14863] FAULT_INJECTION: forcing a failure. [ 470.969511][T14863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.971756][T14660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.991086][T14863] CPU: 0 UID: 0 PID: 14863 Comm: syz.1.1840 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 470.996250][T14660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.005567][T14863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 471.005585][T14863] Call Trace: [ 471.005593][T14863] [ 471.005603][T14863] dump_stack_lvl+0x241/0x360 [ 471.005638][T14863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.017135][T14660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.025455][T14863] ? __pfx__printk+0x10/0x10 [ 471.025503][T14863] should_fail_ex+0x3b0/0x4e0 [ 471.025536][T14863] _copy_from_user+0x2f/0xc0 [ 471.025562][T14863] move_addr_to_kernel+0x82/0x150 [ 471.025591][T14863] get_compat_msghdr+0x425/0x730 [ 471.025618][T14863] ? __pfx_get_compat_msghdr+0x10/0x10 [ 471.025650][T14863] __sys_sendmmsg+0x42b/0x720 [ 471.025682][T14863] ? __pfx___sys_sendmmsg+0x10/0x10 [ 471.025713][T14863] ? __pfx_lock_acquire+0x10/0x10 [ 471.025736][T14863] ? get_pid_task+0x23/0x1f0 [ 471.025759][T14863] ? __pfx_lock_release+0x10/0x10 [ 471.025780][T14863] ? kstrtouint_from_user+0x128/0x190 [ 471.025824][T14863] ? ksys_write+0x22a/0x2b0 [ 471.025863][T14863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.118445][T14863] ? __fget_files+0x2a/0x410 [ 471.123054][T14863] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 471.129033][T14863] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.135365][T14863] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 471.140910][T14863] __do_fast_syscall_32+0xb4/0x110 [ 471.146020][T14863] ? exc_page_fault+0x590/0x8b0 [ 471.150879][T14863] do_fast_syscall_32+0x34/0x80 [ 471.155734][T14863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.162083][T14863] RIP: 0023:0xf709d579 [ 471.166150][T14863] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 471.185758][T14863] RSP: 002b:00000000f508f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 471.194186][T14863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000600 [ 471.202159][T14863] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.210132][T14863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.218103][T14863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 471.226066][T14863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.234039][T14863] [ 471.259922][T14660] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.269119][T14660] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.278186][T14660] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.286992][T14660] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.357796][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.395218][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.438351][ T5846] Bluetooth: hci4: command tx timeout [ 471.459822][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.472314][T14775] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.487672][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.499035][T14775] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 471.509712][T14775] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 471.546235][T14775] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.637166][T14775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.688726][T14775] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.705220][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.712348][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.728983][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.736137][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.771903][T14775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.783936][T14870] FAULT_INJECTION: forcing a failure. [ 471.783936][T14870] name failslab, interval 1, probability 0, space 0, times 0 [ 471.784097][T14775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.805161][T14870] CPU: 1 UID: 0 PID: 14870 Comm: syz.7.1789 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 471.817698][T14870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 471.827752][T14870] Call Trace: [ 471.831027][T14870] [ 471.833953][T14870] dump_stack_lvl+0x241/0x360 [ 471.838636][T14870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.843833][T14870] ? __pfx__printk+0x10/0x10 [ 471.848423][T14870] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 471.854401][T14870] ? __pfx___might_resched+0x10/0x10 [ 471.859688][T14870] should_fail_ex+0x3b0/0x4e0 [ 471.864377][T14870] should_failslab+0xac/0x100 [ 471.869054][T14870] kmem_cache_alloc_node_noprof+0x77/0x380 [ 471.874860][T14870] ? __alloc_skb+0x1c3/0x440 [ 471.879454][T14870] __alloc_skb+0x1c3/0x440 [ 471.883874][T14870] ? __pfx___alloc_skb+0x10/0x10 [ 471.888808][T14870] ? netlink_autobind+0xd6/0x2f0 [ 471.893746][T14870] ? netlink_autobind+0x2b0/0x2f0 [ 471.898769][T14870] netlink_sendmsg+0x638/0xcb0 [ 471.903546][T14870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.908837][T14870] ? __pfx_lock_release+0x10/0x10 [ 471.913858][T14870] ? aa_sock_msg_perm+0x91/0x160 [ 471.918794][T14870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.924075][T14870] __sock_sendmsg+0x221/0x270 [ 471.928757][T14870] ____sys_sendmsg+0x52a/0x7e0 [ 471.933522][T14870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.938814][T14870] __sys_sendmsg+0x269/0x350 [ 471.943398][T14870] ? __pfx_lock_release+0x10/0x10 [ 471.948421][T14870] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.953550][T14870] ? __pfx_vfs_write+0x10/0x10 [ 471.958338][T14870] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 471.964934][T14870] ? lockdep_hardirqs_on+0x99/0x150 [ 471.970134][T14870] __do_fast_syscall_32+0xb4/0x110 [ 471.975242][T14870] ? exc_page_fault+0x590/0x8b0 [ 471.980095][T14870] do_fast_syscall_32+0x34/0x80 [ 471.984945][T14870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.991276][T14870] RIP: 0023:0xf7f94579 [ 471.995343][T14870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 472.014958][T14870] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 472.023382][T14870] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000020000140 [ 472.031362][T14870] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.039329][T14870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.047302][T14870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 472.055268][T14870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.063243][T14870] [ 472.096195][T14775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.182678][T14775] veth0_vlan: entered promiscuous mode [ 472.207391][T14775] veth1_vlan: entered promiscuous mode [ 472.270686][T14775] veth0_macvtap: entered promiscuous mode [ 472.290651][T14775] veth1_macvtap: entered promiscuous mode [ 472.389908][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.405922][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.452593][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.463244][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.474410][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.485964][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.503305][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.513999][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.524377][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.535334][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.546278][T14775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.556774][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.567481][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.577696][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.588276][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.598303][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.608838][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.618742][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.629943][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.640783][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.651298][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.664454][T14775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.737099][T14775] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.746411][T14775] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.755294][T14775] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.764249][T14775] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.878352][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.893034][ T3551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.919089][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.927050][ T3551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.069468][T14889] vivid-000: disconnect [ 473.091258][T14888] vivid-000: reconnect [ 473.512462][ T5846] Bluetooth: hci4: command tx timeout [ 473.530157][ T5902] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 473.534986][T14905] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 473.568947][T14905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.605445][T14905] team0: Port device batadv0 added [ 473.842335][ T5902] usb 10-1: Using ep0 maxpacket: 8 [ 473.855134][ T5902] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 473.882479][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.890591][ T5902] usb 10-1: Product: syz [ 473.941696][ T5902] usb 10-1: Manufacturer: syz [ 473.947167][ T5902] usb 10-1: SerialNumber: syz [ 473.971664][ T5902] usb 10-1: config 0 descriptor?? [ 474.049534][ T3568] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.195775][ T3568] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.206277][ T5902] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 474.263520][ T5891] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 474.317940][ T3568] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.436767][ T5891] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 474.459016][ T3568] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.478903][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.502765][ T5891] usb 2-1: Product: syz [ 474.506957][ T5891] usb 2-1: Manufacturer: syz [ 474.531957][ T5891] usb 2-1: SerialNumber: syz [ 474.554426][ T5891] usb 2-1: config 0 descriptor?? [ 474.574015][ T5891] upd78f0730 2-1:0.0: upd78f0730 converter detected [ 474.595049][ T5891] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 474.770135][ T3568] bridge_slave_1: left allmulticast mode [ 474.784212][ T5891] usb 2-1: USB disconnect, device number 43 [ 474.784463][ T3568] bridge_slave_1: left promiscuous mode [ 474.814497][ T5891] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 474.825753][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.852736][ T5891] upd78f0730 2-1:0.0: device disconnected [ 474.865649][ T3568] bridge_slave_0: left allmulticast mode [ 474.882532][ T3568] bridge_slave_0: left promiscuous mode [ 474.907521][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.054981][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 475.074173][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 475.088452][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 475.097052][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 475.113061][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 475.122881][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.925408][T14980] vivid-003: disconnect [ 475.937104][T14977] vivid-003: reconnect [ 476.174699][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.213204][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.248700][ T3568] bond0 (unregistering): Released all slaves [ 476.280775][T14894] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 476.288590][T14894] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 476.317088][ T5902] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 476.348775][ T5902] usb 10-1: USB disconnect, device number 29 [ 477.173752][ T3568] hsr_slave_0: left promiscuous mode [ 477.192441][ T54] Bluetooth: hci3: command tx timeout [ 477.252326][ T3568] hsr_slave_1: left promiscuous mode [ 477.314185][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.321645][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.379675][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.392324][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.464424][ T3568] veth1_macvtap: left promiscuous mode [ 477.469973][ T3568] veth0_macvtap: left promiscuous mode [ 477.502332][ T3568] veth1_vlan: left promiscuous mode [ 477.507648][ T3568] veth0_vlan: left promiscuous mode [ 477.689360][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 477.701167][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 477.709155][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 477.725500][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 477.754162][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 477.762004][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.421117][T15040] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1874'. [ 478.707532][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 478.755779][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 478.892393][ T46] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 479.052353][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 479.074075][ T46] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 479.089660][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.102427][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.120288][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.142235][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.155605][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 479.165027][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.274890][ T54] Bluetooth: hci3: command tx timeout [ 479.483440][ T46] usb 2-1: GET_CAPABILITIES returned 0 [ 479.492580][ T46] usbtmc 2-1:16.0: can't read capabilities [ 479.557542][T15047] netlink: 'syz.1.1874': attribute type 15 has an invalid length. [ 479.571188][T15047] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1874'. [ 479.723423][T14953] chnl_net:caif_netlink_parms(): no params data found [ 479.832319][ T54] Bluetooth: hci2: command tx timeout [ 480.138669][T14953] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.160844][T14953] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.174235][T14953] bridge_slave_0: entered allmulticast mode [ 480.181510][T14953] bridge_slave_0: entered promiscuous mode [ 480.199189][T15017] chnl_net:caif_netlink_parms(): no params data found [ 480.234019][T14953] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.249602][T14953] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.259373][T14953] bridge_slave_1: entered allmulticast mode [ 480.273823][T14953] bridge_slave_1: entered promiscuous mode [ 480.317692][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.328552][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.337353][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.353277][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.360800][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 480.368187][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.471159][T14953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.548911][ T3568] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.619373][T14953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.708103][ T3568] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.748567][T15017] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.761668][T15017] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.777851][T15017] bridge_slave_0: entered allmulticast mode [ 480.788667][T15017] bridge_slave_0: entered promiscuous mode [ 480.806966][T15017] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.852522][T15017] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.865788][T15017] bridge_slave_1: entered allmulticast mode [ 480.878969][T15017] bridge_slave_1: entered promiscuous mode [ 480.895442][T14953] team0: Port device team_slave_0 added [ 480.951952][ T3568] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.031165][T14953] team0: Port device team_slave_1 added [ 481.058876][T15017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.105090][ T3568] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.229239][T15017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.301540][T14953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.318185][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.353556][ T54] Bluetooth: hci3: command tx timeout [ 481.381028][T14953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.482646][ T7488] usb 2-1: USB disconnect, device number 44 [ 481.490495][T15017] team0: Port device team_slave_0 added [ 481.588543][T14953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.635704][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.661959][T14953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.734508][T15017] team0: Port device team_slave_1 added [ 481.889454][T14953] hsr_slave_0: entered promiscuous mode [ 481.958949][ T54] Bluetooth: hci2: command tx timeout [ 481.992866][T14953] hsr_slave_1: entered promiscuous mode [ 482.007958][T14953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.022522][T15162] [U] ©ÃÇJ [ 492.026891][T15380] dump_stack_lvl+0x241/0x360 [ 492.031606][T15380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.036833][T15380] ? __pfx__printk+0x10/0x10 [ 492.041450][T15380] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 492.047373][T15380] ? __pfx___might_resched+0x10/0x10 [ 492.052684][T15380] should_fail_ex+0x3b0/0x4e0 [ 492.057393][T15380] should_failslab+0xac/0x100 [ 492.062094][T15380] ? __get_vm_area_node+0x132/0x2d0 [ 492.067313][T15380] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 492.073060][T15380] __get_vm_area_node+0x132/0x2d0 [ 492.078116][T15380] __vmalloc_node_range_noprof+0x344/0x1380 [ 492.084031][T15380] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 492.089601][T15380] ? mark_lock+0x9a/0x360 [ 492.093979][T15380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.100348][T15380] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 492.105917][T15380] __vmalloc_noprof+0x79/0x90 [ 492.110614][T15380] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 492.116181][T15380] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 492.121574][T15380] ? bpf_prog_alloc+0x28/0x1b0 [ 492.126358][T15380] bpf_prog_alloc+0x3a/0x1b0 [ 492.130971][T15380] bpf_prog_load+0x7f7/0x20f0 [ 492.135682][T15380] ? __pfx_bpf_prog_load+0x10/0x10 [ 492.140812][T15380] ? __pfx___might_resched+0x10/0x10 [ 492.146136][T15380] ? __might_fault+0xc6/0x120 [ 492.150840][T15380] __sys_bpf+0x4ee/0x810 [ 492.155104][T15380] ? __pfx___sys_bpf+0x10/0x10 [ 492.159899][T15380] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 492.166253][T15380] __ia32_sys_bpf+0x7c/0x90 [ 492.170794][T15380] __do_fast_syscall_32+0xb4/0x110 [ 492.175927][T15380] ? exc_page_fault+0x590/0x8b0 [ 492.180806][T15380] do_fast_syscall_32+0x34/0x80 [ 492.185680][T15380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.192032][T15380] RIP: 0023:0xf714d579 [ 492.196121][T15380] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 492.215742][T15380] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 492.224173][T15380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000840 [ 492.232163][T15380] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.240154][T15380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.248141][T15380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 492.256113][T15380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.264088][T15380] [ 492.285147][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.294997][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.310023][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.319051][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.326864][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 492.334429][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.348484][T15017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.352646][T15380] syz.0.1905: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 492.382502][T15380] CPU: 0 UID: 0 PID: 15380 Comm: syz.0.1905 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 492.393310][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 492.403378][T15380] Call Trace: [ 492.406678][T15380] [ 492.409629][T15380] dump_stack_lvl+0x241/0x360 [ 492.414328][T15380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.419516][T15380] ? __pfx__printk+0x10/0x10 [ 492.424116][T15380] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 492.430522][T15380] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 492.437024][T15380] warn_alloc+0x278/0x410 [ 492.441339][T15380] ? __pfx_warn_alloc+0x10/0x10 [ 492.446186][T15380] ? __kasan_kmalloc+0x23/0xb0 [ 492.450974][T15380] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 492.456985][T15380] ? __get_vm_area_node+0x280/0x2d0 [ 492.462210][T15380] __vmalloc_node_range_noprof+0x369/0x1380 [ 492.468127][T15380] ? mark_lock+0x9a/0x360 [ 492.472502][T15380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.478849][T15380] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 492.484389][T15380] __vmalloc_noprof+0x79/0x90 [ 492.489071][T15380] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 492.494641][T15380] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 492.500014][T15380] ? bpf_prog_alloc+0x28/0x1b0 [ 492.504782][T15380] bpf_prog_alloc+0x3a/0x1b0 [ 492.509372][T15380] bpf_prog_load+0x7f7/0x20f0 [ 492.514490][T15380] ? __pfx_bpf_prog_load+0x10/0x10 [ 492.519600][T15380] ? __pfx___might_resched+0x10/0x10 [ 492.524889][T15380] ? __might_fault+0xc6/0x120 [ 492.529579][T15380] __sys_bpf+0x4ee/0x810 [ 492.533821][T15380] ? __pfx___sys_bpf+0x10/0x10 [ 492.538587][T15380] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 492.544919][T15380] __ia32_sys_bpf+0x7c/0x90 [ 492.549424][T15380] __do_fast_syscall_32+0xb4/0x110 [ 492.554534][T15380] ? exc_page_fault+0x590/0x8b0 [ 492.559385][T15380] do_fast_syscall_32+0x34/0x80 [ 492.564233][T15380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.570559][T15380] RIP: 0023:0xf714d579 [ 492.574623][T15380] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 492.594233][T15380] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 492.602649][T15380] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000840 [ 492.610617][T15380] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.618579][T15380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.626542][T15380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 492.634510][T15380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.642500][T15380] [ 492.670389][T15380] Mem-Info: [ 492.677157][T15380] active_anon:6377 inactive_anon:0 isolated_anon:0 [ 492.677157][T15380] active_file:13869 inactive_file:38479 isolated_file:0 [ 492.677157][T15380] unevictable:768 dirty:180 writeback:0 [ 492.677157][T15380] slab_reclaimable:6632 slab_unreclaimable:105357 [ 492.677157][T15380] mapped:30306 shmem:1425 pagetables:859 [ 492.677157][T15380] sec_pagetables:0 bounce:0 [ 492.677157][T15380] kernel_misc_reclaimable:0 [ 492.677157][T15380] free:1322597 free_pcp:1199 free_cma:0 [ 492.732958][T15380] Node 0 active_anon:25308kB inactive_anon:0kB active_file:55476kB inactive_file:153844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121024kB dirty:716kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11576kB pagetables:3436kB sec_pagetables:0kB all_unreclaimable? no [ 492.784397][T15380] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 492.816149][T15380] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.858762][T15380] lowmem_reserve[]: 0 2492 2493 0 0 [ 492.866591][T15380] Node 0 DMA32 free:1370556kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:25072kB inactive_anon:0kB active_file:55476kB inactive_file:153012kB unevictable:1536kB writepending:712kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:912kB local_pcp:244kB free_cma:0kB [ 492.869390][T15017] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.907859][T15380] lowmem_reserve[]: 0 0 0 0 0 [ 492.913972][T15380] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 492.945514][T14953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.953296][T15380] lowmem_reserve[]: 0 0 0 0 0 [ 492.958124][T15380] Node 1 Normal free:3910204kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.007806][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.014968][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.029241][T15380] lowmem_reserve[]: 0 0 0 0 0 [ 493.038470][T15380] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 493.056056][T15380] Node 0 DMA32: 223*4kB (UME) 681*8kB (UME) 799*16kB (UME) 1285*32kB (UME) 649*64kB (UME) 194*128kB (UME) 108*256kB (UME) 106*512kB (UME) 78*1024kB (UME) 18*2048kB (UM) 255*4096kB (UM) = 1369748kB [ 493.115570][T14953] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.131003][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.132691][T15380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 493.138130][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.167706][T15380] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 493.181371][T15380] Node 1 Normal: 207*4kB (UME) 56*8kB (UME) 42*16kB (UME) 209*32kB (UME) 100*64kB (UME) 23*128kB (UME) 14*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 5*2048kB (UME) 945*4096kB (M) = 3910204kB [ 493.211888][T15380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.221982][T15380] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 493.233755][T15380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.264273][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.271379][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.281446][T15380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 493.303555][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.310671][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.320895][T15380] 53774 total pagecache pages [ 493.331230][T15380] 0 pages in swap cache [ 493.339435][T15380] Free swap = 124304kB [ 493.365076][T15380] Total swap = 124996kB [ 493.369260][T15380] 2097051 pages RAM [ 493.392571][T15380] 0 pages HighMem/MovableOnly [ 493.397274][T15380] 427011 pages reserved [ 493.401436][T15380] 0 pages cma reserved [ 493.501919][T15390] chnl_net:caif_netlink_parms(): no params data found [ 493.534790][T15017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 493.545241][T15017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.685475][ T3568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.740759][T15017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.753745][T15107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 493.773341][T15107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 493.877879][ T3568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.924839][T15107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.939362][T15107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 494.021508][ T3568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.159959][T15435] FAULT_INJECTION: forcing a failure. [ 494.159959][T15435] name failslab, interval 1, probability 0, space 0, times 0 [ 494.173808][T15435] CPU: 1 UID: 0 PID: 15435 Comm: syz.0.1909 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 494.184598][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 494.194671][T15435] Call Trace: [ 494.197966][T15435] [ 494.200906][T15435] dump_stack_lvl+0x241/0x360 [ 494.205601][T15435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.210795][T15435] ? __pfx__printk+0x10/0x10 [ 494.215391][T15435] ? fs_reclaim_acquire+0x93/0x130 [ 494.220514][T15435] ? __pfx___might_resched+0x10/0x10 [ 494.225799][T15435] should_fail_ex+0x3b0/0x4e0 [ 494.230476][T15435] should_failslab+0xac/0x100 [ 494.235157][T15435] __kmalloc_noprof+0xdd/0x4c0 [ 494.239931][T15435] ? tomoyo_encode+0x26f/0x540 [ 494.244692][T15435] ? copy_from_kernel_nofault_allowed+0xa9/0x130 [ 494.251021][T15435] tomoyo_encode+0x26f/0x540 [ 494.255606][T15435] ? __pfx_simple_dname+0x10/0x10 [ 494.260631][T15435] tomoyo_realpath_from_path+0x59e/0x5e0 [ 494.266264][T15435] tomoyo_path_number_perm+0x236/0x860 [ 494.271723][T15435] ? tomoyo_path_number_perm+0x206/0x860 [ 494.277353][T15435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.283347][T15435] ? __pfx_lock_acquire+0x10/0x10 [ 494.288380][T15435] ? __fget_files+0x2a/0x410 [ 494.292969][T15435] ? __fget_files+0x2a/0x410 [ 494.297561][T15435] security_file_ioctl_compat+0xc6/0x2a0 [ 494.303193][T15435] __se_compat_sys_ioctl+0xd6/0xc10 [ 494.308389][T15435] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 494.314192][T15435] ? __fget_files+0x2a/0x410 [ 494.318782][T15435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 494.324760][T15435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 494.331092][T15435] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 494.337690][T15435] ? lockdep_hardirqs_on+0x99/0x150 [ 494.342891][T15435] __do_fast_syscall_32+0xb4/0x110 [ 494.347994][T15435] ? exc_page_fault+0x590/0x8b0 [ 494.352844][T15435] do_fast_syscall_32+0x34/0x80 [ 494.357688][T15435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.364012][T15435] RIP: 0023:0xf714d579 [ 494.368077][T15435] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 494.387679][T15435] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 494.396091][T15435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040305829 [ 494.404063][T15435] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.412033][T15435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.419996][T15435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 494.427960][T15435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.435939][T15435] [ 494.452306][ T5846] Bluetooth: hci1: command tx timeout [ 494.458759][T14953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.462322][T15435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.527152][ T3568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.560011][T15390] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.575797][T15390] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.592844][T15390] bridge_slave_0: entered allmulticast mode [ 494.599363][T15390] bridge_slave_0: entered promiscuous mode [ 494.634059][T15390] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.641731][T15390] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.649639][T15390] bridge_slave_1: entered allmulticast mode [ 494.663700][T15390] bridge_slave_1: entered promiscuous mode [ 494.714608][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.789050][T15017] veth0_vlan: entered promiscuous mode [ 494.793302][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.852653][T15390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.867953][T15017] veth1_vlan: entered promiscuous mode [ 494.911817][T15390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.935681][T15107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.984214][ T3568] bridge_slave_1: left allmulticast mode [ 494.989901][ T3568] bridge_slave_1: left promiscuous mode [ 494.997951][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.008036][ T3568] bridge_slave_0: left allmulticast mode [ 495.013821][ T3568] bridge_slave_0: left promiscuous mode [ 495.019593][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.452772][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.464209][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.474899][ T3568] bond0 (unregistering): Released all slaves [ 495.508571][T15390] team0: Port device team_slave_0 added [ 495.542548][T14953] veth0_vlan: entered promiscuous mode [ 495.556516][T15390] team0: Port device team_slave_1 added [ 495.570024][ T3568] tipc: Left network mode [ 495.600336][T14953] veth1_vlan: entered promiscuous mode [ 495.646733][T15107] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.654607][T15390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.666720][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.694494][T15390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.707493][T15390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.714756][T15390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.741094][T15390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.752750][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.779538][T15017] veth0_macvtap: entered promiscuous mode [ 495.821896][T15017] veth1_macvtap: entered promiscuous mode [ 495.857149][T15390] hsr_slave_0: entered promiscuous mode [ 495.863542][T15390] hsr_slave_1: entered promiscuous mode [ 495.870175][T15390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.878187][T15390] Cannot create hsr debugfs directory [ 495.920365][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.933945][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.948025][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.958884][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.969362][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.979906][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.990720][T15017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.002115][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.009232][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.041036][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.058926][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.068974][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.080027][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.089950][T15017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.100474][T15017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.111399][T15017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.143545][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.150618][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.164335][ T3568] hsr_slave_0: left promiscuous mode [ 496.170332][ T3568] hsr_slave_1: left promiscuous mode [ 496.190495][ T3568] veth1_macvtap: left promiscuous mode [ 496.196294][ T3568] veth0_macvtap: left promiscuous mode [ 496.201898][ T3568] veth1_vlan: left promiscuous mode [ 496.207790][ T3568] veth0_vlan: left promiscuous mode [ 496.482584][ T54] Bluetooth: hci1: command tx timeout [ 496.599062][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 496.642660][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 496.805242][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.085544][T15017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.094709][T15017] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.104915][T15017] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.114062][T15017] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.143586][T14953] veth0_macvtap: entered promiscuous mode [ 497.198832][T14953] veth1_macvtap: entered promiscuous mode [ 497.261279][T15107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.273146][T15107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.445682][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.456973][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.469635][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.480749][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.497619][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.509396][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.519479][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.542215][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.559512][T14953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.571207][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.584907][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.609889][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.621015][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.635950][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.647576][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.660375][T14953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.671112][T14953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.706616][T14953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.769642][T15107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.790600][T14953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.808002][T14953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.818254][T14953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.827571][T14953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.836981][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.845109][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.915266][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.928395][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.983487][T15107] veth0_vlan: entered promiscuous mode [ 498.030419][T15107] veth1_vlan: entered promiscuous mode [ 498.068889][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.131286][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.155243][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.170673][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.236184][T15107] veth0_macvtap: entered promiscuous mode [ 498.288587][T15107] veth1_macvtap: entered promiscuous mode [ 498.295144][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.333017][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.341295][T15390] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.375400][T15390] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.413669][T15390] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.483473][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.494132][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.506315][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.517169][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.527986][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.542269][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.552097][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.563406][ T5846] Bluetooth: hci1: command tx timeout [ 498.582222][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.620973][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.661062][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.680691][T15107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.691092][T15390] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.738370][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.770595][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.783855][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.815702][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.833480][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.848635][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.859249][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.873096][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.895845][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.947647][T15107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.015852][T15107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.083750][T15107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.115950][T15107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.140447][T15107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.162893][T15107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.185342][T15107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.508396][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.575781][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.718108][T15390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.780372][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.820517][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.875994][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1868'. [ 499.926172][T15390] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.933892][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.943592][T15506] FAULT_INJECTION: forcing a failure. [ 499.943592][T15506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.019375][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.026544][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.036421][T15506] CPU: 0 UID: 0 PID: 15506 Comm: syz.2.1919 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 500.047215][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 500.057288][T15506] Call Trace: [ 500.060594][T15506] [ 500.063545][T15506] dump_stack_lvl+0x241/0x360 [ 500.068265][T15506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.073484][T15506] ? __pfx__printk+0x10/0x10 [ 500.078067][T15506] ? __pfx_lock_release+0x10/0x10 [ 500.083101][T15506] should_fail_ex+0x3b0/0x4e0 [ 500.087812][T15506] _copy_from_user+0x2f/0xc0 [ 500.092430][T15506] get_compat_msghdr+0xae/0x730 [ 500.097304][T15506] ? __pfx_get_compat_msghdr+0x10/0x10 [ 500.102776][T15506] __sys_sendmsg+0x233/0x350 [ 500.107351][T15506] ? __pfx_lock_release+0x10/0x10 [ 500.112364][T15506] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.117466][T15506] ? __pfx_vfs_write+0x10/0x10 [ 500.122242][T15506] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 500.128818][T15506] ? lockdep_hardirqs_on+0x99/0x150 [ 500.134006][T15506] __do_fast_syscall_32+0xb4/0x110 [ 500.139123][T15506] ? exc_page_fault+0x590/0x8b0 [ 500.143971][T15506] do_fast_syscall_32+0x34/0x80 [ 500.148815][T15506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.155138][T15506] RIP: 0023:0xf70cd579 [ 500.159193][T15506] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 500.178786][T15506] RSP: 002b:00000000f50bf55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 500.187188][T15506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000380 [ 500.195149][T15506] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.203112][T15506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.211079][T15506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.219049][T15506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.227012][T15506] [ 500.244600][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.251705][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.292372][ T46] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 500.341817][T15390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.496826][ T46] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.594661][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.630961][T15390] veth0_vlan: entered promiscuous mode [ 500.636666][ T46] usb 6-1: Product: syz [ 500.640867][ T46] usb 6-1: Manufacturer: syz [ 500.652215][ T46] usb 6-1: SerialNumber: syz [ 500.657060][T15390] veth1_vlan: entered promiscuous mode [ 500.679713][T15390] veth0_macvtap: entered promiscuous mode [ 500.688460][T15390] veth1_macvtap: entered promiscuous mode [ 500.703232][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.714086][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.714198][ T5846] Bluetooth: hci1: command tx timeout [ 500.724078][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.724099][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.724113][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.724127][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.724141][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.724155][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.792498][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.808802][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.818698][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.829210][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.840237][T15390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.854617][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.888131][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.912215][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.926727][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.937490][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.955705][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.977626][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.027288][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.042316][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.053004][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.062909][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.073404][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.083295][T15390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.094296][T15390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.106037][T15390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.141856][T15390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.158140][T15390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.167337][T15390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.176475][T15390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.330101][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.351554][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.447832][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.453567][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'. [ 501.466477][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.509453][T15513] netlink: 'syz.5.1876': attribute type 30 has an invalid length. [ 501.534901][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1876'. [ 501.594642][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.611718][ T119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.627835][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.680717][ T46] cdc_ncm 6-1:1.0: bind() failure [ 501.690135][ T46] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 501.727473][ T46] cdc_ncm 6-1:1.1: bind() failure [ 501.768105][ T46] usb 6-1: USB disconnect, device number 50 [ 502.003091][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.516428][T15571] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 502.937386][T15579] FAULT_INJECTION: forcing a failure. [ 502.937386][T15579] name failslab, interval 1, probability 0, space 0, times 0 [ 503.008875][T15579] CPU: 0 UID: 0 PID: 15579 Comm: syz.2.1930 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 503.019651][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 503.029695][T15579] Call Trace: [ 503.032973][T15579] [ 503.035911][T15579] dump_stack_lvl+0x241/0x360 [ 503.040581][T15579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.045766][T15579] ? __pfx__printk+0x10/0x10 [ 503.050346][T15579] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 503.056234][T15579] ? __pfx___might_resched+0x10/0x10 [ 503.061511][T15579] should_fail_ex+0x3b0/0x4e0 [ 503.066182][T15579] should_failslab+0xac/0x100 [ 503.070846][T15579] ? __get_vm_area_node+0x132/0x2d0 [ 503.076035][T15579] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 503.081744][T15579] __get_vm_area_node+0x132/0x2d0 [ 503.086763][T15579] __vmalloc_node_range_noprof+0x344/0x1380 [ 503.092639][T15579] ? copy_process+0x5d1/0x3d50 [ 503.097390][T15579] ? mod_objcg_state+0x125/0x930 [ 503.102330][T15579] ? percpu_ref_get_many+0x19/0x140 [ 503.107525][T15579] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 503.113584][T15579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 503.119901][T15579] ? arch_dup_task_struct+0x44/0xa0 [ 503.125088][T15579] dup_task_struct+0x444/0x8c0 [ 503.129841][T15579] ? copy_process+0x5d1/0x3d50 [ 503.134588][T15579] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.139781][T15579] copy_process+0x5d1/0x3d50 [ 503.144361][T15579] ? get_pid_task+0x23/0x1f0 [ 503.148944][T15579] ? __pfx_lock_release+0x10/0x10 [ 503.153963][T15579] ? kstrtouint_from_user+0x128/0x190 [ 503.159337][T15579] ? __pfx_copy_process+0x10/0x10 [ 503.164349][T15579] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 503.170235][T15579] kernel_clone+0x226/0x8e0 [ 503.174726][T15579] ? __pfx_kernel_clone+0x10/0x10 [ 503.179744][T15579] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 503.185624][T15579] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 503.192032][T15579] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 503.198625][T15579] ? lockdep_hardirqs_on+0x99/0x150 [ 503.203818][T15579] __do_fast_syscall_32+0xb4/0x110 [ 503.208922][T15579] ? exc_page_fault+0x590/0x8b0 [ 503.213763][T15579] do_fast_syscall_32+0x34/0x80 [ 503.218604][T15579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.224920][T15579] RIP: 0023:0xf70cd579 [ 503.228977][T15579] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 503.248569][T15579] RSP: 002b:00000000f50bf50c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 503.256973][T15579] RAX: ffffffffffffffda RBX: 00000000000a9080 RCX: 0000000000000000 [ 503.264937][T15579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.272893][T15579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.280849][T15579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.288804][T15579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.296766][T15579] [ 503.303292][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.554089][T15579] syz.2.1930: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 503.573653][T15579] CPU: 1 UID: 0 PID: 15579 Comm: syz.2.1930 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 503.584428][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 503.594492][T15579] Call Trace: [ 503.597760][T15579] [ 503.600678][T15579] dump_stack_lvl+0x241/0x360 [ 503.605352][T15579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.610541][T15579] ? __pfx__printk+0x10/0x10 [ 503.615122][T15579] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 503.621529][T15579] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 503.628029][T15579] warn_alloc+0x278/0x410 [ 503.632349][T15579] ? __pfx_warn_alloc+0x10/0x10 [ 503.637180][T15579] ? __kasan_kmalloc+0x23/0xb0 [ 503.641928][T15579] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 503.647914][T15579] ? __get_vm_area_node+0x280/0x2d0 [ 503.653131][T15579] __vmalloc_node_range_noprof+0x369/0x1380 [ 503.659009][T15579] ? mod_objcg_state+0x125/0x930 [ 503.663955][T15579] ? percpu_ref_get_many+0x19/0x140 [ 503.669145][T15579] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 503.675201][T15579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 503.681525][T15579] ? arch_dup_task_struct+0x44/0xa0 [ 503.686715][T15579] dup_task_struct+0x444/0x8c0 [ 503.691465][T15579] ? copy_process+0x5d1/0x3d50 [ 503.696216][T15579] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.701407][T15579] copy_process+0x5d1/0x3d50 [ 503.705986][T15579] ? get_pid_task+0x23/0x1f0 [ 503.710566][T15579] ? __pfx_lock_release+0x10/0x10 [ 503.715576][T15579] ? kstrtouint_from_user+0x128/0x190 [ 503.720941][T15579] ? __pfx_copy_process+0x10/0x10 [ 503.725958][T15579] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 503.731856][T15579] kernel_clone+0x226/0x8e0 [ 503.736350][T15579] ? __pfx_kernel_clone+0x10/0x10 [ 503.741368][T15579] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 503.747274][T15579] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 503.753691][T15579] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 503.760271][T15579] ? lockdep_hardirqs_on+0x99/0x150 [ 503.765460][T15579] __do_fast_syscall_32+0xb4/0x110 [ 503.770554][T15579] ? exc_page_fault+0x590/0x8b0 [ 503.775396][T15579] do_fast_syscall_32+0x34/0x80 [ 503.780233][T15579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.786548][T15579] RIP: 0023:0xf70cd579 [ 503.790601][T15579] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 503.810206][T15579] RSP: 002b:00000000f50bf50c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 503.818648][T15579] RAX: ffffffffffffffda RBX: 00000000000a9080 RCX: 0000000000000000 [ 503.826624][T15579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.834584][T15579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.842541][T15579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 503.850496][T15579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.858466][T15579] [ 503.926035][T15579] Mem-Info: [ 503.929187][T15579] active_anon:12136 inactive_anon:0 isolated_anon:0 [ 503.929187][T15579] active_file:13869 inactive_file:38487 isolated_file:0 [ 503.929187][T15579] unevictable:1264 dirty:147 writeback:0 [ 503.929187][T15579] slab_reclaimable:6877 slab_unreclaimable:109750 [ 503.929187][T15579] mapped:31294 shmem:2416 pagetables:949 [ 503.929187][T15579] sec_pagetables:0 bounce:0 [ 503.929187][T15579] kernel_misc_reclaimable:0 [ 503.929187][T15579] free:1311989 free_pcp:1866 free_cma:0 [ 503.993116][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.122373][T15579] Node 0 active_anon:56696kB inactive_anon:0kB active_file:55476kB inactive_file:153884kB unevictable:3588kB isolated(anon):0kB isolated(file):0kB mapped:128160kB dirty:572kB writeback:0kB shmem:11056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:11836kB pagetables:3892kB sec_pagetables:0kB all_unreclaimable? no [ 504.230146][T15579] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 504.323516][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.332491][T15579] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.411044][T15579] lowmem_reserve[]: 0 2492 2493 0 0 [ 504.423939][T15579] Node 0 DMA32 free:1320388kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:48560kB inactive_anon:0kB active_file:55476kB inactive_file:153052kB unevictable:3588kB writepending:772kB present:3129332kB managed:2552760kB mlocked:2052kB bounce:0kB free_pcp:9112kB local_pcp:528kB free_cma:0kB [ 504.731368][T15579] lowmem_reserve[]: 0 0 0 0 0 [ 504.790281][T15579] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 504.823191][T15579] lowmem_reserve[]: 0 0 0 0 0 [ 504.841197][T15579] Node 1 Normal free:3910204kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.965182][T15610] FAULT_INJECTION: forcing a failure. [ 504.965182][T15610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.051791][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 505.085345][T15579] lowmem_reserve[]: 0 0 0 0 0 [ 505.090122][T15579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 505.132358][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.5.1935 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 505.143169][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 505.153243][T15610] Call Trace: [ 505.156531][T15610] [ 505.159453][T15610] dump_stack_lvl+0x241/0x360 [ 505.162349][T15579] Node 0 [ 505.164116][T15610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.164148][T15610] ? __pfx__printk+0x10/0x10 [ 505.167164][T15579] DMA32: [ 505.172242][T15610] ? snprintf+0xda/0x120 [ 505.172270][T15610] should_fail_ex+0x3b0/0x4e0 [ 505.188697][T15610] _copy_to_user+0x31/0xb0 [ 505.193109][T15610] simple_read_from_buffer+0xca/0x150 [ 505.198469][T15610] proc_fail_nth_read+0x1e9/0x250 [ 505.203481][T15610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.209016][T15610] ? rw_verify_area+0x55e/0x6f0 [ 505.213851][T15610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.219379][T15610] vfs_read+0x1fc/0xb70 [ 505.223523][T15610] ? __pfx___mutex_lock+0x10/0x10 [ 505.228537][T15610] ? __pfx_vfs_read+0x10/0x10 [ 505.233197][T15610] ? __se_compat_sys_ioctl+0x129/0xc10 [ 505.238641][T15610] ? __fget_files+0x2a/0x410 [ 505.243222][T15610] ? __fget_files+0x395/0x410 [ 505.247884][T15610] ? __fget_files+0x2a/0x410 [ 505.252471][T15610] ksys_read+0x18f/0x2b0 [ 505.256697][T15610] ? __pfx_ksys_read+0x10/0x10 [ 505.261440][T15610] ? arch_syscall_is_vdso_sigreturn+0x16a/0x1a0 [ 505.267665][T15610] ? syscall_user_dispatch+0x4e/0x90 [ 505.272942][T15610] __do_fast_syscall_32+0xb4/0x110 [ 505.278040][T15610] ? exc_page_fault+0x590/0x8b0 [ 505.282879][T15610] do_fast_syscall_32+0x34/0x80 [ 505.287724][T15610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.294055][T15610] RIP: 0023:0xf70bd579 [ 505.298131][T15610] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 505.317733][T15610] RSP: 002b:00000000f50af590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 505.326147][T15610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50af620 [ 505.334110][T15610] RDX: 000000000000000f RSI: 00000000f73f3ff4 RDI: 0000000000000000 [ 505.342073][T15610] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 505.350036][T15610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.357999][T15610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.365972][T15610] [ 505.373977][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.382247][T15579] 464*4kB (UE) 422*8kB (UME) 378*16kB (UME) 444*32kB (UME) 476*64kB (UME) 191*128kB (UME) 115*256kB (UME) 106*512kB (UME) 81*1024kB (UME) 15*2048kB (UM) 251*4096kB (UM) = 1305872kB [ 505.442891][T15579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 505.507537][T15627] [ 505.509892][T15627] ====================================================== [ 505.516905][T15627] WARNING: possible circular locking dependency detected [ 505.523921][T15627] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 505.531020][T15627] ------------------------------------------------------ [ 505.538017][T15627] syz.0.1929/15627 is trying to acquire lock: [ 505.544060][T15627] ffff88803147cfe0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 505.552914][T15627] [ 505.552914][T15627] but task is already holding lock: [ 505.560255][T15627] ffff888143bb3038 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 505.569544][T15627] [ 505.569544][T15627] which lock already depends on the new lock. [ 505.569544][T15627] [ 505.579930][T15627] [ 505.579930][T15627] the existing dependency chain (in reverse order) is: [ 505.588923][T15627] [ 505.588923][T15627] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 505.596729][T15627] lock_acquire+0x1ed/0x550 [ 505.601738][T15627] __mutex_lock+0x1ac/0xee0 [ 505.606746][T15627] blk_mq_init_sched+0x3fa/0x830 [ 505.612196][T15627] elevator_init_mq+0x20e/0x320 [ 505.617566][T15627] add_disk_fwnode+0x10d/0xf80 [ 505.622833][T15627] sd_probe+0xba6/0x1100 [ 505.627575][T15627] really_probe+0x2b8/0xad0 [ 505.632578][T15627] __driver_probe_device+0x1a2/0x390 [ 505.638365][T15627] driver_probe_device+0x50/0x430 [ 505.643889][T15627] __device_attach_driver+0x2d6/0x530 [ 505.649763][T15627] bus_for_each_drv+0x24e/0x2e0 [ 505.655118][T15627] __device_attach_async_helper+0x22d/0x300 [ 505.661522][T15627] async_run_entry_fn+0xa8/0x420 [ 505.666968][T15627] process_scheduled_works+0xa66/0x1840 [ 505.673018][T15627] worker_thread+0x870/0xd30 [ 505.678111][T15627] kthread+0x2f0/0x390 [ 505.682682][T15627] ret_from_fork+0x4b/0x80 [ 505.687599][T15627] ret_from_fork_asm+0x1a/0x30 [ 505.692876][T15627] [ 505.692876][T15627] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 505.701733][T15627] lock_acquire+0x1ed/0x550 [ 505.706749][T15627] blk_queue_enter+0xe1/0x600 [ 505.711935][T15627] blk_mq_alloc_request+0x4fa/0xaa0 [ 505.717639][T15627] scsi_execute_cmd+0x16c/0x10e0 [ 505.723100][T15627] read_capacity_16+0x2b4/0x1450 [ 505.728541][T15627] sd_revalidate_disk+0x1013/0xbce0 [ 505.734242][T15627] sd_probe+0x9fa/0x1100 [ 505.738987][T15627] really_probe+0x2b8/0xad0 [ 505.743997][T15627] __driver_probe_device+0x1a2/0x390 [ 505.749782][T15627] driver_probe_device+0x50/0x430 [ 505.755314][T15627] __device_attach_driver+0x2d6/0x530 [ 505.761197][T15627] bus_for_each_drv+0x24e/0x2e0 [ 505.766574][T15627] __device_attach_async_helper+0x22d/0x300 [ 505.772976][T15627] async_run_entry_fn+0xa8/0x420 [ 505.778418][T15627] process_scheduled_works+0xa66/0x1840 [ 505.784462][T15627] worker_thread+0x870/0xd30 [ 505.789568][T15627] kthread+0x2f0/0x390 [ 505.794141][T15627] ret_from_fork+0x4b/0x80 [ 505.799060][T15627] ret_from_fork_asm+0x1a/0x30 [ 505.804350][T15627] [ 505.804350][T15627] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 505.811974][T15627] lock_acquire+0x1ed/0x550 [ 505.816985][T15627] __mutex_lock+0x1ac/0xee0 [ 505.821992][T15627] loop_reconfigure_limits+0x43f/0x900 [ 505.827957][T15627] lo_ioctl+0x1351/0x1f50 [ 505.832790][T15627] lo_compat_ioctl+0x292/0x330 [ 505.838052][T15627] compat_blkdev_ioctl+0x5d8/0x7b0 [ 505.843683][T15627] __se_compat_sys_ioctl+0x502/0xc10 [ 505.849467][T15627] __do_fast_syscall_32+0xb4/0x110 [ 505.855096][T15627] do_fast_syscall_32+0x34/0x80 [ 505.860447][T15627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.867279][T15627] [ 505.867279][T15627] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 505.875887][T15627] lock_acquire+0x1ed/0x550 [ 505.880910][T15627] blk_mq_submit_bio+0x1536/0x2390 [ 505.886528][T15627] __submit_bio+0x2c6/0x560 [ 505.891532][T15627] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 505.897666][T15627] mpage_readahead+0x630/0x780 [ 505.902942][T15627] read_pages+0x176/0x750 [ 505.907775][T15627] page_cache_ra_unbounded+0x606/0x720 [ 505.913741][T15627] page_cache_sync_ra+0x3c5/0xad0 [ 505.919272][T15627] filemap_get_pages+0x605/0x2080 [ 505.924794][T15627] filemap_read+0x452/0xf50 [ 505.929794][T15627] blkdev_read_iter+0x2d8/0x430 [ 505.935146][T15627] vfs_read+0x991/0xb70 [ 505.939798][T15627] ksys_read+0x18f/0x2b0 [ 505.944539][T15627] do_syscall_64+0xf3/0x230 [ 505.949553][T15627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.955962][T15627] [ 505.955962][T15627] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 505.964468][T15627] lock_acquire+0x1ed/0x550 [ 505.969492][T15627] down_read+0xb1/0xa40 [ 505.974150][T15627] page_cache_ra_unbounded+0x142/0x720 [ 505.980114][T15627] do_sync_mmap_readahead+0x499/0x970 [ 505.985988][T15627] filemap_fault+0x8a9/0x1490 [ 505.991166][T15627] __do_fault+0x135/0x390 [ 505.996000][T15627] handle_pte_fault+0x39eb/0x5ed0 [ 506.001530][T15627] handle_mm_fault+0x1106/0x1bb0 [ 506.006977][T15627] __get_user_pages+0x1c82/0x49e0 [ 506.012511][T15627] get_user_pages_unlocked+0x2a8/0x9d0 [ 506.018487][T15627] hva_to_pfn+0x445/0xfe0 [ 506.023335][T15627] __kvm_faultin_pfn+0x497/0x580 [ 506.028775][T15627] kvm_mmu_faultin_pfn+0x6c3/0x1580 [ 506.034480][T15627] kvm_tdp_page_fault+0x215/0x300 [ 506.040003][T15627] kvm_mmu_do_page_fault+0x583/0xca0 [ 506.045797][T15627] kvm_mmu_page_fault+0x2db/0xc30 [ 506.051322][T15627] vmx_handle_exit+0x10e4/0x1e90 [ 506.056762][T15627] vcpu_run+0x586a/0x8a90 [ 506.061596][T15627] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 506.067657][T15627] kvm_vcpu_ioctl+0x920/0xea0 [ 506.072852][T15627] kvm_vcpu_compat_ioctl+0x23f/0x450 [ 506.078664][T15627] __se_compat_sys_ioctl+0x502/0xc10 [ 506.084476][T15627] __do_fast_syscall_32+0xb4/0x110 [ 506.090092][T15627] do_fast_syscall_32+0x34/0x80 [ 506.095443][T15627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.102282][T15627] [ 506.102282][T15627] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 506.109851][T15627] validate_chain+0x18ef/0x5920 [ 506.115209][T15627] __lock_acquire+0x1397/0x2100 [ 506.120560][T15627] lock_acquire+0x1ed/0x550 [ 506.125566][T15627] __might_fault+0xc6/0x120 [ 506.130566][T15627] _copy_from_user+0x2a/0xc0 [ 506.135660][T15627] blk_trace_ioctl+0x295/0x9a0 [ 506.140922][T15627] compat_blkdev_ioctl+0x462/0x7b0 [ 506.146533][T15627] __se_compat_sys_ioctl+0x502/0xc10 [ 506.152328][T15627] __do_fast_syscall_32+0xb4/0x110 [ 506.157976][T15627] do_fast_syscall_32+0x34/0x80 [ 506.163328][T15627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.170159][T15627] [ 506.170159][T15627] other info that might help us debug this: [ 506.170159][T15627] [ 506.180367][T15627] Chain exists of: [ 506.180367][T15627] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 506.180367][T15627] [ 506.194693][T15627] Possible unsafe locking scenario: [ 506.194693][T15627] [ 506.202121][T15627] CPU0 CPU1 [ 506.207473][T15627] ---- ---- [ 506.212847][T15627] lock(&q->debugfs_mutex); [ 506.217421][T15627] lock(&q->q_usage_counter(queue)#50); [ 506.225556][T15627] lock(&q->debugfs_mutex); [ 506.232646][T15627] rlock(&mm->mmap_lock); [ 506.237048][T15627] [ 506.237048][T15627] *** DEADLOCK *** [ 506.237048][T15627] [ 506.245168][T15627] 1 lock held by syz.0.1929/15627: [ 506.250253][T15627] #0: ffff888143bb3038 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 506.259976][T15627] [ 506.259976][T15627] stack backtrace: [ 506.265843][T15627] CPU: 1 UID: 0 PID: 15627 Comm: syz.0.1929 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 506.276594][T15627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 506.286627][T15627] Call Trace: [ 506.289890][T15627] [ 506.292805][T15627] dump_stack_lvl+0x241/0x360 [ 506.297466][T15627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.302646][T15627] ? __pfx__printk+0x10/0x10 [ 506.307216][T15627] print_circular_bug+0x13a/0x1b0 [ 506.312237][T15627] check_noncircular+0x36a/0x4a0 [ 506.317180][T15627] ? __pfx_check_noncircular+0x10/0x10 [ 506.322624][T15627] ? lockdep_lock+0x123/0x2b0 [ 506.327288][T15627] validate_chain+0x18ef/0x5920 [ 506.332123][T15627] ? __pfx_validate_chain+0x10/0x10 [ 506.337306][T15627] ? is_bpf_text_address+0x285/0x2a0 [ 506.342573][T15627] ? is_bpf_text_address+0x26/0x2a0 [ 506.347754][T15627] ? mark_lock+0x9a/0x360 [ 506.352063][T15627] ? __lock_acquire+0x1397/0x2100 [ 506.357086][T15627] ? string+0x26a/0x2b0 [ 506.361223][T15627] ? widen_string+0x3a/0x310 [ 506.365793][T15627] ? string+0x26a/0x2b0 [ 506.369941][T15627] ? bdev_name+0x2b1/0x3c0 [ 506.374341][T15627] ? mark_lock+0x9a/0x360 [ 506.378652][T15627] __lock_acquire+0x1397/0x2100 [ 506.383487][T15627] lock_acquire+0x1ed/0x550 [ 506.387968][T15627] ? __might_fault+0xaa/0x120 [ 506.392640][T15627] ? __pfx_lock_acquire+0x10/0x10 [ 506.397649][T15627] ? __pfx___might_resched+0x10/0x10 [ 506.402919][T15627] ? snprintf+0xda/0x120 [ 506.407228][T15627] ? __pfx___mutex_lock+0x10/0x10 [ 506.412244][T15627] ? blk_trace_ioctl+0xec/0x9a0 [ 506.417099][T15627] ? __pfx_snprintf+0x10/0x10 [ 506.421757][T15627] ? __might_fault+0xaa/0x120 [ 506.426412][T15627] __might_fault+0xc6/0x120 [ 506.430913][T15627] ? __might_fault+0xaa/0x120 [ 506.435587][T15627] _copy_from_user+0x2a/0xc0 [ 506.440165][T15627] blk_trace_ioctl+0x295/0x9a0 [ 506.444931][T15627] ? tomoyo_path_number_perm+0x679/0x860 [ 506.450547][T15627] ? tomoyo_path_number_perm+0x6f9/0x860 [ 506.456165][T15627] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 506.461428][T15627] ? tomoyo_path_number_perm+0x206/0x860 [ 506.467047][T15627] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 506.473019][T15627] ? __pfx_lock_acquire+0x10/0x10 [ 506.478026][T15627] ? file_to_blk_mode+0xcc/0x140 [ 506.482949][T15627] compat_blkdev_ioctl+0x462/0x7b0 [ 506.488041][T15627] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 506.493666][T15627] ? __fget_files+0x2a/0x410 [ 506.498238][T15627] __se_compat_sys_ioctl+0x502/0xc10 [ 506.503505][T15627] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 506.509295][T15627] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.515258][T15627] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 506.521568][T15627] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 506.528146][T15627] ? lockdep_hardirqs_on+0x99/0x150 [ 506.533331][T15627] __do_fast_syscall_32+0xb4/0x110 [ 506.538421][T15627] ? ret_from_fork_asm+0x1a/0x30 [ 506.543337][T15627] ? lockdep_hardirqs_on+0x99/0x150 [ 506.548520][T15627] do_fast_syscall_32+0x34/0x80 [ 506.553362][T15627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.559691][T15627] RIP: 0023:0xf714d579 [ 506.563741][T15627] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 506.583328][T15627] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 506.591724][T15627] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0401273 [ 506.599677][T15627] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.607628][T15627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.615578][T15627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 506.623533][T15627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.631487][T15627] [ 506.637727][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 506.671881][T15579] Node 1 Normal: 207*4kB (UME) 56*8kB (UME) 42*16kB (UME) 209*32kB (UME) 100*64kB (UME) 23*128kB (UME) 14*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 5*2048kB (UME) 945*4096kB (M) = 3910204kB [ 506.844500][T15579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.875802][T15579] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 506.922273][T15579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.956842][T15579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 507.002020][T15579] 56676 total pagecache pages [ 507.030404][T15579] 2 pages in swap cache [ 507.034705][T15579] Free swap = 124788kB [ 507.038865][T15579] Total swap = 124996kB [ 507.085588][T15579] 2097051 pages RAM [ 507.089398][T15579] 0 pages HighMem/MovableOnly [ 507.123215][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.143129][T15579] 427011 pages reserved [ 507.147307][T15579] 0 pages cma reserved [ 507.564361][ T3568] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.683407][ T6994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.710378][ T3568] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.758081][ T3568] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.921672][ T3568] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.006779][ T3568] bridge_slave_1: left allmulticast mode [ 508.012537][ T3568] bridge_slave_1: left promiscuous mode [ 508.018212][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.026744][ T3568] bridge_slave_0: left allmulticast mode [ 508.033218][ T3568] bridge_slave_0: left promiscuous mode [ 508.038883][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.159206][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.170158][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.181549][ T3568] bond0 (unregistering): Released all slaves [ 508.407020][ T3568] hsr_slave_0: left promiscuous mode [ 508.414012][ T3568] hsr_slave_1: left promiscuous mode [ 508.419743][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.428529][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.436266][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.443722][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.454908][ T3568] veth1_macvtap: left promiscuous mode [ 508.460789][ T3568] veth0_macvtap: left promiscuous mode [ 508.466452][ T3568] veth1_vlan: left promiscuous mode [ 508.479838][ T3568] veth0_vlan: left promiscuous mode [ 508.628122][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 508.660219][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 508.712769][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.051305][ T3568] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.097431][ T3568] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.168920][ T3568] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.223357][ T3568] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.303932][ T3568] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.383400][ T3568] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.439780][ T3568] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.494555][ T3568] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.588763][ T3568] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.635534][ T3568] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.688034][ T3568] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.755058][ T3568] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.756146][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.849080][ T3568] bridge_slave_1: left allmulticast mode [ 509.856160][ T3568] bridge_slave_1: left promiscuous mode [ 509.862373][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.871915][ T3568] bridge_slave_0: left allmulticast mode [ 509.878502][ T3568] bridge_slave_0: left promiscuous mode [ 509.884480][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.897148][ T3568] bridge_slave_1: left allmulticast mode [ 509.903303][ T3568] bridge_slave_1: left promiscuous mode [ 509.908977][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.918748][ T3568] bridge_slave_0: left allmulticast mode [ 509.925986][ T3568] bridge_slave_0: left promiscuous mode [ 509.931663][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.942671][ T3568] bridge_slave_1: left allmulticast mode [ 509.948345][ T3568] bridge_slave_1: left promiscuous mode [ 509.954444][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.965393][ T3568] bridge_slave_0: left allmulticast mode [ 509.971046][ T3568] bridge_slave_0: left promiscuous mode [ 509.977134][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.158238][ T7488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.309817][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.320156][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.330153][ T3568] bond0 (unregistering): Released all slaves [ 510.344042][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.353856][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.363989][ T3568] bond0 (unregistering): Released all slaves [ 510.395691][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.406946][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.423222][ T3568] bond0 (unregistering): Released all slaves [ 510.792816][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.932892][ T3568] hsr_slave_0: left promiscuous mode [ 510.938580][ T3568] hsr_slave_1: left promiscuous mode [ 510.944628][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.951998][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.959631][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.967064][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.976414][ T3568] hsr_slave_0: left promiscuous mode [ 510.982060][ T3568] hsr_slave_1: left promiscuous mode [ 510.987986][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.995408][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.003705][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.011084][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.020933][ T3568] hsr_slave_0: left promiscuous mode [ 511.026919][ T3568] hsr_slave_1: left promiscuous mode [ 511.033657][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.041042][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.048872][ T3568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.056347][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.067069][ T3568] veth1_macvtap: left promiscuous mode [ 511.072627][ T3568] veth0_macvtap: left promiscuous mode [ 511.078132][ T3568] veth1_vlan: left promiscuous mode [ 511.083538][ T3568] veth0_vlan: left promiscuous mode [ 511.089312][ T3568] veth1_macvtap: left promiscuous mode [ 511.094850][ T3568] veth0_macvtap: left promiscuous mode [ 511.100353][ T3568] veth1_vlan: left promiscuous mode [ 511.105716][ T3568] veth0_vlan: left promiscuous mode [ 511.111496][ T3568] veth1_macvtap: left promiscuous mode [ 511.117062][ T3568] veth0_macvtap: left promiscuous mode [ 511.122818][ T3568] veth1_vlan: left promiscuous mode [ 511.128066][ T3568] veth0_vlan: left promiscuous mode [ 511.194015][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.318798][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 511.340342][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 511.491356][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 511.505197][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 511.636385][ T3568] team0 (unregistering): Port device team_slave_1 removed [ 511.662122][ T3568] team0 (unregistering): Port device team_slave_0 removed [ 511.832396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.841584][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.882734][ T6994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.192641][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.914941][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.962806][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog