last executing test programs: 30.078118944s ago: executing program 2 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000000c0)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x593, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) unshare(0x22000400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fanotify_init(0x4, 0x800) fanotify_mark(r4, 0x1, 0x101b, r3, 0x0) vmsplice(r3, &(0x7f0000000600)=[{&(0x7f0000000100)="04", 0x1}], 0x1, 0x0) 28.891372376s ago: executing program 2 (id=98): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) shutdown(r0, 0x2000000) 27.662203977s ago: executing program 2 (id=105): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x2) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00') fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, &(0x7f0000000740)="5086fe6b", &(0x7f0000000440)=@udp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r3, &(0x7f0000000340)}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d00000000000000000000000200000000000000000000000a030000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=""/248) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414", @ANYRES64=r6], 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 27.302915049s ago: executing program 2 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x81, 0x9, {0x0}, {0xee01}, 0x9, 0x818f}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x2, 0x8000, r1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001180)=""/4069, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001680)=[@text16={0x10, &(0x7f0000000080)="66b92200004066b8f7d3000066ba000000000f3065660f388142080fc77200ba4000b019ee660f5a0bf426660f38047385dde2660f545608ba4200ec", 0x3c}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x20}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x10000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 26.571825626s ago: executing program 2 (id=113): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x1, 0x7fffffff, 0x2}, &(0x7f0000000180)=0x10) socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$sndctrl(0x0, 0xe, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000011c0)='./control\x00', &(0x7f0000000100), 0x400092, &(0x7f0000000000)=ANY=[@ANYBLOB='dyn,flock=write']) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES, @NL80211_MNTR_FLAG_COOK_FRAMES]}]]}, 0x38}}, 0x0) 26.315190707s ago: executing program 2 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0xa5, @remote, 0x4e21, 0x6, 'lc\x00', 0xede80dfcfdc6e902, 0x83, 0x77}, {@remote, 0x4e23, 0x2, 0xd0, 0x5, 0x20003}}, 0x44) io_uring_enter(r5, 0x1d9a, 0x2881, 0x6, &(0x7f0000000240)={[0x29]}, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x6e}, {@local, 0x4e20, 0x2, 0x2, 0x12d5c, 0x12d5c}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r7, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 23.290037494s ago: executing program 1 (id=126): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) lseek(r3, 0x0, 0x3) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"803880fb94471c816352f8f6aab3ad26a2d16c32b12cb43a900e998a49c160fe", r0}) 23.167301134s ago: executing program 4 (id=127): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x0) 22.631921951s ago: executing program 4 (id=128): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xa, [@ptr={0x4, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @func_proto, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}, @enum64={0x4, 0x2, 0x0, 0x13, 0x0, 0x8, [{0xa, 0x1, 0x1}, {0x9, 0x10000, 0x62911279}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000680)=""/138, 0xa2, 0x8a, 0x1, 0xffffffff, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000000000fc050000000100000008080000", @ANYRES32, @ANYBLOB="f50002ffffffffff0000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0400000005000000000000000d00"/28], 0x50) accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000a00, 0x0, 0x0, 0x20000a30, 0x20000b76], 0x0, &(0x7f0000000040), 0x0}, 0x6bc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22.447653012s ago: executing program 1 (id=129): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ifreq(r1, 0x8947, &(0x7f00000000c0)={'bond0\x00', @ifru_mtu=0x1}) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/\x00'/12, @ANYBLOB="6452816c03"], 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, 0x0, 0x30004001) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8001, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 21.706369636s ago: executing program 4 (id=130): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xa, [@ptr={0x4, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @func_proto, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}, @enum64={0x4, 0x2, 0x0, 0x13, 0x0, 0x8, [{0xa, 0x1, 0x1}, {0x9, 0x10000, 0x62911279}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000680)=""/138, 0xa2, 0x8a, 0x1, 0xffffffff, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000000000fc050000000100000008080000", @ANYRES32, @ANYBLOB="f50002ffffffffff0000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0400000005000000000000000d00"/28], 0x50) accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000a00, 0x0, 0x0, 0x20000a30, 0x20000b76], 0x0, &(0x7f0000000040), 0x0}, 0x6bc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 20.332275681s ago: executing program 4 (id=132): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) unshare(0x24020400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 20.121857519s ago: executing program 1 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x3e, &(0x7f0000000300)='usrquota') syz_emit_ethernet(0x30, &(0x7f0000000040)={@remote, @remote, @void, {@arp={0x806, @generic={0x30e, 0x886c, 0x6, 0x8, 0x2, @remote, "151dfd0b65c0860e", @local, "3ea26086fd4a"}}}}, 0x0) 18.498601959s ago: executing program 1 (id=136): r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = dup(r0) (async, rerun: 64) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x9c) (async, rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) chmod(&(0x7f0000000080)='./file0\x00', 0x100) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x20}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x2, {0xffffffffffffffff, 0x1e000, 0x0, {0x6, 0x0, 0x4, 0x7ffffdff, 0xe, 0xabe2, 0x4, 0xff, 0xe6, 0x1000, 0x401, r4, r5, 0xea, 0x27c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (rerun: 64) 17.983469132s ago: executing program 4 (id=137): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000780)={0x4, 0x395e, 0x3, {0x1, @sdr={0x3031334d, 0xdd17}}, 0x6}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000000c0)={0x0, 0x6, 0x201a}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0) 17.375762741s ago: executing program 4 (id=139): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) lseek(r3, 0x0, 0x3) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"803880fb94471c816352f8f6aab3ad26a2d16c32b12cb43a900e998a49c160fe", r0}) 16.212023891s ago: executing program 1 (id=143): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0xa5, @remote, 0x4e21, 0x6, 'lc\x00', 0xede80dfcfdc6e902, 0x83, 0x77}, {@remote, 0x4e23, 0x2, 0xd0, 0x5, 0x20003}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x6e}, {@local, 0x4e20, 0x2, 0x2, 0x12d5c, 0x12d5c}}, 0x44) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r3, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 11.126126666s ago: executing program 32 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0xa5, @remote, 0x4e21, 0x6, 'lc\x00', 0xede80dfcfdc6e902, 0x83, 0x77}, {@remote, 0x4e23, 0x2, 0xd0, 0x5, 0x20003}}, 0x44) io_uring_enter(r5, 0x1d9a, 0x2881, 0x6, &(0x7f0000000240)={[0x29]}, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x6e}, {@local, 0x4e20, 0x2, 0x2, 0x12d5c, 0x12d5c}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r7, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 8.480008336s ago: executing program 3 (id=165): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000080)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000380), 0x8, 0xf, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xa, [@ptr={0x4, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @func_proto, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @restrict={0xb, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}, @enum64={0x4, 0x2, 0x0, 0x13, 0x0, 0x8, [{0xa, 0x1, 0x1}, {0x9, 0x10000, 0x62911279}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000680)=""/138, 0xa2, 0x8a, 0x1, 0xffffffff, 0x10000, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e000000000000fc050000000100000008080000", @ANYRES32, @ANYBLOB="f50002ffffffffff0000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0400000005000000000000000d00"/28], 0x50) accept4(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20000a00, 0x0, 0x0, 0x20000a30, 0x20000b76], 0x0, &(0x7f0000000040), 0x0}, 0x6bc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.570224519s ago: executing program 3 (id=166): syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x40043311) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x10, 0x0) membarrier(0x8, 0x0) r0 = syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xe0000, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r3 = eventfd2(0x4, 0x801) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r3, 0x5, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x3000001d}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* r\nw'], 0x9) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="44030000", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000e000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001a08000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400aae2000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000080003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="2c010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400020000000800", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000070000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400077d00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB], 0x344}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c000) 7.056301622s ago: executing program 3 (id=167): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) unshare(0x24020400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000480)=@secondary) 6.774912002s ago: executing program 0 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x22000400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fanotify_init(0x4, 0x800) fanotify_mark(r2, 0x1, 0x101b, r1, 0x0) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f0000000100)="04", 0x1}], 0x1, 0x0) 5.808017389s ago: executing program 0 (id=171): open(&(0x7f0000000380)='.\x00', 0xf6d149da9e169c4c, 0x61) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x80000, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0xee00}}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000800)=0x8000000) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x1009, &(0x7f0000000040)={0x0, 0x9f3, 0x400, 0x0, 0x4}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r10, 0x80049367, &(0x7f00000001c0)=0x7) 4.486664684s ago: executing program 3 (id=172): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) 4.371172047s ago: executing program 3 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0x2}, @val={0x1, 0x0, 0x0, 0x0, 0x14, 0x2}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xfe, 0x40, 0x0, 0x1c}}}}}, 0x36) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x1a0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_LIMIT={0x8}, @TCA_GRED_DPS={0x10}, @TCA_GRED_STAB={0xfffffffffffffdaa, 0x2, "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"}, @TCA_GRED_DPS={0x10}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_LIMIT={0x8}]}}]}, 0x1a0}}, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007add1520450580800103000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="4012010f0000b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.604461281s ago: executing program 0 (id=174): unshare(0x2c020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[], 0x8, 0x800) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x2000, 0x800) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000600008802800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff34000080246b56df2f847c0502545d000100dbffffffffffffffffffffff86f2f3b1637e5d88ffffffffffffffffffffffff040009800800030002000000"], 0x88}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2.628021856s ago: executing program 0 (id=175): open(&(0x7f0000000380)='.\x00', 0xf6d149da9e169c4c, 0x61) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x80000, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0xee00}}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000800)=0x8000000) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_uring_setup(0x1009, &(0x7f0000000040)={0x0, 0x9f3, 0x400, 0x0, 0x4}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000001c0)=0x7) 2.071276621s ago: executing program 33 (id=139): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) lseek(r3, 0x0, 0x3) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"803880fb94471c816352f8f6aab3ad26a2d16c32b12cb43a900e998a49c160fe", r0}) 2.041481707s ago: executing program 1 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x8200, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xf0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x41, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ffffffff000000000001000007726003080000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820009009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f09d931f33c265c93600000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000f8ffffff950000000000000085000000730000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000c40)=0x4080, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0xfffffc00, 0x9, 0x400, 0x10001, 0x200}}}}]}, 0x4c}}, 0x44080) r11 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xfff2, 0xa}, {0x2, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000855}, 0x4) 1.741358195s ago: executing program 0 (id=178): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0xfffffffc, 0x40}, &(0x7f0000000480), &(0x7f00000004c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000057c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) (fail_nth: 2) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r11, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', r11, 0x80, 0x7, 0x1, 0x4, {{0x44, 0x4, 0x3, 0x3d, 0x110, 0x66, 0x0, 0x10, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_addr={0x44, 0x24, 0x66, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@broadcast, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}]}, @ssrr={0x89, 0x17, 0x81, [@loopback, @loopback, @local, @local, @multicast2]}, @timestamp={0x44, 0x24, 0xff, 0x0, 0x2, [0x8, 0x8, 0x4, 0x87, 0x5, 0x8, 0x8, 0x1]}, @timestamp_prespec={0x44, 0x2c, 0x1f, 0x3, 0x9, [{@broadcast, 0x8}, {@rand_addr=0x64010102}, {@private=0xa010101, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf5}, {@multicast2, 0x3}]}, @rr={0x7, 0x17, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @local, @loopback]}, @lsrr={0x83, 0x17, 0x94, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @multicast2]}, @lsrr={0x83, 0x13, 0xf2, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}, @timestamp={0x44, 0x1c, 0x5e, 0x0, 0x5, [0x7, 0x7fffffff, 0x6e68, 0x2, 0x1, 0x0]}, @generic={0x7, 0x5, "538c27"}, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x6, [{@private=0xa010101, 0x101}]}]}}}}}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.509341ms ago: executing program 0 (id=179): fsopen(0x0, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_emit_ethernet(0x42, &(0x7f0000000380)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x3, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xfdef) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x0) socket$inet6(0xa, 0x5, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xf8, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x42, {0xfffffffffffffffa}}}}, {{@ipv6={@local, @mcast1, [], [], 'veth1_to_hsr\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x8, 0xffffffff, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 0s ago: executing program 3 (id=180): socket(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3c, &(0x7f0000001c40)=ANY=[@ANYRESDEC], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) r2 = memfd_secret(0x0) fchmod(r2, 0x134) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xffffffffffffff25}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) r5 = io_uring_setup(0x40ff, &(0x7f0000000040)={0x0, 0x8943, 0x1108}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r6) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x0, "dd3e9db9a79317cb7346eaff4dfa5b899cec82438ff87936dfd70000ecff00"}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) socket(0x1d, 0x2, 0x6) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 64.194656][ T5807] cgroup: Unknown subsys name 'net' [ 64.361572][ T5807] cgroup: Unknown subsys name 'cpuset' [ 64.369701][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.717016][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.993013][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.008436][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.038118][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.045833][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.059591][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.078743][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.086720][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.096349][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.104988][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.114319][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.122805][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.131685][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.140313][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.147944][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.149027][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.159766][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.163090][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.169246][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.177134][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.185629][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.192597][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.198304][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.212146][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.221398][ T5134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.230420][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.237814][ T5134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.258241][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.265659][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.278610][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.289740][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.636399][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 68.708903][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 68.751395][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 68.852339][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 68.906683][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.914741][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.922597][ T5817] bridge_slave_0: entered allmulticast mode [ 68.929518][ T5817] bridge_slave_0: entered promiscuous mode [ 68.937930][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.945052][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.952355][ T5817] bridge_slave_1: entered allmulticast mode [ 68.959359][ T5817] bridge_slave_1: entered promiscuous mode [ 68.995337][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.002745][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.010454][ T5825] bridge_slave_0: entered allmulticast mode [ 69.017399][ T5825] bridge_slave_0: entered promiscuous mode [ 69.059307][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.066423][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.074085][ T5825] bridge_slave_1: entered allmulticast mode [ 69.080863][ T5825] bridge_slave_1: entered promiscuous mode [ 69.103971][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.158226][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.172404][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.181745][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.189565][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.196760][ T5822] bridge_slave_0: entered allmulticast mode [ 69.204214][ T5822] bridge_slave_0: entered promiscuous mode [ 69.211544][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.221710][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.229054][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.236262][ T5822] bridge_slave_1: entered allmulticast mode [ 69.244851][ T5822] bridge_slave_1: entered promiscuous mode [ 69.273245][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.313077][ T5817] team0: Port device team_slave_0 added [ 69.321563][ T5817] team0: Port device team_slave_1 added [ 69.344991][ T5825] team0: Port device team_slave_0 added [ 69.360539][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.368007][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.375487][ T5831] bridge_slave_0: entered allmulticast mode [ 69.382447][ T5831] bridge_slave_0: entered promiscuous mode [ 69.390507][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.398371][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.405689][ T5831] bridge_slave_1: entered allmulticast mode [ 69.412867][ T5831] bridge_slave_1: entered promiscuous mode [ 69.435654][ T5825] team0: Port device team_slave_1 added [ 69.452318][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.494601][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.502010][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.528092][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.541401][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.555657][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.568871][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.579090][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.586100][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.612148][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.636399][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.643468][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.669544][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.703375][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.710671][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.736855][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.778411][ T5831] team0: Port device team_slave_0 added [ 69.805788][ T5822] team0: Port device team_slave_0 added [ 69.814467][ T5822] team0: Port device team_slave_1 added [ 69.832419][ T5831] team0: Port device team_slave_1 added [ 69.854283][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.861550][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.869214][ T5826] bridge_slave_0: entered allmulticast mode [ 69.875785][ T5826] bridge_slave_0: entered promiscuous mode [ 69.921760][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.929017][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.955606][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.967329][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.974837][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.982103][ T5826] bridge_slave_1: entered allmulticast mode [ 69.989159][ T5826] bridge_slave_1: entered promiscuous mode [ 69.998528][ T5817] hsr_slave_0: entered promiscuous mode [ 70.004894][ T5817] hsr_slave_1: entered promiscuous mode [ 70.012231][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.021324][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.047794][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.060278][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.067248][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.093571][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.108326][ T5825] hsr_slave_0: entered promiscuous mode [ 70.114685][ T5825] hsr_slave_1: entered promiscuous mode [ 70.121280][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.129723][ T5825] Cannot create hsr debugfs directory [ 70.135664][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.143190][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.169450][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.266421][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.278343][ T5828] Bluetooth: hci2: command tx timeout [ 70.284303][ T5833] Bluetooth: hci0: command tx timeout [ 70.320103][ T5831] hsr_slave_0: entered promiscuous mode [ 70.327134][ T5831] hsr_slave_1: entered promiscuous mode [ 70.334079][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.342346][ T5831] Cannot create hsr debugfs directory [ 70.350298][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.359585][ T5833] Bluetooth: hci3: command tx timeout [ 70.365471][ T5833] Bluetooth: hci4: command tx timeout [ 70.371777][ T5828] Bluetooth: hci1: command tx timeout [ 70.381992][ T5822] hsr_slave_0: entered promiscuous mode [ 70.388882][ T5822] hsr_slave_1: entered promiscuous mode [ 70.395157][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.403045][ T5822] Cannot create hsr debugfs directory [ 70.439083][ T5826] team0: Port device team_slave_0 added [ 70.472649][ T5826] team0: Port device team_slave_1 added [ 70.542807][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.550277][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.576684][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.589714][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.596689][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.624265][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.765863][ T5826] hsr_slave_0: entered promiscuous mode [ 70.772315][ T5826] hsr_slave_1: entered promiscuous mode [ 70.778814][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.786408][ T5826] Cannot create hsr debugfs directory [ 70.868416][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.881290][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.900340][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.921970][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.978157][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.003916][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.033051][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.055999][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.079052][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.092936][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.103373][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.112701][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.194231][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.204675][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.214715][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.227011][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.308589][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.333308][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.344095][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.370975][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.417501][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.463217][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.494794][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.517068][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.527373][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.548616][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.570818][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.578172][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.588901][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.595987][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.605625][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.612741][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.623776][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.630882][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.678397][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.685553][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.697473][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.704645][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.721451][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.733181][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.746583][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.782552][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.870817][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.926452][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.933660][ T4789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.947498][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.984898][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.992115][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.013563][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.020781][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.080947][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.088144][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.186439][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.223407][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.237086][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.311169][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.369096][ T5828] Bluetooth: hci0: command tx timeout [ 72.374973][ T5828] Bluetooth: hci2: command tx timeout [ 72.401265][ T5822] veth0_vlan: entered promiscuous mode [ 72.438603][ T5828] Bluetooth: hci1: command tx timeout [ 72.448342][ T5828] Bluetooth: hci4: command tx timeout [ 72.449330][ T5833] Bluetooth: hci3: command tx timeout [ 72.464227][ T5831] veth0_vlan: entered promiscuous mode [ 72.518598][ T5831] veth1_vlan: entered promiscuous mode [ 72.532025][ T5822] veth1_vlan: entered promiscuous mode [ 72.610354][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.651176][ T5831] veth0_macvtap: entered promiscuous mode [ 72.665570][ T5822] veth0_macvtap: entered promiscuous mode [ 72.693431][ T5822] veth1_macvtap: entered promiscuous mode [ 72.709812][ T5831] veth1_macvtap: entered promiscuous mode [ 72.723475][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.773870][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.784939][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.805640][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.816729][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.828751][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.846957][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855981][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.865014][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.873991][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.894980][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.907085][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.925186][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.949690][ T5825] veth0_vlan: entered promiscuous mode [ 72.968866][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.978058][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.988374][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.997190][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.008840][ T5817] veth0_vlan: entered promiscuous mode [ 73.045645][ T5817] veth1_vlan: entered promiscuous mode [ 73.072498][ T5826] veth0_vlan: entered promiscuous mode [ 73.094180][ T5825] veth1_vlan: entered promiscuous mode [ 73.114573][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.126083][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.164079][ T5826] veth1_vlan: entered promiscuous mode [ 73.233645][ T5817] veth0_macvtap: entered promiscuous mode [ 73.242165][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.250897][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.256794][ T5826] veth0_macvtap: entered promiscuous mode [ 73.266685][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.275143][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.291903][ T5826] veth1_macvtap: entered promiscuous mode [ 73.320120][ T5817] veth1_macvtap: entered promiscuous mode [ 73.333495][ T4789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.339053][ T5825] veth0_macvtap: entered promiscuous mode [ 73.368096][ T4789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.390927][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.392683][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.409961][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.428159][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.438767][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.449509][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.462006][ T5825] veth1_macvtap: entered promiscuous mode [ 73.470588][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.481497][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.492316][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.502828][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.513709][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.524185][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.535738][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.548351][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.560469][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.572519][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.583161][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.593964][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.616519][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.633472][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.643674][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.661531][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.675306][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.697601][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.715267][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.726468][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.736587][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.745566][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.754434][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.790544][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.807682][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.816418][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.840881][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.925763][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.946917][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.965225][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.994950][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.043278][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.107362][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.240810][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.345343][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.438514][ T5833] Bluetooth: hci2: command tx timeout [ 74.444350][ T5833] Bluetooth: hci0: command tx timeout [ 74.491027][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.513503][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.520916][ T5828] Bluetooth: hci4: command tx timeout [ 74.520973][ T5828] Bluetooth: hci1: command tx timeout [ 74.527903][ T5828] Bluetooth: hci3: command tx timeout [ 74.660407][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.683653][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.705117][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.716383][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.729781][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.741262][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.753568][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.764971][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.775662][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.848883][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.885632][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.898214][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.906985][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052785][ T4472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.064858][ T4472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.138705][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.146577][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.260623][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.295771][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.367432][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.386329][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.489018][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.496888][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.540658][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.555249][ T5921] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.567678][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.785472][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 75.795656][ T5927] FAULT_INJECTION: forcing a failure. [ 75.795656][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.809417][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.1.10 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 75.819953][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 75.830035][ T5927] Call Trace: [ 75.833316][ T5927] [ 75.836243][ T5927] dump_stack_lvl+0x241/0x360 [ 75.840936][ T5927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.846130][ T5927] ? __pfx__printk+0x10/0x10 [ 75.850722][ T5927] ? __pfx_lock_release+0x10/0x10 [ 75.855745][ T5927] should_fail_ex+0x3b0/0x4e0 [ 75.860417][ T5927] _copy_from_iter+0x1e9/0x1c20 [ 75.865264][ T5927] ? __virt_addr_valid+0x183/0x530 [ 75.870379][ T5927] ? __alloc_skb+0x28f/0x440 [ 75.874965][ T5927] ? __pfx__copy_from_iter+0x10/0x10 [ 75.880247][ T5927] ? __virt_addr_valid+0x183/0x530 [ 75.885353][ T5927] ? __virt_addr_valid+0x183/0x530 [ 75.890458][ T5927] ? __virt_addr_valid+0x45f/0x530 [ 75.895563][ T5927] ? __phys_addr_symbol+0x2f/0x70 [ 75.900581][ T5927] ? __check_object_size+0x47a/0x730 [ 75.905866][ T5927] netlink_sendmsg+0x73d/0xcb0 [ 75.910639][ T5927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.915927][ T5927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.921212][ T5927] __sock_sendmsg+0x221/0x270 [ 75.925897][ T5927] ____sys_sendmsg+0x52a/0x7e0 [ 75.930667][ T5927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.935946][ T5927] ? __fget_files+0x2a/0x410 [ 75.940533][ T5927] ? __sys_sendmmsg+0x392/0x720 [ 75.945381][ T5927] ? __might_fault+0xaa/0x120 [ 75.950057][ T5927] __sys_sendmmsg+0x36a/0x720 [ 75.954738][ T5927] ? __pfx___sys_sendmmsg+0x10/0x10 [ 75.959970][ T5927] ? __pfx_lock_release+0x10/0x10 [ 75.965021][ T5927] ? kstrtouint_from_user+0x128/0x190 [ 75.970419][ T5927] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 75.976315][ T5927] ? ksys_write+0x22a/0x2b0 [ 75.980818][ T5927] ? __pfx_lock_release+0x10/0x10 [ 75.985839][ T5927] ? vfs_write+0x730/0xd30 [ 75.990254][ T5927] ? __mutex_unlock_slowpath+0x21e/0x790 [ 75.995910][ T5927] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.001889][ T5927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.008216][ T5927] ? do_syscall_64+0x100/0x230 [ 76.012987][ T5927] __x64_sys_sendmmsg+0xa0/0xb0 [ 76.017852][ T5927] do_syscall_64+0xf3/0x230 [ 76.022383][ T5927] ? clear_bhb_loop+0x35/0x90 [ 76.027099][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.032993][ T5927] RIP: 0033:0x7f48b5385d19 [ 76.037420][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.057023][ T5927] RSP: 002b:00007f48b6252038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.065435][ T5927] RAX: ffffffffffffffda RBX: 00007f48b5575fa0 RCX: 00007f48b5385d19 [ 76.073403][ T5927] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 76.081375][ T5927] RBP: 00007f48b6252090 R08: 0000000000000000 R09: 0000000000000000 [ 76.089344][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.097308][ T5927] R13: 0000000000000000 R14: 00007f48b5575fa0 R15: 00007fffabd4c118 [ 76.105281][ T5927] [ 76.108589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.116906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 76.177851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.218154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.226398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.298410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.354130][ T5934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.360668][ T5933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.368241][ T29] audit: type=1326 audit(1734193314.328:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 76.527600][ T5828] Bluetooth: hci0: command tx timeout [ 76.527668][ T5833] Bluetooth: hci2: command tx timeout [ 76.712718][ T29] audit: type=1326 audit(1734193314.328:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 76.738333][ T29] audit: type=1326 audit(1734193314.328:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 76.759919][ T29] audit: type=1326 audit(1734193314.328:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 76.776941][ T5833] Bluetooth: hci3: command tx timeout [ 76.781248][ T29] audit: type=1326 audit(1734193314.328:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 76.786594][ T5833] Bluetooth: hci1: command tx timeout [ 76.817654][ T5833] Bluetooth: hci4: command tx timeout [ 76.868908][ T29] audit: type=1326 audit(1734193314.328:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 77.005039][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.155939][ T5944] kvm: kvm [5937]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1 [ 77.707328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.709898][ T29] audit: type=1326 audit(1734193314.328:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 77.738799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.748618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.759543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.770532][ T5934] FAULT_INJECTION: forcing a failure. [ 77.770532][ T5934] name failslab, interval 1, probability 0, space 0, times 1 [ 77.809255][ T5928] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 77.835094][ T29] audit: type=1326 audit(1734193314.328:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 77.907214][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.3.12 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 77.917780][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 77.927846][ T5934] Call Trace: [ 77.931135][ T5934] [ 77.934075][ T5934] dump_stack_lvl+0x241/0x360 [ 77.938778][ T5934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.943989][ T5934] ? __pfx__printk+0x10/0x10 [ 77.948595][ T5934] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 77.954591][ T5934] ? __pfx___might_resched+0x10/0x10 [ 77.959900][ T5934] should_fail_ex+0x3b0/0x4e0 [ 77.964598][ T5934] should_failslab+0xac/0x100 [ 77.969301][ T5934] kmem_cache_alloc_node_noprof+0x77/0x380 [ 77.975122][ T5934] ? __alloc_skb+0x1c3/0x440 [ 77.979734][ T5934] __alloc_skb+0x1c3/0x440 [ 77.984166][ T5934] ? __pfx___alloc_skb+0x10/0x10 [ 77.989113][ T5934] ? look_up_lock_class+0x77/0x170 [ 77.994239][ T5934] ? register_lock_class+0x102/0x980 [ 77.999546][ T5934] alloc_skb_with_frags+0xc3/0x820 [ 78.004701][ T5934] ? ima_match_policy+0x111/0x2230 [ 78.009835][ T5934] sock_alloc_send_pskb+0x91a/0xa60 [ 78.015066][ T5934] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 78.020799][ T5934] ? mark_lock+0x9a/0x360 [ 78.025142][ T5934] ? __lock_acquire+0x1397/0x2100 [ 78.030184][ T5934] __ip6_append_data+0x2dd1/0x4460 [ 78.035304][ T5934] ? mark_lock+0x9a/0x360 [ 78.039680][ T5934] ? __pfx_udplite_getfrag+0x10/0x10 [ 78.044993][ T5934] ? __pfx___ip6_append_data+0x10/0x10 [ 78.050464][ T5934] ? ip6_setup_cork+0x9f7/0x1080 [ 78.055504][ T5934] ip6_make_skb+0x43b/0x530 [ 78.060025][ T5934] ? ip6_dst_check+0xe7/0x7e0 [ 78.064723][ T5934] ? ip6_dst_check+0x5d9/0x7e0 [ 78.069505][ T5934] ? __pfx_udplite_getfrag+0x10/0x10 [ 78.074798][ T5934] ? __pfx_ip6_make_skb+0x10/0x10 [ 78.079816][ T5934] ? ip6_sk_dst_lookup_flow+0x714/0xa30 [ 78.085373][ T5934] ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10 [ 78.091252][ T5934] ? __pfx_lock_release+0x10/0x10 [ 78.096277][ T5934] ? udpv6_sendmsg+0x1cea/0x32b0 [ 78.097931][ T29] audit: type=1326 audit(1734193314.328:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 78.101196][ T5934] udpv6_sendmsg+0x2383/0x32b0 [ 78.122448][ T29] audit: type=1326 audit(1734193314.358:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.4.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 78.127084][ T5934] ? mark_lock+0x9a/0x360 [ 78.152620][ T5934] ? __pfx_udplite_getfrag+0x10/0x10 [ 78.157915][ T5934] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 78.163039][ T5934] ? __pfx_validate_chain+0x10/0x10 [ 78.168268][ T5934] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 78.175034][ T5934] ? sock_rps_record_flow+0x1a/0x400 [ 78.180316][ T5934] ? inet_send_prepare+0x21/0x260 [ 78.185340][ T5934] ? inet_send_prepare+0x5a/0x260 [ 78.190362][ T5934] __sock_sendmsg+0xef/0x270 [ 78.194954][ T5934] sock_write_iter+0x2d7/0x3f0 [ 78.199722][ T5934] ? __pfx_sock_write_iter+0x10/0x10 [ 78.205009][ T5934] ? bpf_lsm_file_permission+0x9/0x10 [ 78.210378][ T5934] ? security_file_permission+0x74/0x280 [ 78.216009][ T5934] vfs_write+0xaeb/0xd30 [ 78.220251][ T5934] ? __pfx_sock_write_iter+0x10/0x10 [ 78.225533][ T5934] ? __pfx_vfs_write+0x10/0x10 [ 78.230306][ T5934] ? __fget_files+0x2a/0x410 [ 78.234899][ T5934] ? __fget_files+0x2a/0x410 [ 78.239497][ T5934] ksys_write+0x18f/0x2b0 [ 78.243911][ T5934] ? __pfx_ksys_write+0x10/0x10 [ 78.248759][ T5934] ? do_syscall_64+0x100/0x230 [ 78.253534][ T5934] ? do_syscall_64+0xb6/0x230 [ 78.258211][ T5934] do_syscall_64+0xf3/0x230 [ 78.262726][ T5934] ? clear_bhb_loop+0x35/0x90 [ 78.267399][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.273297][ T5934] RIP: 0033:0x7f94cc985d19 [ 78.277716][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.297318][ T5934] RSP: 002b:00007f94cd75d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.305731][ T5934] RAX: ffffffffffffffda RBX: 00007f94ccb75fa0 RCX: 00007f94cc985d19 [ 78.313701][ T5934] RDX: 000000000000e6da RSI: 0000000020000040 RDI: 0000000000000003 [ 78.321664][ T5934] RBP: 00007f94cd75d090 R08: 0000000000000000 R09: 0000000000000000 [ 78.329635][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.337603][ T5934] R13: 0000000000000000 R14: 00007f94ccb75fa0 R15: 00007ffd4768bea8 [ 78.345575][ T5934] [ 78.886572][ T5955] netlink: 'syz.1.18': attribute type 9 has an invalid length. [ 78.894548][ T5955] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18'. [ 79.630818][ T5952] capability: warning: `syz.4.17' uses 32-bit capabilities (legacy support in use) [ 79.669946][ T5952] input: syz0 as /devices/virtual/input/input5 [ 82.643489][ T8] cfg80211: failed to load regulatory.db [ 83.341310][ T973] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.541674][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.553128][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.569913][ T973] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.579121][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.602174][ T973] usb 3-1: config 0 descriptor?? [ 84.095647][ T973] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 84.230572][ T973] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 84.742616][ T5118] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.931007][ T973] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 85.053842][ T973] usb 3-1: USB disconnect, device number 2 [ 85.148045][ T5118] usb 5-1: Using ep0 maxpacket: 16 [ 85.164364][ T5118] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.172548][ T5118] usb 5-1: config 0 has no interface number 0 [ 85.186000][ T5118] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 85.195731][ T5118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.203910][ T5118] usb 5-1: Product: syz [ 85.208575][ T5118] usb 5-1: Manufacturer: syz [ 85.213874][ T5118] usb 5-1: SerialNumber: syz [ 85.239539][ T5118] usb 5-1: config 0 descriptor?? [ 85.255326][ T5118] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 85.602323][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.611496][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.642113][ T6016] bridge0: entered allmulticast mode [ 85.875279][ T6020] kvm: kvm [6011]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1 [ 86.416052][ T5118] gspca_spca1528: reg_w err -71 [ 86.519241][ T5118] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 86.541422][ T5118] usb 5-1: USB disconnect, device number 2 [ 86.985601][ T6028] Zero length message leads to an empty skb [ 87.004808][ T6028] netlink: 216 bytes leftover after parsing attributes in process `syz.1.40'. [ 87.024121][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'. [ 87.039813][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.40'. [ 87.052075][ T6032] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 88.638707][ T6059] netlink: 'syz.4.44': attribute type 9 has an invalid length. [ 88.659212][ T6059] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.44'. [ 89.138959][ T6063] FAULT_INJECTION: forcing a failure. [ 89.138959][ T6063] name failslab, interval 1, probability 0, space 0, times 0 [ 89.302035][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.3.51 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 89.312605][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 89.322687][ T6063] Call Trace: [ 89.325992][ T6063] [ 89.328967][ T6063] dump_stack_lvl+0x241/0x360 [ 89.333696][ T6063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.338926][ T6063] ? __pfx__printk+0x10/0x10 [ 89.343543][ T6063] ? fs_reclaim_acquire+0x93/0x130 [ 89.348694][ T6063] ? __pfx___might_resched+0x10/0x10 [ 89.354024][ T6063] should_fail_ex+0x3b0/0x4e0 [ 89.358737][ T6063] should_failslab+0xac/0x100 [ 89.363468][ T6063] __kmalloc_noprof+0xdd/0x4c0 [ 89.368270][ T6063] ? tomoyo_encode+0x26f/0x540 [ 89.373322][ T6063] tomoyo_encode+0x26f/0x540 [ 89.377948][ T6063] tomoyo_realpath_from_path+0x59e/0x5e0 [ 89.383597][ T6063] tomoyo_check_open_permission+0x258/0x4f0 [ 89.389490][ T6063] ? tomoyo_check_open_permission+0x207/0x4f0 [ 89.395553][ T6063] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 89.401986][ T6063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 89.407193][ T6063] security_file_open+0xac/0x250 [ 89.412142][ T6063] do_dentry_open+0x328/0x1b70 [ 89.416918][ T6063] vfs_open+0x3e/0x330 [ 89.420991][ T6063] path_openat+0x2c84/0x3590 [ 89.425595][ T6063] ? __pfx_path_openat+0x10/0x10 [ 89.430549][ T6063] do_filp_open+0x27f/0x4e0 [ 89.435057][ T6063] ? __pfx_do_filp_open+0x10/0x10 [ 89.440078][ T6063] ? do_raw_spin_lock+0x14f/0x370 [ 89.445127][ T6063] do_sys_openat2+0x13e/0x1d0 [ 89.449804][ T6063] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.454996][ T6063] ? __fget_files+0x2a/0x410 [ 89.459585][ T6063] ? __fget_files+0x2a/0x410 [ 89.464173][ T6063] __x64_sys_openat+0x247/0x2a0 [ 89.469021][ T6063] ? __pfx___x64_sys_openat+0x10/0x10 [ 89.474395][ T6063] ? do_syscall_64+0x100/0x230 [ 89.479163][ T6063] ? do_syscall_64+0xb6/0x230 [ 89.483846][ T6063] do_syscall_64+0xf3/0x230 [ 89.488352][ T6063] ? clear_bhb_loop+0x35/0x90 [ 89.493026][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.498921][ T6063] RIP: 0033:0x7f94cc985d19 [ 89.503339][ T6063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.522937][ T6063] RSP: 002b:00007f94cd75d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.531352][ T6063] RAX: ffffffffffffffda RBX: 00007f94ccb75fa0 RCX: 00007f94cc985d19 [ 89.539325][ T6063] RDX: 0040000000082043 RSI: 00000000200004c0 RDI: ffffffffffffff9c [ 89.547296][ T6063] RBP: 00007f94cd75d090 R08: 0000000000000000 R09: 0000000000000000 [ 89.555264][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.563229][ T6063] R13: 0000000000000001 R14: 00007f94ccb75fa0 R15: 00007ffd4768bea8 [ 89.571211][ T6063] [ 89.591439][ T6063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 89.621557][ T6066] FAULT_INJECTION: forcing a failure. [ 89.621557][ T6066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.772441][ T6069] kvm: kvm [6062]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1 [ 89.889151][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.2.49 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 89.899716][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 89.909789][ T6066] Call Trace: [ 89.913082][ T6066] [ 89.916022][ T6066] dump_stack_lvl+0x241/0x360 [ 89.920725][ T6066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.925941][ T6066] ? __pfx__printk+0x10/0x10 [ 89.930560][ T6066] should_fail_ex+0x3b0/0x4e0 [ 89.935255][ T6066] strncpy_from_user+0x36/0x270 [ 89.940155][ T6066] getname_flags+0xf1/0x540 [ 89.944697][ T6066] user_path_at+0x24/0x60 [ 89.949047][ T6066] __se_sys_mount+0x297/0x3c0 [ 89.953744][ T6066] ? __pfx___se_sys_mount+0x10/0x10 [ 89.958957][ T6066] ? do_syscall_64+0x100/0x230 [ 89.963743][ T6066] ? __x64_sys_mount+0x20/0xc0 [ 89.968522][ T6066] do_syscall_64+0xf3/0x230 [ 89.973508][ T6066] ? clear_bhb_loop+0x35/0x90 [ 89.978214][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.984130][ T6066] RIP: 0033:0x7f9180b85d19 [ 89.988559][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.008191][ T6066] RSP: 002b:00007f918193d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.016630][ T6066] RAX: ffffffffffffffda RBX: 00007f9180d76080 RCX: 00007f9180b85d19 [ 90.024619][ T6066] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 90.032605][ T6066] RBP: 00007f918193d090 R08: 0000000020000080 R09: 0000000000000000 [ 90.040591][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.048580][ T6066] R13: 0000000000000001 R14: 00007f9180d76080 R15: 00007ffd20d68bf8 [ 90.056578][ T6066] [ 90.716483][ T6088] Bluetooth: MGMT ver 1.23 [ 95.531670][ T6135] FAULT_INJECTION: forcing a failure. [ 95.531670][ T6135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.550472][ T6135] CPU: 1 UID: 0 PID: 6135 Comm: syz.3.60 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 95.561021][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 95.571107][ T6135] Call Trace: [ 95.574421][ T6135] [ 95.577367][ T6135] dump_stack_lvl+0x241/0x360 [ 95.582086][ T6135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.587330][ T6135] ? __pfx__printk+0x10/0x10 [ 95.591947][ T6135] ? __pfx_lock_release+0x10/0x10 [ 95.597002][ T6135] should_fail_ex+0x3b0/0x4e0 [ 95.601698][ T6135] _copy_from_iter+0x1e9/0x1c20 [ 95.606571][ T6135] ? __virt_addr_valid+0x183/0x530 [ 95.611725][ T6135] ? __alloc_skb+0x28f/0x440 [ 95.616322][ T6135] ? __pfx__copy_from_iter+0x10/0x10 [ 95.621628][ T6135] ? __virt_addr_valid+0x183/0x530 [ 95.626746][ T6135] ? __virt_addr_valid+0x183/0x530 [ 95.631856][ T6135] ? __virt_addr_valid+0x45f/0x530 [ 95.636962][ T6135] ? __phys_addr_symbol+0x2f/0x70 [ 95.641981][ T6135] ? __check_object_size+0x47a/0x730 [ 95.647266][ T6135] netlink_sendmsg+0x73d/0xcb0 [ 95.652034][ T6135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.657337][ T6135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.662619][ T6135] __sock_sendmsg+0x221/0x270 [ 95.667300][ T6135] ____sys_sendmsg+0x52a/0x7e0 [ 95.672062][ T6135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.677345][ T6135] ? __fget_files+0x2a/0x410 [ 95.681939][ T6135] ? __fget_files+0x2a/0x410 [ 95.686531][ T6135] __sys_sendmsg+0x269/0x350 [ 95.691127][ T6135] ? __pfx_lock_release+0x10/0x10 [ 95.696148][ T6135] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.701262][ T6135] ? __pfx_vfs_write+0x10/0x10 [ 95.706037][ T6135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.712364][ T6135] ? do_syscall_64+0x100/0x230 [ 95.717126][ T6135] ? do_syscall_64+0xb6/0x230 [ 95.721802][ T6135] do_syscall_64+0xf3/0x230 [ 95.726304][ T6135] ? clear_bhb_loop+0x35/0x90 [ 95.730975][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.736868][ T6135] RIP: 0033:0x7f94cc985d19 [ 95.741279][ T6135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.761140][ T6135] RSP: 002b:00007f94cd75d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.769569][ T6135] RAX: ffffffffffffffda RBX: 00007f94ccb75fa0 RCX: 00007f94cc985d19 [ 95.777630][ T6135] RDX: 00000000040080d4 RSI: 0000000020000140 RDI: 0000000000000004 [ 95.785605][ T6135] RBP: 00007f94cd75d090 R08: 0000000000000000 R09: 0000000000000000 [ 95.793581][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.801698][ T6135] R13: 0000000000000000 R14: 00007f94ccb75fa0 R15: 00007ffd4768bea8 [ 95.809672][ T6135] [ 96.610084][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 96.610102][ T29] audit: type=1326 audit(1734193334.588:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.642979][ T29] audit: type=1326 audit(1734193334.588:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.667156][ T29] audit: type=1326 audit(1734193334.618:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.689236][ T29] audit: type=1326 audit(1734193334.618:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.715494][ T29] audit: type=1326 audit(1734193334.618:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.738329][ T29] audit: type=1326 audit(1734193334.618:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.782149][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 96.802504][ T29] audit: type=1326 audit(1734193334.618:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.881087][ T29] audit: type=1326 audit(1734193334.688:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 96.964860][ T29] audit: type=1326 audit(1734193334.688:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 97.078065][ T29] audit: type=1326 audit(1734193334.738:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6150 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91b3f85d19 code=0x7ffc0000 [ 97.358539][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.469178][ T6177] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 98.602688][ T5828] Bluetooth: hci4: command tx timeout [ 98.618751][ T6156] syz.3.75 (6156): drop_caches: 2 [ 98.914005][ T9] IPVS: starting estimator thread 0... [ 98.950301][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 99.007777][ T6179] IPVS: using max 38 ests per chain, 91200 per kthread [ 100.619750][ T6210] netlink: 25 bytes leftover after parsing attributes in process `syz.4.90'. [ 100.630694][ T6210] netlink: 'syz.4.90': attribute type 4 has an invalid length. [ 101.484736][ T6215] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 101.500381][ T6217] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 102.241294][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 102.399077][ T6228] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 102.738425][ T6228] erspan1: entered promiscuous mode [ 102.743791][ T6228] erspan1: entered allmulticast mode [ 102.767956][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.794872][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 104.236782][ T6263] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 104.873102][ T6268] process 'syz.0.106' launched './file0' with NULL argv: empty string added [ 104.878612][ T6282] capability: warning: `syz.0.106' uses deprecated v2 capabilities in a way that may be insecure [ 105.262372][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 105.329059][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 105.329077][ T29] audit: type=1326 audit(1734193343.228:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.465127][ T29] audit: type=1326 audit(1734193343.228:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.500408][ T29] audit: type=1326 audit(1734193343.228:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.528747][ T29] audit: type=1326 audit(1734193343.228:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.559537][ T29] audit: type=1326 audit(1734193343.228:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.581697][ T29] audit: type=1326 audit(1734193343.228:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.603275][ T29] audit: type=1326 audit(1734193343.228:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.625304][ T29] audit: type=1326 audit(1734193343.228:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.652045][ T29] audit: type=1326 audit(1734193343.228:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 105.675719][ T29] audit: type=1326 audit(1734193343.228:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6290 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9180b85d19 code=0x7ffc0000 [ 107.150581][ T6296] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 107.160451][ T46] IPVS: starting estimator thread 0... [ 107.215118][ T6311] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 107.279110][ T6320] IPVS: using max 38 ests per chain, 91200 per kthread [ 107.344196][ T6321] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 107.430759][ T6326] kvm: user requested TSC rate below hardware speed [ 107.707654][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.888364][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 107.904633][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.045495][ T9] usb 1-1: New USB device found, idVendor=131c, idProduct=1c0d, bcdDevice= 0.00 [ 108.314833][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.448220][ T9] usb 1-1: config 0 descriptor?? [ 109.032550][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.230709][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.398628][ T6362] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 111.459720][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 111.465737][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.501943][ T9] usb 1-1: USB disconnect, device number 2 [ 112.453894][ T6372] syz.4.132: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.471965][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.4.132 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 112.482598][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 112.492693][ T6372] Call Trace: [ 112.495966][ T6372] [ 112.498916][ T6372] dump_stack_lvl+0x241/0x360 [ 112.503597][ T6372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.508786][ T6372] ? __pfx__printk+0x10/0x10 [ 112.513387][ T6372] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 112.519808][ T6372] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 112.526305][ T6372] warn_alloc+0x278/0x410 [ 112.530635][ T6372] ? __pfx_warn_alloc+0x10/0x10 [ 112.535479][ T6372] ? vb2_vmalloc_alloc+0xf2/0x340 [ 112.540601][ T6372] ? __get_vm_area_node+0x1c8/0x2d0 [ 112.545788][ T6372] ? __get_vm_area_node+0x25c/0x2d0 [ 112.551005][ T6372] __vmalloc_node_range_noprof+0x62f/0x1380 [ 112.556903][ T6372] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.563243][ T6372] ? __kasan_kmalloc+0x98/0xb0 [ 112.568003][ T6372] vmalloc_user_noprof+0x74/0x80 [ 112.572940][ T6372] ? vb2_vmalloc_alloc+0xf2/0x340 [ 112.577966][ T6372] vb2_vmalloc_alloc+0xf2/0x340 [ 112.582837][ T6372] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 112.588282][ T6372] __vb2_queue_alloc+0xa0b/0x16f0 [ 112.593316][ T6372] vb2_core_reqbufs+0xd2e/0x17c0 [ 112.598258][ T6372] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 112.603625][ T6372] ? __video_do_ioctl+0x4ea/0xdd0 [ 112.608717][ T6372] v4l2_m2m_ioctl_reqbufs+0x14b/0x230 [ 112.614094][ T6372] __video_do_ioctl+0xc23/0xdd0 [ 112.618943][ T6372] ? __pfx___video_do_ioctl+0x10/0x10 [ 112.624326][ T6372] ? smack_log+0x123/0x540 [ 112.628739][ T6372] ? __might_fault+0xc6/0x120 [ 112.633410][ T6372] video_usercopy+0x89b/0x1180 [ 112.638173][ T6372] ? __pfx___video_do_ioctl+0x10/0x10 [ 112.643561][ T6372] ? __pfx_video_usercopy+0x10/0x10 [ 112.648750][ T6372] ? smack_file_ioctl+0x2f7/0x3a0 [ 112.653772][ T6372] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.659766][ T6372] v4l2_ioctl+0x189/0x1e0 [ 112.664093][ T6372] ? __pfx_v4l2_ioctl+0x10/0x10 [ 112.668937][ T6372] __se_sys_ioctl+0xf5/0x170 [ 112.673527][ T6372] do_syscall_64+0xf3/0x230 [ 112.678035][ T6372] ? clear_bhb_loop+0x35/0x90 [ 112.682707][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.688598][ T6372] RIP: 0033:0x7f91b3f85d19 [ 112.693004][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.712624][ T6372] RSP: 002b:00007f91b4d2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.721031][ T6372] RAX: ffffffffffffffda RBX: 00007f91b4175fa0 RCX: 00007f91b3f85d19 [ 112.729009][ T6372] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000007 [ 112.737006][ T6372] RBP: 00007f91b4001a20 R08: 0000000000000000 R09: 0000000000000000 [ 112.744975][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.752936][ T6372] R13: 0000000000000000 R14: 00007f91b4175fa0 R15: 00007ffc0ed97528 [ 112.760908][ T6372] [ 112.764536][ T6372] Mem-Info: [ 112.767735][ T6372] active_anon:349 inactive_anon:7611 isolated_anon:0 [ 112.767735][ T6372] active_file:4686 inactive_file:46988 isolated_file:0 [ 112.767735][ T6372] unevictable:768 dirty:153 writeback:0 [ 112.767735][ T6372] slab_reclaimable:10053 slab_unreclaimable:97080 [ 112.767735][ T6372] mapped:33244 shmem:4307 pagetables:803 [ 112.767735][ T6372] sec_pagetables:0 bounce:0 [ 112.767735][ T6372] kernel_misc_reclaimable:0 [ 112.767735][ T6372] free:1290218 free_pcp:1018 free_cma:0 [ 112.812986][ T6372] Node 0 active_anon:1396kB inactive_anon:30444kB active_file:18668kB inactive_file:187952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132976kB dirty:612kB writeback:0kB shmem:15692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11112kB pagetables:3212kB sec_pagetables:0kB all_unreclaimable? no [ 112.845659][ T6372] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.875839][ T6372] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.910011][ T6372] lowmem_reserve[]: 0 2465 2466 0 0 [ 112.915378][ T6372] Node 0 DMA32 free:1237796kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1392kB inactive_anon:30452kB active_file:17904kB inactive_file:187900kB unevictable:1536kB writepending:616kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:4024kB local_pcp:3304kB free_cma:0kB [ 112.946264][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 112.951413][ T6372] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:772kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 112.978569][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 112.983620][ T6372] Node 1 Normal free:3907708kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 113.013090][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 113.018212][ T6372] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.031845][ T6372] Node 0 DMA32: 457*4kB (U) 209*8kB (UME) 169*16kB (UME) 460*32kB (UME) 391*64kB (UM) 33*128kB (ME) 31*256kB (ME) 14*512kB (UME) 9*1024kB (UME) 2*2048kB (ME) 283*4096kB (M) = 1237756kB [ 113.051724][ T6372] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 113.064498][ T6372] Node 1 Normal: 191*4kB (UME) 66*8kB (UME) 33*16kB (UME) 197*32kB (UME) 83*64kB (UME) 30*128kB (UME) 15*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3907708kB [ 113.084538][ T6372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.095560][ T6372] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.105033][ T6372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.114837][ T6372] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.124280][ T6372] 55983 total pagecache pages [ 113.129131][ T6372] 0 pages in swap cache [ 113.133371][ T6372] Free swap = 124344kB [ 113.137788][ T6372] Total swap = 124996kB [ 113.142014][ T6372] 2097051 pages RAM [ 113.145922][ T6372] 0 pages HighMem/MovableOnly [ 113.150732][ T6372] 427004 pages reserved [ 113.154983][ T6372] 0 pages cma reserved [ 113.238234][ T6371] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 114.098415][ T9] IPVS: starting estimator thread 0... [ 114.353652][ T6378] IPVS: using max 20 ests per chain, 48000 per kthread [ 116.612019][ T6408] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 117.590954][ T6426] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 121.142416][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.151200][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.159068][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.166580][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.174559][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.181857][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.304269][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.726416][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.167909][ T973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.529331][ T6471] IPVS: set_ctl: invalid protocol: 165 172.20.20.187:20001 [ 122.855800][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.944173][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 122.978394][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 122.985736][ T973] usb 1-1: config 0 has an invalid interface number: 32 but max is 1 [ 122.997071][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.022406][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.033319][ T973] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 123.042850][ T973] usb 1-1: config 0 has no interface number 0 [ 123.056907][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.064910][ T6456] bridge_slave_0: entered allmulticast mode [ 123.073876][ T6456] bridge_slave_0: entered promiscuous mode [ 123.073933][ T973] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=96.af [ 123.094948][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.103135][ T973] usb 1-1: Product: syz [ 123.107856][ T973] usb 1-1: Manufacturer: syz [ 123.112455][ T973] usb 1-1: SerialNumber: syz [ 123.130449][ T973] usb 1-1: config 0 descriptor?? [ 123.181239][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.359364][ T5833] Bluetooth: hci4: command tx timeout [ 123.371455][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.402817][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.543743][ T6456] bridge_slave_1: entered allmulticast mode [ 123.650403][ T6456] bridge_slave_1: entered promiscuous mode [ 124.188699][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.202363][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.238825][ T6456] team0: Port device team_slave_0 added [ 124.248052][ T6456] team0: Port device team_slave_1 added [ 124.276737][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.289107][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.318442][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.379098][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.398641][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.466895][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.546660][ T52] bridge_slave_1: left allmulticast mode [ 124.560953][ T52] bridge_slave_1: left promiscuous mode [ 124.578190][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.653108][ T6382] usb 1-1: USB disconnect, device number 3 [ 124.777907][ T52] bridge_slave_0: left allmulticast mode [ 124.783628][ T52] bridge_slave_0: left promiscuous mode [ 124.838784][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.866835][ T6494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.913247][ T5833] Bluetooth: hci4: command tx timeout [ 127.326059][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.381559][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.407348][ T52] bond0 (unregistering): Released all slaves [ 127.417330][ T6520] syz.3.173 uses obsolete (PF_INET,SOCK_PACKET) [ 128.000609][ T5833] Bluetooth: hci4: command tx timeout [ 128.221864][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.296771][ T6524] netlink: 340 bytes leftover after parsing attributes in process `syz.3.173'. [ 128.390054][ T6456] hsr_slave_0: entered promiscuous mode [ 128.405145][ T6456] hsr_slave_1: entered promiscuous mode [ 128.428732][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 128.436595][ T8] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 128.465572][ T8] usb 4-1: config 0 has no interface number 0 [ 128.477681][ T8] usb 4-1: config 0 interface 12 has no altsetting 0 [ 128.496450][ T8] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 128.520479][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.543444][ T8] usb 4-1: Product: syz [ 128.557990][ T8] usb 4-1: Manufacturer: syz [ 128.562901][ T8] usb 4-1: SerialNumber: syz [ 128.582509][ T8] usb 4-1: config 0 descriptor?? [ 128.808717][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.817266][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.845313][ T6456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.853075][ T6456] Cannot create hsr debugfs directory [ 128.887348][ T6528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.174'. [ 129.032854][ T52] hsr_slave_0: left promiscuous mode [ 129.068587][ T52] hsr_slave_1: left promiscuous mode [ 129.108894][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.116374][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.145074][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.161367][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.182720][ T52] veth1_vlan: left promiscuous mode [ 129.195329][ T52] veth0_vlan: left promiscuous mode [ 130.054791][ T5833] Bluetooth: hci4: command tx timeout [ 130.123803][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.134569][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.165040][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.185870][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.195145][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 130.209800][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.603566][ T8] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 130.622589][ T8] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 130.630420][ T8] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 130.638897][ T8] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 130.722180][ T6572] FAULT_INJECTION: forcing a failure. [ 130.722180][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 130.735104][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.0.178 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 130.745712][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 130.755784][ T6572] Call Trace: [ 130.759075][ T6572] [ 130.762016][ T6572] dump_stack_lvl+0x241/0x360 [ 130.766725][ T6572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.771938][ T6572] ? __pfx__printk+0x10/0x10 [ 130.776544][ T6572] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 130.782537][ T6572] ? __pfx___might_resched+0x10/0x10 [ 130.787848][ T6572] should_fail_ex+0x3b0/0x4e0 [ 130.792544][ T6572] should_failslab+0xac/0x100 [ 130.797245][ T6572] kmem_cache_alloc_node_noprof+0x77/0x380 [ 130.803061][ T6572] ? __alloc_skb+0x1c3/0x440 [ 130.807752][ T6572] __alloc_skb+0x1c3/0x440 [ 130.812177][ T6572] ? lockdep_hardirqs_on+0x99/0x150 [ 130.817398][ T6572] ? __pfx___alloc_skb+0x10/0x10 [ 130.822351][ T6572] ? netlink_sendmsg+0x84a/0xcb0 [ 130.827312][ T6572] netlink_sendmsg+0x638/0xcb0 [ 130.832104][ T6572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.837412][ T6572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.842710][ T6572] __sock_sendmsg+0x221/0x270 [ 130.847409][ T6572] ____sys_sendmsg+0x52a/0x7e0 [ 130.852198][ T6572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.857494][ T6572] ? __fget_files+0x2a/0x410 [ 130.862097][ T6572] ? __fget_files+0x2a/0x410 [ 130.866707][ T6572] __sys_sendmsg+0x269/0x350 [ 130.871316][ T6572] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.876493][ T6572] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.882843][ T6572] ? do_syscall_64+0x100/0x230 [ 130.887626][ T6572] ? do_syscall_64+0xb6/0x230 [ 130.892327][ T6572] do_syscall_64+0xf3/0x230 [ 130.896872][ T6572] ? clear_bhb_loop+0x35/0x90 [ 130.901565][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.907474][ T6572] RIP: 0033:0x7fa840d85d19 [ 130.911902][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.931539][ T6572] RSP: 002b:00007fa83ea44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.939990][ T6572] RAX: ffffffffffffffda RBX: 00007fa840f76160 RCX: 00007fa840d85d19 [ 130.947981][ T6572] RDX: 0000000004000080 RSI: 00000000200002c0 RDI: 000000000000000b [ 130.955978][ T6572] RBP: 00007fa83ea44090 R08: 0000000000000000 R09: 0000000000000000 [ 130.963960][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.971951][ T6572] R13: 0000000000000000 R14: 00007fa840f76160 R15: 00007ffe964435d8 [ 130.979947][ T6572] [ 131.011834][ T8] usb 4-1: USB disconnect, device number 2 [ 131.115792][ T52] team0 (unregistering): Port device team_slave_1 removed [ 131.159441][ T52] team0 (unregistering): Port device team_slave_0 removed [ 131.949754][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 131.949772][ T29] audit: type=1326 audit(1734193369.778:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.008030][ T29] audit: type=1326 audit(1734193369.778:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.090178][ T29] audit: type=1326 audit(1734193369.778:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.097649][ C0] [ 132.114061][ C0] ============================= [ 132.118936][ C0] [ BUG: Invalid wait context ] [ 132.123849][ C0] 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 Not tainted [ 132.130980][ C0] ----------------------------- [ 132.135851][ C0] syz.3.180/6580 is trying to lock: [ 132.141070][ C0] ffff8880b863a930 (batched_entropy_u8.lock){..-.}-{3:3}, at: get_random_u8+0x1a0/0xaa0 [ 132.150952][ C0] other info that might help us debug this: [ 132.156910][ C0] context-{2:2} [ 132.160397][ C0] 1 lock held by syz.3.180/6580: [ 132.165352][ C0] #0: ffff88802ceff950 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 132.167613][ T29] audit: type=1326 audit(1734193369.778:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.175125][ C0] stack backtrace: [ 132.175136][ C0] CPU: 0 UID: 0 PID: 6580 Comm: syz.3.180 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 132.175157][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 132.175167][ C0] Call Trace: [ 132.212618][ T6579] input: syz0 as /devices/virtual/input/input7 [ 132.220824][ C0] [ 132.220841][ C0] dump_stack_lvl+0x241/0x360 [ 132.220867][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.220884][ C0] ? __pfx__printk+0x10/0x10 [ 132.220911][ C0] __lock_acquire+0x15a8/0x2100 [ 132.220934][ C0] lock_acquire+0x1ed/0x550 [ 132.220949][ C0] ? get_random_u8+0x1a0/0xaa0 [ 132.220969][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 132.220994][ C0] get_random_u8+0x1bd/0xaa0 [ 132.221010][ C0] ? get_random_u8+0x1a0/0xaa0 [ 132.221027][ C0] ? get_random_u8+0x1a0/0xaa0 [ 132.221043][ C0] ? __pfx_get_random_u8+0x10/0x10 [ 132.221062][ C0] ? 0xffffffffa00007e4 [ 132.221075][ C0] ? 0xffffffffa00007e4 [ 132.221087][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 132.221105][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 132.221120][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.221140][ C0] ? kernel_text_address+0xa7/0xe0 [ 132.221160][ C0] ? __kernel_text_address+0xd/0x40 [ 132.236309][ T29] audit: type=1326 audit(1734193369.778:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.238083][ C0] ? unwind_get_return_address+0x4d/0x90 [ 132.238108][ C0] ? arch_stack_walk+0xfd/0x150 [ 132.238129][ C0] kfence_guarded_alloc+0x9c/0xcd0 [ 132.247614][ T29] audit: type=1326 audit(1734193369.778:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.247884][ C0] ? __pfx_kfence_guarded_alloc+0x10/0x10 [ 132.252781][ T29] audit: type=1326 audit(1734193369.778:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.257194][ C0] ? __irq_work_queue_local+0x115/0x410 [ 132.257214][ C0] ? get_alloc_stack_hash+0x3c0/0x760 [ 132.257237][ C0] __kfence_alloc+0x344/0x370 [ 132.264811][ T29] audit: type=1326 audit(1734193369.778:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.266969][ C0] ? __pfx___kfence_alloc+0x10/0x10 [ 132.306447][ T29] audit: type=1326 audit(1734193369.778:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.311077][ C0] ? __kfence_alloc+0x274/0x370 [ 132.311105][ C0] ? __kmalloc_cache_noprof+0x2dd/0x390 [ 132.311121][ C0] ? __set_page_owner+0x55f/0x800 [ 132.324822][ T5828] Bluetooth: hci5: command tx timeout [ 132.342745][ C0] ? post_alloc_hook+0x1f3/0x230 [ 132.342773][ C0] ? get_page_from_freelist+0x3651/0x37a0 [ 132.342792][ C0] ? __alloc_pages_noprof+0x292/0x710 [ 132.342809][ C0] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 132.361023][ T29] audit: type=1326 audit(1734193369.888:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cc985d19 code=0x7ffc0000 [ 132.379623][ C0] ? stack_depot_save_flags+0x72d/0x940 [ 132.379649][ C0] ? kasan_save_stack+0x4f/0x60 [ 132.379667][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 132.379683][ C0] ? task_work_add+0xd9/0x490 [ 132.379701][ C0] ? run_posix_cpu_timers+0x6ac/0x810 [ 132.560159][ C0] ? tick_nohz_handler+0x37c/0x500 [ 132.565310][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 132.570711][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 132.575860][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 132.582051][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 132.587898][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.594086][ C0] ? rcu_is_watching+0x5a/0xb0 [ 132.598893][ C0] ? skb_copy_datagram_iter+0x94/0x250 [ 132.604376][ C0] ? __unix_dgram_recvmsg+0x7e3/0x12f0 [ 132.609874][ C0] ? sock_recvmsg_nosec+0x18e/0x1d0 [ 132.615101][ C0] ? ____sys_recvmsg+0x3cd/0x480 [ 132.620061][ C0] ? do_recvmmsg+0x426/0xab0 [ 132.624673][ C0] ? __x64_sys_recvmmsg+0x199/0x250 [ 132.629901][ C0] ? do_syscall_64+0xf3/0x230 [ 132.634598][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.640703][ C0] ? __pfx_lock_release+0x10/0x10 [ 132.645751][ C0] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 132.651415][ C0] ? kasan_save_stack+0x4f/0x60 [ 132.653550][ T6581] slcan: can't register candev [ 132.656276][ C0] ? task_work_add+0xd9/0x490 [ 132.661236][ T6581] Falling back ldisc for ttyS3. [ 132.665689][ C0] __kmalloc_cache_noprof+0x2dd/0x390 [ 132.675932][ C0] ? __set_page_owner+0x55f/0x800 [ 132.680991][ C0] __set_page_owner+0x55f/0x800 [ 132.685890][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 132.691306][ C0] post_alloc_hook+0x1f3/0x230 [ 132.696102][ C0] get_page_from_freelist+0x3651/0x37a0 [ 132.701696][ C0] __alloc_pages_noprof+0x292/0x710 [ 132.706924][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 132.712643][ C0] ? 0xffffffffa00007e4 [ 132.716799][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 132.722968][ C0] ? __kernel_text_address+0xd/0x40 [ 132.728162][ C0] ? unwind_get_return_address+0x4d/0x90 [ 132.733784][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 132.739252][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 132.745250][ C0] ? stack_trace_save+0x118/0x1d0 [ 132.750266][ C0] ? alloc_pages_noprof+0x43/0x170 [ 132.755367][ C0] stack_depot_save_flags+0x72d/0x940 [ 132.760731][ C0] kasan_save_stack+0x4f/0x60 [ 132.765401][ C0] ? kasan_save_stack+0x3f/0x60 [ 132.770238][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 132.775772][ C0] ? task_work_add+0xd9/0x490 [ 132.780439][ C0] ? run_posix_cpu_timers+0x6ac/0x810 [ 132.785803][ C0] ? tick_nohz_handler+0x37c/0x500 [ 132.790918][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 132.796288][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 132.801397][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 132.807548][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 132.813357][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.819504][ C0] ? rcu_is_watching+0x5a/0xb0 [ 132.824260][ C0] ? skb_copy_datagram_iter+0x94/0x250 [ 132.829710][ C0] ? __unix_dgram_recvmsg+0x7e3/0x12f0 [ 132.835169][ C0] ? sock_recvmsg_nosec+0x18e/0x1d0 [ 132.840393][ C0] ? ____sys_recvmsg+0x3cd/0x480 [ 132.845613][ C0] ? do_recvmmsg+0x426/0xab0 [ 132.850226][ C0] ? __x64_sys_recvmmsg+0x199/0x250 [ 132.855417][ C0] ? do_syscall_64+0xf3/0x230 [ 132.860087][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.866158][ C0] ? __phys_addr+0xba/0x170 [ 132.870676][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 132.876054][ C0] task_work_add+0xd9/0x490 [ 132.880554][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 132.885568][ C0] ? __pfx_task_work_add+0x10/0x10 [ 132.890686][ C0] run_posix_cpu_timers+0x6ac/0x810 [ 132.895981][ C0] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 132.901715][ C0] ? sched_balance_trigger+0x1a3/0x890 [ 132.907167][ C0] tick_nohz_handler+0x37c/0x500 [ 132.912100][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 132.917558][ C0] __hrtimer_run_queues+0x551/0xd30 [ 132.922785][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 132.928494][ C0] ? sched_clock+0x4a/0x70 [ 132.932929][ C0] ? read_tsc+0x9/0x20 [ 132.936985][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 132.943051][ C0] hrtimer_interrupt+0x403/0xa40 [ 132.947988][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 132.953956][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 132.959583][ C0] [ 132.962515][ C0] [ 132.965440][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.971445][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 132.976825][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 9c 3b 7e 00 48 c7 c3 d8 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 22 8b 03 65 ff 0d f1 da 7e 7e 74 10 83 e0 04 c1 e8 02 5b [ 132.996432][ C0] RSP: 0018:ffffc900032b76a8 EFLAGS: 00000a02 [ 133.002494][ C0] RAX: 0000000000000000 RBX: ffff8880b8637cd8 RCX: ffffffff89884995 [ 133.010459][ C0] RDX: ffff888034679e00 RSI: ffffffff8c5ec400 RDI: ffffffff8c5ec3c0 [ 133.018418][ C0] RBP: 0000000000000001 R08: ffffffff898849bb R09: 1ffffffff203079e [ 133.026378][ C0] R10: dffffc0000000000 R11: fffffbfff203079f R12: ffff888064902c80 [ 133.034365][ C0] R13: 0000000000000000 R14: ffffffff8e2cea90 R15: dffffc0000000000 [ 133.042331][ C0] ? skb_copy_datagram_iter+0x8b/0x250 [ 133.047803][ C0] ? skb_copy_datagram_iter+0x65/0x250 [ 133.053254][ C0] ? rcu_is_watching+0x15/0xb0 [ 133.058008][ C0] skb_copy_datagram_iter+0x94/0x250 [ 133.063286][ C0] __unix_dgram_recvmsg+0x7e3/0x12f0 [ 133.068565][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 133.074276][ C0] ? iovec_from_user+0x61/0x240 [ 133.079115][ C0] ? __import_iovec+0x3a8/0x870 [ 133.083954][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 133.088978][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 133.094533][ C0] sock_recvmsg_nosec+0x18e/0x1d0 [ 133.099551][ C0] ____sys_recvmsg+0x3cd/0x480 [ 133.104307][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 133.109584][ C0] ? do_recvmmsg+0x44e/0xab0 [ 133.114161][ C0] ? __might_fault+0xaa/0x120 [ 133.118828][ C0] do_recvmmsg+0x426/0xab0 [ 133.123241][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 133.128251][ C0] ? mark_lock+0x9a/0x360 [ 133.132570][ C0] ? reacquire_held_locks+0x3eb/0x690 [ 133.137940][ C0] ? vma_end_read+0x18/0x170 [ 133.142548][ C0] ? __pfx_reacquire_held_locks+0x10/0x10 [ 133.148262][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 133.153281][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 133.158817][ C0] ? exc_page_fault+0x590/0x8b0 [ 133.163666][ C0] ? do_syscall_64+0xb6/0x230 [ 133.168334][ C0] do_syscall_64+0xf3/0x230 [ 133.172825][ C0] ? clear_bhb_loop+0x35/0x90 [ 133.177494][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.183380][ C0] RIP: 0033:0x7f94cc985d19 [ 133.187791][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.207410][ C0] RSP: 002b:00007f94cd73c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 133.215817][ C0] RAX: ffffffffffffffda RBX: 00007f94ccb76080 RCX: 00007f94cc985d19 [ 133.223815][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 133.231792][ C0] RBP: 00007f94cca01a20 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 133.239756][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 133.247717][ C0] R13: 0000000000000001 R14: 00007f94ccb76080 R15: 00007ffd4768bea8 [ 133.255685][ C0] [ 133.277723][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.284040][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.975137][ T52] IPVS: stop unused estimator thread 0... [ 134.062252][ T5822] syz-executor (5822) used greatest stack depth: 18512 bytes left [ 134.074586][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.141965][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.253358][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.380657][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.452978][ T52] bridge_slave_1: left allmulticast mode [ 134.459004][ T52] bridge_slave_1: left promiscuous mode [ 134.464654][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.473352][ T52] bridge_slave_0: left allmulticast mode [ 134.479555][ T52] bridge_slave_0: left promiscuous mode [ 134.485216][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.496872][ T52] bridge_slave_1: left allmulticast mode [ 134.502737][ T52] bridge_slave_1: left promiscuous mode [ 134.508647][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.516502][ T52] bridge_slave_0: left allmulticast mode [ 134.522359][ T52] bridge_slave_0: left promiscuous mode [ 134.528492][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.672535][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.682807][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.693153][ T52] bond0 (unregistering): Released all slaves [ 134.701985][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.712686][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.722198][ T52] bond0 (unregistering): Released all slaves [ 134.887238][ T52] hsr_slave_0: left promiscuous mode [ 134.894842][ T52] hsr_slave_1: left promiscuous mode [ 134.902207][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.910183][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.918008][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.925418][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.935929][ T52] hsr_slave_0: left promiscuous mode [ 134.942916][ T52] hsr_slave_1: left promiscuous mode [ 134.948804][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.956274][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.965807][ T52] veth1_macvtap: left promiscuous mode [ 134.971395][ T52] veth0_macvtap: left promiscuous mode [ 134.976909][ T52] veth1_vlan: left promiscuous mode [ 134.982310][ T52] veth0_vlan: left promiscuous mode [ 135.097001][ T52] team0 (unregistering): Port device team_slave_1 removed [ 135.107375][ T52] team0 (unregistering): Port device team_slave_0 removed [ 135.251457][ T52] team0 (unregistering): Port device team_slave_1 removed [ 135.275039][ T52] team0 (unregistering): Port device team_slave_0 removed [ 135.714426][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.757928][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.815558][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.871443][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.945552][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.992105][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.042896][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.082107][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.171119][ T52] bridge_slave_1: left allmulticast mode [ 136.176851][ T52] bridge_slave_1: left promiscuous mode [ 136.182875][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.191702][ T52] bridge_slave_0: left allmulticast mode [ 136.197334][ T52] bridge_slave_0: left promiscuous mode [ 136.203315][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.212361][ T52] bridge_slave_1: left allmulticast mode [ 136.218101][ T52] bridge_slave_1: left promiscuous mode [ 136.223726][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.232238][ T52] bridge_slave_0: left allmulticast mode [ 136.238132][ T52] bridge_slave_0: left promiscuous mode [ 136.243760][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.392674][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.402641][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.412394][ T52] bond0 (unregistering): Released all slaves [ 136.425632][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.436131][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.446267][ T52] bond0 (unregistering): Released all slaves [ 136.816780][ T52] hsr_slave_0: left promiscuous mode [ 136.824133][ T52] hsr_slave_1: left promiscuous mode [ 136.831027][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.838688][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.846204][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.854030][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.863747][ T52] hsr_slave_0: left promiscuous mode [ 136.870444][ T52] hsr_slave_1: left promiscuous mode [ 136.876088][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.883555][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.891355][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.898934][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.908249][ T52] veth1_macvtap: left promiscuous mode [ 136.913726][ T52] veth0_macvtap: left promiscuous mode [ 136.919400][ T52] veth1_vlan: left promiscuous mode [ 136.924668][ T52] veth0_vlan: left promiscuous mode [ 136.930594][ T52] veth1_macvtap: left promiscuous mode [ 136.936092][ T52] veth0_macvtap: left promiscuous mode [ 136.941799][ T52] veth1_vlan: left promiscuous mode [ 136.947047][ T52] veth0_vlan: left promiscuous mode [ 137.076645][ T52] team0 (unregistering): Port device team_slave_1 removed [ 137.098817][ T52] team0 (unregistering): Port device team_slave_0 removed [ 137.272185][ T52] team0 (unregistering): Port device team_slave_1 removed [ 137.292626][ T52] team0 (unregistering): Port device team_slave_0 removed [ 137.776522][ T52] IPVS: stop unused estimator thread 0...