last executing test programs: 4.493057738s ago: executing program 3 (id=4): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277f0cffeb"}) r2 = dup(r1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x200, 0x0, 0x0, 0x82f6, 0x0, "b73a630d7000"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x7f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000940)) r3 = inotify_init1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f0000000080)=""/61, 0x3d, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000380)) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000100)='syscall\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="15070000000000000400130000000c0009"], 0x20}}, 0x0) pread64(r6, &(0x7f00000004c0)=""/251, 0xfb, 0x0) 4.159334075s ago: executing program 3 (id=6): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.344737238s ago: executing program 1 (id=2): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3.184259496s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="f2450f38f16aeb8f0858a66b000d46740c66430f38db322ef36d660f74ea3e40eb9ac4e1d1ef36f080a1bc960000ffc421e6525a77", 0x0, 0x0}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.098972803s ago: executing program 2 (id=3): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'wlan0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)=ANY=[], 0x0) 3.01486794s ago: executing program 4 (id=5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$video4linux(0x0, 0x4, 0xe2440) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x5, 0x5783, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x3a8) pwritev(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x3, 0xd4bd) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x10000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x44}}, 0x0) sendmsg$NFT_MSG_GETSET(r6, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 1.910533025s ago: executing program 4 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'bond_slave_0\x00', &(0x7f0000000540)=@ethtool_sset_info={0x37, 0x4, 0x5, [0x8]}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x3c}}, 0x0) 1.647141608s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) inotify_init() ioperm(0x0, 0x6, 0xd644) 782.884558ms ago: executing program 4 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) 338.565461ms ago: executing program 1 (id=10): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000400)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) syz_emit_vhci(0x0, 0x15) sched_setscheduler(0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) eventfd(0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff33, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008051) keyctl$clear(0x11, 0xfffffffffffffffd) r2 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x148, 0x178, 0xc, 0x0, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'wlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x836}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x904}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x80, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b40, 0xfffffffffffffffc) 0s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(0xffffffffffffffff, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_dev$video(0x0, 0x850, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0xa, @sdr}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000001140)={0xa, {0x0, 0xb7, 0xe, 0x400}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 52.371415][ T5834] cgroup: Unknown subsys name 'net' [ 52.484494][ T5834] cgroup: Unknown subsys name 'cpuset' [ 52.492245][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.761167][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.957714][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.967523][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.975243][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.982984][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.991873][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.999965][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.007657][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.015176][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.022743][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.023233][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.030131][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.044561][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.052427][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.052932][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.067433][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.067667][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.074961][ T5864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.082752][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.088980][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.105137][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.112198][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.112244][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.127035][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.134789][ T5160] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.143342][ T5160] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.150702][ T5160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.162448][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.169613][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.178126][ T5160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.185849][ T5160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.499259][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 56.630011][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 56.656453][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 56.698958][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.706311][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.713741][ T5857] bridge_slave_0: entered allmulticast mode [ 56.720311][ T5857] bridge_slave_0: entered promiscuous mode [ 56.785657][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.793095][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.800200][ T5857] bridge_slave_1: entered allmulticast mode [ 56.807127][ T5857] bridge_slave_1: entered promiscuous mode [ 56.814443][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 56.856606][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.871857][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.896069][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 56.944428][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.951579][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.959472][ T5844] bridge_slave_0: entered allmulticast mode [ 56.967081][ T5844] bridge_slave_0: entered promiscuous mode [ 56.975143][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.982934][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.990116][ T5851] bridge_slave_0: entered allmulticast mode [ 56.996923][ T5851] bridge_slave_0: entered promiscuous mode [ 57.009616][ T5857] team0: Port device team_slave_0 added [ 57.016819][ T5857] team0: Port device team_slave_1 added [ 57.036334][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.043579][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.050687][ T5844] bridge_slave_1: entered allmulticast mode [ 57.057917][ T5844] bridge_slave_1: entered promiscuous mode [ 57.064435][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.071543][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.078956][ T5851] bridge_slave_1: entered allmulticast mode [ 57.086476][ T5851] bridge_slave_1: entered promiscuous mode [ 57.152825][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.159796][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.186319][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.208406][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.219492][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.238309][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.245459][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.271505][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.283869][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.303161][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.330740][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.338339][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.346202][ T5845] bridge_slave_0: entered allmulticast mode [ 57.352870][ T5845] bridge_slave_0: entered promiscuous mode [ 57.386025][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.394898][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.402542][ T5845] bridge_slave_1: entered allmulticast mode [ 57.409032][ T5845] bridge_slave_1: entered promiscuous mode [ 57.427015][ T5844] team0: Port device team_slave_0 added [ 57.436240][ T5851] team0: Port device team_slave_0 added [ 57.444588][ T5851] team0: Port device team_slave_1 added [ 57.480778][ T5844] team0: Port device team_slave_1 added [ 57.504237][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.511334][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.518687][ T5852] bridge_slave_0: entered allmulticast mode [ 57.525242][ T5852] bridge_slave_0: entered promiscuous mode [ 57.533305][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.540462][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.548201][ T5852] bridge_slave_1: entered allmulticast mode [ 57.554948][ T5852] bridge_slave_1: entered promiscuous mode [ 57.570820][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.605278][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.612382][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.638712][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.658836][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.680107][ T5857] hsr_slave_0: entered promiscuous mode [ 57.686465][ T5857] hsr_slave_1: entered promiscuous mode [ 57.703360][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.710312][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.737226][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.749074][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.756267][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.782459][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.794997][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.802327][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.828510][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.840817][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.860880][ T5845] team0: Port device team_slave_0 added [ 57.884005][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.902949][ T5845] team0: Port device team_slave_1 added [ 57.942624][ T5852] team0: Port device team_slave_0 added [ 57.989891][ T5852] team0: Port device team_slave_1 added [ 57.996433][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.003820][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.029929][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.054509][ T5844] hsr_slave_0: entered promiscuous mode [ 58.060618][ T5844] hsr_slave_1: entered promiscuous mode [ 58.067426][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.075359][ T5844] Cannot create hsr debugfs directory [ 58.090012][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.097077][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.124287][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.133318][ T5160] Bluetooth: hci4: command tx timeout [ 58.140342][ T5858] Bluetooth: hci0: command tx timeout [ 58.164656][ T5851] hsr_slave_0: entered promiscuous mode [ 58.171066][ T5851] hsr_slave_1: entered promiscuous mode [ 58.177444][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.185332][ T5851] Cannot create hsr debugfs directory [ 58.212126][ T5858] Bluetooth: hci2: command tx timeout [ 58.217926][ T5160] Bluetooth: hci3: command tx timeout [ 58.228112][ T5845] hsr_slave_0: entered promiscuous mode [ 58.234770][ T5845] hsr_slave_1: entered promiscuous mode [ 58.241058][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.248960][ T5845] Cannot create hsr debugfs directory [ 58.269568][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.279710][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.306376][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.317354][ T5160] Bluetooth: hci1: command tx timeout [ 58.321223][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.329965][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.355982][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.493632][ T5852] hsr_slave_0: entered promiscuous mode [ 58.499947][ T5852] hsr_slave_1: entered promiscuous mode [ 58.506772][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.514639][ T5852] Cannot create hsr debugfs directory [ 58.656876][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.681497][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.691067][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.718374][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.772453][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.782360][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.805629][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.820885][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.853365][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.865348][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.875732][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.895156][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.954074][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.966619][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.991328][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.021305][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.057267][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.066119][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.079439][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.089190][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.174873][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.191062][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.237853][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.248055][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.281167][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.288450][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.307739][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.325359][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.332481][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.356824][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.365779][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.372920][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.388295][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.395426][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.439730][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.456709][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.473338][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.480415][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.508474][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.515571][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.528468][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.535547][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.562367][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.577860][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.584977][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.618268][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.650924][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.658516][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.691377][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.698514][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.816689][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.889870][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.010629][ T5857] veth0_vlan: entered promiscuous mode [ 60.064006][ T5857] veth1_vlan: entered promiscuous mode [ 60.119586][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.174306][ T5857] veth0_macvtap: entered promiscuous mode [ 60.185079][ T5857] veth1_macvtap: entered promiscuous mode [ 60.211921][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.212528][ T5160] Bluetooth: hci0: command tx timeout [ 60.212983][ T5858] Bluetooth: hci4: command tx timeout [ 60.249751][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.265746][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.277147][ T5857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.287636][ T5857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.296496][ T5858] Bluetooth: hci3: command tx timeout [ 60.296544][ T5858] Bluetooth: hci2: command tx timeout [ 60.307930][ T5857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.317001][ T5857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.340710][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.369989][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.382562][ T5160] Bluetooth: hci1: command tx timeout [ 60.397830][ T5844] veth0_vlan: entered promiscuous mode [ 60.458493][ T5844] veth1_vlan: entered promiscuous mode [ 60.536767][ T5851] veth0_vlan: entered promiscuous mode [ 60.560086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.579382][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.600836][ T5851] veth1_vlan: entered promiscuous mode [ 60.618510][ T5844] veth0_macvtap: entered promiscuous mode [ 60.627349][ T5845] veth0_vlan: entered promiscuous mode [ 60.645120][ T5844] veth1_macvtap: entered promiscuous mode [ 60.669152][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.685193][ T5851] veth0_macvtap: entered promiscuous mode [ 60.694393][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.709527][ T5851] veth1_macvtap: entered promiscuous mode [ 60.720166][ T5845] veth1_vlan: entered promiscuous mode [ 60.730843][ T5852] veth0_vlan: entered promiscuous mode [ 60.750365][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.761324][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.786782][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.799288][ T5852] veth1_vlan: entered promiscuous mode [ 60.820260][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.827330][ T5845] veth0_macvtap: entered promiscuous mode [ 60.843998][ T5845] veth1_macvtap: entered promiscuous mode [ 60.858724][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.869252][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.879142][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.889767][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.901807][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.948063][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.959231][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.979152][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.989206][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.989244][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.989255][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.989268][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.989278][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.989291][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.990787][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.007893][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.007914][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.007926][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.007939][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.008972][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.127090][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.141454][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.156748][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.182406][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.201921][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.217407][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.227795][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.238236][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.248131][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.259143][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.270707][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.282270][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.290993][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.315809][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.325589][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.359979][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.369357][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.379395][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.388543][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.399549][ T5852] veth0_macvtap: entered promiscuous mode [ 61.434322][ T5852] veth1_macvtap: entered promiscuous mode [ 61.500718][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.511712][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.522023][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.532788][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.542904][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.553624][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.563845][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.575927][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.583654][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.595710][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.608550][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.619180][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.630508][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.641589][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.651455][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.665157][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.675295][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.686944][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.698182][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.711635][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.719958][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.739339][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.748358][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.748791][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 61.757275][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.770911][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.776928][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 61.797224][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.808137][ T5899] usb 4-1: Product: syz [ 61.821557][ T5899] usb 4-1: Manufacturer: syz [ 61.826555][ T5899] usb 4-1: SerialNumber: syz [ 61.838677][ T5899] usb 4-1: config 0 descriptor?? [ 61.849488][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.863841][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.911190][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.919859][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.935104][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.946385][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.004570][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.012626][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.078731][ T5899] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 62.087602][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.109623][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.116612][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.128585][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.213989][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.221845][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.292050][ T5160] Bluetooth: hci0: command tx timeout [ 62.297536][ T5160] Bluetooth: hci4: command tx timeout [ 62.372139][ T5858] Bluetooth: hci2: command tx timeout [ 62.377629][ T5160] Bluetooth: hci3: command tx timeout [ 62.467476][ T5858] Bluetooth: hci1: command tx timeout [ 62.702303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 62.711083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 62.719829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 62.728755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.954474][ T5940] loop1: detected capacity change from 0 to 32768 [ 64.260008][ T5899] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 64.283017][ T5899] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 64.291363][ T5899] usb 4-1: media controller created [ 64.440165][ T5858] Bluetooth: hci4: command tx timeout [ 64.446182][ T5858] Bluetooth: hci0: command tx timeout [ 64.464242][ T5858] Bluetooth: hci3: command tx timeout [ 64.469837][ T5160] Bluetooth: hci2: command tx timeout [ 64.606243][ T54] Bluetooth: hci1: command tx timeout [ 64.918433][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 65.584931][ T5899] i2c i2c-1: Added multiplexed i2c bus 2 [ 65.590854][ T5899] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 66.467527][ T5972] ================================================================== [ 66.475625][ T5972] BUG: KASAN: slab-out-of-bounds in skb_copy_and_csum_bits+0x433/0x9c0 [ 66.483873][ T5972] Write of size 963 at addr ffff88803157c024 by task syz.4.9/5972 [ 66.491676][ T5972] [ 66.494017][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.4.9 Not tainted 6.12.0-rc5-next-20241030-syzkaller #0 [ 66.503912][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.513984][ T5972] Call Trace: [ 66.517271][ T5972] [ 66.520214][ T5972] dump_stack_lvl+0x241/0x360 [ 66.524908][ T5972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.530112][ T5972] ? __pfx__printk+0x10/0x10 [ 66.534691][ T5972] ? _printk+0xd5/0x120 [ 66.538833][ T5972] ? __virt_addr_valid+0x183/0x530 [ 66.543931][ T5972] ? __virt_addr_valid+0x183/0x530 [ 66.549024][ T5972] print_report+0x169/0x550 [ 66.553511][ T5972] ? __virt_addr_valid+0x183/0x530 [ 66.558602][ T5972] ? __virt_addr_valid+0x183/0x530 [ 66.563694][ T5972] ? __virt_addr_valid+0x45f/0x530 [ 66.568783][ T5972] ? __phys_addr+0xba/0x170 [ 66.573280][ T5972] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 66.578864][ T5972] kasan_report+0x143/0x180 [ 66.583374][ T5972] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 66.588950][ T5972] kasan_check_range+0x282/0x290 [ 66.593906][ T5972] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 66.599470][ T5972] __asan_memcpy+0x40/0x70 [ 66.603903][ T5972] skb_copy_and_csum_bits+0x433/0x9c0 [ 66.609300][ T5972] __ip_append_data+0x2fc1/0x40f0 [ 66.614350][ T5972] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 66.619910][ T5972] ? __pfx___ip_append_data+0x10/0x10 [ 66.625301][ T5972] ? lockdep_hardirqs_on+0x99/0x150 [ 66.630515][ T5972] ip_append_data+0x14c/0x190 [ 66.635200][ T5972] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 66.640757][ T5972] udp_sendmsg+0x3e2/0x2a50 [ 66.645274][ T5972] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 66.650826][ T5972] ? __pfx_lock_acquire+0x10/0x10 [ 66.655866][ T5972] ? __pfx_udp_sendmsg+0x10/0x10 [ 66.660812][ T5972] ? unwind_next_frame+0x18e6/0x22d0 [ 66.666110][ T5972] ? __pfx_aa_sk_perm+0x10/0x10 [ 66.670973][ T5972] ? unwind_get_return_address+0x4d/0x90 [ 66.676608][ T5972] ? sock_rps_record_flow+0x1a/0x400 [ 66.681900][ T5972] ? inet_sendmsg+0x2ba/0x390 [ 66.686596][ T5972] __sock_sendmsg+0x1a6/0x270 [ 66.691279][ T5972] sock_sendmsg+0x134/0x200 [ 66.695789][ T5972] ? __pfx_sock_sendmsg+0x10/0x10 [ 66.700817][ T5972] ? stack_depot_save_flags+0x29/0x830 [ 66.706294][ T5972] ? copy_splice_read+0xa07/0xb60 [ 66.711335][ T5972] ? splice_direct_to_actor+0x4af/0xc80 [ 66.716898][ T5972] ? do_splice_direct+0x289/0x3e0 [ 66.721946][ T5972] ? do_sendfile+0x561/0xe10 [ 66.726543][ T5972] ? do_syscall_64+0xf3/0x230 [ 66.731236][ T5972] ? iov_iter_bvec+0x4e/0x180 [ 66.735927][ T5972] splice_to_socket+0xa10/0x10b0 [ 66.740887][ T5972] ? __pfx_splice_to_socket+0x10/0x10 [ 66.746295][ T5972] ? __pfx_splice_to_socket+0x10/0x10 [ 66.751677][ T5972] direct_splice_actor+0x11b/0x220 [ 66.756799][ T5972] splice_direct_to_actor+0x586/0xc80 [ 66.762192][ T5972] ? __pfx_direct_splice_actor+0x10/0x10 [ 66.767834][ T5972] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 66.773742][ T5972] ? __fget_files+0x29/0x470 [ 66.778343][ T5972] ? __pfx_lock_release+0x10/0x10 [ 66.783370][ T5972] do_splice_direct+0x289/0x3e0 [ 66.788232][ T5972] ? __pfx_do_splice_direct+0x10/0x10 [ 66.793617][ T5972] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 66.799512][ T5972] ? bpf_lsm_file_permission+0x9/0x10 [ 66.804902][ T5972] ? security_file_permission+0x74/0x280 [ 66.810562][ T5972] ? rw_verify_area+0x1c3/0x6f0 [ 66.815428][ T5972] do_sendfile+0x561/0xe10 [ 66.819854][ T5972] ? __pfx_do_sendfile+0x10/0x10 [ 66.824802][ T5972] ? __sys_connect+0x165/0x300 [ 66.829579][ T5972] __se_sys_sendfile64+0x17c/0x1e0 [ 66.834699][ T5972] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 66.840338][ T5972] ? do_syscall_64+0x100/0x230 [ 66.845113][ T5972] ? do_syscall_64+0xb6/0x230 [ 66.849798][ T5972] do_syscall_64+0xf3/0x230 [ 66.854314][ T5972] ? clear_bhb_loop+0x35/0x90 [ 66.858995][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.864910][ T5972] RIP: 0033:0x7f1408f7e719 [ 66.869339][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.888954][ T5972] RSP: 002b:00007f1409d09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 66.897373][ T5972] RAX: ffffffffffffffda RBX: 00007f1409136130 RCX: 00007f1408f7e719 [ 66.905356][ T5972] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 66.913333][ T5972] RBP: 00007f1408ff132e R08: 0000000000000000 R09: 0000000000000000 [ 66.921309][ T5972] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000000 [ 66.929284][ T5972] R13: 0000000000000000 R14: 00007f1409136130 R15: 00007ffcd59943d8 [ 66.937266][ T5972] [ 66.940285][ T5972] [ 66.942608][ T5972] Allocated by task 5972: [ 66.946930][ T5972] kasan_save_track+0x3f/0x80 [ 66.951620][ T5972] __kasan_slab_alloc+0x66/0x80 [ 66.956478][ T5972] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 66.962376][ T5972] kmalloc_reserve+0xa8/0x2a0 [ 66.967058][ T5972] __alloc_skb+0x1f3/0x440 [ 66.971475][ T5972] __ip_append_data+0x2da7/0x40f0 [ 66.976508][ T5972] ip_append_data+0x14c/0x190 [ 66.981190][ T5972] udp_sendmsg+0x3e2/0x2a50 [ 66.985698][ T5972] __sock_sendmsg+0x1a6/0x270 [ 66.990376][ T5972] sock_sendmsg+0x134/0x200 [ 66.994878][ T5972] splice_to_socket+0xa10/0x10b0 [ 66.999826][ T5972] direct_splice_actor+0x11b/0x220 [ 67.004944][ T5972] splice_direct_to_actor+0x586/0xc80 [ 67.010321][ T5972] do_splice_direct+0x289/0x3e0 [ 67.015185][ T5972] do_sendfile+0x561/0xe10 [ 67.019610][ T5972] __se_sys_sendfile64+0x17c/0x1e0 [ 67.024733][ T5972] do_syscall_64+0xf3/0x230 [ 67.029251][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.035159][ T5972] [ 67.037483][ T5972] The buggy address belongs to the object at ffff88803157c000 [ 67.037483][ T5972] which belongs to the cache skbuff_small_head of size 640 [ 67.052056][ T5972] The buggy address is located 36 bytes inside of [ 67.052056][ T5972] allocated 640-byte region [ffff88803157c000, ffff88803157c280) [ 67.066115][ T5972] [ 67.068438][ T5972] The buggy address belongs to the physical page: [ 67.074853][ T5972] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3157c [ 67.083625][ T5972] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 67.092123][ T5972] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 67.099672][ T5972] page_type: f5(slab) [ 67.103658][ T5972] raw: 00fff00000000040 ffff88801ea93a00 dead000000000122 0000000000000000 [ 67.112244][ T5972] raw: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 67.120836][ T5972] head: 00fff00000000040 ffff88801ea93a00 dead000000000122 0000000000000000 [ 67.129512][ T5972] head: 0000000000000000 0000000080150015 00000001f5000000 0000000000000000 [ 67.138182][ T5972] head: 00fff00000000002 ffffea0000c55f01 ffffffffffffffff 0000000000000000 [ 67.146851][ T5972] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 67.155519][ T5972] page dumped because: kasan: bad access detected [ 67.161943][ T5972] page_owner tracks the page as allocated [ 67.167657][ T5972] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5972, tgid 5965 (syz.4.9), ts 66467461031, free_ts 64629732839 [ 67.188590][ T5972] post_alloc_hook+0x1f3/0x230 [ 67.193367][ T5972] get_page_from_freelist+0x3725/0x3870 [ 67.198921][ T5972] __alloc_pages_noprof+0x292/0x710 [ 67.204123][ T5972] alloc_pages_mpol_noprof+0x3e8/0x680 [ 67.209581][ T5972] alloc_slab_page+0x6a/0x140 [ 67.214264][ T5972] allocate_slab+0x5a/0x2f0 [ 67.218774][ T5972] ___slab_alloc+0xcd1/0x14b0 [ 67.223461][ T5972] __slab_alloc+0x58/0xa0 [ 67.227796][ T5972] kmem_cache_alloc_node_noprof+0x269/0x380 [ 67.233691][ T5972] kmalloc_reserve+0xa8/0x2a0 [ 67.238371][ T5972] __alloc_skb+0x1f3/0x440 [ 67.242788][ T5972] __ip_append_data+0x2da7/0x40f0 [ 67.247817][ T5972] ip_append_data+0x14c/0x190 [ 67.252494][ T5972] udp_sendmsg+0x3e2/0x2a50 [ 67.257002][ T5972] __sock_sendmsg+0x1a6/0x270 [ 67.261677][ T5972] sock_sendmsg+0x134/0x200 [ 67.266179][ T5972] page last free pid 5852 tgid 5852 stack trace: [ 67.272503][ T5972] free_unref_page+0xcfb/0xf20 [ 67.277279][ T5972] __put_partials+0xeb/0x130 [ 67.281883][ T5972] put_cpu_partial+0x17c/0x250 [ 67.286652][ T5972] __slab_free+0x2ea/0x3d0 [ 67.291078][ T5972] qlist_free_all+0x9a/0x140 [ 67.295674][ T5972] kasan_quarantine_reduce+0x14f/0x170 [ 67.301138][ T5972] __kasan_slab_alloc+0x23/0x80 [ 67.305996][ T5972] kmem_cache_alloc_noprof+0x1d9/0x380 [ 67.311458][ T5972] getname_flags+0xb7/0x540 [ 67.315964][ T5972] user_path_at+0x24/0x60 [ 67.320297][ T5972] __x64_sys_umount+0xf1/0x170 [ 67.325074][ T5972] do_syscall_64+0xf3/0x230 [ 67.329590][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.335492][ T5972] [ 67.337813][ T5972] Memory state around the buggy address: [ 67.343437][ T5972] ffff88803157c180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.351497][ T5972] ffff88803157c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 67.359558][ T5972] >ffff88803157c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.367613][ T5972] ^ [ 67.371680][ T5972] ffff88803157c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.379739][ T5972] ffff88803157c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.387801][ T5972] ================================================================== [ 67.408889][ T5972] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.416104][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: syz.4.9 Not tainted 6.12.0-rc5-next-20241030-syzkaller #0 [ 67.426007][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.436069][ T5972] Call Trace: [ 67.439354][ T5972] [ 67.442292][ T5972] dump_stack_lvl+0x241/0x360 [ 67.446987][ T5972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.452197][ T5972] ? __pfx__printk+0x10/0x10 [ 67.456809][ T5972] ? vscnprintf+0x5d/0x90 [ 67.461150][ T5972] panic+0x349/0x880 [ 67.465056][ T5972] ? check_panic_on_warn+0x21/0xb0 [ 67.470179][ T5972] ? __pfx_panic+0x10/0x10 [ 67.474605][ T5972] ? mark_lock+0x9a/0x360 [ 67.478940][ T5972] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 67.484853][ T5972] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 67.490755][ T5972] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 67.497097][ T5972] ? print_report+0x502/0x550 [ 67.501780][ T5972] check_panic_on_warn+0x86/0xb0 [ 67.506734][ T5972] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 67.512293][ T5972] end_report+0x77/0x160 [ 67.516543][ T5972] kasan_report+0x154/0x180 [ 67.521052][ T5972] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 67.526617][ T5972] kasan_check_range+0x282/0x290 [ 67.531564][ T5972] ? skb_copy_and_csum_bits+0x433/0x9c0 [ 67.537125][ T5972] __asan_memcpy+0x40/0x70 [ 67.541557][ T5972] skb_copy_and_csum_bits+0x433/0x9c0 [ 67.546942][ T5972] __ip_append_data+0x2fc1/0x40f0 [ 67.551992][ T5972] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 67.557549][ T5972] ? __pfx___ip_append_data+0x10/0x10 [ 67.562933][ T5972] ? lockdep_hardirqs_on+0x99/0x150 [ 67.568148][ T5972] ip_append_data+0x14c/0x190 [ 67.572834][ T5972] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 67.578390][ T5972] udp_sendmsg+0x3e2/0x2a50 [ 67.582910][ T5972] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 67.588461][ T5972] ? __pfx_lock_acquire+0x10/0x10 [ 67.593497][ T5972] ? __pfx_udp_sendmsg+0x10/0x10 [ 67.598442][ T5972] ? unwind_next_frame+0x18e6/0x22d0 [ 67.603743][ T5972] ? __pfx_aa_sk_perm+0x10/0x10 [ 67.608608][ T5972] ? unwind_get_return_address+0x4d/0x90 [ 67.614259][ T5972] ? sock_rps_record_flow+0x1a/0x400 [ 67.619560][ T5972] ? inet_sendmsg+0x2ba/0x390 [ 67.624250][ T5972] __sock_sendmsg+0x1a6/0x270 [ 67.628940][ T5972] sock_sendmsg+0x134/0x200 [ 67.633455][ T5972] ? __pfx_sock_sendmsg+0x10/0x10 [ 67.638485][ T5972] ? stack_depot_save_flags+0x29/0x830 [ 67.643962][ T5972] ? copy_splice_read+0xa07/0xb60 [ 67.649002][ T5972] ? splice_direct_to_actor+0x4af/0xc80 [ 67.654563][ T5972] ? do_splice_direct+0x289/0x3e0 [ 67.659603][ T5972] ? do_sendfile+0x561/0xe10 [ 67.664201][ T5972] ? do_syscall_64+0xf3/0x230 [ 67.668891][ T5972] ? iov_iter_bvec+0x4e/0x180 [ 67.673581][ T5972] splice_to_socket+0xa10/0x10b0 [ 67.678542][ T5972] ? __pfx_splice_to_socket+0x10/0x10 [ 67.683949][ T5972] ? __pfx_splice_to_socket+0x10/0x10 [ 67.689333][ T5972] direct_splice_actor+0x11b/0x220 [ 67.694456][ T5972] splice_direct_to_actor+0x586/0xc80 [ 67.699843][ T5972] ? __pfx_direct_splice_actor+0x10/0x10 [ 67.705487][ T5972] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 67.711392][ T5972] ? __fget_files+0x29/0x470 [ 67.715987][ T5972] ? __pfx_lock_release+0x10/0x10 [ 67.721017][ T5972] do_splice_direct+0x289/0x3e0 [ 67.725883][ T5972] ? __pfx_do_splice_direct+0x10/0x10 [ 67.731266][ T5972] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 67.737167][ T5972] ? bpf_lsm_file_permission+0x9/0x10 [ 67.742554][ T5972] ? security_file_permission+0x74/0x280 [ 67.748196][ T5972] ? rw_verify_area+0x1c3/0x6f0 [ 67.753061][ T5972] do_sendfile+0x561/0xe10 [ 67.757524][ T5972] ? __pfx_do_sendfile+0x10/0x10 [ 67.762467][ T5972] ? __sys_connect+0x165/0x300 [ 67.767243][ T5972] __se_sys_sendfile64+0x17c/0x1e0 [ 67.772359][ T5972] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 67.777997][ T5972] ? do_syscall_64+0x100/0x230 [ 67.782773][ T5972] ? do_syscall_64+0xb6/0x230 [ 67.787458][ T5972] do_syscall_64+0xf3/0x230 [ 67.791970][ T5972] ? clear_bhb_loop+0x35/0x90 [ 67.796651][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.802559][ T5972] RIP: 0033:0x7f1408f7e719 [ 67.806977][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.826588][ T5972] RSP: 002b:00007f1409d09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 67.835014][ T5972] RAX: ffffffffffffffda RBX: 00007f1409136130 RCX: 00007f1408f7e719 [ 67.842990][ T5972] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 67.850964][ T5972] RBP: 00007f1408ff132e R08: 0000000000000000 R09: 0000000000000000 [ 67.858941][ T5972] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000000 [ 67.866921][ T5972] R13: 0000000000000000 R14: 00007f1409136130 R15: 00007ffcd59943d8 [ 67.874905][ T5972] [ 67.878174][ T5972] Kernel Offset: disabled [ 67.882491][ T5972] Rebooting in 86400 seconds..