last executing test programs: 12.002034654s ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x450, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x6, 0x1, 0x0, [0x200, 0x1, 0x1, 0x8, 0xe, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x0, 0x3, 0xb, 0x7, 0x3, 0x0, 0x8, 0x0, 0x4, 0x0, 0x7e0, 0x10000, 0x0, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x7, 0x2, 0x5, 0xc, 0x0, 0x0, 0x0, 0x6, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x5, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0x0, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x0, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x0, 0x0, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x0, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x0, 0x0, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0x0, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x1, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x409, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x3ff, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x7, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x2e, ['!}\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40150}, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300c713d530e3ffcec67cb7f06b90", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b700000000000400b800"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 11.959046247s ago: executing program 2 (id=3): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xfff, 0xa7b4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fcntl$getown(0xffffffffffffffff, 0x9) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x10, "1728b4c92c6c109e20e4a71ddc9372308a873990a2387b0537d1fa94639f7e647979ab5d8382ad9f760a6bdcc3e0eb473418ed02ed0521941662355a3c067367", "6a67f10d1a56fe87371877df32502ab7bba2ffc30103ec7476de2c5887a2c00d", [0x9, 0x2]}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) syz_io_uring_submit(r7, 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 11.603569072s ago: executing program 0 (id=1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) landlock_create_ruleset(&(0x7f0000000440)={0x2}, 0x10, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f0000000180)=[{}, {}, {}, {}], 0x16, 0x7ff6) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x7}) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x40002041, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40043d14, &(0x7f0000000000)) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000008b000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000001500)=""/210, 0xd2}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f00000001c0)=""/9, 0x9}], 0x7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) syz_io_uring_setup(0x4919, &(0x7f0000000080)={0x0, 0x8720, 0x2001, 0x0, 0x1d7, 0x0, r0}, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="5a00330080000000ffffffffffff080211000000505050505050000000000000000000006400024001010c040603000000000025030000002a01003c0400000000710700000000000000"], 0x78}}, 0x0) r10 = io_uring_setup(0x1cb2, &(0x7f0000000300)) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000000400)={0x7c, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x7c}}, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010091", @ANYRES16=r12, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 10.522079645s ago: executing program 4 (id=16): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r4, 0x0, 0x0, 0xb, 0x1fd, 0x1}) 9.961411012s ago: executing program 4 (id=17): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(r0, &(0x7f0000001340)={0xa, 0x4e21, 0x10000, @local}, 0x1c) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) getrandom(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080), 0x6) setuid(0xee00) write(r4, &(0x7f0000000000)="01dd3b74", 0x9) readv(r3, &(0x7f0000000680), 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7, 0x8, 0x9, 0x3, 0x5, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.657372431s ago: executing program 1 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r2) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x14}, {0x84}, {0x6, 0x0, 0x0, 0x7ffffd3e}]}) semget$private(0x0, 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) close(r1) ioctl$TUNSETNOCSUM(r0, 0x400454ca, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x13, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) 8.121898246s ago: executing program 4 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x5609, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="a65b000010000000a7a0000000000000010400002c83"]) ioctl$TCFLSH(r1, 0x8910, 0x20001114) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) 7.970246407s ago: executing program 3 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0x28}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.172106053s ago: executing program 1 (id=23): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setreuid(0x0, 0xee00) keyctl$invalidate(0x15, 0x0) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000000240)) syz_emit_ethernet(0xc2, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@noop, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socket$packet(0x11, 0x3, 0x300) r10 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) 6.447945846s ago: executing program 4 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x450, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x6, 0x1, 0x0, [0x200, 0x1, 0x1, 0x8, 0xe, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x0, 0x3, 0xb, 0x7, 0x3, 0x0, 0x8, 0x0, 0x4, 0x0, 0x7e0, 0x10000, 0x0, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x7, 0x2, 0x5, 0xc, 0x0, 0x0, 0x0, 0x6, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x5, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0x0, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x0, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x0, 0x0, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x0, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x0, 0x0, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0x0, 0x2, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0x0, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x1, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x409, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x3ff, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x7, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x2e, ['!}\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40150}, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300c713d530e3ffcec67cb7f06b90", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b700000000000400b800"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 6.310058035s ago: executing program 2 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x450, 0x3f3, 0x4, 0x70bd2c, 0x0, {0x0, 0x1, 0x0, [0x0, 0x1, 0x1, 0x8, 0xe, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x0, 0x3, 0xb, 0x7, 0x3, 0x0, 0x8, 0x0, 0x4, 0x0, 0x7e0, 0x10000, 0x0, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x0, 0x0, 0x7, 0x2, 0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x5, 0x0, 0x8, 0x1, 0x2, 0x2, 0x0, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0x0, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x0, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x0, 0x0, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x0, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x0, 0x0, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x2, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0x0, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x0, 0x7, 0xcc, 0x0, 0x1, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x409, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x3ff, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x7, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x2e, ['!}\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40150}, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 6.221268434s ago: executing program 3 (id=26): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000098000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540006219090800014000000000080002"], 0x120}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) shmget$private(0x0, 0x1000, 0x100, &(0x7f000016f000/0x1000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000323000/0x2000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000001500), 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f00000000c0)) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x3) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) close_range(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r6) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) 5.121776735s ago: executing program 0 (id=27): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0x4}, @CTA_STATUS={0x8}]}, 0x28}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.240750149s ago: executing program 1 (id=28): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xfff, 0xa7b4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fcntl$getown(0xffffffffffffffff, 0x9) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x10, "1728b4c92c6c109e20e4a71ddc9372308a873990a2387b0537d1fa94639f7e647979ab5d8382ad9f760a6bdcc3e0eb473418ed02ed0521941662355a3c067367", "6a67f10d1a56fe87371877df32502ab7bba2ffc30103ec7476de2c5887a2c00d", [0x9, 0x2]}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) syz_io_uring_submit(r7, 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.162653402s ago: executing program 0 (id=29): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000700000030000000020000821300000000000006040b00ba4700000000000000010000000000000000000002000000040000000000"], 0x0, 0x4a}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0xd, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0xffffac1414aa}, [], "a5f7c70c777fc9b9"}}}}}}}, 0x0) r0 = io_uring_setup(0x29e6, &(0x7f0000000480)={0x0, 0x0, 0x2}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000008b000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000001500)=""/210, 0xd2}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f00000001c0)=""/9, 0x9}], 0x7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) syz_io_uring_setup(0x4919, &(0x7f0000000080)={0x0, 0x8720, 0x2001, 0x0, 0x1d7, 0x0, r0}, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="5a00330080000000ffffffffffff080211000000505050505050000000000000000000006400024001010c040603000000000025030000002a01003c0400000000710700000000000000"], 0x78}}, 0x0) r10 = io_uring_setup(0x1cb2, &(0x7f0000000300)) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000000400)={0x7c, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x7c}}, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010091", @ANYRES16=r12, @ANYBLOB="100028bd7000fcdbdf2505000000740001800c00070002000000020000000800090013000000140003000a010101000000000000000000000000060002001d000000060001000a00000014000300e0000002000000000000000000000000060001000a000000080009006c00000014000300ffffffff00000000000000000000000030000180070006006c63000008000500040000000800060077727200140003000000000000000000000000000000000114000280060002004e210000060002004e2400002c000180060004004e230000060004004e210000060004004e210000060004004e210000060004004e230000540001800800050002000000060001000a00000008000b0073697000060002000c000000060001000a0000000600010002000000090006006e6f6e650000000007000600727200000c0007000800000002000000"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 4.12904689s ago: executing program 3 (id=30): r0 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 3.929921011s ago: executing program 3 (id=31): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(r0, &(0x7f0000001340)={0xa, 0x4e21, 0x10000, @local}, 0x1c) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) getrandom(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp\x00') prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080), 0x6) setuid(0xee00) write(r5, &(0x7f0000000000)="01dd3b74", 0x9) readv(r4, &(0x7f0000000680), 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7, 0x8, 0x9, 0x3, 0x5, 0x3}) close_range(r2, 0xffffffffffffffff, 0x0) 2.77359552s ago: executing program 0 (id=32): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) 2.759831033s ago: executing program 2 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r2) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x14}, {0x84}, {0x6, 0x0, 0x0, 0x7ffffd3e}]}) semget$private(0x0, 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) close(r1) ioctl$TUNSETNOCSUM(r0, 0x400454ca, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x13, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) 2.749085248s ago: executing program 3 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x5609, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="a65b000010000000a7a0000000000000010400002c83"]) ioctl$TCFLSH(r1, 0x8910, 0x20001114) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) 2.730809103s ago: executing program 4 (id=35): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xfff, 0xa7b4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fcntl$getown(0xffffffffffffffff, 0x9) connect(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000400)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x10, "1728b4c92c6c109e20e4a71ddc9372308a873990a2387b0537d1fa94639f7e647979ab5d8382ad9f760a6bdcc3e0eb473418ed02ed0521941662355a3c067367", "6a67f10d1a56fe87371877df32502ab7bba2ffc30103ec7476de2c5887a2c00d", [0x9, 0x2]}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) syz_io_uring_submit(r7, 0x0, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.657104257s ago: executing program 1 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000008107e0b6d0", @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.43014848s ago: executing program 0 (id=37): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa01804200000086dd602e843500140600fe80000000000000ff07000000000000fe8000000000000000000000000000aa000000003b69ab3098406d37159fe9b29de41935cb99ee0270b8580153d9387de1749238b04dcee284bd93cb96006142b036bec7ce07be8b2d9dcc922d0beeb18d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5800000090780000"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000e7ff00000000000000000000181100000e1bfb45e2c0258b7ed4479297d69b30c2604c7f607e6cf353df7e43122d885ffb45380200000000000000305f991e15c24b6cb9106eb862a2d1c5314767033e645dd44e981d825aedae96100345e474e3ce5e82aa819eab1750c11ee2c178743e82ec3a12e0f7a22f4bcda446371457a759ce2be0f4e5de9685222145d2a374735ca05bab0a8677ccb53859", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) open(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000002100)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x8) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 80.272489ms ago: executing program 4 (id=38): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000700000030000000020000821300000000000006040b00ba4700000000000000010000000000000000000002000000040000000000"], 0x0, 0x4a}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0xd, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0xffffac1414aa}, [], "a5f7c70c777fc9b9"}}}}}}}, 0x0) r0 = io_uring_setup(0x29e6, &(0x7f0000000480)={0x0, 0x0, 0x2}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000008b000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000001500)=""/210, 0xd2}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f00000001c0)=""/9, 0x9}], 0x7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) syz_io_uring_setup(0x4919, &(0x7f0000000080)={0x0, 0x8720, 0x2001, 0x0, 0x1d7, 0x0, r0}, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="5a00330080000000ffffffffffff080211000000505050505050000000000000000000006400024001010c040603000000000025030000002a01003c0400000000710700000000000000"], 0x78}}, 0x0) r10 = io_uring_setup(0x1cb2, &(0x7f0000000300)) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000000400)={0x7c, r8, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x7c}}, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010091", @ANYRES16=r12, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 0s ago: executing program 3 (id=39): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) landlock_create_ruleset(&(0x7f0000000440)={0x2}, 0x10, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f0000000180)=[{}, {}, {}, {}], 0x16, 0x7ff6) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x7}) recvmmsg(r2, 0x0, 0x0, 0x40002041, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40043d14, &(0x7f0000000000)) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 1 [ 72.989219][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.998209][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.006608][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.009908][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.015200][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.030833][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.035019][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.038812][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.046120][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.054106][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.060044][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.069480][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.073712][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.081875][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.088403][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.095945][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.110441][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.118292][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.118963][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.128292][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.133016][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.142830][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.147699][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.154320][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.160858][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.174680][ T5109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.183787][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.192327][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.204132][ T4485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.768539][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 73.768557][ T29] audit: type=1400 audit(1721577969.346:112): avc: denied { module_request } for pid=5089 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.888389][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 74.092081][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 74.109555][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 74.178738][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 74.273460][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.280980][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.289188][ T5089] bridge_slave_0: entered allmulticast mode [ 74.296299][ T5089] bridge_slave_0: entered promiscuous mode [ 74.323208][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 74.347704][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.355986][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.363291][ T5089] bridge_slave_1: entered allmulticast mode [ 74.371415][ T5089] bridge_slave_1: entered promiscuous mode [ 74.492973][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.551318][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.558724][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.565899][ T5091] bridge_slave_0: entered allmulticast mode [ 74.574711][ T5091] bridge_slave_0: entered promiscuous mode [ 74.585382][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.607318][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.614847][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.623145][ T5090] bridge_slave_0: entered allmulticast mode [ 74.630845][ T5090] bridge_slave_0: entered promiscuous mode [ 74.639614][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.646726][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.654506][ T5090] bridge_slave_1: entered allmulticast mode [ 74.662069][ T5090] bridge_slave_1: entered promiscuous mode [ 74.674631][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.682137][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.689641][ T5091] bridge_slave_1: entered allmulticast mode [ 74.696814][ T5091] bridge_slave_1: entered promiscuous mode [ 74.743085][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.750533][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.757965][ T5092] bridge_slave_0: entered allmulticast mode [ 74.765103][ T5092] bridge_slave_0: entered promiscuous mode [ 74.864778][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.872773][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.880033][ T5092] bridge_slave_1: entered allmulticast mode [ 74.887026][ T5092] bridge_slave_1: entered promiscuous mode [ 74.909952][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.922259][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.937747][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.952268][ T5089] team0: Port device team_slave_0 added [ 74.963058][ T5089] team0: Port device team_slave_1 added [ 75.011579][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.055376][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.062861][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.070281][ T5088] bridge_slave_0: entered allmulticast mode [ 75.077296][ T5088] bridge_slave_0: entered promiscuous mode [ 75.089310][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.136037][ T5091] team0: Port device team_slave_0 added [ 75.157403][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.164759][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.172728][ T5088] bridge_slave_1: entered allmulticast mode [ 75.180640][ T5088] bridge_slave_1: entered promiscuous mode [ 75.189517][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.199216][ T5102] Bluetooth: hci0: command tx timeout [ 75.208871][ T5102] Bluetooth: hci3: command tx timeout [ 75.210417][ T5090] team0: Port device team_slave_0 added [ 75.224322][ T5091] team0: Port device team_slave_1 added [ 75.251630][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.258697][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.285529][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.288405][ T5105] Bluetooth: hci1: command tx timeout [ 75.300540][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.307841][ T55] Bluetooth: hci4: command tx timeout [ 75.308547][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.340552][ T5102] Bluetooth: hci2: command tx timeout [ 75.345030][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.384314][ T5090] team0: Port device team_slave_1 added [ 75.475195][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.482230][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.509152][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.524680][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.534936][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.546057][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.572258][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.587112][ T5092] team0: Port device team_slave_0 added [ 75.594144][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.601439][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.627384][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.640486][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.647449][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.673440][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.687376][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.718812][ T5092] team0: Port device team_slave_1 added [ 75.778329][ T5088] team0: Port device team_slave_0 added [ 75.789508][ T5088] team0: Port device team_slave_1 added [ 75.826537][ T5089] hsr_slave_0: entered promiscuous mode [ 75.833599][ T5089] hsr_slave_1: entered promiscuous mode [ 75.876725][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.884096][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.910017][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.923465][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.930591][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.956614][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.078260][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.085242][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.114930][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.145286][ T5091] hsr_slave_0: entered promiscuous mode [ 76.151888][ T5091] hsr_slave_1: entered promiscuous mode [ 76.162457][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.170597][ T5091] Cannot create hsr debugfs directory [ 76.181857][ T5090] hsr_slave_0: entered promiscuous mode [ 76.188446][ T5090] hsr_slave_1: entered promiscuous mode [ 76.194575][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.202619][ T5090] Cannot create hsr debugfs directory [ 76.248613][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.255602][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.283235][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.316692][ T5092] hsr_slave_0: entered promiscuous mode [ 76.325157][ T5092] hsr_slave_1: entered promiscuous mode [ 76.331910][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.340069][ T5092] Cannot create hsr debugfs directory [ 76.539138][ T5088] hsr_slave_0: entered promiscuous mode [ 76.549181][ T5088] hsr_slave_1: entered promiscuous mode [ 76.555453][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.563383][ T5088] Cannot create hsr debugfs directory [ 77.039013][ T5089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.071405][ T5089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.088349][ T5089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.113161][ T5089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.172118][ T5091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.184564][ T5091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.195645][ T5091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.215432][ T5091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.282069][ T5102] Bluetooth: hci3: command tx timeout [ 77.284045][ T5105] Bluetooth: hci0: command tx timeout [ 77.359278][ T5105] Bluetooth: hci1: command tx timeout [ 77.364744][ T5105] Bluetooth: hci4: command tx timeout [ 77.366582][ T5102] Bluetooth: hci2: command tx timeout [ 77.415020][ T5090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.436997][ T5090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.453433][ T5090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.489411][ T5090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.616788][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.632736][ T5092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.650942][ T5092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.680052][ T5092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.697733][ T5092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.715145][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.777693][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.785402][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.837348][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.844539][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.864667][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.914965][ T5088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.926105][ T5088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.943996][ T5088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.967586][ T5088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.002335][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.047623][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.054855][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.130181][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.137319][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.303548][ T29] audit: type=1400 audit(1721577973.876:113): avc: denied { sys_module } for pid=5089 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 78.328161][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.391334][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.425644][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.451179][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.458514][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.516694][ T5091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.530903][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.556867][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.564088][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.623595][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.705815][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.713070][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.750006][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.794416][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.801672][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.871389][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.990980][ T5089] veth0_vlan: entered promiscuous mode [ 79.002792][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.062476][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.092062][ T5089] veth1_vlan: entered promiscuous mode [ 79.116884][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.124233][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.162212][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.169474][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.359757][ T5102] Bluetooth: hci0: command tx timeout [ 79.360922][ T5105] Bluetooth: hci3: command tx timeout [ 79.368797][ T5089] veth0_macvtap: entered promiscuous mode [ 79.434158][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.440064][ T5105] Bluetooth: hci4: command tx timeout [ 79.446689][ T5102] Bluetooth: hci1: command tx timeout [ 79.450117][ T55] Bluetooth: hci2: command tx timeout [ 79.511721][ T5089] veth1_macvtap: entered promiscuous mode [ 79.594049][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.626334][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.654574][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.702765][ T5089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.725795][ T5089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.738043][ T5089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.746793][ T5089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.776722][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.983732][ T5091] veth0_vlan: entered promiscuous mode [ 80.040147][ T4203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.052801][ T4203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.073591][ T5091] veth1_vlan: entered promiscuous mode [ 80.153830][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.177288][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.188659][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.205430][ T5090] veth0_vlan: entered promiscuous mode [ 80.240708][ T29] audit: type=1400 audit(1721577975.816:114): avc: denied { mounton } for pid=5089 comm="syz-executor" path="/root/syzkaller.5IxA11/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 80.286102][ T29] audit: type=1400 audit(1721577975.826:115): avc: denied { mount } for pid=5089 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.312356][ T29] audit: type=1400 audit(1721577975.826:116): avc: denied { mounton } for pid=5089 comm="syz-executor" path="/root/syzkaller.5IxA11/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.344451][ T5090] veth1_vlan: entered promiscuous mode [ 80.351504][ T29] audit: type=1400 audit(1721577975.826:117): avc: denied { mount } for pid=5089 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.359366][ T5092] veth0_vlan: entered promiscuous mode [ 80.396334][ T5092] veth1_vlan: entered promiscuous mode [ 80.410115][ T29] audit: type=1400 audit(1721577975.846:118): avc: denied { unmount } for pid=5089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.441413][ T29] audit: type=1400 audit(1721577975.876:119): avc: denied { mounton } for pid=5089 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.465900][ T29] audit: type=1400 audit(1721577975.876:120): avc: denied { mount } for pid=5089 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.519474][ T29] audit: type=1400 audit(1721577976.086:121): avc: denied { read write } for pid=5089 comm="syz-executor" name="loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.550172][ T5088] veth0_vlan: entered promiscuous mode [ 80.578178][ T29] audit: type=1400 audit(1721577976.086:122): avc: denied { open } for pid=5089 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.625052][ T29] audit: type=1400 audit(1721577976.086:123): avc: denied { ioctl } for pid=5089 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.633661][ T5091] veth0_macvtap: entered promiscuous mode [ 80.669822][ T5088] veth1_vlan: entered promiscuous mode [ 80.703742][ T5091] veth1_macvtap: entered promiscuous mode [ 80.729161][ T5090] veth0_macvtap: entered promiscuous mode [ 80.978082][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.991671][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.020845][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.047202][ T5090] veth1_macvtap: entered promiscuous mode [ 81.082138][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.097436][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.123950][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.132347][ T5092] veth0_macvtap: entered promiscuous mode [ 81.164037][ T5092] veth1_macvtap: entered promiscuous mode [ 81.200125][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.235598][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.246681][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.256746][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.274913][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.292117][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.303340][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.316668][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.363934][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.394617][ T5088] veth0_macvtap: entered promiscuous mode [ 81.425920][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.438179][ T55] Bluetooth: hci3: command tx timeout [ 81.453512][ T55] Bluetooth: hci0: command tx timeout [ 81.474217][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.490958][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.519737][ T55] Bluetooth: hci1: command tx timeout [ 81.523061][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.525185][ T5105] Bluetooth: hci2: command tx timeout [ 81.535490][ T5102] Bluetooth: hci4: command tx timeout [ 81.543147][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.568971][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.583933][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.643950][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.655049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.655172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.670034][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.682151][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.692894][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.712641][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.787717][ T5088] veth1_macvtap: entered promiscuous mode [ 81.819344][ T5092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.861858][ T5092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.871183][ T5092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.880675][ T5092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.937250][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.957342][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.974933][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.986106][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.011213][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.026306][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.057885][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.087688][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.097179][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.109102][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.119220][ T5187] FAULT_INJECTION: forcing a failure. [ 82.119220][ T5187] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.122698][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.134857][ T5187] CPU: 0 PID: 5187 Comm: syz.1.7 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 82.150617][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 82.160702][ T5187] Call Trace: [ 82.163993][ T5187] [ 82.166930][ T5187] dump_stack_lvl+0x16c/0x1f0 [ 82.171642][ T5187] should_fail_ex+0x497/0x5b0 [ 82.176349][ T5187] _copy_to_user+0x30/0xc0 [ 82.180801][ T5187] rng_dev_read+0x25d/0x720 [ 82.185337][ T5187] ? __pfx_virtio_read+0x10/0x10 [ 82.190312][ T5187] ? __pfx_rng_dev_read+0x10/0x10 [ 82.195359][ T5187] ? avc_policy_seqno+0x9/0x20 [ 82.200155][ T5187] ? security_file_permission+0x98/0xc0 [ 82.205721][ T5187] ? __pfx_rng_dev_read+0x10/0x10 [ 82.205753][ T5187] vfs_readv+0x6cb/0x8a0 [ 82.209145][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.210861][ T5187] ? find_held_lock+0x2d/0x110 [ 82.215084][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.223034][ T5187] ? __pfx_vfs_readv+0x10/0x10 [ 82.223062][ T5187] ? find_held_lock+0x2d/0x110 [ 82.223093][ T5187] ? __pfx_lock_release+0x10/0x10 [ 82.249717][ T5187] ? __x64_sys_preadv+0x22b/0x310 [ 82.254768][ T5187] __x64_sys_preadv+0x22b/0x310 [ 82.259640][ T5187] ? __pfx___x64_sys_preadv+0x10/0x10 [ 82.265039][ T5187] do_syscall_64+0xcd/0x250 [ 82.269583][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.275508][ T5187] RIP: 0033:0x7f16f1775b59 [ 82.279943][ T5187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.299673][ T5187] RSP: 002b:00007f16f11ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 82.308118][ T5187] RAX: ffffffffffffffda RBX: 00007f16f1905f60 RCX: 00007f16f1775b59 [ 82.316112][ T5187] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 82.324197][ T5187] RBP: 00007f16f11ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.332188][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.340174][ T5187] R13: 000000000000000b R14: 00007f16f1905f60 R15: 00007ffe94c7c608 [ 82.348173][ T5187] [ 82.348494][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.381317][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.438358][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.497987][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.513141][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.537204][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.549511][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.561406][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.573409][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.586972][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.611487][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.667396][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.687138][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.728834][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.756799][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.771278][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.804912][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.835457][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.880683][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.917329][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.034446][ T5088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.083297][ T5088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.112136][ T5088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.139166][ T5088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.323875][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.343548][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.352243][ T5200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10'. [ 83.365362][ T5200] (unnamed net_device) (uninitialized): peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 83.405175][ T5200] Zero length message leads to an empty skb [ 83.517017][ T2825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.542277][ T2825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.735098][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.774917][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.894379][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.905772][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.743054][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.761068][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.878259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.158732][ T5216] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 85.241179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.255657][ T5216] batman_adv: batadv0: Adding interface: team0 [ 85.262097][ T5216] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.288587][ T5216] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 85.300770][ T5214] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 85.308638][ T5214] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13'. [ 85.317616][ T5214] team0: entered promiscuous mode [ 85.322927][ T5214] team_slave_0: entered promiscuous mode [ 85.330431][ T5214] team_slave_1: entered promiscuous mode [ 85.349211][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.356626][ T5214] batman_adv: batadv0: Interface activated: team0 [ 85.367501][ T5214] batman_adv: batadv0: Interface deactivated: team0 [ 85.374559][ T5214] batman_adv: batadv0: Removing interface: team0 [ 85.454093][ T5214] bridge0: port 3(team0) entered blocking state [ 85.460959][ T5214] bridge0: port 3(team0) entered disabled state [ 85.467685][ T5214] team0: entered allmulticast mode [ 85.473043][ T5214] team_slave_0: entered allmulticast mode [ 85.479171][ T5214] team_slave_1: entered allmulticast mode [ 85.492672][ T5214] bridge0: port 3(team0) entered blocking state [ 85.499595][ T5214] bridge0: port 3(team0) entered forwarding state [ 85.554090][ T5214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 85.782999][ T5218] netlink: 'syz.4.14': attribute type 10 has an invalid length. [ 85.792834][ T5218] netlink: 2 bytes leftover after parsing attributes in process `syz.4.14'. [ 85.814437][ T5218] team0: entered promiscuous mode [ 85.825238][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 85.825250][ T29] audit: type=1400 audit(1721577981.396:152): avc: denied { create } for pid=5224 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.855339][ T5218] team_slave_0: entered promiscuous mode [ 85.866214][ T5218] team_slave_1: entered promiscuous mode [ 85.873390][ T5218] bridge0: port 3(team0) entered blocking state [ 85.880028][ T5218] bridge0: port 3(team0) entered disabled state [ 85.890286][ T5218] team0: entered allmulticast mode [ 85.895533][ T5218] team_slave_0: entered allmulticast mode [ 85.901419][ T5218] team_slave_1: entered allmulticast mode [ 85.915019][ T5218] bridge0: port 3(team0) entered blocking state [ 85.921627][ T5218] bridge0: port 3(team0) entered forwarding state [ 85.942792][ T29] audit: type=1400 audit(1721577981.506:153): avc: denied { bind } for pid=5224 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.962096][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.038696][ T2825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.059665][ T29] audit: type=1400 audit(1721577981.526:154): avc: denied { ioctl } for pid=5224 comm="syz.0.1" path="socket:[7268]" dev="sockfs" ino=7268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 86.083916][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.096487][ T2825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.175675][ T29] audit: type=1400 audit(1721577981.546:155): avc: denied { create } for pid=5224 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.269068][ T29] audit: type=1400 audit(1721577981.556:156): avc: denied { create } for pid=5224 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.285193][ T5226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.360851][ T29] audit: type=1400 audit(1721577981.746:157): avc: denied { accept } for pid=5224 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.433987][ T29] audit: type=1400 audit(1721577981.846:158): avc: denied { read } for pid=5224 comm="syz.0.1" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.824793][ T29] audit: type=1400 audit(1721577981.846:159): avc: denied { open } for pid=5224 comm="syz.0.1" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.918726][ T29] audit: type=1400 audit(1721577981.846:160): avc: denied { read write } for pid=5224 comm="syz.0.1" name="video0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.241819][ T29] audit: type=1400 audit(1721577981.846:161): avc: denied { open } for pid=5224 comm="syz.0.1" path="/dev/video0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.288596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 87.390009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.492523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.519001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.594793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.604397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.070152][ T25] cfg80211: failed to load regulatory.db [ 88.296694][ T5247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.349654][ T5247] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 90.860888][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 90.860901][ T29] audit: type=1400 audit(1721577986.436:196): avc: denied { read } for pid=5263 comm="syz.1.23" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.074321][ T5274] netlink: 68 bytes leftover after parsing attributes in process `syz.3.26'. [ 91.086335][ T5268] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 91.127984][ T29] audit: type=1400 audit(1721577986.436:197): avc: denied { open } for pid=5263 comm="syz.1.23" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.216950][ T5275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 91.392102][ T29] audit: type=1400 audit(1721577986.726:198): avc: denied { bind } for pid=5263 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.489020][ T5268] bridge0: port 3(team0) entered disabled state [ 91.505706][ T5268] team0: left allmulticast mode [ 91.506161][ T29] audit: type=1400 audit(1721577987.076:199): avc: denied { connect } for pid=5273 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.517957][ T5268] team_slave_0: left allmulticast mode [ 91.530169][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.599089][ T29] audit: type=1400 audit(1721577987.136:200): avc: denied { getopt } for pid=5273 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.619389][ T5268] team_slave_1: left allmulticast mode [ 91.629857][ T5268] team0: left promiscuous mode [ 91.634860][ T5268] team_slave_0: left promiscuous mode [ 91.641288][ T5268] team_slave_1: left promiscuous mode [ 91.648544][ T5268] bridge0: port 3(team0) entered disabled state [ 92.291139][ T5268] batman_adv: batadv0: Adding interface: team0 [ 92.297678][ T5268] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.326040][ T5268] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 92.346001][ T5270] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 92.359002][ T5270] netlink: 2 bytes leftover after parsing attributes in process `syz.4.24'. [ 92.373913][ T5270] team0: entered promiscuous mode [ 92.387242][ T5270] team_slave_0: entered promiscuous mode [ 92.459037][ T5270] team_slave_1: entered promiscuous mode [ 92.486973][ T5270] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.526086][ T5270] batman_adv: batadv0: Interface activated: team0 [ 92.570320][ T5270] batman_adv: batadv0: Interface deactivated: team0 [ 92.599471][ T5270] batman_adv: batadv0: Removing interface: team0 [ 92.627136][ T5270] bridge0: port 3(team0) entered blocking state [ 92.648082][ T5270] bridge0: port 3(team0) entered disabled state [ 92.676424][ T5270] team0: entered allmulticast mode [ 92.687996][ T5270] team_slave_0: entered allmulticast mode [ 92.705824][ T5270] team_slave_1: entered allmulticast mode [ 93.559342][ T5270] bridge0: port 3(team0) entered blocking state [ 93.565929][ T5270] bridge0: port 3(team0) entered forwarding state [ 93.576519][ T5271] netlink: 'syz.2.25': attribute type 10 has an invalid length. [ 93.585498][ T5271] netlink: 2 bytes leftover after parsing attributes in process `syz.2.25'. [ 93.595761][ T5271] team0: entered promiscuous mode [ 93.601753][ T5271] team_slave_0: entered promiscuous mode [ 93.619998][ T5271] team_slave_1: entered promiscuous mode [ 93.633317][ T5271] bridge0: port 3(team0) entered blocking state [ 93.661660][ T5271] bridge0: port 3(team0) entered disabled state [ 93.700766][ T5271] team0: entered allmulticast mode [ 93.719707][ T5271] team_slave_0: entered allmulticast mode [ 93.732417][ T5271] team_slave_1: entered allmulticast mode [ 93.746873][ T5271] bridge0: port 3(team0) entered blocking state [ 93.753328][ T5271] bridge0: port 3(team0) entered forwarding state [ 94.155806][ T5311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.36'. [ 94.167198][ T29] audit: type=1400 audit(1721577989.726:201): avc: denied { write } for pid=5310 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.312520][ T29] audit: type=1400 audit(1721577989.726:202): avc: denied { nlmsg_read } for pid=5310 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.632423][ T29] audit: type=1326 audit(1721577992.176:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.2.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b10b75b59 code=0x0 [ 96.680357][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000201b8: 0000 [#1] PREEMPT SMP KASAN PTI [ 96.693012][ C0] KASAN: probably user-memory-access in range [0x0000000000100dc0-0x0000000000100dc7] [ 96.702984][ C0] CPU: 0 PID: 5322 Comm: syz.0.37 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 96.712522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 96.722841][ C0] RIP: 0010:__dev_flush+0x49/0x1e0 [ 96.728828][ C0] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 96.749996][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010206 [ 96.756069][ C0] RAX: dffffc0000000000 RBX: 0000000000100d40 RCX: ffffffff88d66f09 [ 96.764836][ C0] RDX: 00000000000201b8 RSI: ffffffff81af9c56 RDI: ffffc90003777a68 [ 96.772906][ C0] RBP: 0000000000100dc0 R08: 0000000000000005 R09: 0000000000000000 [ 96.782635][ C0] R10: 0000000000000010 R11: 0000000000000000 R12: ffffc90003777a58 [ 96.790608][ C0] R13: ffff888022de0008 R14: ffffc90003777a68 R15: ffffc90003777a68 [ 96.798834][ C0] FS: 00007f7306e766c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 96.807872][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.815341][ C0] CR2: 0000001b31d11ff8 CR3: 000000007f4aa000 CR4: 00000000003506f0 [ 96.823510][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.832023][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.840215][ C0] Call Trace: [ 96.843694][ C0] [ 96.846532][ C0] ? show_regs+0x8c/0xa0 [ 96.850780][ C0] ? die_addr+0x4f/0xd0 [ 96.854961][ C0] ? exc_general_protection+0x155/0x230 [ 96.860594][ C0] ? asm_exc_general_protection+0x26/0x30 [ 96.866410][ C0] ? xdp_do_check_flushed+0xf9/0x4e0 [ 96.871705][ C0] ? __dev_flush+0x16/0x1e0 [ 96.876240][ C0] ? __dev_flush+0x49/0x1e0 [ 96.880838][ C0] xdp_do_check_flushed+0x14d/0x4e0 [ 96.886056][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 96.891445][ C0] net_rx_action+0xa92/0x1010 [ 96.896265][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 96.901382][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 96.906673][ C0] ? sched_clock+0x38/0x60 [ 96.911352][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 96.916212][ C0] handle_softirqs+0x216/0x8f0 [ 96.921015][ C0] ? handle_edge_irq+0x40f/0xd10 [ 96.925964][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 96.931259][ C0] irq_exit_rcu+0xbb/0x120 [ 96.935770][ C0] common_interrupt+0xb0/0xd0 [ 96.940441][ C0] [ 96.943669][ C0] [ 96.946757][ C0] asm_common_interrupt+0x26/0x40 [ 96.952238][ C0] RIP: 0010:write_comp_data+0x2e/0x90 [ 96.957819][ C0] Code: 89 f8 49 89 f1 65 48 8b 15 3f 8f 79 7e 65 8b 05 40 8f 79 7e a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 82 1c 16 00 00 85 c0 74 4f <8b> 82 f8 15 00 00 83 f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 [ 96.977705][ C0] RSP: 0018:ffffc90003776f50 EFLAGS: 00000246 [ 96.983770][ C0] RAX: 0000000080000000 RBX: ffffc90003776f80 RCX: ffffffff813cd8b7 [ 96.991742][ C0] RDX: ffff888021311e00 RSI: 0000000000000000 RDI: 0000000000000005 [ 96.999713][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 97.007681][ C0] R10: 0000000000000001 R11: dffffc0000000000 R12: ffffc90003776fc8 [ 97.015656][ C0] R13: ffffffff8175e540 R14: ffffc90003777040 R15: ffff888021311e00 [ 97.023731][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.029940][ C0] ? unwind_get_return_address+0x87/0xe0 [ 97.035665][ C0] unwind_get_return_address+0x87/0xe0 [ 97.041129][ C0] arch_stack_walk+0xc1/0x170 [ 97.045815][ C0] ? __sys_bpf+0x8e9/0x4a20 [ 97.050333][ C0] stack_trace_save+0x95/0xd0 [ 97.055019][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 97.060399][ C0] save_stack+0x162/0x1f0 [ 97.064738][ C0] ? __pfx_save_stack+0x10/0x10 [ 97.069652][ C0] ? post_alloc_hook+0x2d1/0x350 [ 97.074596][ C0] ? get_page_from_freelist+0x1353/0x2e50 [ 97.080423][ C0] ? __alloc_pages_noprof+0x22b/0x2460 [ 97.085906][ C0] ? alloc_pages_bulk_noprof+0x742/0x14f0 [ 97.091717][ C0] ? alloc_pages_bulk_array_mempolicy_noprof+0x259/0x11d0 [ 97.098830][ C0] ? __vmalloc_node_range_noprof+0x550/0x1520 [ 97.104996][ C0] ? __vmalloc_noprof+0x6d/0x90 [ 97.110120][ C0] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 97.115671][ C0] ? bpf_prog_alloc+0x3b/0x240 [ 97.120433][ C0] ? bpf_prog_load+0x1b32/0x2660 [ 97.125378][ C0] __set_page_owner+0x8b/0x560 [ 97.130146][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 97.135515][ C0] ? bad_range+0x264/0x440 [ 97.139929][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.145162][ C0] post_alloc_hook+0x2d1/0x350 [ 97.150015][ C0] get_page_from_freelist+0x1353/0x2e50 [ 97.155578][ C0] ? __pfx___might_resched+0x10/0x10 [ 97.160899][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 97.166799][ C0] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 97.173218][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 97.178503][ C0] ? is_module_text_address+0x145/0x1a0 [ 97.184065][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.190221][ C0] ? kernel_text_address+0x6e/0xe0 [ 97.195323][ C0] ? __kernel_text_address+0xd/0x40 [ 97.200516][ C0] ? unwind_get_return_address+0x45/0xe0 [ 97.206145][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 97.212179][ C0] ? stack_trace_save+0x95/0xd0 [ 97.217111][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 97.222572][ C0] ? stack_depot_save_flags+0x28/0x8f0 [ 97.228097][ C0] alloc_pages_bulk_noprof+0x742/0x14f0 [ 97.233652][ C0] ? __vmalloc_noprof+0x6d/0x90 [ 97.238496][ C0] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 97.244046][ C0] ? bpf_prog_load+0x1b32/0x2660 [ 97.249006][ C0] ? __sys_bpf+0x8e9/0x4a20 [ 97.253505][ C0] ? __x64_sys_bpf+0x78/0xc0 [ 97.258093][ C0] ? do_syscall_64+0xcd/0x250 [ 97.262766][ C0] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 97.268736][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.274632][ C0] ? policy_nodemask+0xea/0x4e0 [ 97.279486][ C0] alloc_pages_bulk_array_mempolicy_noprof+0x259/0x11d0 [ 97.286419][ C0] ? __pfx_alloc_pages_bulk_array_mempolicy_noprof+0x10/0x10 [ 97.293793][ C0] ? rcu_is_watching+0x12/0xc0 [ 97.298651][ C0] ? trace_kmalloc+0x2d/0xe0 [ 97.303230][ C0] ? __kmalloc_node_noprof+0x22f/0x430 [ 97.308859][ C0] ? __vmalloc_node_range_noprof+0x401/0x1520 [ 97.314919][ C0] __vmalloc_node_range_noprof+0x550/0x1520 [ 97.320804][ C0] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 97.326345][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.332665][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 97.337950][ C0] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 97.343494][ C0] __vmalloc_noprof+0x6d/0x90 [ 97.348165][ C0] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 97.353713][ C0] bpf_prog_alloc_no_stats+0x58/0x440 [ 97.359115][ C0] bpf_prog_alloc+0x3b/0x240 [ 97.363713][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.369608][ C0] bpf_prog_load+0x1b32/0x2660 [ 97.374391][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 97.379511][ C0] ? avc_has_perm+0x11b/0x1c0 [ 97.384181][ C0] ? selinux_bpf+0xde/0x130 [ 97.388672][ C0] ? security_bpf+0x8c/0xc0 [ 97.393168][ C0] __sys_bpf+0x8e9/0x4a20 [ 97.397491][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 97.402273][ C0] ? vfs_write+0x917/0x1140 [ 97.406868][ C0] ? vfs_write+0x14d/0x1140 [ 97.411403][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 97.416937][ C0] ? do_futex+0x123/0x350 [ 97.421254][ C0] ? __pfx_do_futex+0x10/0x10 [ 97.425921][ C0] ? xfd_validate_state+0x5d/0x180 [ 97.431026][ C0] __x64_sys_bpf+0x78/0xc0 [ 97.435433][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.440622][ C0] do_syscall_64+0xcd/0x250 [ 97.445133][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.451017][ C0] RIP: 0033:0x7f7306175b59 [ 97.455412][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.475012][ C0] RSP: 002b:00007f7306e76048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.483434][ C0] RAX: ffffffffffffffda RBX: 00007f7306305f60 RCX: 00007f7306175b59 [ 97.491399][ C0] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 97.499358][ C0] RBP: 00007f73061e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 97.507318][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.515282][ C0] R13: 000000000000000b R14: 00007f7306305f60 R15: 00007ffd52f0a0c8 [ 97.523254][ C0] [ 97.526269][ C0] Modules linked in: [ 97.530310][ C0] ---[ end trace 0000000000000000 ]--- [ 97.535777][ C0] RIP: 0010:__dev_flush+0x49/0x1e0 [ 97.540901][ C0] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 97.560531][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010206 [ 97.566595][ C0] RAX: dffffc0000000000 RBX: 0000000000100d40 RCX: ffffffff88d66f09 [ 97.574582][ C0] RDX: 00000000000201b8 RSI: ffffffff81af9c56 RDI: ffffc90003777a68 [ 97.582593][ C0] RBP: 0000000000100dc0 R08: 0000000000000005 R09: 0000000000000000 [ 97.590601][ C0] R10: 0000000000000010 R11: 0000000000000000 R12: ffffc90003777a58 [ 97.598595][ C0] R13: ffff888022de0008 R14: ffffc90003777a68 R15: ffffc90003777a68 [ 97.606649][ C0] FS: 00007f7306e766c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 97.615660][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.622269][ C0] CR2: 0000001b31d11ff8 CR3: 000000007f4aa000 CR4: 00000000003506f0 [ 97.630270][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.638272][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.646241][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 97.653536][ C0] Kernel Offset: disabled [ 97.657856][ C0] Rebooting in 86400 seconds..