last executing test programs: 5m36.46739139s ago: executing program 3 (id=469): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102361, 0x18fd9) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) write$binfmt_register(r2, &(0x7f0000000a00)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\x00\x19\x80\xe3f\xe8\x18\xc3\xb9\x12\x8c\xf6\x90\xc9-^i\x04a', 0x3a, 'IPVS\x00', 0x3a, './file1', 0x3a, [0x43, 0x43, 0x4f, 0x50, 0x4f]}, 0x44) (async) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (async, rerun: 64) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) write(r3, &(0x7f00000001c0)="924472e265587a91651b91a491f99fda64b65f24949a9a976b10612c7631bd7b1b2af2d630a113980a76197ae1cdc9cee9f2e37c6309fd0f394fc9943b948eaaa82f24977dfef1eb0ed0ed0b1754288d709889f354d5762ac664ad20d9567bd7e8a38d23233d992fdee186eabb546805adecd0c4e5939bf951b8497b35950ff50ede74da55614e89", 0x88) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) (rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r4 = socket$netlink(0x10, 0x3, 0xf) fsetxattr$smack_xattr_label(r4, &(0x7f0000001bc0)='security.SMACK64MMAP\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="2520e39637c9838a0ca7f86e3ada277d8e14861e"], 0x5, 0x2) 5m36.438139175s ago: executing program 3 (id=470): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="c7ed8f769bb970e49d79a77aa58d49b75041ea1576f494aac07fe9f402057e04ce", 0x21}, {&(0x7f0000000800)="b0cf050edf62093c5569b42585349130898e35d9b1ccab55151918fecf0e957ef6c0e6957d04ea6f01b5af9bcea5c636dea38f4b506376d5288858bbac5f95be08a9a4c92cc35c042e359e92fd5ca620acd9dbb4ee", 0x55}], 0x2, 0x0, 0x0, 0x4000}], 0x1, 0x800) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}], 0x1}, 0x40000000) 5m36.376586042s ago: executing program 3 (id=472): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x42, 0x481e}, 0xe5e8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000000)=0x12d) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x13, 0x9}, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}) prlimit64(0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x20, 0x0, 0x0, 0x0) 5m35.123023483s ago: executing program 3 (id=475): futex(&(0x7f0000000040), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x70) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0xb, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x88) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000014170100000000000000000028000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) 5m34.03954046s ago: executing program 3 (id=486): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008340)="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", 0x2000, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000000)=0x12d) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x13, 0x9}, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}) prlimit64(0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x20, 0x0, 0x0, 0x0) 5m33.713140445s ago: executing program 3 (id=489): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) socket$kcm(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r5, 0x20, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r5, r2, 0x26, 0x0, 0x0, @void, @value=r2, @void, @void, r6}, 0x20) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r10, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/196, 0xc4}], 0x1, 0x200000, 0x1) dup3(r0, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m33.192074764s ago: executing program 32 (id=489): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) socket$kcm(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r5, 0x20, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r5, r2, 0x26, 0x0, 0x0, @void, @value=r2, @void, @void, r6}, 0x20) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r10, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/196, 0xc4}], 0x1, 0x200000, 0x1) dup3(r0, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m50.763432503s ago: executing program 1 (id=750): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x806, 0x0) r4 = io_uring_setup(0xad5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) close(r4) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = signalfd(r0, &(0x7f0000000180)={[0x3]}, 0x8) fchmod(r6, 0x1a3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x80800) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) 1m23.033360729s ago: executing program 1 (id=750): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x806, 0x0) r4 = io_uring_setup(0xad5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) close(r4) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = signalfd(r0, &(0x7f0000000180)={[0x3]}, 0x8) fchmod(r6, 0x1a3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x80800) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) 1m10.483779484s ago: executing program 5 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000004000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000000900010073797a3000"], 0x108}}, 0x0) pwrite64(r0, &(0x7f0000000100)="dffee73fe2a2da38b980d648da687a764344cdacd7482f2d21197e65079d818ee1b3204ce080c2ed165feed3484263cafa8d7265e6f5270faac4f41929a1c2ccb246d04fddc36dff1354902403af0b79bbaca957fae96fa0ff41679ddb9f3202f2b60570870dc82c3b6bb500705ab597a56332adf2b0e89b9a307ff6167390504b8484cd921378ba8aac49297f0c5f40073f63f2bd3f98dcfbc45cca9e6c9ebe2dee1b4595f8e8b9b733f5914d0850579e91768d9c6738f1fc1cafac", 0xbc, 0x10001) 1m10.465530445s ago: executing program 5 (id=1459): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb7ae428ac2f"}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="070800ff57ffba10000900000806", 0x36, 0x44000091, &(0x7f0000000100)={0x11, 0xf5, r2, 0x1, 0x80}, 0x14) 1m10.398441122s ago: executing program 1 (id=750): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x806, 0x0) r4 = io_uring_setup(0xad5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) close(r4) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = signalfd(r0, &(0x7f0000000180)={[0x3]}, 0x8) fchmod(r6, 0x1a3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x80800) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) 1m10.354716511s ago: executing program 5 (id=1462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020631af8ff00000000bfa10000000000000701000000000000b702000008000000bf03000000000000850000000600000095000000d3031a00"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x72) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r5 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440)=r4, 0x1) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/30, 0x1e}, 0x4}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) read$FUSE(r0, &(0x7f0000001940)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0xa) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @calipso={0x7, 0x8, {0x3, 0x40000000000000b2, 0x2, 0x5}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xc6, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x80) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000700)=[@uexit={0x0, 0x18, 0x2}, @code={0x1, 0x6d, {"b9c60a0000b806000000ba000000000f300fb21d8000c0fe48b800800000000000000f23d80f21f835800000c00f23f8b9800000c00f3235002000000f3064670fc75f0566ba4000ed66f2400f08c4217c51d30f01f8c4417d516100"}}, @uexit={0x0, 0x18}, @code={0x1, 0x65, {"66ba4000b8e6000000ef0f8ecf6f000066bad10466b8010066ef366726460f01cbc4437904cc5b64429fb9510200000f320f20e46743a824c7442400ea8e7352c74424028f000000c7442406000000000f011c24"}}, @code={0x1, 0x59, {"d02c66c442edace9676767450fc728c401fa7fcf2ef30f1ed90f20c035010000000f22c064660f7ea100000080f20f38f0d9b9e90a0000b841a70000ba000000000f30660f73d82e"}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18}, @code={0x1, 0x5c, {"650f01d1c7442400ec000000c744240200100000ff1c24c401fe5b2bf2470f35c482a9a86c3c0066470f388130c4a23d912489b9f70300000f320f874c5b00006666470f3880ab0d000000"}}, @code={0x1, 0x60, {"66ba410066b8090066ef44dcf766b8de000f00d00f01c266b83a000f00d0656566420ff31b48b84f000000000000000f23d00f21f8353000000f0f23f8410f38c969f96766450f38807b700f79560b"}}, @uexit={0x0, 0x18, 0x40}, @code={0x1, 0x4b, {"2e66410f3880204e0fc70f66bad004edb9140800000f320f217c470f01c3410f2184c4e139db8e0000010036470fc75d06c402519e9602000000"}}, @code={0x1, 0x6a, {"c4e1f817800600000066f2430f0866410f38807c790766ba4000ed66ba4100ecb911060000b844029a0dba000000000f30c744240088000000c7442402ca000000ff1c2466baa00066ed66baf80cb898b0b289ef66bafc0cec"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0xd5cf}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x68, {"3e66460f32460f01cf0f00d0b858f1f0408d087e8d087efc0c66b8ae0066efc4237d1d8a0000000014b8947400b30000000000000f30070f0394f346abc744240039010000c7442402000000000f09400f01c946f6033e"}}, @uexit={0x0, 0x18, 0x451f}, @code={0x1, 0x53, {"c461fe6f03f3acc4621d96a4710100000066baf80cb8a404fb83ef66bafc0ced65410f09b805000000b9000000800f01d90f32470f18c266450f38802fc442f1aa27"}}, @uexit={0x0, 0x18, 0x2454}, @code={0x1, 0x74, {"440f01c36626ad48b859d0ffffffffffff0f23d00f21f835100000070f23f8450f32b805000000b95d12cfee0f01c1c4437905d4e548b8e6dc918c0d7060520f23d80f21f835000000800f23f8360f7825c94d000066b8c1000f00d066b83b010f00d8"}}], 0x503}) pread64(r6, &(0x7f00000006c0)=""/14, 0xe, 0x0) 1m8.175400808s ago: executing program 5 (id=1465): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) r0 = getpid() mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2215080, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.709313024s ago: executing program 5 (id=1478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m4.419716885s ago: executing program 5 (id=1480): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x290, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x27c, 0x1, [@m_gact={0x248, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x219, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x290}}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xa6}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m4.156766578s ago: executing program 33 (id=1480): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x290, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x27c, 0x1, [@m_gact={0x248, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x219, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x290}}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xa6}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 56.318703612s ago: executing program 1 (id=750): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x806, 0x0) r4 = io_uring_setup(0xad5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) close(r4) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = signalfd(r0, &(0x7f0000000180)={[0x3]}, 0x8) fchmod(r6, 0x1a3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x80800) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) 36.529630638s ago: executing program 1 (id=750): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x806, 0x0) r4 = io_uring_setup(0xad5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) close(r4) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = signalfd(r0, &(0x7f0000000180)={[0x3]}, 0x8) fchmod(r6, 0x1a3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x80800) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) 18.157202456s ago: executing program 1 (id=750): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f00004f8000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6(0xa, 0x806, 0x0) r4 = io_uring_setup(0xad5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000f00", 0x33a) close(r4) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r6 = signalfd(r0, &(0x7f0000000180)={[0x3]}, 0x8) fchmod(r6, 0x1a3) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r7, 0x0, 0x0, 0x80800) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) 6.791101953s ago: executing program 0 (id=1691): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008340)="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", 0x2000, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x42, 0x481e}, 0xe5e8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000000)=0x12d) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x13, 0x9}, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}) prlimit64(0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x567, 0x20, 0x0, 0x0, 0x0) 6.467634084s ago: executing program 6 (id=1693): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x50) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xa6}, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x8d1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) sendmsg$can_j1939(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfd}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0xb41154effeab92db}, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001780), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000002580)={0x3, @capture={0x0, 0x0, {0xb7, 0x101}, 0x10000, 0xd1e}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400f5000000019078ac1e4840ea4b925c48009078036100004600000000004000002f0009ac141410ac1414bb44440001000086dd00000000ac1414bb00000000b200c813f1cfac1414ffffffff4ee0000002000000047f00000100000000ac1414aa00000004e0000000000000000000"], 0x0) syz_open_procfs(r1, &(0x7f0000000080)='smaps_rollup\x00') 4.999604481s ago: executing program 0 (id=1696): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdff72d37, 0x1dd2, 0x6, 0x363, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x8958, 0x103, 0x0, 0x101, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x1b1], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x0, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x101, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x44, 0xffff, 0x2, 0x7c, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0x6, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x8, 0x3, 0x10000009, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x100, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) creat(0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40894}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.804528037s ago: executing program 4 (id=1697): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.695771237s ago: executing program 0 (id=1699): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="60bf77ec517a29aa8d0c9bdd7db3a4351804ab06da5dcc597035b0ae118f914d91f92c6b7eb92f26599a4565ff78bfbfd729475d1f7542295236af47d0638283c61b09fffc693edeffa1a90ca336cd923fa410cb235528453190d57d9ea4f8faf107ac851a30462e65a32055ee2fdc8297e485d9bfe2aa3dd680f73112efb9ad41fa5a74ec527549bdaf17930e34b72b4e4a523b5c478d60958ae8795d4bf99604624f02092ed050af5b390d21"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 4.483646026s ago: executing program 4 (id=1700): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161902, 0x0) r1 = dup(r0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x500) ioctl(r2, 0xc0004508, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x80a3, 0x0, 0x0, 0x30f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x22, 0x6000, @fd=r4, 0xcc, 0x0, 0x0, 0x10, 0x1, {0x2}}) close(0xffffffffffffffff) r7 = syz_io_uring_setup(0x130, &(0x7f0000000140)={0x0, 0xf97, 0x1000, 0xfffffffc, 0x28a}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40800}) io_uring_enter(r7, 0x47f4, 0x1386, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r1) 4.432084191s ago: executing program 6 (id=1702): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/50, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a00210f29bd7000fadbdf251c0000"], 0x24}, 0x1, 0x0, 0x0, 0x40095}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x20, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40049}, 0x8000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xe0, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5b}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10100) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0xfffffffffffffeea, 0x0}, 0x40018020) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) 3.991611163s ago: executing program 0 (id=1705): r0 = socket(0x1f, 0x803, 0x4009) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="0000000008000f0000000000140001"], 0x38}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f00000001c0)={0x400, 0x1, &(0x7f0000000340)=[r7], &(0x7f0000000180)=[0x1], &(0x7f0000000200), &(0x7f00000023c0)=[0x8]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x1, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() 3.433858628s ago: executing program 6 (id=1706): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001400000004"], 0x20) 3.007345278s ago: executing program 6 (id=1708): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) (fail_nth: 14) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) creat(0x0, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x1000) 2.227438122s ago: executing program 4 (id=1709): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xdff72d37, 0x1dd2, 0x6, 0x363, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe65f, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x8958, 0x103, 0x0, 0x101, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x1b1], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x0, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x101, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x44, 0xffff, 0x2, 0x7c, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0x6, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x8, 0x3, 0x10000009, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x100, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xffb]}, 0x45c) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x400c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) creat(0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40894}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.953472301s ago: executing program 6 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x90, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x35f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x90ce}]}]}]}, 0x90}}, 0x40000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() close(0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf251400000008001c00", @ANYRES32=r7, @ANYBLOB="0c000600020000000200000008001d00", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20008054}, 0x4008090) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x28) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.620590154s ago: executing program 6 (id=1712): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000100000000000000dfffffffff00090224000900001000090400001103000200092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="25acc7fe0aaa6cbfc6b0da6998cf0344b861acea0e82bb779196f56dfb35984ef00cb39c88d00b4375e1b964ab88c21a7a69ee051d2e7c64692cd1e9d63fcacf9994ca2ab6d025979e1e902069e2d9da142359a22d8a903abf2ac849cd1875b8ad86c0c2fc6d0cd3846815661511e6bdff789b74f28785ed1592098ea57b0e11d41962cbc638fe5e3f52b71504912de4678c2e3bd290da15cc8fdc5c5f0f264760167c016ec3c67b33e9cbc6e323ab44f2160ff6bc924d72497842af78ef2d13cb3e085e66143b69cc1f216103030b70fef8759d82f9c01bc147c25da6ce9ce5c8db5796ef02c6", 0xe7}, {&(0x7f0000000200)="76d37aa03d781582c3704df94b91116e2bddae9aae3c61a78150bf9e6adc5beb64132485ad33ff89724e7abc433ace16138bc110cfacb21dc2fab6e802c193a9197b7ceb427cc767ddf2b2c850c1e13b23f0fd62d7a6", 0x56}], 0x2}], 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4021070000000002b01d09c6f1074012a80307fea8f311b8e16be4b35e72"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x5, 0x5, 0x0, 0x2, 0x7ff, 0x2, 0x9, 0x3}, &(0x7f0000000140)={0x8, 0x86, 0x200, 0x6, 0xc1, 0x747d, 0xa6d8, 0xbcb}, &(0x7f0000000180)={0xfffffffffffffffd, 0x2, 0x100, 0xffff, 0x8, 0x4, 0x1, 0x6}, &(0x7f00000001c0), &(0x7f00000003c0)={&(0x7f0000000380)={[0x4]}, 0x8}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) unshare(0x2040600) (async, rerun: 64) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, r6, 0x0, 0x46) (async, rerun: 32) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) (async, rerun: 32) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) (rerun: 32) write$dsp(r7, &(0x7f0000000080)="f86e822d61eaa121f6818f292bd6f8a4da9b83fd922aee82cd998bad0af7aa7bd180228ad08b0b647b1d39833f2ddf19b9fd3b17e29d4c0c13d499595ba96ffcf23600b423", 0x45) 1.563650925s ago: executing program 0 (id=1713): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400800, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f00000000c0)) lseek(r1, 0xff, 0x2) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="157c5811ed536e939ec1f82185f1cd683687531696009c3c031f52f1ba53fe43e324d48f20ae6372042f938a0302e69f9aa72e1893b0938bbcdd74e91a7220beea7982950bce469f4386092d22006c5456c00c49baf5556a6d322b8de0db30f3ea4a82aeaa766c11a1fe885e33656e165c1d54dcb7e58edeb1ddbcffc045a369eb8dc0a682bab2466c6be2467cc9955e970eb9d465a2b41671c0394843b7c9bd34ba54b4133d58b69036993c0c3be572de77d1a81fed82542f81be45e78a67f57dffe2506725d9fe1c9c4a542c86271680123fb9a29376b1cfa3e9b45d1aa571618cae", 0xe3, r2) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fcntl$addseals(r3, 0x409, 0x1) keyctl$negate(0xd, r2, 0x2, r2) keyctl$session_to_parent(0x12) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x2, 0x72, &(0x7f0000000340)="d98f053ab7ba2cb634bbef0c76d110b3e9b773ebfe2469baa7919d9d21a7df13e3e4c6b1d782f6662aa4b55baa79b169463ee111319f1c6ff3aa3f234581ce25751732b31c34ace4eb834312c63a565f9b7b66522a0765ce5a62d6f8844aa801efb9267fa3a86d02071b45d4be0bc66cf2f3", 0x0, 0x1}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r0, 0x7, 0x2, 0x5}) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000480)="4af2faf1a8101253bff8fb2a11bbaeec0be25f2134cab4bf9bb7aacbe5fcaad07a404d786d551f3c8bfa131f7e3cf5c786ca8c23259f8eb70bc5fdcd1e9cf1b84b") r5 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x4, 0x401) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f0000000540)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000005c0)="cee5dc064ef7350b6ea008754c458679e736ef651c16f9891a19b1168036233724d13835447544ef87af9683c4e0000580dc3e7e4e35bf6e61adfd3d6628a6a2b595c596262163406fee8529b161e284772e2bfadde7e4dab775d4f7b66ec32a97fa876c1ee62e77302a1bb22814cbd3b5ade8beb374a3bc3510509c0363ada946317b053901207d1851d2fe18343c2587ae127159f7d2a94c776fe108e00071ee69c5aba0adb6d4406d71a671eacdb2cf90b36fc55dcb1ca765ec9472f3550b5fde23", 0xc3}, {&(0x7f00000006c0)="b1d98984a83b911a02cbbc3f6bbf4af70888d20bb00683350aa74e344475efd4e795c4def0767e33d6dffbecbc16869744c2edc41fc0501da8dc60b440bd06bd18fd6cc1170226c8772a6a88ee8a37870ab7df2849d4d5099e95a9bb7fd93d90bc", 0x61}, {&(0x7f0000000740)="d1827e3443ce18be8a7fc17e87232672c2121a77780425c10cec1c28b2fe8cb5ad2606479a8032bacf7d5152d898fc5efbfcfac215cb3cea1a291e46a18c6c5512f69e9581a70f5eab5eef154c591ce686c62cd97e111196bf1a5ecfe397677434951dd28923c179e59839e6e50b015c6399396f93d7a0ee003d79bfc52d0b226ff32bb0e1f02a14e869540db0bef0864130b13857bfa538d9bbe05605fb91127565f7998bdc0ff7078376561bcf461986815a62c6faf99fbab1b43743beb310a9a479347cf1b2478e85c0e1ced83dd5f0433576", 0xd4}], 0x3) keyctl$session_to_parent(0x12) add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5b07c774c25c5f1038470a906ac2e0538e20dc97a8a67eb61101142ddd7eb601df9b066cb346ad372488006e8c123c83461e768df7b89353209ab7ef2841517e2e48dce96eac8847d40316af4d10367e42720a69650ec01e74875d473804d44742813bfc022b50364018d0bca51d6b932dc2cda5784793efd43404d309b2694aa62ddffeed4f150d501d3e444464b19abec4743eb9870f0bb99d2754fa878615fa1bf30b06cce8de245e997da3e01a2561efda79eab181074f8284e1e90c3869457c0b0c6c8ef78c2f84133a0ce2ae79c9a543d20e8bfc408496d434201917", 0xdf, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x1c000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) connect$unix(r6, &(0x7f0000000a40)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], &(0x7f0000000d40)=[0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000e40)={&(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[{}, {}], r7, 0x0, '\x00', 0x1, 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/vmcoreinfo', 0xc0200, 0x0) fcntl$setflags(r4, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000f00)={0x2020}, 0x2020) 1.562876919s ago: executing program 2 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661750100207573656709522469b132723a7379"], 0x2a, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0xa) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) ioctl$TIOCCBRK(r3, 0x5428) 1.488796551s ago: executing program 4 (id=1715): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x19, "340320535e5233ffd51d26660bcaf95fb8d6cf6cff690d6b87"}, 0x0}) 1.415915613s ago: executing program 0 (id=1716): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'wlan1\x00'}, {0x20, 'wlan1\x00'}, {0x20, '\xb2\x88'}, {0x20, 'wlan1\x00'}, {0x20, ']$B#.[:'}, {0x20, 'wlan1\x00'}, {0x20, 'wlan1\x00'}, {0x20, ':/\'\'{%'}, {0x20, '*\\'}, {0x20, 'wlan1\x00'}], 0xa, "1d255534c0fcfe83410ab28a9dd6c250ac2a9e311accdda4e0eb09b91c697cbfdd6b91737a7793f28d660097c582cc96e4f607282f8facfcee17634e70f12b573014709058e6794ea0c39a53799a826d30981bef38b6284c4c0bfc90da131d5ccf5e71dd832658dee26df2c242a4d420762aef7017014bfc241269fb2fc3336bbf27713eb1414751662c0b6341f6f7d08b39297c9ecc683ab9"}, 0xe3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) io_submit(0x0, 0xfffffffffffffeca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x2, 0x3, "b604fb", 0x1, 0xfe}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$inet_sctp(r3, &(0x7f0000001bc0)=[{&(0x7f0000000080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000000c0)="8a", 0x1}], 0x1, &(0x7f0000000380)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xffffe1a1}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x0, 0x2, 0x5, 0x9, 0x914, 0x3, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x68}], 0x1, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"}) 467.84382ms ago: executing program 4 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c71040000000000140003006e657464657673696d30000000000000180016801400018010000600040000000900001001"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 377.795691ms ago: executing program 2 (id=1718): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="650200de20fd0a4f0524012800001f00000000000000000000000000000000000000000000000c00000001040000000000007dff0a6e6f6465767b65766f03d38b9200000000000000000000000000280070673effeb09b5351f5bde054000000000187899a916638814e5708103b494e1000000000000000002000800ac00f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a440b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a3700398641631d44f4a39b1191937a280e8d889fc220d115ac8e2f184b9a61758d26772ab0f204"], 0xfd85) 371.050631ms ago: executing program 4 (id=1719): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161902, 0x0) r1 = dup(r0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x500) ioctl(r2, 0xc0004508, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x80a3, 0x0, 0x0, 0x30f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x22, 0x6000, @fd=r4, 0xcc, 0x0, 0x0, 0x10, 0x1, {0x2}}) close(0xffffffffffffffff) r7 = syz_io_uring_setup(0x130, &(0x7f0000000140)={0x0, 0xf97, 0x1000, 0xfffffffc, 0x28a}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40800}) io_uring_enter(r7, 0x47f4, 0x1386, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r1) 255.91003ms ago: executing program 2 (id=1720): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/119, 0x77}, {&(0x7f0000000100)=""/4088, 0xff8}, {&(0x7f0000001100)=""/42, 0x2a}, {&(0x7f0000001140)=""/207, 0xcf}], 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000001280), 0x0, 0x200000) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x9) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = socket$inet6(0xa, 0x3, 0xb) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffc}, 0x1c) fcntl$setstatus(r3, 0x4, 0x4400) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x6, 0x6, 0x917, 0x100}, 0x14) 171.728793ms ago: executing program 2 (id=1721): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/4084, 0xff4}, {&(0x7f0000000040)=""/45, 0x2d}], 0x2) (fail_nth: 3) 113.019281ms ago: executing program 2 (id=1722): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r2 = epoll_create1(0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000002c0)={r3, 0x0, 0x8, 0x677750ae, 0x7}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000047c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000004800)={0x2020, 0x0, 0x0}, 0x2020) preadv(r7, &(0x7f000000a3c0)=[{&(0x7f00000081c0)=""/4096, 0x1000}, {&(0x7f00000093c0)=""/4096, 0x1000}], 0x2, 0x1000, 0x7) write$FUSE_DIRENTPLUS(r7, &(0x7f000000a640)={0x10, 0xfffffffffffffffe, r8}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) fcntl$setpipe(r9, 0x407, 0x8000000000000000) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) close_range(r2, r10, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x1, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}, @NFQA_EXP={0x24, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={r11, 0x80}, &(0x7f0000000200)=0x8) r12 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x567, 0x20, 0x0, 0x0, 0x0) close(r0) 0s ago: executing program 2 (id=1723): io_setup(0x10000, &(0x7f00000014c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x4, 0x40) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0xb, r4}) r5 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x9, &(0x7f0000000100)) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000005e0001002bbd3000feaeffff0400e280"], 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c000000000033907800000000ffdeff000000000000089078"], 0x0) io_getevents(0x0, 0x8, 0x0, &(0x7f0000000040), &(0x7f0000000180)) io_setup(0x4, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x4902, 0x0) kernel console output (not intermixed with test programs): : 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 392.864153][ T9964] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1030'. [ 392.911783][ T9967] netlink: 'syz.0.1028': attribute type 32 has an invalid length. [ 392.958086][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 392.981934][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1030'. [ 393.093489][ T53] bridge_slave_1: left allmulticast mode [ 393.094059][ T9964] netlink: 'syz.5.1030': attribute type 29 has an invalid length. [ 393.120840][ T53] bridge_slave_1: left promiscuous mode [ 393.157324][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.204900][ T53] bridge_slave_0: left allmulticast mode [ 393.241283][ T53] bridge_slave_0: left promiscuous mode [ 393.263447][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.437215][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.454256][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.463938][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.497576][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.573994][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.774159][T10025] overlayfs: failed to clone upperpath [ 396.858577][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.886292][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.930562][ T53] bond0 (unregistering): Released all slaves [ 396.982170][ T9988] veth0_vlan: entered allmulticast mode [ 397.151367][T10032] overlayfs: failed to resolve './cgroup': -2 [ 397.624381][ T5821] Bluetooth: hci1: command tx timeout [ 398.314359][ T5894] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 399.183480][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 399.245778][ T5894] usb 6-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 399.285968][ T5894] usb 6-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 399.317165][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 399.324358][ T5894] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 399.336471][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.356597][ T5894] usb 6-1: config 0 descriptor?? [ 399.380921][ T5894] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 399.558159][T10059] netlink: 'syz.0.1047': attribute type 2 has an invalid length. [ 399.713611][ T5821] Bluetooth: hci1: command tx timeout [ 399.974984][T10076] netlink: 'syz.5.1041': attribute type 11 has an invalid length. [ 399.982844][T10076] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1041'. [ 400.059079][ T53] hsr_slave_0: left promiscuous mode [ 400.077145][ T53] hsr_slave_1: left promiscuous mode [ 400.085602][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.103582][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.128084][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.149314][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.377150][ T53] veth1_macvtap: left promiscuous mode [ 400.390046][ T53] veth0_macvtap: left promiscuous mode [ 400.400803][ T53] veth1_vlan: left promiscuous mode [ 400.411055][ T53] veth0_vlan: left promiscuous mode [ 401.602185][ T5821] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 401.784355][ T5821] Bluetooth: hci1: command tx timeout [ 401.983380][ T53] team0 (unregistering): Port device team_slave_1 removed [ 402.341988][ T53] team0 (unregistering): Port device team_slave_0 removed [ 403.372269][ T47] usb 6-1: USB disconnect, device number 8 [ 403.863311][ T5821] Bluetooth: hci1: command tx timeout [ 404.052291][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1059'. [ 404.063112][T10118] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1059'. [ 405.674705][ T5821] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 405.684529][ T5821] Bluetooth: hci0: Injecting HCI hardware error event [ 405.698358][ T5821] Bluetooth: hci0: hardware error 0x00 [ 406.198983][T10008] chnl_net:caif_netlink_parms(): no params data found [ 406.291335][T10146] pim6reg: entered allmulticast mode [ 406.452324][T10146] pim6reg: left allmulticast mode [ 407.645315][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.663250][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.672039][T10008] bridge_slave_0: entered allmulticast mode [ 407.687732][T10008] bridge_slave_0: entered promiscuous mode [ 407.706439][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.718618][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.732359][T10008] bridge_slave_1: entered allmulticast mode [ 407.755333][T10008] bridge_slave_1: entered promiscuous mode [ 407.862176][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.897191][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.943308][ T5821] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 408.014607][T10008] team0: Port device team_slave_0 added [ 408.028224][T10008] team0: Port device team_slave_1 added [ 408.347407][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.389330][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.513986][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.571387][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.762770][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.793368][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.987203][T10008] hsr_slave_0: entered promiscuous mode [ 408.995238][T10008] hsr_slave_1: entered promiscuous mode [ 409.001773][T10008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.013202][T10008] Cannot create hsr debugfs directory [ 409.096815][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 409.105928][T10206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1074'. [ 412.349781][T10008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.370872][T10008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 412.382575][T10008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.528772][T10264] overlayfs: failed to clone upperpath [ 413.021016][T10008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.542579][T10284] 9pnet_fd: Insufficient options for proto=fd [ 413.607807][T10008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.778408][T10008] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.816071][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.823432][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.873037][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.880313][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.932102][T10008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.082846][T10008] veth0_vlan: entered promiscuous mode [ 415.136898][T10008] veth1_vlan: entered promiscuous mode [ 415.204301][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 415.272717][T10008] veth0_macvtap: entered promiscuous mode [ 415.300343][T10008] veth1_macvtap: entered promiscuous mode [ 415.341456][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.355876][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.449290][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.462697][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.476398][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 415.485023][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.496737][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.508552][ T5894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 415.519648][T10008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.557871][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.591315][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.626892][ T5894] pvrusb2: Hardware description: Terratec Grabster AV400 [ 415.654187][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.664213][ T5894] pvrusb2: ********** [ 415.668228][ T5894] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 415.703211][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.723160][ T5894] pvrusb2: Important functionality might not be entirely working. [ 415.731049][ T5894] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 415.746141][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.933227][T10008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.956086][ T5894] pvrusb2: ********** [ 415.972981][ T2340] pvrusb2: Invalid write control endpoint [ 415.987089][T10008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.022925][T10008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.122780][ T2340] pvrusb2: Invalid write control endpoint [ 416.136221][T10008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.152481][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 416.163648][T10008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.178230][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 416.196902][T10008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.212093][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 416.222555][T10008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.235733][ T2340] pvrusb2: Device being rendered inoperable [ 416.253859][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 416.265196][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 416.308349][ T2340] pvrusb2: Attached sub-driver cx25840 [ 416.332796][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 416.358799][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 416.502587][T10324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.636525][T10324] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 416.674710][T10324] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.680812][T10324] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 416.714941][T10324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.721038][T10324] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 416.793645][T10324] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 416.850077][T10324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.877156][T10324] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 416.898498][T10324] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 416.994422][ T5990] usb 6-1: USB disconnect, device number 9 [ 417.145920][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.172434][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.222230][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.241476][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.781903][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 417.791366][T10397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1115'. [ 418.572296][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 418.743347][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 418.749482][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 419.117852][ T5993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.486610][ T5993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.718716][ T5993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.878447][ T5993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.260011][ T5993] bridge_slave_1: left allmulticast mode [ 420.270887][ T5993] bridge_slave_1: left promiscuous mode [ 420.298449][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.335059][ T5993] bridge_slave_0: left allmulticast mode [ 420.357500][ T5993] bridge_slave_0: left promiscuous mode [ 420.371078][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.583371][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 420.845254][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 420.851305][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 421.590792][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.612500][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.627722][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.670542][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.679218][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.909094][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.921649][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.934181][ T5993] bond0 (unregistering): Released all slaves [ 422.903383][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 423.455728][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 423.465034][T10478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1128'. [ 424.263367][ T5821] Bluetooth: hci1: command tx timeout [ 425.212819][ T5993] hsr_slave_0: left promiscuous mode [ 425.237633][ T5993] hsr_slave_1: left promiscuous mode [ 425.264069][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.273349][T10506] trusted_key: encrypted_key: insufficient parameters specified [ 425.291570][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.302110][T10506] openvswitch: netlink: Actions may not be safe on all matching packets [ 425.325322][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.353774][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.407872][ T5993] veth1_macvtap: left promiscuous mode [ 425.433761][ T5993] veth0_macvtap: left promiscuous mode [ 425.442876][ T5993] veth1_vlan: left promiscuous mode [ 425.455341][ T5993] veth0_vlan: left promiscuous mode [ 426.344526][ T5821] Bluetooth: hci1: command tx timeout [ 426.549782][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1136'. [ 426.614784][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1136'. [ 426.666918][T10529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1136'. [ 427.514537][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 427.589090][ T5993] team0 (unregistering): Port device team_slave_0 removed [ 427.840392][T10537] IPVS: length: 231 != 24 [ 428.222918][T10455] chnl_net:caif_netlink_parms(): no params data found [ 428.324718][T10529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1136'. [ 428.462176][ T5821] Bluetooth: hci1: command tx timeout [ 429.989444][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.999261][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.007364][T10455] bridge_slave_0: entered allmulticast mode [ 430.015717][T10455] bridge_slave_0: entered promiscuous mode [ 430.025220][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.032673][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.040828][T10455] bridge_slave_1: entered allmulticast mode [ 430.101365][T10455] bridge_slave_1: entered promiscuous mode [ 430.304173][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.333966][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.583505][ T5821] Bluetooth: hci1: command tx timeout [ 431.310572][T10455] team0: Port device team_slave_0 added [ 431.339962][T10455] team0: Port device team_slave_1 added [ 431.425512][ T30] audit: type=1326 audit(1745851412.708:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10574 comm="syz.5.1149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83e878e969 code=0x0 [ 432.059903][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.099636][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.173326][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.225878][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.236306][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.403267][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.753216][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1153'. [ 433.216795][T10455] hsr_slave_0: entered promiscuous mode [ 433.230184][T10604] netlink: 'syz.4.1155': attribute type 1 has an invalid length. [ 433.263794][T10455] hsr_slave_1: entered promiscuous mode [ 433.274071][T10455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.316051][T10455] Cannot create hsr debugfs directory [ 434.720880][T10611] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 434.868693][T10630] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1160'. [ 435.046026][T10620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.076683][ T5909] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 435.251881][ T8068] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 435.277321][T10604] veth3: entered promiscuous mode [ 435.306248][T10604] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 435.352026][T10632] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 435.410010][T10632] macvlan2: entered allmulticast mode [ 435.432416][T10632] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 435.633968][T10632] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 435.641044][T10632] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 438.512191][T10681] atomic_op ffff8880333ed998 conn xmit_atomic 0000000000000000 [ 439.078669][T10455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.127968][T10455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.265209][T10455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.285424][T10455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 439.724891][T10455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.825446][T10455] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.869167][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.876466][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.925240][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.932518][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.108075][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.120048][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.792096][T10455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.212816][T10455] veth0_vlan: entered promiscuous mode [ 442.266547][T10455] veth1_vlan: entered promiscuous mode [ 442.392181][T10455] veth0_macvtap: entered promiscuous mode [ 442.464249][T10455] veth1_macvtap: entered promiscuous mode [ 442.562270][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.603128][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.643504][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.675663][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.691943][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.714037][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.736685][T10455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.809990][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.842221][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.875192][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.898804][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.923378][T10455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.945756][T10455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.969342][T10455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.034605][T10455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.171978][T10455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.532547][T10455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.589596][T10455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.598298][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.627518][ T5889] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 444.636962][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.720129][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.728830][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.990582][ T5889] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 445.079551][ T5889] usb 6-1: config 0 has no interface number 0 [ 445.112128][ T5889] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.144947][ T5889] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 445.169142][ T5889] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 445.209346][ T5889] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 445.245740][ T5889] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 445.283194][ T5889] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 445.312363][ T5889] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 445.347727][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.397069][ T5889] usb 6-1: config 0 descriptor?? [ 445.416882][T10780] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 445.425484][T10780] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 445.471814][ T5889] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 445.594441][ T6011] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.646084][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.655328][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.680912][T10780] serio: Serial port ptm0 [ 445.828336][ T6011] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.035507][ T6011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.136212][ T6011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.524405][ T6011] bridge_slave_1: left allmulticast mode [ 446.530298][ T6011] bridge_slave_1: left promiscuous mode [ 446.555029][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.585970][ T6011] bridge_slave_0: left allmulticast mode [ 446.591861][ T6011] bridge_slave_0: left promiscuous mode [ 446.599024][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.824758][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 446.833917][T10838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1204'. [ 447.752585][ T5894] usb 6-1: USB disconnect, device number 10 [ 447.833830][ T5894] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 448.308370][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.319830][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.330966][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.346150][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.364539][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.041536][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.072255][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.087780][ T6011] bond0 (unregistering): Released all slaves [ 450.313028][T10880] netlink: 'syz.2.1216': attribute type 2 has an invalid length. [ 450.493606][ T55] Bluetooth: hci1: command tx timeout [ 451.271465][T10903] overlayfs: failed to resolve './cgroup': -2 [ 451.848711][ T6011] hsr_slave_0: left promiscuous mode [ 451.855489][ T6011] hsr_slave_1: left promiscuous mode [ 451.861609][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.878295][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.908856][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.917102][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.574007][ T55] Bluetooth: hci1: command tx timeout [ 453.152779][ T6011] veth1_macvtap: left promiscuous mode [ 453.158712][ T6011] veth0_macvtap: left promiscuous mode [ 453.165270][ T6011] veth1_vlan: left promiscuous mode [ 453.170658][ T6011] veth0_vlan: left promiscuous mode [ 454.151411][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 454.168936][T10954] overlayfs: conflicting options: metacopy=off,verity=require [ 454.220373][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 454.583332][ T55] Bluetooth: hci1: command tx timeout [ 456.664036][ T55] Bluetooth: hci1: command tx timeout [ 456.776705][T10851] chnl_net:caif_netlink_parms(): no params data found [ 457.541280][ T30] audit: type=1326 audit(1745851438.818:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 457.893157][ T30] audit: type=1326 audit(1745851438.818:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 457.939957][ T30] audit: type=1326 audit(1745851438.818:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.015608][ T30] audit: type=1326 audit(2000000000.000:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.198221][ T30] audit: type=1326 audit(2000000000.150:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.229404][ T30] audit: type=1326 audit(2000000000.150:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.229456][ T30] audit: type=1326 audit(2000000000.150:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.229499][ T30] audit: type=1326 audit(2000000000.150:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.229541][ T30] audit: type=1326 audit(2000000000.150:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.229582][ T30] audit: type=1326 audit(2000000000.380:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11006 comm="syz.4.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 458.615139][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.649555][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.649793][T10851] bridge_slave_0: entered allmulticast mode [ 458.685205][T10851] bridge_slave_0: entered promiscuous mode [ 458.698261][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.698378][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.698568][T10851] bridge_slave_1: entered allmulticast mode [ 458.710860][T10851] bridge_slave_1: entered promiscuous mode [ 459.021865][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.082426][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.395566][T11021] tty tty30: ldisc open failed (-12), clearing slot 29 [ 460.051178][T10851] team0: Port device team_slave_0 added [ 460.208104][T10851] team0: Port device team_slave_1 added [ 460.411268][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.419070][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.448993][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.468930][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.476869][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.508962][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.650243][T10851] hsr_slave_0: entered promiscuous mode [ 460.662098][T10851] hsr_slave_1: entered promiscuous mode [ 460.670913][T10851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.680196][T10851] Cannot create hsr debugfs directory [ 463.210493][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1276'. [ 465.550056][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 465.962669][T10851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 465.991582][T10851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.022241][T10851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.069714][T10851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.401186][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.501626][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.547809][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.555039][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.998905][T10851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.075288][T10851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.688818][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.696065][ T8068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.388120][ T5829] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 468.586374][ T5829] usb 6-1: unable to get BOS descriptor or descriptor too short [ 468.725483][ T5829] usb 6-1: not running at top speed; connect to a high speed hub [ 468.904738][ T5829] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 468.962378][T10851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.070534][T10851] veth0_vlan: entered promiscuous mode [ 469.083803][T10851] veth1_vlan: entered promiscuous mode [ 469.148242][ T5829] usb 6-1: config 0 has no interface number 0 [ 469.162079][ T5829] usb 6-1: config 0 interface 93 has no altsetting 0 [ 469.193355][ T5829] usb 6-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 469.202487][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.252355][ T5829] usb 6-1: Product: syz [ 469.254959][T10851] veth0_macvtap: entered promiscuous mode [ 469.262324][ T5829] usb 6-1: Manufacturer: syz [ 469.279098][ T5829] usb 6-1: SerialNumber: syz [ 469.297090][T10851] veth1_macvtap: entered promiscuous mode [ 469.315058][ T5829] usb 6-1: config 0 descriptor?? [ 469.367765][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.394899][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.418011][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.441496][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.473386][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.510510][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.539667][T10851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.565876][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.625199][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.646492][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.681191][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.692861][T10851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.711760][T10851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.754267][T10851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.850320][T10851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.881651][T10851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.908158][ T5829] usb 6-1: unknown interface protocol 0x1a, assuming v1 [ 469.932352][ T5829] usb 6-1: cannot find UAC_HEADER [ 469.942138][T10851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.987509][T10851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.017702][ T5829] snd-usb-audio 6-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 470.091617][ T5829] usb 6-1: USB disconnect, device number 11 [ 470.313726][T10621] udevd[10621]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.93/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.339546][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.423413][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.612555][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.658689][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.105023][ T5865] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 471.318800][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 471.328770][ T5865] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 471.349810][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.374602][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.414428][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.435374][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.471504][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.515480][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.554573][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.579449][ T8068] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.600607][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.626380][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.649061][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.672744][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.704721][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.722817][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.743753][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.776225][ T5865] usb 6-1: config 0 has too many interfaces: 160, using maximum allowed: 32 [ 471.792562][ T5865] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 160 [ 471.809707][ T8068] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.829681][ T5865] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.860133][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.892276][ T5865] usb 6-1: config 0 descriptor?? [ 471.987380][ T8068] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.211489][ T8068] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.371155][T11251] 9pnet_fd: Insufficient options for proto=fd [ 472.442903][ T30] audit: type=1326 audit(2000000014.890:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11248 comm="syz.5.1306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83e878e969 code=0x0 [ 472.879157][ T30] audit: type=1326 audit(2000000015.330:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11294 comm="syz.0.1314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f9658e969 code=0x0 [ 473.159968][ T8068] bridge_slave_1: left allmulticast mode [ 473.175610][ T8068] bridge_slave_1: left promiscuous mode [ 473.197074][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.230578][ T8068] bridge_slave_0: left allmulticast mode [ 473.251505][ T8068] bridge_slave_0: left promiscuous mode [ 473.270594][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.753643][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.766441][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.790821][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.800451][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.821199][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 474.114700][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'. [ 474.124224][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1315'. [ 475.869534][ T55] Bluetooth: hci1: command tx timeout [ 476.308071][ T8068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.478110][ T8068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.522205][ T8068] bond0 (unregistering): Released all slaves [ 476.565177][T11346] 9pnet_fd: Insufficient options for proto=fd [ 476.719968][ T5865] usb 6-1: USB disconnect, device number 12 [ 477.944205][ T55] Bluetooth: hci1: command tx timeout [ 478.672993][ T8068] hsr_slave_0: left promiscuous mode [ 478.698263][ T8068] hsr_slave_1: left promiscuous mode [ 478.706800][ T8068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.718237][ T8068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.753442][ T8068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.783503][ T8068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.906288][ T8068] veth1_macvtap: left promiscuous mode [ 478.930489][ T8068] veth0_macvtap: left promiscuous mode [ 478.948549][ T8068] veth1_vlan: left promiscuous mode [ 478.973391][ T8068] veth0_vlan: left promiscuous mode [ 480.024458][ T55] Bluetooth: hci1: command tx timeout [ 481.157575][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 482.104527][ T55] Bluetooth: hci1: command tx timeout [ 482.640202][ T8068] team0 (unregistering): Port device team_slave_1 removed [ 482.715115][ T8068] team0 (unregistering): Port device team_slave_0 removed [ 483.209073][T11382] netlink: 'syz.2.1333': attribute type 6 has an invalid length. [ 483.289921][T11311] chnl_net:caif_netlink_parms(): no params data found [ 485.677343][T11461] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 485.685868][T11461] netlink: 'syz.0.1345': attribute type 2 has an invalid length. [ 485.694310][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 485.823848][T11464] overlay: Unknown parameter 'Zz-#FÇ<æõ]%gCžÊ [ 485.823848][T11464] SÃȘØÈžZ§6ŸÂ' [ 485.921281][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.964277][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.981859][T11311] bridge_slave_0: entered allmulticast mode [ 486.025036][T11311] bridge_slave_0: entered promiscuous mode [ 486.052578][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.097613][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.109478][T11311] bridge_slave_1: entered allmulticast mode [ 486.118166][T11311] bridge_slave_1: entered promiscuous mode [ 486.203184][ T5865] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 486.373340][T11473] 9pnet: Could not find request transport: fÝÌ̳·Õd™s÷VÜÆ{‚i·}/“ [ 486.434779][T11311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.460265][T11311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.153195][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 487.263130][ T5865] usb 6-1: config 3 has an invalid interface number: 155 but max is 0 [ 487.279083][ T5865] usb 6-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 487.317612][ T5865] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 487.359328][ T5865] usb 6-1: config 3 has no interface number 0 [ 487.372866][T11311] team0: Port device team_slave_0 added [ 487.376162][ T5865] usb 6-1: config 3 interface 155 has no altsetting 0 [ 487.413164][T11311] team0: Port device team_slave_1 added [ 487.421741][ T5865] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 487.458884][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.483480][ T5865] usb 6-1: Product: syz [ 487.498222][ T5865] usb 6-1: Manufacturer: syz [ 487.502989][ T5865] usb 6-1: SerialNumber: syz [ 487.610370][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.675952][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.728093][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.777896][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.832324][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.921025][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.926447][ T5865] usb 6-1: USB disconnect, device number 13 [ 488.177490][T11311] hsr_slave_0: entered promiscuous mode [ 488.199430][T11311] hsr_slave_1: entered promiscuous mode [ 488.206268][T11311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.214329][T11311] Cannot create hsr debugfs directory [ 490.070551][T11531] netlink: 'syz.0.1358': attribute type 10 has an invalid length. [ 490.099461][T11531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1358'. [ 490.116120][T11531] dummy0: entered promiscuous mode [ 490.126452][T11531] bridge0: port 1(dummy0) entered blocking state [ 490.135303][T11531] bridge0: port 1(dummy0) entered disabled state [ 490.141944][T11531] dummy0: entered allmulticast mode [ 490.709197][T11539] syzkaller0: entered allmulticast mode [ 490.725874][T11547] syzkaller0 (unregistering): left allmulticast mode [ 490.955596][T11311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 490.985008][T11311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.046059][T11311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.072265][T11311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 492.687699][T11311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.821924][T11311] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.904641][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.911838][ T8067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.005982][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.013280][ T8067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.209816][T11587] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 494.565264][T11609] veth0_vlan: entered allmulticast mode [ 494.597774][T11609] veth0_vlan: left promiscuous mode [ 494.605238][T11609] veth0_vlan: entered promiscuous mode [ 494.722951][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1377'. [ 494.796107][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.635660][T11311] veth0_vlan: entered promiscuous mode [ 495.786984][T11311] veth1_vlan: entered promiscuous mode [ 495.850484][T11311] veth0_macvtap: entered promiscuous mode [ 496.911347][T11634] netlink: 212084 bytes leftover after parsing attributes in process `syz.2.1380'. [ 497.075959][T11311] veth1_macvtap: entered promiscuous mode [ 497.206421][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.278521][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.309737][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.321453][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.335970][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.349145][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.429294][T11311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.612077][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.666174][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.689608][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.722471][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.765967][T11311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.786152][T11311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.818131][T11311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.895354][T11311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.922550][T11311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.955322][T11311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.983830][T11311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.557112][T11670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1388'. [ 498.574718][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.593481][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.609621][T11673] bad cache= option: none¦þ=Ž. [ 498.609621][T11673] èíƒ%<¨§Ò‚ågí [ 498.609621][T11673] [ 498.643390][T11673] CIFS: VFS: bad cache= option: none¦þ=Ž. [ 498.643390][T11673] èíƒ%<¨§Ò‚ågí [ 498.705707][ T8067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.715213][ T8067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.837852][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 499.043341][ T5894] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 499.133319][T11687] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1392'. [ 499.251991][ T8067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.274323][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.305253][ T5894] usb 6-1: config 0 has no interfaces? [ 499.329381][ T5894] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 499.359896][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.391957][ T5894] usb 6-1: config 0 descriptor?? [ 499.441253][ T8067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.556280][ T8067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.704964][ T8067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.972171][ T8067] bridge_slave_1: left allmulticast mode [ 499.983268][ T8067] bridge_slave_1: left promiscuous mode [ 499.991918][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.039183][ T8067] bridge_slave_0: left allmulticast mode [ 500.053149][ T8067] bridge_slave_0: left promiscuous mode [ 500.059049][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.641163][ T8067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.690213][ T8067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.855739][ T8067] bond0 (unregistering): Released all slaves [ 500.914796][T11699] overlayfs: failed to clone upperpath [ 501.614845][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.623506][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.672125][ T8067] hsr_slave_0: left promiscuous mode [ 501.718376][ T8067] hsr_slave_1: left promiscuous mode [ 501.756125][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.801750][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.809622][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.818790][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.828570][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.836969][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.847111][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.854976][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.864755][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.896924][ T8067] veth1_macvtap: left promiscuous mode [ 501.902612][ T8067] veth0_macvtap: left promiscuous mode [ 501.908387][ T8067] veth1_vlan: left promiscuous mode [ 501.917143][ T8067] veth0_vlan: left promiscuous mode [ 502.126904][T11716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1400'. [ 502.191657][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1400'. [ 502.580279][ T8067] team0 (unregistering): Port device team_slave_1 removed [ 502.627459][ T8067] team0 (unregistering): Port device team_slave_0 removed [ 503.087594][ T5865] usb 6-1: USB disconnect, device number 14 [ 503.107377][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 503.483284][ T5865] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 503.697348][ T5865] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 503.790148][ T5865] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 503.877922][ T5865] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 503.953589][ T55] Bluetooth: hci1: command tx timeout [ 504.015937][ T5865] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 504.082391][ T5865] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 504.215374][ T5865] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.238551][T11707] chnl_net:caif_netlink_parms(): no params data found [ 504.263338][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 504.271427][ T5865] usb 6-1: SerialNumber: syz [ 504.413382][T11723] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 504.513836][T11723] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 504.542863][ T5865] usb 6-1: bad CDC descriptors [ 504.752627][T11724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.775744][T11724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.858919][ T47] usb 6-1: USB disconnect, device number 15 [ 504.960273][T11806] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 504.966852][T11806] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 504.970244][T11707] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.981845][T11806] vhci_hcd vhci_hcd.0: Device attached [ 505.014400][T11707] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.025856][T11707] bridge_slave_0: entered allmulticast mode [ 505.037876][T11707] bridge_slave_0: entered promiscuous mode [ 505.047728][T11707] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.047779][T11807] vhci_hcd: connection closed [ 505.055051][T11707] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.079817][ T5993] vhci_hcd: stop threads [ 505.083362][T11707] bridge_slave_1: entered allmulticast mode [ 505.090708][ T5993] vhci_hcd: release socket [ 505.097207][T11707] bridge_slave_1: entered promiscuous mode [ 505.103549][ T5993] vhci_hcd: disconnect device [ 505.178489][T11707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.205879][T11707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.272254][T11707] team0: Port device team_slave_0 added [ 505.289017][T11707] team0: Port device team_slave_1 added [ 505.559111][T11707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.566775][T11707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.599769][T11707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.612781][T11707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.619865][T11707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.693254][T11707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.840767][T11707] hsr_slave_0: entered promiscuous mode [ 505.854182][T11707] hsr_slave_1: entered promiscuous mode [ 505.861499][T11707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.869732][T11707] Cannot create hsr debugfs directory [ 505.991347][ T30] audit: type=1326 audit(2000000048.440:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.023431][ T55] Bluetooth: hci1: command tx timeout [ 506.065848][ T30] audit: type=1326 audit(2000000048.440:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.156630][ T30] audit: type=1326 audit(2000000048.440:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.223183][ T30] audit: type=1326 audit(2000000048.440:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.293235][ T30] audit: type=1326 audit(2000000048.440:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.363124][ T30] audit: type=1326 audit(2000000048.440:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.443243][ T30] audit: type=1326 audit(2000000048.440:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.517327][ T30] audit: type=1326 audit(2000000048.710:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 506.581260][T11845] overlayfs: failed to resolve './file0': -2 [ 506.593118][ T30] audit: type=1326 audit(2000000048.710:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11836 comm="syz.0.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9658e969 code=0x7ffc0000 [ 507.239881][T11707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.307315][T11707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.328511][T11707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.412391][T11707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 507.582387][T11866] overlayfs: failed to resolve './cgroup': -2 [ 507.945773][T11707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.989756][T11707] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.026925][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.034208][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.113148][ T55] Bluetooth: hci1: command tx timeout [ 508.532606][T11869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.554454][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.561669][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.107512][T11707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.658413][T11883] netlink: 212084 bytes leftover after parsing attributes in process `syz.5.1437'. [ 509.972413][T11707] veth0_vlan: entered promiscuous mode [ 510.036841][T11707] veth1_vlan: entered promiscuous mode [ 510.181648][T11707] veth0_macvtap: entered promiscuous mode [ 510.191233][ T55] Bluetooth: hci1: command tx timeout [ 510.211427][T11707] veth1_macvtap: entered promiscuous mode [ 510.275807][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.292053][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.307370][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.318791][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.335070][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.345829][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.428063][T11707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.458223][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.471923][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.489614][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.505859][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.517701][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.530732][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.545255][T11707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.567983][T11707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.579817][T11707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.589319][T11707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.599599][T11707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.726650][ T8067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.741368][ T8067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.865750][ T8067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.887252][ T8067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.026459][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1448'. [ 511.057807][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1448'. [ 511.639520][T11943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1457'. [ 512.972292][ T5873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.089035][ T5873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.606036][ T5873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.679949][ T5873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.779043][ T5873] bridge_slave_1: left allmulticast mode [ 513.785016][ T5873] bridge_slave_1: left promiscuous mode [ 513.790789][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.800018][ T5873] bridge_slave_0: left allmulticast mode [ 513.806214][ T5873] bridge_slave_0: left promiscuous mode [ 513.811939][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.107195][ T30] audit: type=1326 audit(2000000056.560:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e878e969 code=0x7ffc0000 [ 514.137882][ T30] audit: type=1326 audit(2000000056.560:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f83e878e969 code=0x7ffc0000 [ 514.186123][ T30] audit: type=1326 audit(2000000056.560:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e878e969 code=0x7ffc0000 [ 514.211283][ T30] audit: type=1326 audit(2000000056.560:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f83e878e969 code=0x7ffc0000 [ 514.236003][ T30] audit: type=1326 audit(2000000056.560:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e878e969 code=0x7ffc0000 [ 514.262482][ T30] audit: type=1326 audit(2000000056.560:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11966 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f83e878e969 code=0x7ffc0000 [ 514.438604][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.451813][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.462985][ T5873] bond0 (unregistering): Released all slaves [ 514.501217][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.518108][T11968] ipvlan2: entered promiscuous mode [ 514.531288][T11968] ipvlan2: entered allmulticast mode [ 514.545405][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.545462][T11968] macvlan0: entered allmulticast mode [ 514.559185][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.574579][T11968] veth1_vlan: entered allmulticast mode [ 514.580464][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.597656][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.026528][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 515.038246][ T5873] hsr_slave_0: left promiscuous mode [ 515.050600][ T5873] hsr_slave_1: left promiscuous mode [ 515.057128][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.065277][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.073585][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.081064][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.089444][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 515.104703][T11988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1471'. [ 515.110746][ T5873] veth1_macvtap: left promiscuous mode [ 515.119571][ T5873] veth0_macvtap: left promiscuous mode [ 515.125370][ T5873] veth1_vlan: left promiscuous mode [ 515.130928][ T5873] veth0_vlan: left promiscuous mode [ 516.156589][ T5873] team0 (unregistering): Port device team_slave_1 removed [ 516.206934][ T5873] team0 (unregistering): Port device team_slave_0 removed [ 516.663365][ T5821] Bluetooth: hci1: command tx timeout [ 516.782328][T12001] 9pnet: p9_errstr2errno: server reported unknown error ¡¤@ [ 517.448991][T11975] chnl_net:caif_netlink_parms(): no params data found [ 517.709664][T11975] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.727324][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.737056][T11975] bridge_slave_0: entered allmulticast mode [ 517.746893][T11975] bridge_slave_0: entered promiscuous mode [ 517.756840][T11975] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.771958][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.786569][T11975] bridge_slave_1: entered allmulticast mode [ 517.804225][T11975] bridge_slave_1: entered promiscuous mode [ 517.898229][T11975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.928141][T11975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.995766][T11975] team0: Port device team_slave_0 added [ 518.006988][T11975] team0: Port device team_slave_1 added [ 518.077834][T11975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.085843][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.119822][T11975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.137373][T11975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.144707][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.175338][T11975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.287694][T11975] hsr_slave_0: entered promiscuous mode [ 518.299687][T11975] hsr_slave_1: entered promiscuous mode [ 518.307644][T11975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.315625][T11975] Cannot create hsr debugfs directory [ 518.468702][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.479648][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.489244][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.500221][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.508338][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.743349][ T5821] Bluetooth: hci1: command tx timeout [ 519.082607][ T30] audit: type=1326 audit(2000000061.530:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.104511][ T30] audit: type=1326 audit(2000000061.560:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.127646][ T30] audit: type=1326 audit(2000000061.560:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.152727][ T30] audit: type=1326 audit(2000000061.560:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.185825][ T30] audit: type=1326 audit(2000000061.560:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.209586][ T30] audit: type=1326 audit(2000000061.560:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.231427][ T30] audit: type=1326 audit(2000000061.560:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.257018][ T30] audit: type=1326 audit(2000000061.560:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.627177][T12026] chnl_net:caif_netlink_parms(): no params data found [ 519.670911][ T30] audit: type=1326 audit(2000000062.120:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 519.727248][ T30] audit: type=1326 audit(2000000062.120:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 520.047793][T11975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.088156][T11975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.109186][T12026] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.117865][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.125700][T12026] bridge_slave_0: entered allmulticast mode [ 520.134212][T12026] bridge_slave_0: entered promiscuous mode [ 520.154524][T11975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.173643][T12026] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.182638][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.191942][T12026] bridge_slave_1: entered allmulticast mode [ 520.200114][T12026] bridge_slave_1: entered promiscuous mode [ 520.234127][T11975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.285518][T12026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.306074][T12026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.374912][T12026] team0: Port device team_slave_0 added [ 520.388140][T12026] team0: Port device team_slave_1 added [ 520.457361][T12026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.465520][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.494474][T12026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.520696][T12026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.530039][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.559229][T12026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.583761][ T5821] Bluetooth: hci2: command tx timeout [ 520.686838][T12026] hsr_slave_0: entered promiscuous mode [ 520.699045][T12026] hsr_slave_1: entered promiscuous mode [ 520.707173][T12026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.720113][T12026] Cannot create hsr debugfs directory [ 520.823769][ T5821] Bluetooth: hci1: command tx timeout [ 521.015348][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1499'. [ 521.048871][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 521.061142][T12081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1499'. [ 521.072775][T11975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.252621][T11975] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.285496][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.292715][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.384061][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.391216][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.419127][ T30] audit: type=1326 audit(2000000063.870:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12088 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0f8e969 code=0x7ffc0000 [ 521.487195][ T30] audit: type=1326 audit(2000000063.870:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12088 comm="syz.2.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d0f8e969 code=0x7ffc0000 [ 521.640606][T12026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 521.686862][T12026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 521.737624][T12026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 521.785233][T12026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.181075][T12026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.225888][T11975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.310138][T12026] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.352028][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.359304][ T8070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.475208][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.482431][ T8070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.634975][T11975] veth0_vlan: entered promiscuous mode [ 522.673476][ T5821] Bluetooth: hci2: command tx timeout [ 522.731744][T11975] veth1_vlan: entered promiscuous mode [ 522.889065][T11975] veth0_macvtap: entered promiscuous mode [ 522.903483][ T5821] Bluetooth: hci1: command tx timeout [ 523.000565][T11975] veth1_macvtap: entered promiscuous mode [ 524.017576][T11975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.063314][T11975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.103324][T11975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.125820][T11975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.145398][T11975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.167445][T11975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.193236][T11975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.254683][T11975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.286052][T11975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.316229][T11975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.357198][T11975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.396763][T11975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.430753][T11975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.582123][T11975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.659521][T12026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.677486][T12130] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Q0x0000000000000008 [ 524.710868][T11975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.743532][ T5821] Bluetooth: hci2: command tx timeout [ 524.755796][T11975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.783342][T11975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.794969][T11975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.099781][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.152212][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.300621][ T8067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.320984][ T8067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.820739][T12026] veth0_vlan: entered promiscuous mode [ 526.104671][T12026] veth1_vlan: entered promiscuous mode [ 526.232444][T12026] veth0_macvtap: entered promiscuous mode [ 526.350885][T12026] veth1_macvtap: entered promiscuous mode [ 526.426563][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.452353][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.473153][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.507443][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.517542][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.543082][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.558915][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.569914][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.586817][T12026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.608904][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.622832][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.638303][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.650812][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.661908][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.673066][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.682909][T12026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.693894][T12026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.705969][T12026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.718359][T12026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.728819][T12026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.742570][T12026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.754238][T12026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.797779][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.823206][ T5821] Bluetooth: hci2: command tx timeout [ 526.880646][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.918417][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.927961][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.962151][ T8067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.970925][ T8067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.990689][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.054138][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.197348][ T13] bridge_slave_1: left allmulticast mode [ 527.203243][ T13] bridge_slave_1: left promiscuous mode [ 527.210352][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.219801][ T13] bridge_slave_0: left allmulticast mode [ 527.227786][ T13] bridge_slave_0: left promiscuous mode [ 527.233594][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.686235][T12169] fuse: Bad value for 'group_id' [ 527.723177][T12169] fuse: Bad value for 'group_id' [ 528.162029][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.185535][T12184] Smack: duplicate mount options [ 528.227727][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.262877][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.281700][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.303583][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 528.351048][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.402345][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.421956][ T13] bond0 (unregistering): Released all slaves [ 530.312961][ T13] hsr_slave_0: left promiscuous mode [ 530.352470][ T13] hsr_slave_1: left promiscuous mode [ 530.377927][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.399282][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.420204][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.429215][ T55] Bluetooth: hci1: command tx timeout [ 530.431212][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.484413][ T13] veth1_macvtap: left promiscuous mode [ 530.671267][ T13] veth0_macvtap: left promiscuous mode [ 530.687135][ T13] veth1_vlan: left promiscuous mode [ 530.692544][ T13] veth0_vlan: left promiscuous mode [ 532.503700][ T55] Bluetooth: hci1: command tx timeout [ 533.825322][T12245] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 533.832524][T12245] PKCS7: Only support pkcs7_signedData type [ 533.972616][ T13] team0 (unregistering): Port device team_slave_1 removed [ 534.032167][ T13] team0 (unregistering): Port device team_slave_0 removed [ 534.587726][ T55] Bluetooth: hci1: command tx timeout [ 535.530730][T12182] chnl_net:caif_netlink_parms(): no params data found [ 535.630581][T12268] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1552'. [ 535.844713][T12267] netlink: 212084 bytes leftover after parsing attributes in process `syz.4.1555'. [ 536.289243][T12277] netlink: 'syz.6.1556': attribute type 32 has an invalid length. [ 536.298515][T12182] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.308709][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.317780][T12182] bridge_slave_0: entered allmulticast mode [ 536.339872][T12182] bridge_slave_0: entered promiscuous mode [ 536.422042][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.442138][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.459981][T12182] bridge_slave_1: entered allmulticast mode [ 536.475817][T12182] bridge_slave_1: entered promiscuous mode [ 536.665375][ T55] Bluetooth: hci1: command tx timeout [ 537.120487][T12182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.158813][T12182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.247336][T12182] team0: Port device team_slave_0 added [ 537.339347][T12182] team0: Port device team_slave_1 added [ 537.507867][T12182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.508187][T12297] 9pnet_fd: Insufficient options for proto=fd [ 537.529276][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.555849][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.600313][T12182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.616625][T12182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.093944][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.126239][T12182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.468609][T12325] ntfs3: Unknown parameter 'discardd/pcmC#D#p' [ 539.653920][T12182] hsr_slave_0: entered promiscuous mode [ 539.675437][T12182] hsr_slave_1: entered promiscuous mode [ 539.682110][T12182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.693236][T12182] Cannot create hsr debugfs directory [ 540.874023][T12182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.894370][T12182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.915699][T12182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.935677][T12182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 541.236853][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.294831][T12182] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.406513][T12182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.427157][T12182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.648110][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.655358][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.732481][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.739731][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.881592][T12342] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1573'. [ 542.588932][T12182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.629380][T12353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1576'. [ 542.821506][T12182] veth0_vlan: entered promiscuous mode [ 542.860189][T12182] veth1_vlan: entered promiscuous mode [ 542.879252][T12360] trusted_key: encrypted_key: insufficient parameters specified [ 542.932829][T12182] veth0_macvtap: entered promiscuous mode [ 542.969753][T12182] veth1_macvtap: entered promiscuous mode [ 543.020894][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.048174][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.070483][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.089917][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.112124][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.133082][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.163244][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.186638][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.214647][T12182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.246916][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.264412][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.283620][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.300193][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.305208][ T5863] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 543.311860][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.338699][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.352233][T12182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.367303][T12182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.381147][T12182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.417585][T12182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.567730][T12182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.672978][T12182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.803821][T12182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.953275][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 543.960713][ T5863] usb 7-1: config index 0 descriptor too short (expected 17170, got 18) [ 543.978216][ T5863] usb 7-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 544.017780][ T5863] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 544.135826][ T5863] usb 7-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 544.152749][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.163582][ T5863] usb 7-1: Product: syz [ 544.168397][ T5863] usb 7-1: Manufacturer: syz [ 544.173264][ T5863] usb 7-1: SerialNumber: syz [ 544.181077][ T5863] usb 7-1: config 0 descriptor?? [ 544.202301][ T5863] ums-freecom 7-1:0.0: USB Mass Storage device detected [ 544.356095][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.372599][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.405311][T12360] xt_hashlimit: size too large, truncated to 1048576 [ 544.462499][ T8067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.542473][ T8067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.921119][T12392] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 545.041396][T12394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1589'. [ 545.759050][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.822654][ T5863] usb 7-1: USB disconnect, device number 2 [ 545.999173][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.066070][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.151774][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.257356][ T13] bridge_slave_1: left allmulticast mode [ 546.263189][ T13] bridge_slave_1: left promiscuous mode [ 546.268915][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.278005][ T13] bridge_slave_0: left allmulticast mode [ 546.283995][ T13] bridge_slave_0: left promiscuous mode [ 546.289703][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.640850][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.659949][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.670927][ T13] bond0 (unregistering): Released all slaves [ 546.910933][ T13] hsr_slave_0: left promiscuous mode [ 546.917880][ T13] hsr_slave_1: left promiscuous mode [ 546.924562][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.932465][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.942695][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.950729][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.971232][ T13] veth1_macvtap: left promiscuous mode [ 546.977052][ T13] veth0_macvtap: left promiscuous mode [ 546.982712][ T13] veth1_vlan: left promiscuous mode [ 546.988380][ T13] veth0_vlan: left promiscuous mode [ 549.432252][T12429] 9pnet_fd: Insufficient options for proto=fd [ 549.594573][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.605225][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.613874][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 549.622129][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 549.630470][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 549.813625][T12438] FAULT_INJECTION: forcing a failure. [ 549.813625][T12438] name failslab, interval 1, probability 0, space 0, times 0 [ 549.827172][T12438] CPU: 1 UID: 0 PID: 12438 Comm: syz.6.1600 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 549.827196][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 549.827206][T12438] Call Trace: [ 549.827212][T12438] [ 549.827218][T12438] dump_stack_lvl+0x189/0x250 [ 549.827245][T12438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.827265][T12438] ? __pfx__printk+0x10/0x10 [ 549.827292][T12438] ? __pfx___might_resched+0x10/0x10 [ 549.827317][T12438] should_fail_ex+0x414/0x560 [ 549.827343][T12438] should_failslab+0xa8/0x100 [ 549.827366][T12438] __kmalloc_noprof+0xcb/0x4f0 [ 549.827387][T12438] ? ovl_lookup_index+0xdd/0x6d0 [ 549.827411][T12438] ovl_lookup_index+0xdd/0x6d0 [ 549.827437][T12438] ovl_lookup+0x1318/0x1cd0 [ 549.827482][T12438] ? __pfx_ovl_lookup+0x10/0x10 [ 549.827503][T12438] ? __lock_acquire+0xaac/0xd20 [ 549.827522][T12438] ? __pfx_d_alloc_parallel+0x10/0x10 [ 549.827543][T12438] ? __raw_spin_lock_init+0x45/0x100 [ 549.827560][T12438] ? __init_waitqueue_head+0xa9/0x150 [ 549.827580][T12438] __lookup_slow+0x294/0x3d0 [ 549.827598][T12438] ? __pfx___lookup_slow+0x10/0x10 [ 549.827618][T12438] ? leave_rcu+0xef/0x160 [ 549.827637][T12438] ? down_read+0x1ad/0x2e0 [ 549.827656][T12438] lookup_slow+0x53/0x70 [ 549.827672][T12438] link_path_walk+0x925/0xe50 [ 549.827707][T12438] __filename_parentat+0x246/0x670 [ 549.827722][T12438] ? kasan_save_track+0x4f/0x80 [ 549.827746][T12438] ? __pfx___filename_parentat+0x10/0x10 [ 549.827782][T12438] ? __might_fault+0xb0/0x130 [ 549.827816][T12438] do_rmdir+0xcc/0x630 [ 549.827837][T12438] ? __pfx_do_rmdir+0x10/0x10 [ 549.827856][T12438] ? strncpy_from_user+0x150/0x290 [ 549.827886][T12438] ? getname_flags+0x1e5/0x540 [ 549.827902][T12438] __x64_sys_rmdir+0x47/0x50 [ 549.827920][T12438] do_syscall_64+0xf6/0x210 [ 549.827936][T12438] ? clear_bhb_loop+0x45/0xa0 [ 549.827954][T12438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.827968][T12438] RIP: 0033:0x7f93d398e969 [ 549.827981][T12438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.827993][T12438] RSP: 002b:00007f93d482a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 549.828009][T12438] RAX: ffffffffffffffda RBX: 00007f93d3bb6160 RCX: 00007f93d398e969 [ 549.828019][T12438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 549.828028][T12438] RBP: 00007f93d482a090 R08: 0000000000000000 R09: 0000000000000000 [ 549.828037][T12438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.828045][T12438] R13: 0000000000000000 R14: 00007f93d3bb6160 R15: 00007fffe7bb3c38 [ 549.828068][T12438] [ 550.279159][ T13] team0 (unregistering): Port device team_slave_1 removed [ 550.329367][ T13] team0 (unregistering): Port device team_slave_0 removed [ 551.073246][T12432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1601'. [ 551.699700][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 551.710124][T12461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.244423][ T5821] Bluetooth: hci1: command tx timeout [ 552.351213][T12434] chnl_net:caif_netlink_parms(): no params data found [ 553.214734][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 553.269424][T12434] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.285715][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.301653][T12434] bridge_slave_0: entered allmulticast mode [ 553.324560][T12434] bridge_slave_0: entered promiscuous mode [ 553.348813][T12434] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.364864][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.380839][T12434] bridge_slave_1: entered allmulticast mode [ 553.402350][T12434] bridge_slave_1: entered promiscuous mode [ 554.333433][ T5821] Bluetooth: hci1: command tx timeout [ 554.610167][T12434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.639688][T12488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1614'. [ 555.711868][T12434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.808040][T12434] team0: Port device team_slave_0 added [ 555.831702][T12434] team0: Port device team_slave_1 added [ 555.932042][T12434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.944247][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.999360][T12434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.014297][T12434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.022268][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.049178][T12434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.355278][ T5821] Bluetooth: hci1: command tx timeout [ 556.972991][T12434] hsr_slave_0: entered promiscuous mode [ 556.994884][T12434] hsr_slave_1: entered promiscuous mode [ 557.013280][T12434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.032409][T12434] Cannot create hsr debugfs directory [ 558.423150][ T5821] Bluetooth: hci1: command tx timeout [ 558.510321][T12531] tmpfs: Bad value for 'mpol' [ 558.803938][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1626'. [ 558.949000][T12535] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1627'. [ 559.094661][T12434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 559.125441][T12434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 559.150961][T12434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 559.179759][T12434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 559.571170][T12434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.643488][T12434] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.666773][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.674028][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.737304][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.744583][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.801508][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1638'. [ 560.922022][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.985498][T12434] veth0_vlan: entered promiscuous mode [ 560.998402][T12434] veth1_vlan: entered promiscuous mode [ 561.060891][T12434] veth0_macvtap: entered promiscuous mode [ 561.089136][T12434] veth1_macvtap: entered promiscuous mode [ 561.128637][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.143463][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.161387][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.173053][T12583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 561.182499][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.195813][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.222871][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 561.222892][ T30] audit: type=1326 audit(2000000103.660:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.256190][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.266969][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.278655][ T30] audit: type=1326 audit(2000000103.660:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.300429][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.313544][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.321032][ T30] audit: type=1326 audit(2000000103.660:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.431060][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.449881][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.462884][ T30] audit: type=1326 audit(2000000103.660:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.483301][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.485841][ T30] audit: type=1326 audit(2000000103.660:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.495652][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.547530][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.561068][T12587] IPv6: addrconf: prefix option has invalid lifetime [ 561.561739][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.586745][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.586774][ T30] audit: type=1326 audit(2000000103.660:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.598392][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.673113][ T30] audit: type=1326 audit(2000000103.660:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.700730][T12434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.728875][T12434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.762647][T12434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.773188][T12434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.782401][ T30] audit: type=1326 audit(2000000103.660:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 561.788049][T12434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.038213][ T30] audit: type=1326 audit(2000000103.660:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 562.060253][ T30] audit: type=1326 audit(2000000103.660:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12582 comm="syz.6.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93d398e969 code=0x7ffc0000 [ 562.827423][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.835765][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.956300][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.976267][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.993974][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.000344][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.579635][T12625] overlayfs: missing 'lowerdir' [ 564.596554][T12625] overlayfs: failed to clone upperpath [ 564.657984][ T8067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.971155][ T8067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.085899][ T8067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.154041][ T8067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.270998][ T8067] bridge_slave_1: left allmulticast mode [ 565.277021][ T8067] bridge_slave_1: left promiscuous mode [ 565.282751][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.292971][ T8067] bridge_slave_0: left allmulticast mode [ 565.298936][ T8067] bridge_slave_0: left promiscuous mode [ 565.304829][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.700080][ T8067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.712343][ T8067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.722775][ T8067] bond0 (unregistering): Released all slaves [ 565.942409][ T8067] hsr_slave_0: left promiscuous mode [ 565.951058][ T8067] hsr_slave_1: left promiscuous mode [ 565.957717][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.965209][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.973196][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.981232][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.002748][ T8067] veth1_macvtap: left promiscuous mode [ 566.008669][ T8067] veth0_macvtap: left promiscuous mode [ 566.014420][ T8067] veth1_vlan: left promiscuous mode [ 566.019942][ T8067] veth0_vlan: left promiscuous mode [ 567.160866][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 567.175484][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 567.215862][T12655] IPVS: set_ctl: invalid protocol: 65532 0.0.0.0:0 [ 567.222647][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 567.231587][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 567.240441][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.530460][ T8067] team0 (unregistering): Port device team_slave_1 removed [ 568.587109][ T8067] team0 (unregistering): Port device team_slave_0 removed [ 569.311822][ T5821] Bluetooth: hci1: command tx timeout [ 571.408197][ T5821] Bluetooth: hci1: command tx timeout [ 573.172115][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 573.172132][ T30] audit: type=1326 audit(2000000115.560:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 573.269749][ T30] audit: type=1326 audit(2000000115.560:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 573.295901][ T30] audit: type=1326 audit(2000000115.560:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 573.383047][ T30] audit: type=1326 audit(2000000115.570:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 573.405991][ T30] audit: type=1326 audit(2000000115.570:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 573.428172][ T30] audit: type=1326 audit(2000000115.610:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 573.449954][ T30] audit: type=1800 audit(2000000115.610:205): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1680" name="nullb0" dev="tmpfs" ino=862 res=0 errno=0 [ 573.472623][ T5821] Bluetooth: hci1: command tx timeout [ 573.513183][ T30] audit: type=1326 audit(2000000115.610:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 573.584782][ T30] audit: type=1326 audit(2000000115.610:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 574.228828][ T30] audit: type=1326 audit(2000000115.610:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12722 comm="syz.4.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e398e969 code=0x7ffc0000 [ 574.271399][T12657] chnl_net:caif_netlink_parms(): no params data found [ 574.680509][T12657] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.690229][T12759] FAULT_INJECTION: forcing a failure. [ 574.690229][T12759] name failslab, interval 1, probability 0, space 0, times 0 [ 574.705101][T12657] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.712402][T12657] bridge_slave_0: entered allmulticast mode [ 574.719901][T12759] CPU: 0 UID: 0 PID: 12759 Comm: syz.6.1688 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 574.719929][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 574.719942][T12759] Call Trace: [ 574.719951][T12759] [ 574.719959][T12759] dump_stack_lvl+0x189/0x250 [ 574.719995][T12759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.720022][T12759] ? __pfx__printk+0x10/0x10 [ 574.720061][T12759] ? ref_tracker_alloc+0x318/0x460 [ 574.720085][T12759] should_fail_ex+0x414/0x560 [ 574.720121][T12759] should_failslab+0xa8/0x100 [ 574.720153][T12759] kmem_cache_alloc_noprof+0x73/0x3c0 [ 574.720182][T12759] ? skb_clone+0x212/0x3a0 [ 574.720210][T12759] skb_clone+0x212/0x3a0 [ 574.720237][T12759] __netlink_deliver_tap+0x404/0x850 [ 574.720282][T12759] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.720314][T12759] netlink_deliver_tap+0x19c/0x1b0 [ 574.720345][T12759] netlink_unicast+0x72f/0x8d0 [ 574.720395][T12759] netlink_sendmsg+0x805/0xb30 [ 574.720422][T12759] ? is_bpf_text_address+0x26/0x2b0 [ 574.720457][T12759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.720495][T12759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.720514][T12759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.720563][T12759] __sock_sendmsg+0x219/0x270 [ 574.720595][T12759] ____sys_sendmsg+0x505/0x830 [ 574.720624][T12759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.720655][T12759] ? import_iovec+0x74/0xa0 [ 574.720684][T12759] ___sys_sendmsg+0x21f/0x2a0 [ 574.720702][T12759] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.720757][T12759] ? __fget_files+0x2a/0x420 [ 574.720779][T12759] ? __fget_files+0x3a0/0x420 [ 574.720808][T12759] __x64_sys_sendmsg+0x19b/0x260 [ 574.720831][T12759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.720873][T12759] ? do_syscall_64+0xba/0x210 [ 574.720905][T12759] do_syscall_64+0xf6/0x210 [ 574.720926][T12759] ? clear_bhb_loop+0x45/0xa0 [ 574.720952][T12759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.720971][T12759] RIP: 0033:0x7f93d398e969 [ 574.720990][T12759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.721006][T12759] RSP: 002b:00007f93d486c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.721028][T12759] RAX: ffffffffffffffda RBX: 00007f93d3bb5fa0 RCX: 00007f93d398e969 [ 574.721043][T12759] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 574.721056][T12759] RBP: 00007f93d486c090 R08: 0000000000000000 R09: 0000000000000000 [ 574.721069][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.721080][T12759] R13: 0000000000000000 R14: 00007f93d3bb5fa0 R15: 00007fffe7bb3c38 [ 574.721113][T12759] [ 574.986419][T12657] bridge_slave_0: entered promiscuous mode [ 574.994342][T12657] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.001449][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.008649][T12657] bridge_slave_1: entered allmulticast mode [ 575.015826][T12657] bridge_slave_1: entered promiscuous mode [ 575.105306][T12657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.122984][T12657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.444925][T12657] team0: Port device team_slave_0 added [ 575.515288][T12657] team0: Port device team_slave_1 added [ 575.547122][ T5821] Bluetooth: hci1: command tx timeout [ 575.593897][T12657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.601104][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.627524][T12657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.640645][T12657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.647697][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.693108][T12657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.891299][T12657] hsr_slave_0: entered promiscuous mode [ 575.905284][T12657] hsr_slave_1: entered promiscuous mode [ 575.919600][T12657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.936761][T12657] Cannot create hsr debugfs directory [ 576.382910][T12775] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1690'. [ 576.806549][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dec0800: rx timeout, send abort [ 576.970430][T12657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 576.996944][T12657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 577.008251][T12657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 577.027660][T12657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 577.227970][T12657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.254981][T12657] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.273228][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.280435][ T8067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.307808][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807be92400: rx timeout, send abort [ 577.316428][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801dec0800: abort rx timeout. Force session deactivation [ 577.346230][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.353445][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.482800][T12789] netlink: 'syz.4.1697': attribute type 10 has an invalid length. [ 577.550996][T12789] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 577.816181][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807be92400: abort rx timeout. Force session deactivation [ 577.894821][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1702'. [ 578.152331][T12657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.288384][T12657] veth0_vlan: entered promiscuous mode [ 578.315376][T12657] veth1_vlan: entered promiscuous mode [ 578.376836][T12657] veth0_macvtap: entered promiscuous mode [ 578.389684][T12816] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 578.405797][T12657] veth1_macvtap: entered promiscuous mode [ 578.442092][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.467448][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.495890][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.590774][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.614716][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.642838][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.666356][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.687769][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.702121][T12657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.792535][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.844315][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.883111][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.911512][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.949411][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.990870][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.025608][T12657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.065765][T12657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.108310][T12657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.198492][T12657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.242575][T12657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.282435][T12657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.315039][T12657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.334343][T12825] FAULT_INJECTION: forcing a failure. [ 579.334343][T12825] name fail_futex, interval 1, probability 0, space 0, times 1 [ 579.402940][T12825] CPU: 0 UID: 0 PID: 12825 Comm: syz.6.1708 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 579.402972][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 579.402990][T12825] Call Trace: [ 579.402998][T12825] [ 579.403019][T12825] dump_stack_lvl+0x189/0x250 [ 579.403051][T12825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.403077][T12825] ? __pfx__printk+0x10/0x10 [ 579.403107][T12825] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 579.403145][T12825] should_fail_ex+0x414/0x560 [ 579.403180][T12825] __se_sys_futex+0x170/0x400 [ 579.403205][T12825] ? __pfx___se_sys_futex+0x10/0x10 [ 579.403232][T12825] ? __x64_sys_futex+0x21/0xf0 [ 579.403252][T12825] do_syscall_64+0xf6/0x210 [ 579.403272][T12825] ? clear_bhb_loop+0x45/0xa0 [ 579.403296][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.403314][T12825] RIP: 0033:0x7f93d398e969 [ 579.403332][T12825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.403349][T12825] RSP: 002b:00007f93d486c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 579.403369][T12825] RAX: ffffffffffffffda RBX: 00007f93d3bb5fa0 RCX: 00007f93d398e969 [ 579.403383][T12825] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc [ 579.403396][T12825] RBP: 00007f93d486c090 R08: 0000200000048000 R09: 0000000000000000 [ 579.403409][T12825] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000002 [ 579.403421][T12825] R13: 0000000000000000 R14: 00007f93d3bb5fa0 R15: 00007fffe7bb3c38 [ 579.403450][T12825] [ 580.585567][ T8067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.600339][ T8067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.690444][ T8070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.732782][ T8070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.923184][ T978] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 581.693228][ T978] usb 7-1: device descriptor read/64, error -71 [ 581.956515][ T978] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 582.103104][ T978] usb 7-1: device descriptor read/64, error -71 [ 582.213681][ T978] usb usb7-port1: attempt power cycle [ 582.310162][T12868] BUG: Bad page state in process syz.2.1723 pfn:4c326 [ 582.317169][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c326 [ 582.326048][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 582.333268][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 582.341908][T12868] raw: 0000000000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 582.350581][T12868] page dumped because: page_pool leak SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 582.356039][T12868] page_owner tracks the page as allocated [ 582.362509][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582310001672, free_ts 566927246441 [ 582.379823][T12868] post_alloc_hook+0x1d8/0x230 [ 582.384687][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 582.390279][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 582.396176][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 582.401676][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 582.407682][T12868] page_pool_alloc_frag_netmem+0x422/0x870 [ 582.413579][T12868] skb_pp_cow_data+0xb16/0x12f0 [ 582.418481][T12868] do_xdp_generic+0x51a/0xd20 [ 582.423246][T12868] tun_get_user+0x22eb/0x3c20 [ 582.427963][T12868] tun_chr_write_iter+0x113/0x200 [ 582.433079][T12868] vfs_write+0x548/0xa90 [ 582.437369][T12868] ksys_write+0x145/0x250 [ 582.441746][T12868] do_syscall_64+0xf6/0x210 [ 582.446341][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.452275][T12868] page last free pid 5815 tgid 5815 stack trace: [ 582.458718][T12868] __free_frozen_pages+0xb05/0xcd0 [ 582.463910][T12868] __put_partials+0x161/0x1c0 [ 582.468633][T12868] put_cpu_partial+0x17c/0x250 [ 582.473480][T12868] __slab_free+0x2f7/0x400 [ 582.477933][T12868] qlist_free_all+0x9a/0x140 [ 582.482573][T12868] kasan_quarantine_reduce+0x148/0x160 [ 582.488151][T12868] __kasan_slab_alloc+0x22/0x80 [ 582.493089][T12868] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 582.498601][T12868] getname_flags+0xb8/0x540 [ 582.503203][T12868] user_path_at+0x24/0x60 [ 582.507571][T12868] __x64_sys_umount+0xee/0x160 [ 582.512381][T12868] do_syscall_64+0xf6/0x210 [ 582.516981][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.522926][T12868] Modules linked in: [ 582.526910][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 582.526939][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 582.526952][T12868] Call Trace: [ 582.526961][T12868] [ 582.526971][T12868] dump_stack_lvl+0x189/0x250 [ 582.527008][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.527039][T12868] ? __pfx_print_modules+0x10/0x10 [ 582.527074][T12868] bad_page+0x15e/0x1a0 [ 582.527103][T12868] __free_frozen_pages+0xc77/0xcd0 [ 582.527134][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 582.527180][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 582.527222][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 582.527242][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 582.527302][T12868] do_xdp_generic+0x76e/0xd20 [ 582.527351][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 582.527388][T12868] ? tun_get_user+0x21bb/0x3c20 [ 582.527429][T12868] ? tun_get_user+0x21bb/0x3c20 [ 582.527456][T12868] tun_get_user+0x22eb/0x3c20 [ 582.527506][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 582.527536][T12868] ? __futex_wait+0x217/0x2a0 [ 582.527570][T12868] ? ref_tracker_alloc+0x318/0x460 [ 582.527593][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 582.527625][T12868] ? tun_get+0x1c/0x2f0 [ 582.527656][T12868] ? tun_get+0x1c/0x2f0 [ 582.527680][T12868] ? tun_get+0x1c/0x2f0 [ 582.527711][T12868] tun_chr_write_iter+0x113/0x200 [ 582.527739][T12868] vfs_write+0x548/0xa90 [ 582.527771][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 582.527797][T12868] ? __pfx_vfs_write+0x10/0x10 [ 582.527834][T12868] ? __fget_files+0x2a/0x420 [ 582.527892][T12868] ksys_write+0x145/0x250 [ 582.527917][T12868] ? rcu_is_watching+0x15/0xb0 [ 582.527948][T12868] ? __pfx_ksys_write+0x10/0x10 [ 582.527979][T12868] ? do_syscall_64+0xba/0x210 [ 582.528006][T12868] do_syscall_64+0xf6/0x210 [ 582.528030][T12868] ? clear_bhb_loop+0x45/0xa0 [ 582.528056][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.528077][T12868] RIP: 0033:0x7f18d0f8d41f [ 582.528095][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 582.528113][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 582.528135][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 582.528151][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 582.528165][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 582.528179][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 582.528192][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 582.528226][T12868] [ 582.528234][T12868] Disabling lock debugging due to kernel taint [ 582.583093][ T978] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 582.584992][T12868] BUG: Bad page state in process syz.2.1723 pfn:4c325 [ 582.633763][ T978] usb 7-1: device descriptor read/8, error -71 [ 582.635404][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c325 [ 582.828028][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 582.835213][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 582.843870][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 582.852484][T12868] page dumped because: page_pool leak [ 582.857946][T12868] page_owner tracks the page as allocated [ 582.863712][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309982573, free_ts 566927246441 [ 582.880996][T12868] post_alloc_hook+0x1d8/0x230 [ 582.885831][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 582.891420][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 582.893142][ T978] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 582.897288][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 582.910221][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 582.916197][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 582.921083][T12868] do_xdp_generic+0x51a/0xd20 [ 582.925831][T12868] tun_get_user+0x22eb/0x3c20 [ 582.930539][T12868] tun_chr_write_iter+0x113/0x200 [ 582.935645][T12868] vfs_write+0x548/0xa90 [ 582.939917][T12868] ksys_write+0x145/0x250 [ 582.944329][T12868] do_syscall_64+0xf6/0x210 [ 582.948857][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.954814][T12868] page last free pid 5815 tgid 5815 stack trace: [ 582.961164][T12868] __free_frozen_pages+0xb05/0xcd0 [ 582.966353][T12868] __put_partials+0x161/0x1c0 [ 582.971069][T12868] put_cpu_partial+0x17c/0x250 [ 582.975925][T12868] __slab_free+0x2f7/0x400 [ 582.980383][T12868] qlist_free_all+0x9a/0x140 [ 582.985054][T12868] kasan_quarantine_reduce+0x148/0x160 [ 582.990549][T12868] __kasan_slab_alloc+0x22/0x80 [ 582.995483][T12868] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 583.000988][T12868] getname_flags+0xb8/0x540 [ 583.005563][T12868] user_path_at+0x24/0x60 [ 583.009926][T12868] __x64_sys_umount+0xee/0x160 [ 583.014760][T12868] do_syscall_64+0xf6/0x210 [ 583.019293][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.025274][T12868] Modules linked in: [ 583.029208][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 583.029242][T12868] Tainted: [B]=BAD_PAGE [ 583.029249][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 583.029263][T12868] Call Trace: [ 583.029270][T12868] [ 583.029279][T12868] dump_stack_lvl+0x189/0x250 [ 583.029315][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.029382][T12868] ? __pfx_print_modules+0x10/0x10 [ 583.029408][T12868] bad_page+0x15e/0x1a0 [ 583.029435][T12868] __free_frozen_pages+0xc77/0xcd0 [ 583.029458][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 583.029494][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 583.029530][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 583.029548][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 583.029590][T12868] do_xdp_generic+0x76e/0xd20 [ 583.029621][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 583.029652][T12868] ? tun_get_user+0x21bb/0x3c20 [ 583.029687][T12868] ? tun_get_user+0x21bb/0x3c20 [ 583.029715][T12868] tun_get_user+0x22eb/0x3c20 [ 583.029752][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 583.029780][T12868] ? __futex_wait+0x217/0x2a0 [ 583.029810][T12868] ? ref_tracker_alloc+0x318/0x460 [ 583.029831][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 583.029855][T12868] ? tun_get+0x1c/0x2f0 [ 583.029883][T12868] ? tun_get+0x1c/0x2f0 [ 583.029908][T12868] ? tun_get+0x1c/0x2f0 [ 583.029936][T12868] tun_chr_write_iter+0x113/0x200 [ 583.029963][T12868] vfs_write+0x548/0xa90 [ 583.029994][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 583.030021][T12868] ? __pfx_vfs_write+0x10/0x10 [ 583.030053][T12868] ? __fget_files+0x2a/0x420 [ 583.030089][T12868] ksys_write+0x145/0x250 [ 583.030116][T12868] ? rcu_is_watching+0x15/0xb0 [ 583.030146][T12868] ? __pfx_ksys_write+0x10/0x10 [ 583.030176][T12868] ? do_syscall_64+0xba/0x210 [ 583.030199][T12868] do_syscall_64+0xf6/0x210 [ 583.030220][T12868] ? clear_bhb_loop+0x45/0xa0 [ 583.030244][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.030265][T12868] RIP: 0033:0x7f18d0f8d41f [ 583.030281][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 583.030300][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 583.030323][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 583.030346][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 583.030360][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 583.030374][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 583.030387][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 583.030411][T12868] [ 583.030422][T12868] BUG: Bad page state in process syz.2.1723 pfn:4c324 [ 583.307278][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c324 [ 583.316102][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 583.323267][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 583.331884][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 583.340538][T12868] page dumped because: page_pool leak [ 583.345943][T12868] page_owner tracks the page as allocated [ 583.351667][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309963997, free_ts 566927246441 [ 583.368927][T12868] post_alloc_hook+0x1d8/0x230 [ 583.373762][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 583.379330][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 583.385221][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 583.390744][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 583.396703][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 583.401594][T12868] do_xdp_generic+0x51a/0xd20 [ 583.406352][T12868] tun_get_user+0x22eb/0x3c20 [ 583.411140][T12868] tun_chr_write_iter+0x113/0x200 [ 583.416221][T12868] vfs_write+0x548/0xa90 [ 583.420499][T12868] ksys_write+0x145/0x250 [ 583.424898][T12868] do_syscall_64+0xf6/0x210 [ 583.429440][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.435405][T12868] page last free pid 5815 tgid 5815 stack trace: [ 583.441746][T12868] __free_frozen_pages+0xb05/0xcd0 [ 583.446933][T12868] __put_partials+0x161/0x1c0 [ 583.451642][T12868] put_cpu_partial+0x17c/0x250 [ 583.456460][T12868] __slab_free+0x2f7/0x400 [ 583.460891][T12868] qlist_free_all+0x9a/0x140 [ 583.465550][T12868] kasan_quarantine_reduce+0x148/0x160 [ 583.471035][T12868] __kasan_slab_alloc+0x22/0x80 [ 583.475972][T12868] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 583.481465][T12868] getname_flags+0xb8/0x540 [ 583.486034][T12868] user_path_at+0x24/0x60 [ 583.490381][T12868] __x64_sys_umount+0xee/0x160 [ 583.495325][T12868] do_syscall_64+0xf6/0x210 [ 583.499841][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.505825][T12868] Modules linked in: [ 583.509735][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 583.509764][T12868] Tainted: [B]=BAD_PAGE [ 583.509772][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 583.509782][T12868] Call Trace: [ 583.509789][T12868] [ 583.509796][T12868] dump_stack_lvl+0x189/0x250 [ 583.509821][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.509847][T12868] ? __pfx_print_modules+0x10/0x10 [ 583.509878][T12868] bad_page+0x15e/0x1a0 [ 583.509902][T12868] __free_frozen_pages+0xc77/0xcd0 [ 583.509925][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 583.509950][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 583.509975][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 583.509992][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 583.510032][T12868] do_xdp_generic+0x76e/0xd20 [ 583.510061][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 583.510087][T12868] ? tun_get_user+0x21bb/0x3c20 [ 583.510111][T12868] ? tun_get_user+0x21bb/0x3c20 [ 583.510130][T12868] tun_get_user+0x22eb/0x3c20 [ 583.510169][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 583.510195][T12868] ? __futex_wait+0x217/0x2a0 [ 583.510223][T12868] ? ref_tracker_alloc+0x318/0x460 [ 583.510238][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 583.510258][T12868] ? tun_get+0x1c/0x2f0 [ 583.510278][T12868] ? tun_get+0x1c/0x2f0 [ 583.510303][T12868] ? tun_get+0x1c/0x2f0 [ 583.510329][T12868] tun_chr_write_iter+0x113/0x200 [ 583.510354][T12868] vfs_write+0x548/0xa90 [ 583.510380][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 583.510399][T12868] ? __pfx_vfs_write+0x10/0x10 [ 583.510420][T12868] ? __fget_files+0x2a/0x420 [ 583.510454][T12868] ksys_write+0x145/0x250 [ 583.510479][T12868] ? rcu_is_watching+0x15/0xb0 [ 583.510507][T12868] ? __pfx_ksys_write+0x10/0x10 [ 583.510531][T12868] ? do_syscall_64+0xba/0x210 [ 583.510547][T12868] do_syscall_64+0xf6/0x210 [ 583.510562][T12868] ? clear_bhb_loop+0x45/0xa0 [ 583.510580][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.510602][T12868] RIP: 0033:0x7f18d0f8d41f [ 583.510620][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 583.510637][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 583.510657][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 583.510672][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 583.510681][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 583.510690][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 583.510699][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 583.510715][T12868] [ 583.510723][T12868] BUG: Bad page state in process syz.2.1723 pfn:4c323 [ 583.787441][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c323 [ 583.796247][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 583.803433][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 583.812020][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 583.820637][T12868] page dumped because: page_pool leak [ 583.826039][T12868] page_owner tracks the page as allocated [ 583.831758][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309918087, free_ts 566927246441 [ 583.849022][T12868] post_alloc_hook+0x1d8/0x230 [ 583.853841][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 583.859455][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 583.865321][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 583.870905][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 583.876887][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 583.881844][T12868] do_xdp_generic+0x51a/0xd20 [ 583.886575][T12868] tun_get_user+0x22eb/0x3c20 [ 583.891267][T12868] tun_chr_write_iter+0x113/0x200 [ 583.896383][T12868] vfs_write+0x548/0xa90 [ 583.900654][T12868] ksys_write+0x145/0x250 [ 583.905043][T12868] do_syscall_64+0xf6/0x210 [ 583.909568][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.915503][T12868] page last free pid 5815 tgid 5815 stack trace: [ 583.921839][T12868] __free_frozen_pages+0xb05/0xcd0 [ 583.926984][T12868] __put_partials+0x161/0x1c0 [ 583.931675][T12868] put_cpu_partial+0x17c/0x250 [ 583.936499][T12868] __slab_free+0x2f7/0x400 [ 583.940965][T12868] qlist_free_all+0x9a/0x140 [ 583.945606][T12868] kasan_quarantine_reduce+0x148/0x160 [ 583.951074][T12868] __kasan_slab_alloc+0x22/0x80 [ 583.955988][T12868] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 583.961487][T12868] getname_flags+0xb8/0x540 [ 583.966037][T12868] user_path_at+0x24/0x60 [ 583.970378][T12868] __x64_sys_umount+0xee/0x160 [ 583.975199][T12868] do_syscall_64+0xf6/0x210 [ 583.979727][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.985671][T12868] Modules linked in: [ 583.989583][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 583.989612][T12868] Tainted: [B]=BAD_PAGE [ 583.989617][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 583.989627][T12868] Call Trace: [ 583.989633][T12868] [ 583.989640][T12868] dump_stack_lvl+0x189/0x250 [ 583.989667][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.989694][T12868] ? __pfx_print_modules+0x10/0x10 [ 583.989718][T12868] bad_page+0x15e/0x1a0 [ 583.989743][T12868] __free_frozen_pages+0xc77/0xcd0 [ 583.989764][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 583.989788][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 583.989816][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 583.989835][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 583.989874][T12868] do_xdp_generic+0x76e/0xd20 [ 583.989902][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 583.989924][T12868] ? tun_get_user+0x21bb/0x3c20 [ 583.989948][T12868] ? tun_get_user+0x21bb/0x3c20 [ 583.989972][T12868] tun_get_user+0x22eb/0x3c20 [ 583.990008][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 583.990034][T12868] ? __futex_wait+0x217/0x2a0 [ 583.990059][T12868] ? ref_tracker_alloc+0x318/0x460 [ 583.990074][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 583.990089][T12868] ? tun_get+0x1c/0x2f0 [ 583.990109][T12868] ? tun_get+0x1c/0x2f0 [ 583.990135][T12868] ? tun_get+0x1c/0x2f0 [ 583.990160][T12868] tun_chr_write_iter+0x113/0x200 [ 583.990185][T12868] vfs_write+0x548/0xa90 [ 583.990210][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 583.990229][T12868] ? __pfx_vfs_write+0x10/0x10 [ 583.990250][T12868] ? __fget_files+0x2a/0x420 [ 583.990295][T12868] ksys_write+0x145/0x250 [ 583.990319][T12868] ? rcu_is_watching+0x15/0xb0 [ 583.990348][T12868] ? __pfx_ksys_write+0x10/0x10 [ 583.990368][T12868] ? do_syscall_64+0xba/0x210 [ 583.990384][T12868] do_syscall_64+0xf6/0x210 [ 583.990399][T12868] ? clear_bhb_loop+0x45/0xa0 [ 583.990422][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.990442][T12868] RIP: 0033:0x7f18d0f8d41f [ 583.990459][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 583.990476][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 583.990497][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 583.990508][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 583.990518][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 583.990528][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 583.990537][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 583.990553][T12868] [ 583.990568][T12868] BUG: Bad page state in process syz.2.1723 pfn:4c322 [ 584.266811][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c322 [ 584.275634][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 584.282772][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 584.291415][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 584.300031][T12868] page dumped because: page_pool leak [ 584.305482][T12868] page_owner tracks the page as allocated [ 584.311311][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309900899, free_ts 566927246441 [ 584.328742][T12868] post_alloc_hook+0x1d8/0x230 [ 584.333571][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 584.339159][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 584.345050][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 584.350537][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 584.356495][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 584.361358][T12868] do_xdp_generic+0x51a/0xd20 [ 584.366073][T12868] tun_get_user+0x22eb/0x3c20 [ 584.370775][T12868] tun_chr_write_iter+0x113/0x200 [ 584.375862][T12868] vfs_write+0x548/0xa90 [ 584.380130][T12868] ksys_write+0x145/0x250 [ 584.384598][T12868] do_syscall_64+0xf6/0x210 [ 584.389129][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.395064][T12868] page last free pid 5815 tgid 5815 stack trace: [ 584.401408][T12868] __free_frozen_pages+0xb05/0xcd0 [ 584.406566][T12868] __put_partials+0x161/0x1c0 [ 584.411264][T12868] put_cpu_partial+0x17c/0x250 [ 584.416062][T12868] __slab_free+0x2f7/0x400 [ 584.420505][T12868] qlist_free_all+0x9a/0x140 [ 584.425129][T12868] kasan_quarantine_reduce+0x148/0x160 [ 584.430611][T12868] __kasan_slab_alloc+0x22/0x80 [ 584.435526][T12868] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 584.441006][T12868] getname_flags+0xb8/0x540 [ 584.445558][T12868] user_path_at+0x24/0x60 [ 584.449903][T12868] __x64_sys_umount+0xee/0x160 [ 584.454721][T12868] do_syscall_64+0xf6/0x210 [ 584.459244][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.465186][T12868] Modules linked in: [ 584.469094][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 584.469123][T12868] Tainted: [B]=BAD_PAGE [ 584.469130][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 584.469142][T12868] Call Trace: [ 584.469149][T12868] [ 584.469156][T12868] dump_stack_lvl+0x189/0x250 [ 584.469179][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.469202][T12868] ? __pfx_print_modules+0x10/0x10 [ 584.469228][T12868] bad_page+0x15e/0x1a0 [ 584.469258][T12868] __free_frozen_pages+0xc77/0xcd0 [ 584.469279][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 584.469308][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 584.469334][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 584.469347][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 584.469390][T12868] do_xdp_generic+0x76e/0xd20 [ 584.469418][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 584.469446][T12868] ? tun_get_user+0x21bb/0x3c20 [ 584.469470][T12868] ? tun_get_user+0x21bb/0x3c20 [ 584.469488][T12868] tun_get_user+0x22eb/0x3c20 [ 584.469525][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 584.469552][T12868] ? __futex_wait+0x217/0x2a0 [ 584.469579][T12868] ? ref_tracker_alloc+0x318/0x460 [ 584.469597][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 584.469612][T12868] ? tun_get+0x1c/0x2f0 [ 584.469632][T12868] ? tun_get+0x1c/0x2f0 [ 584.469652][T12868] ? tun_get+0x1c/0x2f0 [ 584.469679][T12868] tun_chr_write_iter+0x113/0x200 [ 584.469705][T12868] vfs_write+0x548/0xa90 [ 584.469734][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 584.469753][T12868] ? __pfx_vfs_write+0x10/0x10 [ 584.469775][T12868] ? __fget_files+0x2a/0x420 [ 584.469805][T12868] ksys_write+0x145/0x250 [ 584.469830][T12868] ? rcu_is_watching+0x15/0xb0 [ 584.469858][T12868] ? __pfx_ksys_write+0x10/0x10 [ 584.469885][T12868] ? do_syscall_64+0xba/0x210 [ 584.469901][T12868] do_syscall_64+0xf6/0x210 [ 584.469915][T12868] ? clear_bhb_loop+0x45/0xa0 [ 584.469931][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.469948][T12868] RIP: 0033:0x7f18d0f8d41f [ 584.469966][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 584.469984][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 584.470003][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 584.470017][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 584.470032][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 584.470041][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 584.470050][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 584.470066][T12868] [ 584.470075][T12868] BUG: Bad page state in process syz.2.1723 pfn:4c321 [ 584.746202][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4c321 [ 584.756314][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 584.763493][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 584.772184][T12868] raw: ffffffffffffffff 0000000000000001 00000000ffffffff 0000000000000000 [ 584.780822][T12868] page dumped because: page_pool leak [ 584.786241][T12868] page_owner tracks the page as allocated [ 584.791974][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309884283, free_ts 566927246441 [ 584.809277][T12868] post_alloc_hook+0x1d8/0x230 [ 584.814113][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 584.819701][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 584.825587][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 584.831079][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 584.837023][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 584.841920][T12868] do_xdp_generic+0x51a/0xd20 [ 584.846667][T12868] tun_get_user+0x22eb/0x3c20 [ 584.851370][T12868] tun_chr_write_iter+0x113/0x200 [ 584.856413][T12868] vfs_write+0x548/0xa90 [ 584.860687][T12868] ksys_write+0x145/0x250 [ 584.865070][T12868] do_syscall_64+0xf6/0x210 [ 584.869596][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.875546][T12868] page last free pid 5815 tgid 5815 stack trace: [ 584.881887][T12868] __free_frozen_pages+0xb05/0xcd0 [ 584.887036][T12868] __put_partials+0x161/0x1c0 [ 584.891732][T12868] put_cpu_partial+0x17c/0x250 [ 584.896552][T12868] __slab_free+0x2f7/0x400 [ 584.900994][T12868] qlist_free_all+0x9a/0x140 [ 584.905663][T12868] kasan_quarantine_reduce+0x148/0x160 [ 584.911142][T12868] __kasan_slab_alloc+0x22/0x80 [ 584.916056][T12868] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 584.921536][T12868] getname_flags+0xb8/0x540 [ 584.926082][T12868] user_path_at+0x24/0x60 [ 584.930425][T12868] __x64_sys_umount+0xee/0x160 [ 584.935242][T12868] do_syscall_64+0xf6/0x210 [ 584.939761][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.945769][T12868] Modules linked in: [ 584.949684][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 584.949708][T12868] Tainted: [B]=BAD_PAGE [ 584.949713][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 584.949723][T12868] Call Trace: [ 584.949731][T12868] [ 584.949738][T12868] dump_stack_lvl+0x189/0x250 [ 584.949772][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.949799][T12868] ? __pfx_print_modules+0x10/0x10 [ 584.949824][T12868] bad_page+0x15e/0x1a0 [ 584.949848][T12868] __free_frozen_pages+0xc77/0xcd0 [ 584.949865][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 584.949908][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 584.949943][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 584.949960][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 584.949997][T12868] do_xdp_generic+0x76e/0xd20 [ 584.950037][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 584.950067][T12868] ? tun_get_user+0x21bb/0x3c20 [ 584.950100][T12868] ? tun_get_user+0x21bb/0x3c20 [ 584.950125][T12868] tun_get_user+0x22eb/0x3c20 [ 584.950157][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 584.950177][T12868] ? __futex_wait+0x217/0x2a0 [ 584.950208][T12868] ? ref_tracker_alloc+0x318/0x460 [ 584.950230][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 584.950252][T12868] ? tun_get+0x1c/0x2f0 [ 584.950278][T12868] ? tun_get+0x1c/0x2f0 [ 584.950300][T12868] ? tun_get+0x1c/0x2f0 [ 584.950319][T12868] tun_chr_write_iter+0x113/0x200 [ 584.950339][T12868] vfs_write+0x548/0xa90 [ 584.950369][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 584.950395][T12868] ? __pfx_vfs_write+0x10/0x10 [ 584.950425][T12868] ? __fget_files+0x2a/0x420 [ 584.950456][T12868] ksys_write+0x145/0x250 [ 584.950475][T12868] ? rcu_is_watching+0x15/0xb0 [ 584.950497][T12868] ? __pfx_ksys_write+0x10/0x10 [ 584.950528][T12868] ? do_syscall_64+0xba/0x210 [ 584.950550][T12868] do_syscall_64+0xf6/0x210 [ 584.950570][T12868] ? clear_bhb_loop+0x45/0xa0 [ 584.950593][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.950607][T12868] RIP: 0033:0x7f18d0f8d41f [ 584.950620][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 584.950633][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 584.950650][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 584.950669][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 584.950683][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 584.950696][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 584.950708][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 584.950730][T12868] [ 584.950743][T12868] BUG: Bad page state in process syz.2.1723 pfn:4c320 [ 585.226631][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c326000 pfn:0x4c320 [ 585.236754][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 585.243906][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 585.252513][T12868] raw: ffff88804c326000 0000000000000001 00000000ffffffff 0000000000000000 [ 585.261142][T12868] page dumped because: page_pool leak [ 585.266583][T12868] page_owner tracks the page as allocated [ 585.272355][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309868180, free_ts 566927246441 [ 585.289607][T12868] post_alloc_hook+0x1d8/0x230 [ 585.294428][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 585.300008][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 585.305858][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 585.311330][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 585.317266][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 585.322132][T12868] do_xdp_generic+0x51a/0xd20 [ 585.326860][T12868] tun_get_user+0x22eb/0x3c20 [ 585.331585][T12868] tun_chr_write_iter+0x113/0x200 [ 585.336669][T12868] vfs_write+0x548/0xa90 [ 585.340937][T12868] ksys_write+0x145/0x250 [ 585.345336][T12868] do_syscall_64+0xf6/0x210 [ 585.349874][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.355846][T12868] page last free pid 5815 tgid 5815 stack trace: [ 585.362189][T12868] __free_frozen_pages+0xb05/0xcd0 [ 585.367383][T12868] __put_partials+0x161/0x1c0 [ 585.372074][T12868] put_cpu_partial+0x17c/0x250 [ 585.376896][T12868] __slab_free+0x2f7/0x400 [ 585.381389][T12868] qlist_free_all+0x9a/0x140 [ 585.386048][T12868] kasan_quarantine_reduce+0x148/0x160 [ 585.391543][T12868] __kasan_slab_alloc+0x22/0x80 [ 585.396510][T12868] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 585.402020][T12868] getname_flags+0xb8/0x540 [ 585.406589][T12868] user_path_at+0x24/0x60 [ 585.410968][T12868] __x64_sys_umount+0xee/0x160 [ 585.415882][T12868] do_syscall_64+0xf6/0x210 [ 585.420405][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.426332][T12868] Modules linked in: [ 585.430249][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 585.430271][T12868] Tainted: [B]=BAD_PAGE [ 585.430276][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 585.430286][T12868] Call Trace: [ 585.430298][T12868] [ 585.430307][T12868] dump_stack_lvl+0x189/0x250 [ 585.430338][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.430363][T12868] ? __pfx_print_modules+0x10/0x10 [ 585.430387][T12868] bad_page+0x15e/0x1a0 [ 585.430406][T12868] __free_frozen_pages+0xc77/0xcd0 [ 585.430422][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 585.430454][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 585.430489][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 585.430506][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 585.430541][T12868] do_xdp_generic+0x76e/0xd20 [ 585.430562][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 585.430583][T12868] ? tun_get_user+0x21bb/0x3c20 [ 585.430617][T12868] ? tun_get_user+0x21bb/0x3c20 [ 585.430642][T12868] tun_get_user+0x22eb/0x3c20 [ 585.430677][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 585.430697][T12868] ? __futex_wait+0x217/0x2a0 [ 585.430717][T12868] ? ref_tracker_alloc+0x318/0x460 [ 585.430732][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 585.430755][T12868] ? tun_get+0x1c/0x2f0 [ 585.430782][T12868] ? tun_get+0x1c/0x2f0 [ 585.430805][T12868] ? tun_get+0x1c/0x2f0 [ 585.430830][T12868] tun_chr_write_iter+0x113/0x200 [ 585.430849][T12868] vfs_write+0x548/0xa90 [ 585.430869][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 585.430892][T12868] ? __pfx_vfs_write+0x10/0x10 [ 585.430923][T12868] ? __fget_files+0x2a/0x420 [ 585.430955][T12868] ksys_write+0x145/0x250 [ 585.430979][T12868] ? rcu_is_watching+0x15/0xb0 [ 585.430999][T12868] ? __pfx_ksys_write+0x10/0x10 [ 585.431019][T12868] ? do_syscall_64+0xba/0x210 [ 585.431039][T12868] do_syscall_64+0xf6/0x210 [ 585.431060][T12868] ? clear_bhb_loop+0x45/0xa0 [ 585.431081][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.431099][T12868] RIP: 0033:0x7f18d0f8d41f [ 585.431117][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 585.431130][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 585.431146][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 585.431157][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 585.431166][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 585.431181][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 585.431195][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 585.431218][T12868] [ 585.431229][T12868] BUG: Bad page state in process syz.2.1723 pfn:4824f [ 585.707476][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4824f [ 585.716290][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 585.723474][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 585.732094][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 585.740744][T12868] page dumped because: page_pool leak [ 585.746147][T12868] page_owner tracks the page as allocated [ 585.751864][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309850627, free_ts 566964989677 [ 585.769138][T12868] post_alloc_hook+0x1d8/0x230 [ 585.773956][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 585.779511][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 585.785391][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 585.790898][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 585.796868][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 585.801760][T12868] do_xdp_generic+0x51a/0xd20 [ 585.806497][T12868] tun_get_user+0x22eb/0x3c20 [ 585.811198][T12868] tun_chr_write_iter+0x113/0x200 [ 585.816318][T12868] vfs_write+0x548/0xa90 [ 585.820578][T12868] ksys_write+0x145/0x250 [ 585.824954][T12868] do_syscall_64+0xf6/0x210 [ 585.829461][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.835407][T12868] page last free pid 5815 tgid 5815 stack trace: [ 585.841748][T12868] __free_frozen_pages+0xb05/0xcd0 [ 585.846919][T12868] __put_partials+0x161/0x1c0 [ 585.851624][T12868] put_cpu_partial+0x17c/0x250 [ 585.856448][T12868] __slab_free+0x2f7/0x400 [ 585.860895][T12868] qlist_free_all+0x9a/0x140 [ 585.865535][T12868] kasan_quarantine_reduce+0x148/0x160 [ 585.871063][T12868] __kasan_slab_alloc+0x22/0x80 [ 585.876013][T12868] __kmalloc_cache_node_noprof+0x1c0/0x3d0 [ 585.881846][T12868] __get_vm_area_node+0x131/0x2d0 [ 585.886947][T12868] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 585.892867][T12868] vzalloc_noprof+0x79/0x90 [ 585.897425][T12868] __do_replace+0xab/0x980 [ 585.901853][T12868] do_ip6t_set_ctl+0xa16/0xce0 [ 585.906661][T12868] nf_setsockopt+0x26c/0x290 [ 585.911360][T12868] do_sock_setsockopt+0x257/0x3e0 [ 585.916435][T12868] __x64_sys_setsockopt+0x18b/0x220 [ 585.921643][T12868] Modules linked in: [ 585.925599][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 585.925629][T12868] Tainted: [B]=BAD_PAGE [ 585.925636][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 585.925648][T12868] Call Trace: [ 585.925657][T12868] [ 585.925663][T12868] dump_stack_lvl+0x189/0x250 [ 585.925686][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.925705][T12868] ? __pfx_print_modules+0x10/0x10 [ 585.925730][T12868] bad_page+0x15e/0x1a0 [ 585.925757][T12868] __free_frozen_pages+0xc77/0xcd0 [ 585.925778][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 585.925811][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 585.925836][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 585.925848][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 585.925886][T12868] do_xdp_generic+0x76e/0xd20 [ 585.925915][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 585.925944][T12868] ? tun_get_user+0x21bb/0x3c20 [ 585.925970][T12868] ? tun_get_user+0x21bb/0x3c20 [ 585.925989][T12868] tun_get_user+0x22eb/0x3c20 [ 585.926031][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 585.926057][T12868] ? __futex_wait+0x217/0x2a0 [ 585.926108][T12868] ? ref_tracker_alloc+0x318/0x460 [ 585.926126][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 585.926142][T12868] ? tun_get+0x1c/0x2f0 [ 585.926161][T12868] ? tun_get+0x1c/0x2f0 [ 585.926183][T12868] ? tun_get+0x1c/0x2f0 [ 585.926211][T12868] tun_chr_write_iter+0x113/0x200 [ 585.926236][T12868] vfs_write+0x548/0xa90 [ 585.926263][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 585.926284][T12868] ? __pfx_vfs_write+0x10/0x10 [ 585.926305][T12868] ? __fget_files+0x2a/0x420 [ 585.926334][T12868] ksys_write+0x145/0x250 [ 585.926359][T12868] ? rcu_is_watching+0x15/0xb0 [ 585.926387][T12868] ? __pfx_ksys_write+0x10/0x10 [ 585.926413][T12868] ? do_syscall_64+0xba/0x210 [ 585.926432][T12868] do_syscall_64+0xf6/0x210 [ 585.926446][T12868] ? clear_bhb_loop+0x45/0xa0 [ 585.926462][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.926477][T12868] RIP: 0033:0x7f18d0f8d41f [ 585.926495][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 585.926513][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 585.926533][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 585.926548][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 585.926561][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 585.926573][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 585.926581][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 585.926597][T12868] [ 585.926606][T12868] BUG: Bad page state in process syz.2.1723 pfn:4824e [ 586.202826][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4824e [ 586.211681][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 586.218847][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 586.227506][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 586.236147][T12868] page dumped because: page_pool leak [ 586.241519][T12868] page_owner tracks the page as allocated [ 586.247282][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309833614, free_ts 566964989677 [ 586.264606][T12868] post_alloc_hook+0x1d8/0x230 [ 586.269411][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 586.275027][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 586.280862][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 586.286384][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 586.292349][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 586.297264][T12868] do_xdp_generic+0x51a/0xd20 [ 586.301962][T12868] tun_get_user+0x22eb/0x3c20 [ 586.306992][T12868] tun_chr_write_iter+0x113/0x200 [ 586.312039][T12868] vfs_write+0x548/0xa90 [ 586.316334][T12868] ksys_write+0x145/0x250 [ 586.320683][T12868] do_syscall_64+0xf6/0x210 [ 586.325226][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.331151][T12868] page last free pid 5815 tgid 5815 stack trace: [ 586.337521][T12868] __free_frozen_pages+0xb05/0xcd0 [ 586.342676][T12868] __put_partials+0x161/0x1c0 [ 586.347429][T12868] put_cpu_partial+0x17c/0x250 [ 586.352218][T12868] __slab_free+0x2f7/0x400 [ 586.356714][T12868] qlist_free_all+0x9a/0x140 [ 586.361344][T12868] kasan_quarantine_reduce+0x148/0x160 [ 586.366881][T12868] __kasan_slab_alloc+0x22/0x80 [ 586.371767][T12868] __kmalloc_cache_node_noprof+0x1c0/0x3d0 [ 586.377654][T12868] __get_vm_area_node+0x131/0x2d0 [ 586.382705][T12868] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 586.388682][T12868] vzalloc_noprof+0x79/0x90 [ 586.393239][T12868] __do_replace+0xab/0x980 [ 586.397683][T12868] do_ip6t_set_ctl+0xa16/0xce0 [ 586.402458][T12868] nf_setsockopt+0x26c/0x290 [ 586.407106][T12868] do_sock_setsockopt+0x257/0x3e0 [ 586.412155][T12868] __x64_sys_setsockopt+0x18b/0x220 [ 586.417403][T12868] Modules linked in: [ 586.421314][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 586.421347][T12868] Tainted: [B]=BAD_PAGE [ 586.421353][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 586.421363][T12868] Call Trace: [ 586.421371][T12868] [ 586.421379][T12868] dump_stack_lvl+0x189/0x250 [ 586.421403][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.421432][T12868] ? __pfx_print_modules+0x10/0x10 [ 586.421459][T12868] bad_page+0x15e/0x1a0 [ 586.421485][T12868] __free_frozen_pages+0xc77/0xcd0 [ 586.421508][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 586.421533][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 586.421560][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 586.421581][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 586.421623][T12868] do_xdp_generic+0x76e/0xd20 [ 586.421652][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 586.421675][T12868] ? tun_get_user+0x21bb/0x3c20 [ 586.421700][T12868] ? tun_get_user+0x21bb/0x3c20 [ 586.421727][T12868] tun_get_user+0x22eb/0x3c20 [ 586.421764][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 586.421791][T12868] ? __futex_wait+0x217/0x2a0 [ 586.421815][T12868] ? ref_tracker_alloc+0x318/0x460 [ 586.421830][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 586.421846][T12868] ? tun_get+0x1c/0x2f0 [ 586.421873][T12868] ? tun_get+0x1c/0x2f0 [ 586.421898][T12868] ? tun_get+0x1c/0x2f0 [ 586.421924][T12868] tun_chr_write_iter+0x113/0x200 [ 586.421950][T12868] vfs_write+0x548/0xa90 [ 586.421972][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 586.421990][T12868] ? __pfx_vfs_write+0x10/0x10 [ 586.422019][T12868] ? __fget_files+0x2a/0x420 [ 586.422055][T12868] ksys_write+0x145/0x250 [ 586.422080][T12868] ? rcu_is_watching+0x15/0xb0 [ 586.422113][T12868] ? __pfx_ksys_write+0x10/0x10 [ 586.422133][T12868] ? do_syscall_64+0xba/0x210 [ 586.422149][T12868] do_syscall_64+0xf6/0x210 [ 586.422172][T12868] ? clear_bhb_loop+0x45/0xa0 [ 586.422195][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.422215][T12868] RIP: 0033:0x7f18d0f8d41f [ 586.422232][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 586.422248][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 586.422264][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 586.422275][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 586.422285][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 586.422294][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 586.422307][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 586.422331][T12868] [ 586.422343][T12868] BUG: Bad page state in process syz.2.1723 pfn:4824d [ 586.699150][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4824d [ 586.708410][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 586.715943][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 586.724760][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 586.733572][T12868] page dumped because: page_pool leak [ 586.738972][T12868] page_owner tracks the page as allocated [ 586.744722][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309816119, free_ts 566964989677 [ 586.761976][T12868] post_alloc_hook+0x1d8/0x230 [ 586.766816][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 586.772386][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 586.778237][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 586.783745][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 586.789657][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 586.794557][T12868] do_xdp_generic+0x51a/0xd20 [ 586.799239][T12868] tun_get_user+0x22eb/0x3c20 [ 586.803948][T12868] tun_chr_write_iter+0x113/0x200 [ 586.809025][T12868] vfs_write+0x548/0xa90 [ 586.813468][T12868] ksys_write+0x145/0x250 [ 586.817839][T12868] do_syscall_64+0xf6/0x210 [ 586.822381][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.828343][T12868] page last free pid 5815 tgid 5815 stack trace: [ 586.834713][T12868] __free_frozen_pages+0xb05/0xcd0 [ 586.839841][T12868] __put_partials+0x161/0x1c0 [ 586.844569][T12868] put_cpu_partial+0x17c/0x250 [ 586.849363][T12868] __slab_free+0x2f7/0x400 [ 586.853844][T12868] qlist_free_all+0x9a/0x140 [ 586.858473][T12868] kasan_quarantine_reduce+0x148/0x160 [ 586.864005][T12868] __kasan_slab_alloc+0x22/0x80 [ 586.868901][T12868] __kmalloc_cache_node_noprof+0x1c0/0x3d0 [ 586.874818][T12868] __get_vm_area_node+0x131/0x2d0 [ 586.879873][T12868] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 586.885829][T12868] vzalloc_noprof+0x79/0x90 [ 586.890357][T12868] __do_replace+0xab/0x980 [ 586.894820][T12868] do_ip6t_set_ctl+0xa16/0xce0 [ 586.899606][T12868] nf_setsockopt+0x26c/0x290 [ 586.904238][T12868] do_sock_setsockopt+0x257/0x3e0 [ 586.909261][T12868] __x64_sys_setsockopt+0x18b/0x220 [ 586.914534][T12868] Modules linked in: [ 586.918463][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 586.918493][T12868] Tainted: [B]=BAD_PAGE [ 586.918500][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 586.918513][T12868] Call Trace: [ 586.918520][T12868] [ 586.918531][T12868] dump_stack_lvl+0x189/0x250 [ 586.918555][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.918575][T12868] ? __pfx_print_modules+0x10/0x10 [ 586.918601][T12868] bad_page+0x15e/0x1a0 [ 586.918629][T12868] __free_frozen_pages+0xc77/0xcd0 [ 586.918651][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 586.918684][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 586.918710][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 586.918723][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 586.918764][T12868] do_xdp_generic+0x76e/0xd20 [ 586.918793][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 586.918825][T12868] ? tun_get_user+0x21bb/0x3c20 [ 586.918850][T12868] ? tun_get_user+0x21bb/0x3c20 [ 586.918869][T12868] tun_get_user+0x22eb/0x3c20 [ 586.918903][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 586.918932][T12868] ? __futex_wait+0x217/0x2a0 [ 586.918960][T12868] ? ref_tracker_alloc+0x318/0x460 [ 586.918981][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 586.918998][T12868] ? tun_get+0x1c/0x2f0 [ 586.919017][T12868] ? tun_get+0x1c/0x2f0 [ 586.919052][T12868] ? tun_get+0x1c/0x2f0 [ 586.919079][T12868] tun_chr_write_iter+0x113/0x200 [ 586.919104][T12868] vfs_write+0x548/0xa90 [ 586.919133][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 586.919151][T12868] ? __pfx_vfs_write+0x10/0x10 [ 586.919173][T12868] ? __fget_files+0x2a/0x420 [ 586.919202][T12868] ksys_write+0x145/0x250 [ 586.919229][T12868] ? rcu_is_watching+0x15/0xb0 [ 586.919256][T12868] ? __pfx_ksys_write+0x10/0x10 [ 586.919283][T12868] ? do_syscall_64+0xba/0x210 [ 586.919299][T12868] do_syscall_64+0xf6/0x210 [ 586.919319][T12868] ? clear_bhb_loop+0x45/0xa0 [ 586.919336][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.919357][T12868] RIP: 0033:0x7f18d0f8d41f [ 586.919375][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 586.919393][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 586.919413][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 586.919429][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 586.919439][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 586.919448][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 586.919457][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 586.919473][T12868] [ 586.919482][T12868] BUG: Bad page state in process syz.2.1723 pfn:4824c [ 587.195874][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4824c [ 587.204689][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 587.211817][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 587.220482][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 587.229116][T12868] page dumped because: page_pool leak [ 587.234554][T12868] page_owner tracks the page as allocated [ 587.240278][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309798349, free_ts 566964989677 [ 587.257711][T12868] post_alloc_hook+0x1d8/0x230 [ 587.262519][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 587.268121][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 587.273994][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 587.279615][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 587.285577][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 587.290453][T12868] do_xdp_generic+0x51a/0xd20 [ 587.295181][T12868] tun_get_user+0x22eb/0x3c20 [ 587.299973][T12868] tun_chr_write_iter+0x113/0x200 [ 587.305055][T12868] vfs_write+0x548/0xa90 [ 587.309326][T12868] ksys_write+0x145/0x250 [ 587.313721][T12868] do_syscall_64+0xf6/0x210 [ 587.318260][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.324221][T12868] page last free pid 5815 tgid 5815 stack trace: [ 587.330559][T12868] __free_frozen_pages+0xb05/0xcd0 [ 587.335752][T12868] __put_partials+0x161/0x1c0 [ 587.340454][T12868] put_cpu_partial+0x17c/0x250 [ 587.345265][T12868] __slab_free+0x2f7/0x400 [ 587.349707][T12868] qlist_free_all+0x9a/0x140 [ 587.354346][T12868] kasan_quarantine_reduce+0x148/0x160 [ 587.359922][T12868] __kasan_slab_alloc+0x22/0x80 [ 587.364831][T12868] __kmalloc_cache_node_noprof+0x1c0/0x3d0 [ 587.370663][T12868] __get_vm_area_node+0x131/0x2d0 [ 587.375751][T12868] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 587.381667][T12868] vzalloc_noprof+0x79/0x90 [ 587.386235][T12868] __do_replace+0xab/0x980 [ 587.390669][T12868] do_ip6t_set_ctl+0xa16/0xce0 [ 587.395479][T12868] nf_setsockopt+0x26c/0x290 [ 587.400087][T12868] do_sock_setsockopt+0x257/0x3e0 [ 587.405152][T12868] __x64_sys_setsockopt+0x18b/0x220 [ 587.410355][T12868] Modules linked in: [ 587.414298][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 587.414321][T12868] Tainted: [B]=BAD_PAGE [ 587.414327][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 587.414341][T12868] Call Trace: [ 587.414352][T12868] [ 587.414361][T12868] dump_stack_lvl+0x189/0x250 [ 587.414393][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.414421][T12868] ? __pfx_print_modules+0x10/0x10 [ 587.414441][T12868] bad_page+0x15e/0x1a0 [ 587.414461][T12868] __free_frozen_pages+0xc77/0xcd0 [ 587.414478][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 587.414515][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 587.414550][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 587.414567][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 587.414601][T12868] do_xdp_generic+0x76e/0xd20 [ 587.414622][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 587.414653][T12868] ? tun_get_user+0x21bb/0x3c20 [ 587.414687][T12868] ? tun_get_user+0x21bb/0x3c20 [ 587.414712][T12868] tun_get_user+0x22eb/0x3c20 [ 587.414743][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 587.414763][T12868] ? __futex_wait+0x217/0x2a0 [ 587.414788][T12868] ? ref_tracker_alloc+0x318/0x460 [ 587.414811][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 587.414833][T12868] ? tun_get+0x1c/0x2f0 [ 587.414860][T12868] ? tun_get+0x1c/0x2f0 [ 587.414882][T12868] ? tun_get+0x1c/0x2f0 [ 587.414902][T12868] tun_chr_write_iter+0x113/0x200 [ 587.414921][T12868] vfs_write+0x548/0xa90 [ 587.414950][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 587.414977][T12868] ? __pfx_vfs_write+0x10/0x10 [ 587.415007][T12868] ? __fget_files+0x2a/0x420 [ 587.415045][T12868] ksys_write+0x145/0x250 [ 587.415063][T12868] ? rcu_is_watching+0x15/0xb0 [ 587.415088][T12868] ? __pfx_ksys_write+0x10/0x10 [ 587.415118][T12868] ? do_syscall_64+0xba/0x210 [ 587.415140][T12868] do_syscall_64+0xf6/0x210 [ 587.415160][T12868] ? clear_bhb_loop+0x45/0xa0 [ 587.415182][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.415197][T12868] RIP: 0033:0x7f18d0f8d41f [ 587.415209][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 587.415223][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 587.415243][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 587.415259][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 587.415272][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 587.415284][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 587.415295][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 587.415317][T12868] [ 587.415329][T12868] BUG: Bad page state in process syz.2.1723 pfn:4824b [ 587.691345][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4824b [ 587.700155][T12868] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 587.707321][T12868] raw: 00fff00000000000 dead000000000040 ffff8880212ab000 0000000000000000 [ 587.715945][T12868] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 587.724573][T12868] page dumped because: page_pool leak [ 587.729949][T12868] page_owner tracks the page as allocated [ 587.736320][T12868] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 12868, tgid 12866 (syz.2.1723), ts 582309781137, free_ts 566964989677 [ 587.753570][T12868] post_alloc_hook+0x1d8/0x230 [ 587.758362][T12868] get_page_from_freelist+0x21c7/0x22a0 [ 587.763970][T12868] __alloc_frozen_pages_noprof+0x181/0x370 [ 587.769819][T12868] alloc_pages_bulk_noprof+0x560/0x710 [ 587.775356][T12868] __page_pool_alloc_pages_slow+0x127/0x6c0 [ 587.781349][T12868] skb_pp_cow_data+0xaf4/0x12f0 [ 587.786253][T12868] do_xdp_generic+0x51a/0xd20 [ 587.790963][T12868] tun_get_user+0x22eb/0x3c20 [ 587.795707][T12868] tun_chr_write_iter+0x113/0x200 [ 587.800735][T12868] vfs_write+0x548/0xa90 [ 587.805047][T12868] ksys_write+0x145/0x250 [ 587.809395][T12868] do_syscall_64+0xf6/0x210 [ 587.813938][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.819902][T12868] page last free pid 5815 tgid 5815 stack trace: [ 587.826266][T12868] __free_frozen_pages+0xb05/0xcd0 [ 587.831411][T12868] __put_partials+0x161/0x1c0 [ 587.836156][T12868] put_cpu_partial+0x17c/0x250 [ 587.840960][T12868] __slab_free+0x2f7/0x400 [ 587.845434][T12868] qlist_free_all+0x9a/0x140 [ 587.850044][T12868] kasan_quarantine_reduce+0x148/0x160 [ 587.855567][T12868] __kasan_slab_alloc+0x22/0x80 [ 587.860431][T12868] __kmalloc_cache_node_noprof+0x1c0/0x3d0 [ 587.866290][T12868] __get_vm_area_node+0x131/0x2d0 [ 587.871520][T12868] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 587.877499][T12868] vzalloc_noprof+0x79/0x90 [ 587.882016][T12868] __do_replace+0xab/0x980 [ 587.886485][T12868] do_ip6t_set_ctl+0xa16/0xce0 [ 587.891256][T12868] nf_setsockopt+0x26c/0x290 [ 587.895920][T12868] do_sock_setsockopt+0x257/0x3e0 [ 587.900988][T12868] __x64_sys_setsockopt+0x18b/0x220 [ 587.906239][T12868] Modules linked in: [ 587.910236][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.1723 Tainted: G B 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 587.910256][T12868] Tainted: [B]=BAD_PAGE [ 587.910262][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 587.910271][T12868] Call Trace: [ 587.910282][T12868] [ 587.910291][T12868] dump_stack_lvl+0x189/0x250 [ 587.910320][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.910344][T12868] ? __pfx_print_modules+0x10/0x10 [ 587.910366][T12868] bad_page+0x15e/0x1a0 [ 587.910401][T12868] __free_frozen_pages+0xc77/0xcd0 [ 587.910418][T12868] bpf_xdp_frags_shrink_tail+0x3a5/0x750 [ 587.910454][T12868] bpf_xdp_adjust_tail+0x1d6/0x220 [ 587.910487][T12868] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 587.910503][T12868] bpf_prog_run_generic_xdp+0x64b/0x14c0 [ 587.910534][T12868] do_xdp_generic+0x76e/0xd20 [ 587.910555][T12868] ? __pfx_do_xdp_generic+0x10/0x10 [ 587.910583][T12868] ? tun_get_user+0x21bb/0x3c20 [ 587.910616][T12868] ? tun_get_user+0x21bb/0x3c20 [ 587.910641][T12868] tun_get_user+0x22eb/0x3c20 [ 587.910672][T12868] ? __pfx_tun_get_user+0x10/0x10 [ 587.910692][T12868] ? __futex_wait+0x217/0x2a0 [ 587.910712][T12868] ? ref_tracker_alloc+0x318/0x460 [ 587.910735][T12868] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 587.910757][T12868] ? tun_get+0x1c/0x2f0 [ 587.910783][T12868] ? tun_get+0x1c/0x2f0 [ 587.910806][T12868] ? tun_get+0x1c/0x2f0 [ 587.910825][T12868] tun_chr_write_iter+0x113/0x200 [ 587.910844][T12868] vfs_write+0x548/0xa90 [ 587.910866][T12868] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 587.910894][T12868] ? __pfx_vfs_write+0x10/0x10 [ 587.910924][T12868] ? __fget_files+0x2a/0x420 [ 587.910962][T12868] ksys_write+0x145/0x250 [ 587.910981][T12868] ? rcu_is_watching+0x15/0xb0 [ 587.911003][T12868] ? __pfx_ksys_write+0x10/0x10 [ 587.911027][T12868] ? do_syscall_64+0xba/0x210 [ 587.911050][T12868] do_syscall_64+0xf6/0x210 [ 587.911070][T12868] ? clear_bhb_loop+0x45/0xa0 [ 587.911091][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.911111][T12868] RIP: 0033:0x7f18d0f8d41f [ 587.911124][T12868] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 587.911137][T12868] RSP: 002b:00007f18d1e6d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 587.911154][T12868] RAX: ffffffffffffffda RBX: 00007f18d11b6080 RCX: 00007f18d0f8d41f [ 587.911166][T12868] RDX: 000000000000fdef RSI: 0000200000000380 RDI: 00000000000000c8 [ 587.911182][T12868] RBP: 00007f18d1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 587.911195][T12868] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 587.911208][T12868] R13: 0000000000000000 R14: 00007f18d11b6080 R15: 00007ffc47006198 [ 587.911229][T12868] [ 588.064661][ T978] usb 7-1: device descriptor read/8, error -110 [ 588.403543][ T978] usb usb7-port1: unable to enumerate USB device [ 588.600830][ T6011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.687752][ T6011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.769234][ T6011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.845051][ T6011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.939585][ T6011] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.977379][ T6011] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.017994][ T6011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.077691][ T6011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.133445][ T6011] bridge_slave_1: left allmulticast mode [ 589.139152][ T6011] bridge_slave_1: left promiscuous mode [ 589.144981][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.154996][ T6011] bridge_slave_0: left allmulticast mode [ 589.160673][ T6011] bridge_slave_0: left promiscuous mode [ 589.166381][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.230448][ T6011] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 589.240562][ T6011] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 589.249164][ T6011] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 5e:c3:04:1c:a9:2e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 589.369556][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.379747][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.392100][ T6011] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 589.401623][ T6011] bond0 (unregistering): Released all slaves [ 589.415157][ T6011] bond1 (unregistering): (slave veth3): Releasing backup interface [ 589.425547][ T6011] bond1 (unregistering): Released all slaves [ 589.438435][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.450331][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.459883][ T6011] bond0 (unregistering): Released all slaves [ 589.521333][ T6011] tipc: Disabling bearer [ 589.529162][ T6011] tipc: Left network mode [ 589.568685][ T6011] IPVS: stopping backup sync thread 9484 ... [ 589.781292][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.788778][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.796810][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.804399][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.815079][ T6011] hsr_slave_0: left promiscuous mode [ 589.821000][ T6011] hsr_slave_1: left promiscuous mode [ 589.829511][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.837072][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.845178][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.852598][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.864929][ T6011] veth1_macvtap: left promiscuous mode [ 589.870540][ T6011] veth0_macvtap: left promiscuous mode [ 589.876524][ T6011] veth1_vlan: left allmulticast mode [ 589.881855][ T6011] veth1_vlan: left promiscuous mode [ 589.888140][ T6011] veth1_macvtap: left promiscuous mode [ 589.893803][ T6011] veth0_macvtap: left promiscuous mode [ 589.899355][ T6011] veth1_vlan: left promiscuous mode [ 589.904673][ T6011] veth0_vlan: left promiscuous mode [ 590.156756][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 590.190273][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 590.427204][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 590.457615][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 591.041837][ T6011] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.086171][ T6011] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.158553][ T6011] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.216173][ T6011] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.286519][ T6011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.328266][ T6011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.378085][ T6011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.443736][ T6011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.505582][ T6011] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.547572][ T6011] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.597362][ T6011] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.648160][ T6011] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.723121][ T6011] dummy0: left allmulticast mode [ 591.728297][ T6011] bridge0: port 1(dummy0) entered disabled state [ 591.737743][ T6011] bridge_slave_1: left allmulticast mode [ 591.743619][ T6011] bridge_slave_1: left promiscuous mode [ 591.749296][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.757999][ T6011] bridge_slave_0: left allmulticast mode [ 591.763738][ T6011] bridge_slave_0: left promiscuous mode [ 591.769378][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.778768][ T6011] bridge_slave_1: left allmulticast mode [ 591.785003][ T6011] bridge_slave_1: left promiscuous mode [ 591.790658][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.801369][ T6011] bridge_slave_0: left allmulticast mode [ 591.807637][ T6011] bridge_slave_0: left promiscuous mode [ 591.814494][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state