last executing test programs: 10.502445239s ago: executing program 4 (id=163): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x900) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005fafdf165a82e7614cda704ef2f40e3a0d1ff997c4540e067555d28ffe3cbcd213fa7898a4691dfde8343706a36df1cf329a1de604c707c6692f563c2aa3b44f7d246a79a9dc5e4af0c7249c5c9fb44bc8004fb13ef19f19eb3731cd60c2e856ff4472dec949d8d25d16eb0ef80b4a42d827fc38185e48dcd0f735f9985739f771b6144ed2724675edba97232929826ce08d8823bdb1f9a72837d840eba42ae3"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x448a81, 0x19, 0xe}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000004c0)="0f596c27ff8f6878c3c5ff2e0f093e440f79ddb805000000b9340000000f01c145f638c4a27d308200600000b9800000c00f3235001000000f3066baf80cb80cffea89ef66bafc0cb8bb5c0000ef66baf80cb89899ad8bef66bafc0cb857c22f58ef", 0x62}], 0x1, 0x69, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x27, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFCONF(r6, 0x8912, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x880, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) getdents(r7, &(0x7f0000000400)=""/132, 0x84) lseek(r3, 0x0, 0x1) pipe(&(0x7f0000000080)) 9.110275775s ago: executing program 0 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @empty, 0x1}, 0x1c) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r9, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000ae0000000400000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40040) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r8) getsockname(r6, 0x0, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) 8.180916494s ago: executing program 2 (id=169): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, &(0x7f0000000240)=0x58) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/667, 0xe) fallocate(r3, 0x0, 0x0, 0x400001) fcntl$addseals(r3, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x3, 0x8, 0x2, 0x6, 0x0, 0x3, 0x400}, 0x0, 0x0, 0x0, 0x0) 7.980077633s ago: executing program 0 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(0xffffffffffffffff, 0x1) close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x202, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) close_range(r3, 0xffffffffffffffff, 0x0) 7.333108854s ago: executing program 2 (id=172): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{0x0}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) 6.065629208s ago: executing program 1 (id=173): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (fail_nth: 1) 5.886038737s ago: executing program 0 (id=174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x17, &(0x7f0000000100)=r5, 0x120) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000002880)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x1) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 5.672084561s ago: executing program 2 (id=176): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) 5.313904726s ago: executing program 4 (id=177): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$unix(0x1, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES64]) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 5.052940697s ago: executing program 4 (id=179): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x2e0}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x113, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x22}, 0x0, 0x600c011, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x90) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000180)={'#! ', '', [{0x20, '`\x00\x00'}]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4.83295572s ago: executing program 1 (id=180): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003500000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x3, 0x7b543e37d5687e34, 0x1}) socket(0x1d, 0x2, 0x6) epoll_create(0x1) syz_open_procfs$userns(0x0, &(0x7f0000000840)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 4.081209419s ago: executing program 4 (id=183): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0x834, &(0x7f0000000180)={0x0, 0x679a, 0x400, 0x6, 0x3cc}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$char_usb(r7, &(0x7f0000000240)=""/36, 0x24) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x8) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40) ptrace(0x10, r8) ptrace$setsig(0x4203, r8, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000200)=@v2={0x2000000, [{0x8, 0x1}, {0x7, 0x80}]}, 0x14, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x5bd) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r10}]}, 0x3c}}, 0x0) 3.743632692s ago: executing program 3 (id=184): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000040)="2832fcfde099b6729b5d4986c2b0", 0xe) write$smackfs_label(r0, &(0x7f0000000080)={'/sys/fs/smackfs/revoke-subject\x00'}, 0x20) write$smackfs_label(r0, &(0x7f00000000c0)={'/sys/fs/smackfs/revoke-subject\x00'}, 0x20) r1 = fsopen(&(0x7f0000000100)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000140)={0x0, 0x1}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000180)=@rose={'rose', 0x0}, 0x10) r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000200)={0x9, 0x4, 0x1, 0x9f8, 0xb437, 0xd71, 0x80000000}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000400)={r8, r10, r11, 0x8, 0xa, 0x4, 0x7, 0x0, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r8, 0xeeeeeeee}) close_range(r3, r1, 0x2) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x154, r13, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x138, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71d2365f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c5872b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10f6160e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d5a5b9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf46}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30086a90}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb30d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ea28e32}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12272ee3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b022f1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x486f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd985}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb042}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9173}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7787}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5705}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe9967d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fe3f562}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3253}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x84841d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa301}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc549826}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd604}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1408602}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc02}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x4, r8, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000980)={&(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x3, r7, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000a40)={0x1, 0x5, &(0x7f00000007c0)=[r8, 0x0, r6, r5, r9], &(0x7f0000000800)=[0x4, 0x7ac0, 0x4, 0x3, 0x9], &(0x7f00000009c0)=[r12, r12, r12, r14, r12, r15], &(0x7f0000000a00)=[0xfff, 0x9], 0x0, 0x7c}) syz_open_dev$MSR(&(0x7f0000000a80), 0xffffffffffffffff, 0x0) r16 = socket$alg(0x26, 0x5, 0x0) accept$alg(r16, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000b00)={&(0x7f0000000ac0)=[r8, r7], 0x2, 0x80000}) fcntl$setstatus(r2, 0x4, 0x2800) close_range(r2, 0xffffffffffffffff, 0x2) 2.836889873s ago: executing program 3 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x70, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3ef98e7d6b0ed1a627c78bb068c7977daf65a526"}}]}]}, 0x70}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000600000000000000000200fc000000000000000000"], 0x3c}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3e, &(0x7f0000000180), 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) r4 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000240)={0x20000006}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r6, &(0x7f0000000280)={0xffffffffffffffff, r5, 0x8}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xf8, 0x8, 0x8, 0x722, 0x2800, 0x3, 0x7f, 0x3d, 0x20, {0x8, 0x1}, 0x8, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900010062"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0xac6f71ad48beb4ea, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0xa0080, 0x1c8) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.560818449s ago: executing program 2 (id=186): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{0x0}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) 1.488682762s ago: executing program 0 (id=187): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002060101000000000000000001000000140007800800124000000005050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x7ff, 0xa, "5dee000000594000"}) 1.461549345s ago: executing program 1 (id=188): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)={0x0, 0x1d4, 0x1f}, 0x18) (async) socket$packet(0x11, 0x3, 0x300) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x119) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = open(&(0x7f0000000240)='./file1\x00', 0x242002, 0x0) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 1.44908923s ago: executing program 3 (id=189): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)=ANY=[], 0x12) 1.410306967s ago: executing program 4 (id=190): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x80800) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @remote}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xe}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb0, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_PROTOINFO={0x68, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x64, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xa7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5d5}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xd}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x33db}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x54}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffc}]}}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x4}]}]}, 0xb0}}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.202480258s ago: executing program 2 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) 1.201072642s ago: executing program 1 (id=192): syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r0 = socket$kcm(0x29, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x8, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) dup(r0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0x0) r3 = inotify_init1(0x40000) preadv(r3, &(0x7f00000014c0), 0x1, 0x198, 0x0) 1.182398472s ago: executing program 0 (id=193): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x2e0}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x113, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x22}, 0x0, 0x600c011, 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x90) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000180)={'#! ', '', [{0x20, '`\x00\x00'}]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1.153742065s ago: executing program 4 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x800, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(0x0, 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000194c0)='numa_maps\x00') pread64(r5, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 1.014495316s ago: executing program 1 (id=195): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000040)="2832fcfde099b6729b5d4986c2b0", 0xe) write$smackfs_label(r0, &(0x7f0000000080)={'/sys/fs/smackfs/revoke-subject\x00'}, 0x20) write$smackfs_label(r0, &(0x7f00000000c0)={'/sys/fs/smackfs/revoke-subject\x00'}, 0x20) r1 = fsopen(&(0x7f0000000100)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000140)={0x0, 0x1}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000180)=@rose={'rose', 0x0}, 0x10) r3 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000200)={0x9, 0x4, 0x1, 0x9f8, 0xb437, 0xd71, 0x80000000}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000400)={r8, r10, r11, 0x8, 0xa, 0x4, 0x7, 0x0, 0x5, 0xfffffff7, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, r8, 0xeeeeeeee}) close_range(r3, r1, 0x2) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x154, r13, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x138, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71d2365f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c5872b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10f6160e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d5a5b9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf46}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30086a90}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb30d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ea28e32}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12272ee3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b022f1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x486f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd985}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb042}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9173}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7787}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5705}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe9967d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fe3f562}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3253}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x84841d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf89c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa301}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fc1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc549826}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd604}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1408602}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc02}]}, {0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000008c0)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x4, r8, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000980)={&(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x3, r7, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000a40)={0x1, 0x5, &(0x7f00000007c0)=[r8, 0x0, r6, r5, r9], &(0x7f0000000800)=[0x4, 0x7ac0, 0x4, 0x3, 0x9], &(0x7f00000009c0)=[r12, r12, r12, r14, r12, r15], &(0x7f0000000a00)=[0xfff, 0x9], 0x0, 0x7c}) syz_open_dev$MSR(&(0x7f0000000a80), 0xffffffffffffffff, 0x0) r16 = socket$alg(0x26, 0x5, 0x0) accept$alg(r16, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000b00)={&(0x7f0000000ac0)=[r8, r7], 0x2, 0x80000}) fcntl$setstatus(r2, 0x4, 0x2800) close_range(r2, 0xffffffffffffffff, 0x2) 1.009633384s ago: executing program 3 (id=196): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) (fail_nth: 3) 860.84355ms ago: executing program 2 (id=197): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) listen(r0, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="47436b4c816815fc81d0e21fd7ec4a1915dc9fc0fe06f8eb6d722e85f699369715ed9263c36e63cd683296a55146b9b4f5c821c452ab0e1d9ef91b74c6f4ef51627f74acf58d70ac5acc56480ea6be72acae424a39866ba6ae3667ac959a832a3106307be8e70717456a968c2eaa0d344507f6253f15e6605cd39bed", 0x7c}, {&(0x7f00000002c0)="7e6b37ea4b479588e00b40a612b1949176de42e518bee23a0349893fa005e05906ba9a605f484c46bed328d7d113e6cda116ccc574da811c66ac7e2b89429ceeae9b1a4847ca7656c3c8288bb67bdf7ebc05ce86bca9607026129fc765870f72a96834bdf9425d49f0530c40b76c2b27c118327372cbfd363a3c2781a48bd21055e21bd0521b4e97c0a4ad7b75d59c6d99be3106a60b9a8ad5058430f61b74c29dfa25b8a59db9805d903279209a2e", 0xaf}, {&(0x7f0000000f80)="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", 0xfc}], 0x3, 0x0, 0xffffffffffffff43}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}], 0x2, 0x4094) sendmmsg$inet_sctp(r1, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="603628912c080d05fe6ffd6bd1e9b5874bcd4ec7b897d89f578cd158cf52ba4df741", 0x22}, {&(0x7f0000000440)="40f7b84e6714ce46d1df085ec3dd7db57b3fc2977fa0b0e8480c62820e3b39b435420d29dd23c4eaa10645196fd6e51a59522b549d2df82334b45fe2cc40c8d91c9db63de2686853fab16d4529c7c433360aa969c514e8ca3b688e4c3bcc0199bbe98a034371cd057baed56eef4771fee3bc82b7013d637de8072e6ce5de3361329fd92ae5d5af9808155ac553971880fc5a", 0x92}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x480c0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f0000000180)=""/1, &(0x7f00000001c0)=0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c0041}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x2040150) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000940)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 348.572874ms ago: executing program 1 (id=198): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000008800), 0x0, 0x4004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 125.111429ms ago: executing program 0 (id=199): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003500000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x3, 0x7b543e37d5687e34, 0x1}) socket(0x1d, 0x2, 0x6) epoll_create(0x1) syz_open_procfs$userns(0x0, &(0x7f0000000840)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 10.441787ms ago: executing program 3 (id=200): sendmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000500)=[{0x10, 0x10d, 0x810}], 0x10}}, {{&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x2}}, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, &(0x7f0000000940)=[{0x10, 0x107, 0x1}], 0x10}}, {{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{&(0x7f0000000c80)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'gretap0\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000001180)=[{0xc8, 0x84, 0x7, "654c1017b4cb06ad7e34a09b7571e53fcce31620ba624658726baefc9973e7f3e993812c438e4e2d4ab912dab009e859583ac931608510913203a73739eecb867e2ff94f460a27e6ba56890a1ae0607d0988dc7d3dbfbcc6e14ddb8da88a201f1c54f8912fea3c1ba34e04e2a89769945b081f2a510040110535ce59071ca1d54c4210f5de0f496ca4db2374b7ce9146452755e8639654363c30ee053f34ca3552d6c7c7a9b34190cf94271609200b0398"}, {0xb8, 0x115, 0xd, "3a788a4564322bace7155421142f60a29c9f7df209052203638d5f369e665eb10be140303319de09af257ec7715ef1be27dd4c701666870f827a307896d8f5b9fe24808b98804ca743d40c1ed7af6769a4a519c2f78d1755e375f15f997612e1a81c743ba4cb988a823bfc3c4012f0bbf0697b0cb28aa2470ffe4603aed9753ad5d6db4fc2ea3524527f7df99931371f564cf824a7693b2a84c44d2f385db28c0d"}, {0x88, 0x10b, 0x3b, "862cd279951a8947e2acbc28f3936f5d85ec79c710af40363954668e4588eddd96d6ea907a6420ad683e92e60ecab1c6d7f2415045c20c3ef984012735ae02a7d92c917f9b0c5a7b64762ab970f35fde132cbf27537874e0af77e09319af24ee18dc3ba5ca02db86065ce985c9b7ae4e1c"}, {0x58, 0x10f, 0x8, "d0290240bca981f16cf611a3ffb988269507037655626c0488e9929bc8624f4ff6b065e0cef87276f93a72d90de031e8db868c855d52d5041300c5bf0dc10f6ed0"}, {0xc08, 0x109, 0x80000001, "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"}, {0xe0, 0x11, 0xa3, "c07c3da7cd8a5ff38d730caeec7944cb1ea138489c276e7d0459fff205cdedc4f1e01a191fb4e652cf702f229298701e6549878dc56060a6752064d6ad2a5a5f872b38252ae547059dca12be78b9a3dfce9b5434aa1fa941bd5ddefb215e5581ea4c95b0775451f3551b1a876a1081da3dceaedbdce417d9bcdc3a85ff1ac87def5e1547815b372a5755db8eb8229baef16a263aef13e4b140a6a0efa45cc36f792034ce23e95e02cdf96929fa4e5872b2d7654330f0b55e62de01a825d25f7eaca2e3a54145441bc1"}], 0xf48}}], 0x4, 0x20000015) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 3 (id=201): r0 = creat(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid\x00') setns(r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0xfffffffa) r4 = syz_io_uring_setup(0x327c, &(0x7f0000000400)={0x0, 0x108002, 0x10300, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r4, 0x10a40, 0x0, 0x40, 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000340)={0x60000, 0x10, 0x10001, 0x7fff, 0xd8, "41213a5479d798633670d30c7b5ca4f443b8f3", 0x3, 0x8}) r7 = getpid() syz_open_procfs(r7, &(0x7f00000000c0)='net/ip6_flowlabel\x00') sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='syzkaller1\x00') r11 = dup(r10) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c499, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 64.469623][ T5803] cgroup: Unknown subsys name 'net' [ 64.626752][ T5803] cgroup: Unknown subsys name 'cpuset' [ 64.636418][ T5803] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.942748][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.779772][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.788513][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.796508][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.804557][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.811830][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.847777][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.861033][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.868180][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.868526][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.884312][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.885365][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.891594][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.899522][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.906546][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.913716][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.920795][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.927895][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.934556][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.940622][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.950663][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.956683][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.961827][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.980851][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.992623][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.002500][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.438237][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 70.704544][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.711787][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.719852][ T5814] bridge_slave_0: entered allmulticast mode [ 70.727066][ T5814] bridge_slave_0: entered promiscuous mode [ 70.735003][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 70.745484][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 70.779333][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.786547][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.793787][ T5814] bridge_slave_1: entered allmulticast mode [ 70.800884][ T5814] bridge_slave_1: entered promiscuous mode [ 70.925606][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.987773][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.997388][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 71.013638][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 71.063321][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.070491][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.078142][ T5815] bridge_slave_0: entered allmulticast mode [ 71.086184][ T5815] bridge_slave_0: entered promiscuous mode [ 71.139933][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.147291][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.155064][ T5815] bridge_slave_1: entered allmulticast mode [ 71.161978][ T5815] bridge_slave_1: entered promiscuous mode [ 71.172098][ T5814] team0: Port device team_slave_0 added [ 71.181574][ T5814] team0: Port device team_slave_1 added [ 71.269648][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.276985][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.284698][ T5813] bridge_slave_0: entered allmulticast mode [ 71.291620][ T5813] bridge_slave_0: entered promiscuous mode [ 71.312037][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.319615][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.346011][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.359360][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.366372][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.398806][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400962][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.406224][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.437003][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.444616][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.451751][ T5813] bridge_slave_1: entered allmulticast mode [ 71.458939][ T5813] bridge_slave_1: entered promiscuous mode [ 71.468807][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.511830][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.602205][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.610411][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.617728][ T5824] bridge_slave_0: entered allmulticast mode [ 71.626185][ T5824] bridge_slave_0: entered promiscuous mode [ 71.635633][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.642828][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.649955][ T5816] bridge_slave_0: entered allmulticast mode [ 71.657255][ T5816] bridge_slave_0: entered promiscuous mode [ 71.665967][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.673205][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.680388][ T5816] bridge_slave_1: entered allmulticast mode [ 71.688275][ T5816] bridge_slave_1: entered promiscuous mode [ 71.697559][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.710166][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.733695][ T5815] team0: Port device team_slave_0 added [ 71.739891][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.747185][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.754465][ T5824] bridge_slave_1: entered allmulticast mode [ 71.761390][ T5824] bridge_slave_1: entered promiscuous mode [ 71.821696][ T5815] team0: Port device team_slave_1 added [ 71.864415][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.875869][ T5813] team0: Port device team_slave_0 added [ 71.887844][ T5814] hsr_slave_0: entered promiscuous mode [ 71.894163][ T5814] hsr_slave_1: entered promiscuous mode [ 71.926541][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.938850][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.950181][ T5813] team0: Port device team_slave_1 added [ 71.959058][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.966635][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.993127][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.005741][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.013034][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.023422][ T5826] Bluetooth: hci1: command tx timeout [ 72.039516][ T5820] Bluetooth: hci4: command tx timeout [ 72.044466][ T5832] Bluetooth: hci0: command tx timeout [ 72.055714][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.069009][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.103101][ T5832] Bluetooth: hci3: command tx timeout [ 72.108849][ T5826] Bluetooth: hci2: command tx timeout [ 72.159612][ T5816] team0: Port device team_slave_0 added [ 72.201786][ T5824] team0: Port device team_slave_0 added [ 72.210625][ T5816] team0: Port device team_slave_1 added [ 72.218360][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.225745][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.251866][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.264335][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.271306][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.297357][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.327847][ T5824] team0: Port device team_slave_1 added [ 72.435763][ T5815] hsr_slave_0: entered promiscuous mode [ 72.441998][ T5815] hsr_slave_1: entered promiscuous mode [ 72.448512][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.456716][ T5815] Cannot create hsr debugfs directory [ 72.469270][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.476698][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.503717][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.515579][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.522781][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.549430][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.566527][ T5813] hsr_slave_0: entered promiscuous mode [ 72.573068][ T5813] hsr_slave_1: entered promiscuous mode [ 72.579725][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.587424][ T5813] Cannot create hsr debugfs directory [ 72.632348][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.639563][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.668833][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.681422][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.688745][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.714762][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.916952][ T5824] hsr_slave_0: entered promiscuous mode [ 72.923662][ T5824] hsr_slave_1: entered promiscuous mode [ 72.930364][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.939211][ T5824] Cannot create hsr debugfs directory [ 72.961212][ T5816] hsr_slave_0: entered promiscuous mode [ 72.967809][ T5816] hsr_slave_1: entered promiscuous mode [ 72.974462][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.982029][ T5816] Cannot create hsr debugfs directory [ 73.257944][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.270173][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.307540][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.350498][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.410695][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.445929][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.456524][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.469457][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.540143][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.555323][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.580346][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.609429][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.681695][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.695562][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.721272][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.732345][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.776133][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.783484][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.829556][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.837053][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.850011][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.862231][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.891999][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.899145][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.911344][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.939278][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.043429][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.101190][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.108846][ T5826] Bluetooth: hci4: command tx timeout [ 74.114335][ T5832] Bluetooth: hci1: command tx timeout [ 74.114348][ T5820] Bluetooth: hci0: command tx timeout [ 74.183060][ T5820] Bluetooth: hci2: command tx timeout [ 74.184678][ T5826] Bluetooth: hci3: command tx timeout [ 74.204197][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.234958][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.242076][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.258928][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.278409][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.307205][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.314419][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.356712][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.363906][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.380813][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.388059][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.421316][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.451047][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.458234][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.489850][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.503497][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.510645][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.526566][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.611898][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.647849][ T5814] veth0_vlan: entered promiscuous mode [ 74.669352][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.676557][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.721081][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.728279][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.745434][ T5814] veth1_vlan: entered promiscuous mode [ 74.898671][ T5814] veth0_macvtap: entered promiscuous mode [ 74.938261][ T5814] veth1_macvtap: entered promiscuous mode [ 74.965730][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.000589][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.041668][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.062163][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.079361][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.096999][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.106923][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.120918][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.130302][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.258507][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.309204][ T5815] veth0_vlan: entered promiscuous mode [ 75.326804][ T5813] veth0_vlan: entered promiscuous mode [ 75.354936][ T5813] veth1_vlan: entered promiscuous mode [ 75.364149][ T5815] veth1_vlan: entered promiscuous mode [ 75.423423][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.431432][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.470056][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.499729][ T5816] veth0_vlan: entered promiscuous mode [ 75.515658][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.531019][ T5813] veth0_macvtap: entered promiscuous mode [ 75.538936][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.566695][ T5815] veth0_macvtap: entered promiscuous mode [ 75.589280][ T5813] veth1_macvtap: entered promiscuous mode [ 75.626804][ T5816] veth1_vlan: entered promiscuous mode [ 75.635073][ T5815] veth1_macvtap: entered promiscuous mode [ 75.667851][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.678802][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.694100][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.731269][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.747690][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.759929][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.789296][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.800122][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.808067][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.810936][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.838950][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.850637][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.861537][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.871928][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.884517][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.893615][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.915493][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.927603][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.937556][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.948595][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.961447][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.048084][ T5815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.058211][ T5815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.062108][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.068784][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.095759][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142246][ T5816] veth0_macvtap: entered promiscuous mode [ 76.159476][ T5816] veth1_macvtap: entered promiscuous mode [ 76.183419][ T5826] Bluetooth: hci0: command tx timeout [ 76.189092][ T5826] Bluetooth: hci4: command tx timeout [ 76.191036][ T5820] Bluetooth: hci1: command tx timeout [ 76.220890][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.232825][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.242920][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.253409][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.264237][ T5820] Bluetooth: hci2: command tx timeout [ 76.269989][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.280547][ T5820] Bluetooth: hci3: command tx timeout [ 76.286122][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.298137][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.351085][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.366810][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.377027][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.388150][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.398858][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.409901][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.421832][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.431127][ T5907] FAULT_INJECTION: forcing a failure. [ 76.431127][ T5907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.439231][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.454017][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: syz.2.6 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 76.454038][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 76.454054][ T5907] Call Trace: [ 76.454061][ T5907] [ 76.454071][ T5907] dump_stack_lvl+0x189/0x250 [ 76.454100][ T5907] ? __lock_acquire+0xaac/0xd20 [ 76.454122][ T5907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.454142][ T5907] ? __pfx__printk+0x10/0x10 [ 76.454164][ T5907] ? __might_fault+0xb0/0x130 [ 76.454195][ T5907] should_fail_ex+0x414/0x560 [ 76.454223][ T5907] _copy_from_iter+0x1db/0x15a0 [ 76.454250][ T5907] ? policy_nodemask+0x27c/0x720 [ 76.454271][ T5907] ? __pfx__copy_from_iter+0x10/0x10 [ 76.454300][ T5907] ? set_page_refcounted+0xa0/0x1e0 [ 76.454323][ T5907] ? page_copy_sane+0x4e/0x280 [ 76.454342][ T5907] copy_page_from_iter+0x7b/0x100 [ 76.454362][ T5907] tun_get_user+0x1b13/0x3c20 [ 76.454386][ T5907] ? tun_get_user+0x687/0x3c20 [ 76.454418][ T5907] ? __pfx_tun_get_user+0x10/0x10 [ 76.454446][ T5907] ? __lock_acquire+0xaac/0xd20 [ 76.454468][ T5907] ? ref_tracker_alloc+0x318/0x460 [ 76.454487][ T5907] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 76.454507][ T5907] ? tun_get+0x1c/0x2f0 [ 76.454530][ T5907] ? tun_get+0x1c/0x2f0 [ 76.454547][ T5907] ? tun_get+0x1c/0x2f0 [ 76.454570][ T5907] tun_chr_write_iter+0x113/0x200 [ 76.454592][ T5907] vfs_write+0x548/0xa90 [ 76.454616][ T5907] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 76.454636][ T5907] ? __pfx_vfs_write+0x10/0x10 [ 76.454665][ T5907] ? __fget_files+0x2a/0x420 [ 76.454696][ T5907] ksys_write+0x145/0x250 [ 76.454718][ T5907] ? __pfx_ksys_write+0x10/0x10 [ 76.454741][ T5907] ? do_syscall_64+0xba/0x210 [ 76.454761][ T5907] do_syscall_64+0xf6/0x210 [ 76.454777][ T5907] ? clear_bhb_loop+0x45/0xa0 [ 76.454797][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.454816][ T5907] RIP: 0033:0x7f97fe58d41f [ 76.454836][ T5907] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 76.454849][ T5907] RSP: 002b:00007f97ff318000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 76.454867][ T5907] RAX: ffffffffffffffda RBX: 00007f97fe7b5fa0 RCX: 00007f97fe58d41f [ 76.454879][ T5907] RDX: 000000000000004a RSI: 0000200000000800 RDI: 00000000000000c8 [ 76.454888][ T5907] RBP: 00007f97ff318090 R08: 0000000000000000 R09: 0000000000000000 [ 76.454898][ T5907] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 76.454907][ T5907] R13: 0000000000000001 R14: 00007f97fe7b5fa0 R15: 00007fff4cf5ebc8 [ 76.454932][ T5907] [ 76.462655][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.734327][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743810][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.770579][ T5909] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.793259][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.801118][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.823130][ T5824] veth0_vlan: entered promiscuous mode [ 76.881698][ T5824] veth1_vlan: entered promiscuous mode [ 76.998308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.009065][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.062403][ T5824] veth0_macvtap: entered promiscuous mode [ 77.109442][ T5824] veth1_macvtap: entered promiscuous mode [ 77.109804][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.149136][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.159848][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.175816][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.231950][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.256098][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.263243][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.293125][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.310646][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.326011][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.335916][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.346582][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.350108][ T5913] ./file0: Can't lookup blockdev [ 77.356536][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.371996][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.385928][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.418424][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.451564][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.479332][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.492476][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.502308][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.516518][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.564691][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.575606][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.591701][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.617348][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.630415][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.640703][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.649861][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.666972][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.676959][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.282527][ T5820] Bluetooth: hci1: command tx timeout [ 78.282855][ T5832] Bluetooth: hci0: command tx timeout [ 78.296484][ T5826] Bluetooth: hci4: command tx timeout [ 78.344738][ T5826] Bluetooth: hci3: command tx timeout [ 78.350487][ T5832] Bluetooth: hci2: command tx timeout [ 78.520808][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.543026][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.667307][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.738874][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.482616][ T5937] can0: slcan on ttyS3. [ 79.723099][ T5938] can0 (unregistered): slcan off ttyS3. [ 79.968910][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.801523][ T5982] program syz.2.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.823825][ T976] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.702230][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 81.718825][ T976] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 81.720416][ T59] cfg80211: failed to load regulatory.db [ 81.729646][ T976] usb 5-1: config 0 has no interface number 0 [ 81.847188][ T976] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 81.912528][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.963439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.992880][ T976] usb 5-1: Product: syz [ 82.042308][ T976] usb 5-1: Manufacturer: syz [ 82.055633][ T976] usb 5-1: SerialNumber: syz [ 82.072623][ T6007] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 82.229727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.250449][ T976] usb 5-1: config 0 descriptor?? [ 82.263948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 82.264117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.534967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.583566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.637467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.743103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.884195][ T976] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.155/input/input5 [ 82.903358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.035325][ T5176] bcm5974 5-1:0.155: could not read from device [ 83.090901][ T5176] bcm5974 5-1:0.155: could not read from device [ 83.203039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.253432][ T976] usb 5-1: USB disconnect, device number 2 [ 83.820782][ T6019] FAULT_INJECTION: forcing a failure. [ 83.820782][ T6019] name failslab, interval 1, probability 0, space 0, times 0 [ 83.833520][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: syz.4.20 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 83.833543][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.833552][ T6019] Call Trace: [ 83.833558][ T6019] [ 83.833564][ T6019] dump_stack_lvl+0x189/0x250 [ 83.833589][ T6019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.833607][ T6019] ? __pfx__printk+0x10/0x10 [ 83.833630][ T6019] ? __pfx___might_resched+0x10/0x10 [ 83.833650][ T6019] ? fs_reclaim_acquire+0x7d/0x100 [ 83.833669][ T6019] should_fail_ex+0x414/0x560 [ 83.833696][ T6019] should_failslab+0xa8/0x100 [ 83.833720][ T6019] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 83.833740][ T6019] ? __alloc_skb+0x112/0x2d0 [ 83.833760][ T6019] __alloc_skb+0x112/0x2d0 [ 83.833779][ T6019] alloc_skb_with_frags+0xca/0x890 [ 83.833793][ T6019] ? __might_fault+0xb0/0x130 [ 83.833826][ T6019] sock_alloc_send_pskb+0x857/0x990 [ 83.833862][ T6019] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 83.833891][ T6019] ? dev_get_by_index+0x22/0x2e0 [ 83.833910][ T6019] ? dev_get_by_index+0x22/0x2e0 [ 83.833935][ T6019] packet_sendmsg+0x3664/0x5400 [ 83.833955][ T6019] ? __lock_acquire+0xaac/0xd20 [ 83.833984][ T6019] ? _parse_integer_limit+0x1ae/0x1f0 [ 83.834011][ T6019] ? smack_socket_sendmsg+0x1fa/0x520 [ 83.834031][ T6019] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 83.834054][ T6019] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.834073][ T6019] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 83.834103][ T6019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 83.834119][ T6019] ? __pfx_packet_sendmsg+0x10/0x10 [ 83.834132][ T6019] __sock_sendmsg+0x219/0x270 [ 83.834152][ T6019] __sys_sendto+0x3bd/0x520 [ 83.834167][ T6019] ? __pfx___sys_sendto+0x10/0x10 [ 83.834178][ T6019] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 83.834204][ T6019] ? __fget_files+0x3a0/0x420 [ 83.834233][ T6019] ? ksys_write+0x1f0/0x250 [ 83.834250][ T6019] ? rcu_is_watching+0x15/0xb0 [ 83.834278][ T6019] __x64_sys_sendto+0xde/0x100 [ 83.834296][ T6019] do_syscall_64+0xf6/0x210 [ 83.834314][ T6019] ? clear_bhb_loop+0x45/0xa0 [ 83.834331][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.834346][ T6019] RIP: 0033:0x7f3cd578e969 [ 83.834360][ T6019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.834373][ T6019] RSP: 002b:00007f3cd6601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.834389][ T6019] RAX: ffffffffffffffda RBX: 00007f3cd59b5fa0 RCX: 00007f3cd578e969 [ 83.834400][ T6019] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000003 [ 83.834410][ T6019] RBP: 00007f3cd6601090 R08: 0000200000000140 R09: 0000000000000014 [ 83.834420][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.834429][ T6019] R13: 0000000000000000 R14: 00007f3cd59b5fa0 R15: 00007ffface39688 [ 83.834452][ T6019] [ 84.451770][ T6034] tipc: Started in network mode [ 84.456885][ T6034] tipc: Node identity 7, cluster identity 4711 [ 84.463227][ T6034] tipc: Node number set to 7 [ 84.736571][ T6038] FAULT_INJECTION: forcing a failure. [ 84.736571][ T6038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.749947][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.2.23 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 84.749970][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 84.749980][ T6038] Call Trace: [ 84.749987][ T6038] [ 84.749994][ T6038] dump_stack_lvl+0x189/0x250 [ 84.750022][ T6038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.750044][ T6038] ? __pfx__printk+0x10/0x10 [ 84.750079][ T6038] should_fail_ex+0x414/0x560 [ 84.750107][ T6038] _copy_to_user+0x31/0xb0 [ 84.750130][ T6038] simple_read_from_buffer+0xe1/0x170 [ 84.750156][ T6038] proc_fail_nth_read+0x1df/0x250 [ 84.750175][ T6038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.750194][ T6038] ? rw_verify_area+0x258/0x650 [ 84.750214][ T6038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.750231][ T6038] vfs_read+0x1fd/0x980 [ 84.750256][ T6038] ? __pfx___mutex_lock+0x10/0x10 [ 84.750274][ T6038] ? __pfx_vfs_read+0x10/0x10 [ 84.750295][ T6038] ? __fget_files+0x2a/0x420 [ 84.750321][ T6038] ? __fget_files+0x3a0/0x420 [ 84.750342][ T6038] ? __fget_files+0x2a/0x420 [ 84.750372][ T6038] ksys_read+0x145/0x250 [ 84.750394][ T6038] ? __pfx_ksys_read+0x10/0x10 [ 84.750424][ T6038] do_syscall_64+0xf6/0x210 [ 84.750441][ T6038] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 84.750456][ T6038] ? clear_bhb_loop+0x45/0xa0 [ 84.750476][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.750509][ T6038] RIP: 0033:0x7f97fe58d37c [ 84.750525][ T6038] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.750538][ T6038] RSP: 002b:00007f97fc3d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.750563][ T6038] RAX: ffffffffffffffda RBX: 00007f97fe7b6160 RCX: 00007f97fe58d37c [ 84.750575][ T6038] RDX: 000000000000000f RSI: 00007f97fc3d50a0 RDI: 0000000000000007 [ 84.750585][ T6038] RBP: 00007f97fc3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 84.750595][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.750604][ T6038] R13: 0000000000000000 R14: 00007f97fe7b6160 R15: 00007fff4cf5ebc8 [ 84.750631][ T6038] [ 85.163863][ T6042] program syz.0.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.868589][ T6054] Zero length message leads to an empty skb [ 86.316575][ T6060] can0: slcan on ttyS3. [ 87.022588][ T6060] can0 (unregistered): slcan off ttyS3. [ 87.209780][ T6065] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 87.763348][ T6079] tipc: Started in network mode [ 87.768226][ T6079] tipc: Node identity 7, cluster identity 4711 [ 87.774592][ T6079] tipc: Node number set to 7 [ 87.877559][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.885784][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.950750][ T6081] bridge0: entered allmulticast mode [ 88.151540][ T6084] bridge_slave_1: left allmulticast mode [ 88.157607][ T6084] bridge_slave_1: left promiscuous mode [ 88.169493][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.828019][ T6084] bridge_slave_0: left allmulticast mode [ 88.834085][ T6084] bridge_slave_0: left promiscuous mode [ 88.844143][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.920182][ T6093] program syz.2.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.992767][ T6091] netlink: 76 bytes leftover after parsing attributes in process `syz.4.39'. [ 89.568201][ T6099] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 90.776254][ T6107] mmap: syz.2.47 (6107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.869138][ T6110] netlink: 'syz.1.49': attribute type 2 has an invalid length. [ 90.881570][ T6116] overlayfs: overlapping lowerdir path [ 90.910814][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.50'. [ 90.989800][ T6113] capability: warning: `syz.0.50' uses deprecated v2 capabilities in a way that may be insecure [ 91.097518][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.52'. [ 91.111798][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.52'. [ 91.129816][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 91.143558][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 91.173800][ T6122] bond0: entered promiscuous mode [ 91.178967][ T6122] bond_slave_0: entered promiscuous mode [ 91.185333][ T6122] bond_slave_1: entered promiscuous mode [ 91.192576][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.202776][ T6122] bridge0: entered promiscuous mode [ 91.365641][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 91.382153][ T10] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 91.412632][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 91.432090][ T10] usb 2-1: can't read configurations, error -61 [ 91.502321][ T6131] program syz.4.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.687264][ T6138] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 91.774197][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.022946][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 92.126288][ T10] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 92.349942][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 92.391719][ T10] usb 2-1: can't read configurations, error -61 [ 92.407060][ T10] usb usb2-port1: attempt power cycle [ 92.644000][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 92.653724][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 93.213313][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.265324][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 93.305662][ T10] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 93.395682][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 93.489355][ T10] usb 2-1: can't read configurations, error -61 [ 93.868683][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 95.150245][ T6214] overlayfs: overlapping lowerdir path [ 95.214985][ T6217] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 95.390442][ T6221] program syz.2.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.634585][ T6225] tmpfs: Unknown parameter 'usrquota_' [ 95.699624][ T6230] syz.2.79 uses obsolete (PF_INET,SOCK_PACKET) [ 96.257351][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.80'. [ 96.474913][ T6235] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.760566][ T6244] dlm: plock device version mismatch: kernel (1.2.0), user (808482864.808464432.808464432) [ 97.000820][ T6252] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 97.158345][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 97.375321][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.88'. [ 97.492043][ T6272] program syz.1.89 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.722397][ T6274] tmpfs: Unknown parameter 'usrquota_' [ 99.278010][ T6282] can0: slcan on ttyS3. [ 99.554366][ T6282] can0 (unregistered): slcan off ttyS3. [ 99.830738][ T6290] wireguard0: entered promiscuous mode [ 99.855383][ T6290] wireguard0: entered allmulticast mode [ 99.995745][ T6294] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 100.377040][ T47] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.450061][ T6311] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 100.481953][ T6313] program syz.3.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.574741][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.598632][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 100.611161][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 100.683161][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 100.719145][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.728839][ T6319] tmpfs: Unknown parameter 'usrquota_' [ 100.757638][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 100.778221][ T47] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 100.798878][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 100.821030][ T47] usb 1-1: Product: syz [ 100.849294][ T47] usb 1-1: Manufacturer: syz [ 100.866961][ T47] usb 1-1: SerialNumber: syz [ 100.951806][ T47] usb 1-1: config 0 descriptor?? [ 101.006427][ T6321] overlayfs: overlapping lowerdir path [ 101.184483][ T47] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 101.210117][ T47] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 101.370142][ T47] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 101.409404][ T47] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 101.442672][ T47] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 101.659646][ T6336] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 101.668770][ T6336] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 102.066326][ T976] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.203046][ T47] usb 1-1: USB disconnect, device number 2 [ 102.632497][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 102.663738][ T6346] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.757009][ T976] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 102.792474][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.808461][ T976] usb 3-1: Product: syz [ 102.822893][ T976] usb 3-1: Manufacturer: syz [ 102.827758][ T976] usb 3-1: SerialNumber: syz [ 102.837140][ T976] usb 3-1: config 0 descriptor?? [ 102.863724][ T6355] program syz.1.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.929232][ T976] gspca_main: sq905-2.14.0 probing 2770:9120 [ 104.279527][ T976] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 104.298655][ T976] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 105.294585][ T6380] overlayfs: overlapping lowerdir path [ 105.372760][ T5821] usb 3-1: USB disconnect, device number 2 [ 106.163755][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.437221][ T6397] program syz.0.128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.514125][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 106.533040][ T47] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 106.734273][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.829663][ T47] usb 4-1: Product: syz [ 106.888301][ T47] usb 4-1: Manufacturer: syz [ 106.940843][ T47] usb 4-1: SerialNumber: syz [ 107.410373][ T47] usb 4-1: config 0 descriptor?? [ 107.492626][ T47] usb 4-1: can't set config #0, error -71 [ 107.539182][ T47] usb 4-1: USB disconnect, device number 2 [ 107.699185][ T6414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.130'. [ 107.710942][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 107.734679][ T6414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.130'. [ 107.762764][ T6414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.130'. [ 108.179863][ T6424] can0: slcan on ttyS3. [ 108.641602][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.649924][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.714728][ T6424] can0 (unregistered): slcan off ttyS3. [ 109.022570][ T5821] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.244396][ T5821] usb 5-1: config 0 has no interfaces? [ 110.258948][ T5821] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 110.273161][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.283470][ T5821] usb 5-1: Product: syz [ 110.288008][ T6444] overlayfs: overlapping lowerdir path [ 110.296305][ T5821] usb 5-1: Manufacturer: syz [ 110.301165][ T5821] usb 5-1: SerialNumber: syz [ 111.420702][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.463766][ T5821] usb 5-1: config 0 descriptor?? [ 111.533409][ T6457] program syz.1.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.645802][ T47] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 111.661278][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.684950][ T5821] usb 5-1: USB disconnect, device number 3 [ 111.716602][ T47] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 111.757534][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.788769][ T47] usb 4-1: Product: syz [ 111.796963][ T47] usb 4-1: Manufacturer: syz [ 111.801857][ T47] usb 4-1: SerialNumber: syz [ 111.821979][ T47] usb 4-1: config 0 descriptor?? [ 111.845861][ T47] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 111.853060][ T47] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 112.040106][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.238265][ T6447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.325458][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 112.350146][ T6447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.423685][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.480661][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.537087][ T976] usb 4-1: USB disconnect, device number 3 [ 112.577824][ T5869] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 112.623437][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.659780][ T5869] usb 1-1: config 0 descriptor?? [ 112.839206][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 113.027159][ T6478] tmpfs: Unknown parameter 'usrquota_block_har' [ 113.046306][ T6483] overlayfs: overlapping lowerdir path [ 113.200496][ T5869] greenasia 0003:0E8F:0012.0001: item fetching failed at offset 0/3 [ 114.056950][ T5869] greenasia 0003:0E8F:0012.0001: parse failed [ 114.147240][ T5869] greenasia 0003:0E8F:0012.0001: probe with driver greenasia failed with error -22 [ 114.422826][ T5869] usb 1-1: USB disconnect, device number 3 [ 115.136241][ T6519] vivid-000: kernel_thread() failed [ 115.339769][ T6527] program syz.2.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.573814][ T6537] bridge0: port 3(hsr0) entered blocking state [ 115.599970][ T6537] bridge0: port 3(hsr0) entered disabled state [ 115.606944][ T6537] hsr0: entered allmulticast mode [ 115.637401][ T6537] hsr_slave_0: entered allmulticast mode [ 115.672605][ T6537] hsr_slave_1: entered allmulticast mode [ 115.698009][ T6537] hsr0: entered promiscuous mode [ 115.723177][ T6537] bridge0: port 3(hsr0) entered blocking state [ 115.729505][ T6537] bridge0: port 3(hsr0) entered forwarding state [ 116.364086][ T6556] overlayfs: missing 'lowerdir' [ 116.384237][ T6558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.847547][ T30] audit: type=1400 audit(1745939922.565:2): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=6557 comm="syz.0.165" path="socket:[10663]" dev="sockfs" ino=10663 [ 117.517274][ T6567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'. [ 120.848039][ T6594] FAULT_INJECTION: forcing a failure. [ 120.848039][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.861306][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.1.173 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 120.861328][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.861337][ T6594] Call Trace: [ 120.861344][ T6594] [ 120.861351][ T6594] dump_stack_lvl+0x189/0x250 [ 120.861375][ T6594] ? __lock_acquire+0xaac/0xd20 [ 120.861403][ T6594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.861424][ T6594] ? __pfx__printk+0x10/0x10 [ 120.861447][ T6594] ? __might_fault+0xb0/0x130 [ 120.861480][ T6594] should_fail_ex+0x414/0x560 [ 120.861507][ T6594] _copy_from_user+0x2d/0xb0 [ 120.861528][ T6594] ___sys_sendmsg+0x158/0x2a0 [ 120.861549][ T6594] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.861600][ T6594] ? __fget_files+0x2a/0x420 [ 120.861621][ T6594] ? __fget_files+0x3a0/0x420 [ 120.861653][ T6594] __x64_sys_sendmsg+0x19b/0x260 [ 120.861673][ T6594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 120.861707][ T6594] ? do_syscall_64+0xba/0x210 [ 120.861728][ T6594] do_syscall_64+0xf6/0x210 [ 120.861744][ T6594] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 120.861759][ T6594] ? clear_bhb_loop+0x45/0xa0 [ 120.861779][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.861794][ T6594] RIP: 0033:0x7fab3358e969 [ 120.861814][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.861828][ T6594] RSP: 002b:00007fab34407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.861845][ T6594] RAX: ffffffffffffffda RBX: 00007fab337b6160 RCX: 00007fab3358e969 [ 120.861856][ T6594] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 120.861867][ T6594] RBP: 00007fab34407090 R08: 0000000000000000 R09: 0000000000000000 [ 120.861877][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.861886][ T6594] R13: 0000000000000000 R14: 00007fab337b6160 R15: 00007ffe29fd78b8 [ 120.861912][ T6594] [ 121.053701][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.164423][ T6597] program syz.3.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.786237][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 121.884006][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 124.186378][ T6626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.185'. [ 124.765391][ T6607] bond0: entered promiscuous mode [ 124.770541][ T6607] bond_slave_0: entered promiscuous mode [ 124.777787][ T6607] bond_slave_1: entered promiscuous mode [ 124.786924][ T6607] bridge0: entered promiscuous mode [ 124.803314][ T6607] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 124.810910][ T6607] Cannot create hsr debugfs directory [ 125.613455][ T6659] FAULT_INJECTION: forcing a failure. [ 125.613455][ T6659] name failslab, interval 1, probability 0, space 0, times 0 [ 125.646304][ T6659] CPU: 0 UID: 0 PID: 6659 Comm: syz.3.196 Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 125.646330][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 125.646339][ T6659] Call Trace: [ 125.646345][ T6659] [ 125.646352][ T6659] dump_stack_lvl+0x189/0x250 [ 125.646380][ T6659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.646401][ T6659] ? __pfx__printk+0x10/0x10 [ 125.646427][ T6659] ? __pfx___might_resched+0x10/0x10 [ 125.646448][ T6659] ? fs_reclaim_acquire+0x7d/0x100 [ 125.646469][ T6659] should_fail_ex+0x414/0x560 [ 125.646496][ T6659] should_failslab+0xa8/0x100 [ 125.646520][ T6659] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 125.646542][ T6659] ? __d_alloc+0x31/0x6f0 [ 125.646562][ T6659] __d_alloc+0x31/0x6f0 [ 125.646579][ T6659] ? security_inode_alloc+0x39/0x330 [ 125.646602][ T6659] d_alloc_pseudo+0x1f/0xb0 [ 125.646620][ T6659] alloc_file_pseudo+0xcc/0x210 [ 125.646639][ T6659] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 125.646684][ T6659] ? evm_inode_alloc_security+0x40/0xb0 [ 125.646702][ T6659] ? security_inode_alloc+0xd5/0x330 [ 125.646732][ T6659] sock_alloc_file+0xb8/0x2e0 [ 125.646756][ T6659] do_accept+0x34b/0x680 [ 125.646783][ T6659] ? __pfx_do_accept+0x10/0x10 [ 125.646826][ T6659] __sys_accept4+0x11c/0x1c0 [ 125.646851][ T6659] ? __pfx___sys_accept4+0x10/0x10 [ 125.646877][ T6659] ? rcu_is_watching+0x15/0xb0 [ 125.646902][ T6659] __x64_sys_accept4+0x9a/0xb0 [ 125.646924][ T6659] do_syscall_64+0xf6/0x210 [ 125.646942][ T6659] ? clear_bhb_loop+0x45/0xa0 [ 125.646962][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.646977][ T6659] RIP: 0033:0x7f2da198e969 [ 125.646992][ T6659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.647005][ T6659] RSP: 002b:00007f2d9f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 125.647022][ T6659] RAX: ffffffffffffffda RBX: 00007f2da1bb6080 RCX: 00007f2da198e969 [ 125.647034][ T6659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 125.647042][ T6659] RBP: 00007f2d9f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.647052][ T6659] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 125.647062][ T6659] R13: 0000000000000000 R14: 00007f2da1bb6080 R15: 00007ffd9a9b5868 [ 125.647087][ T6659] [ 126.299589][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.199'. [ 126.331833][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.199'. [ 126.422923][ C1] [ 126.425289][ C1] ============================================ [ 126.431456][ C1] WARNING: possible recursive locking detected [ 126.437630][ C1] 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 Not tainted [ 126.444761][ C1] -------------------------------------------- [ 126.450919][ C1] udevd/5191 is trying to acquire lock: [ 126.456467][ C1] ffff888075cc4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 126.465549][ C1] [ 126.465549][ C1] but task is already holding lock: [ 126.472918][ C1] ffff88807f49ef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 126.481999][ C1] [ 126.481999][ C1] other info that might help us debug this: [ 126.490059][ C1] Possible unsafe locking scenario: [ 126.490059][ C1] [ 126.497508][ C1] CPU0 [ 126.500788][ C1] ---- [ 126.504065][ C1] lock(&hsr->seqnr_lock); [ 126.508580][ C1] lock(&hsr->seqnr_lock); [ 126.513090][ C1] [ 126.513090][ C1] *** DEADLOCK *** [ 126.513090][ C1] [ 126.521231][ C1] May be due to missing lock nesting notation [ 126.521231][ C1] [ 126.529549][ C1] 11 locks held by udevd/5191: [ 126.534312][ C1] #0: ffffffff8e058db0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 126.543914][ C1] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 126.553570][ C1] #2: ffffc90000a08be0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 126.563134][ C1] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400 [ 126.572616][ C1] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 126.582476][ C1] #5: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 126.592408][ C1] #6: ffff88807f49ef30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 126.601900][ C1] #7: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 126.611381][ C1] #8: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 126.621288][ C1] #9: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 126.630505][ C1] #10: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 126.640517][ C1] [ 126.640517][ C1] stack backtrace: [ 126.646393][ C1] CPU: 1 UID: 0 PID: 5191 Comm: udevd Not tainted 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(full) [ 126.646409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 126.646419][ C1] Call Trace: [ 126.646426][ C1] [ 126.646431][ C1] dump_stack_lvl+0x189/0x250 [ 126.646453][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.646469][ C1] ? __pfx__printk+0x10/0x10 [ 126.646492][ C1] print_deadlock_bug+0x28b/0x2a0 [ 126.646512][ C1] validate_chain+0x1a3f/0x2140 [ 126.646532][ C1] ? __lock_acquire+0xaac/0xd20 [ 126.646550][ C1] ? __lock_acquire+0xaac/0xd20 [ 126.646578][ C1] __lock_acquire+0xaac/0xd20 [ 126.646595][ C1] ? hsr_dev_xmit+0x19a/0x220 [ 126.646612][ C1] lock_acquire+0x120/0x360 [ 126.646627][ C1] ? hsr_dev_xmit+0x19a/0x220 [ 126.646646][ C1] ? hsr_dev_xmit+0x19a/0x220 [ 126.646662][ C1] _raw_spin_lock_bh+0x36/0x50 [ 126.646681][ C1] ? hsr_dev_xmit+0x19a/0x220 [ 126.646696][ C1] hsr_dev_xmit+0x19a/0x220 [ 126.646713][ C1] dev_hard_start_xmit+0x2ff/0x880 [ 126.646733][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 126.646751][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 126.646767][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 126.646786][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.646812][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.646828][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 126.646842][ C1] ? ebt_do_table+0x265b/0x2820 [ 126.646871][ C1] br_dev_queue_push_xmit+0x6c5/0x890 [ 126.646890][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.646907][ C1] ? NF_HOOK+0x9e/0x3c0 [ 126.646921][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.646936][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.646951][ C1] NF_HOOK+0x31d/0x3c0 [ 126.646967][ C1] ? NF_HOOK+0x9e/0x3c0 [ 126.646981][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 126.646996][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.647015][ C1] br_forward_finish+0xd3/0x130 [ 126.647029][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 126.647045][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 126.647060][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 126.647074][ C1] NF_HOOK+0x31d/0x3c0 [ 126.647088][ C1] ? __put_partials+0x161/0x1c0 [ 126.647101][ C1] ? put_cpu_partial+0x17c/0x250 [ 126.647115][ C1] ? NF_HOOK+0x9e/0x3c0 [ 126.647129][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 126.647143][ C1] ? do_filp_open+0x1fa/0x410 [ 126.647158][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 126.647176][ C1] __br_forward+0x41e/0x600 [ 126.647191][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 126.647208][ C1] ? __pfx___br_forward+0x10/0x10 [ 126.647223][ C1] ? skb_clone+0x246/0x3a0 [ 126.647239][ C1] maybe_deliver+0xb5/0x160 [ 126.647255][ C1] br_flood+0x31a/0x6a0 [ 126.647272][ C1] ? br_dev_xmit+0x185/0x1840 [ 126.647291][ C1] br_dev_xmit+0x11b3/0x1840 [ 126.647309][ C1] ? arch_stack_walk+0xfc/0x150 [ 126.647324][ C1] ? br_dev_xmit+0x185/0x1840 [ 126.647344][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 126.647363][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 126.647378][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 126.647394][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 126.647412][ C1] dev_hard_start_xmit+0x2ff/0x880 [ 126.647427][ C1] ? save_stack+0xf7/0x1f0 [ 126.647447][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 126.647461][ C1] ? do_syscall_64+0xf6/0x210 [ 126.647474][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.647489][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 126.647506][ C1] ? rcu_is_watching+0x15/0xb0 [ 126.647523][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 126.647540][ C1] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 126.647560][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.647575][ C1] ? __copy_skb_header+0xa7/0x550 [ 126.647589][ C1] ? __asan_memcpy+0x40/0x70 [ 126.647603][ C1] ? __pskb_copy_fclone+0x960/0xf90 [ 126.647619][ C1] ? __asan_memcpy+0x40/0x70 [ 126.647633][ C1] ? __pskb_copy_fclone+0x960/0xf90 [ 126.647649][ C1] ? hsr_create_tagged_frame+0x449/0xc30 [ 126.647669][ C1] ? __asan_memmove+0x40/0x70 [ 126.647683][ C1] ? hsr_addr_subst_dest+0x307/0xac0 [ 126.647703][ C1] hsr_forward_skb+0x158b/0x2860 [ 126.647722][ C1] ? security_file_alloc+0x34/0x330 [ 126.647735][ C1] ? init_file+0x93/0x2f0 [ 126.647749][ C1] ? hsr_forward_skb+0x9e/0x2860 [ 126.647768][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 126.647786][ C1] ? do_raw_spin_lock+0x121/0x290 [ 126.647800][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.647820][ C1] ? hsr_dev_xmit+0x19a/0x220 [ 126.647837][ C1] hsr_dev_xmit+0x1a5/0x220 [ 126.647854][ C1] dev_hard_start_xmit+0x2ff/0x880 [ 126.647873][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 126.647891][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 126.647908][ C1] ? neigh_connected_output+0x1ea/0x460 [ 126.647928][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 126.647943][ C1] ? read_seqbegin+0x122/0x250 [ 126.647959][ C1] ? neigh_connected_output+0x1ea/0x460 [ 126.647976][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.647996][ C1] ? read_seqbegin+0x1ac/0x250 [ 126.648012][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 126.648029][ C1] ? eth_header+0x11b/0x200 [ 126.648042][ C1] ? __asan_memcpy+0x40/0x70 [ 126.648057][ C1] ? eth_header+0x11b/0x200 [ 126.648068][ C1] ? __pfx_eth_header+0x10/0x10 [ 126.648081][ C1] ? neigh_connected_output+0x3b6/0x460 [ 126.648103][ C1] ip6_finish_output2+0x11fb/0x16a0 [ 126.648118][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 126.648132][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 126.648144][ C1] ? ip6_mtu+0x7d/0x3f0 [ 126.648163][ C1] ? ip6_mtu+0x7d/0x3f0 [ 126.648180][ C1] ip6_finish_output+0x234/0x7d0 [ 126.648200][ C1] ndisc_send_skb+0xb47/0x1400 [ 126.648215][ C1] ? ndisc_send_skb+0x208/0x1400 [ 126.648232][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 126.648247][ C1] ? __pfx_dst_output+0x10/0x10 [ 126.648267][ C1] addrconf_rs_timer+0x369/0x670 [ 126.648282][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.648297][ C1] call_timer_fn+0x17b/0x5f0 [ 126.648313][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.648325][ C1] ? call_timer_fn+0xbe/0x5f0 [ 126.648339][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 126.648357][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.648374][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.648393][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 126.648405][ C1] __run_timer_base+0x61a/0x860 [ 126.648419][ C1] ? ktime_get+0x3e/0x1f0 [ 126.648433][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 126.648446][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 126.648464][ C1] run_timer_softirq+0xb7/0x180 [ 126.648478][ C1] handle_softirqs+0x283/0x870 [ 126.648497][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 126.648516][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 126.648536][ C1] __irq_exit_rcu+0xca/0x1f0 [ 126.648554][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 126.648575][ C1] irq_exit_rcu+0x9/0x30 [ 126.648591][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 126.648610][ C1] [ 126.648615][ C1] [ 126.648619][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.648633][ C1] RIP: 0010:lock_release+0x9/0x3e0 [ 126.648650][ C1] Code: ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 f0 b3 d3 [ 126.648661][ C1] RSP: 0018:ffffc900034372b8 EFLAGS: 00000202 [ 126.648674][ C1] RAX: 0000000000000001 RBX: ffffffff90197701 RCX: 3b655e1030941400 [ 126.648684][ C1] RDX: ffffc90003437301 RSI: ffffffff817199f5 RDI: ffffffff8df3b860 [ 126.648693][ C1] RBP: dffffc0000000000 R08: ffffc90003437618 R09: 0000000000000000 [ 126.648703][ C1] R10: ffffc900034373f8 R11: fffff52000686e81 R12: ffffc90003437628 [ 126.648712][ C1] R13: ffffc90003430000 R14: ffffc900034373a8 R15: ffffffff817199f5 [ 126.648722][ C1] ? unwind_next_frame+0xa5/0x2390 [ 126.648739][ C1] ? unwind_next_frame+0xa5/0x2390 [ 126.648753][ C1] ? rcu_is_watching+0x15/0xb0 [ 126.648770][ C1] ? unwind_next_frame+0xa5/0x2390 [ 126.648783][ C1] unwind_next_frame+0x19a9/0x2390 [ 126.648798][ C1] ? unwind_next_frame+0xa5/0x2390 [ 126.648816][ C1] ? save_stack+0xf7/0x1f0 [ 126.648833][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.648846][ C1] arch_stack_walk+0x11c/0x150 [ 126.648862][ C1] ? __reset_page_owner+0x71/0x1f0 [ 126.648880][ C1] stack_trace_save+0x9c/0xe0 [ 126.648892][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 126.648907][ C1] save_stack+0xf7/0x1f0 [ 126.648924][ C1] ? __pfx_save_stack+0x10/0x10 [ 126.648945][ C1] ? page_ext_put+0x97/0xc0 [ 126.648963][ C1] __reset_page_owner+0x71/0x1f0 [ 126.648981][ C1] __free_frozen_pages+0xb05/0xcd0 [ 126.648996][ C1] __put_partials+0x161/0x1c0 [ 126.649010][ C1] put_cpu_partial+0x17c/0x250 [ 126.649024][ C1] ? put_cpu_partial+0x6d/0x250 [ 126.649038][ C1] __slab_free+0x2f7/0x400 [ 126.649052][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 126.649070][ C1] ? __phys_addr+0xba/0x170 [ 126.649086][ C1] qlist_free_all+0x9a/0x140 [ 126.649103][ C1] kasan_quarantine_reduce+0x148/0x160 [ 126.649120][ C1] __kasan_slab_alloc+0x22/0x80 [ 126.649138][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 126.649155][ C1] ? security_file_alloc+0x34/0x330 [ 126.649169][ C1] security_file_alloc+0x34/0x330 [ 126.649182][ C1] init_file+0x93/0x2f0 [ 126.649195][ C1] alloc_empty_file+0x6e/0x1d0 [ 126.649208][ C1] path_openat+0x107/0x3830 [ 126.649222][ C1] ? arch_stack_walk+0xfc/0x150 [ 126.649240][ C1] ? stack_trace_save+0x9c/0xe0 [ 126.649252][ C1] ? stack_depot_save_flags+0x40/0x910 [ 126.649272][ C1] ? kasan_save_track+0x4f/0x80 [ 126.649289][ C1] ? kasan_save_track+0x4f/0x80 [ 126.649304][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 126.649320][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 126.649337][ C1] ? getname_flags+0xb8/0x540 [ 126.649348][ C1] ? __pfx_path_openat+0x10/0x10 [ 126.649361][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.649380][ C1] do_filp_open+0x1fa/0x410 [ 126.649395][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 126.649416][ C1] ? _raw_spin_unlock+0x28/0x50 [ 126.649432][ C1] ? alloc_fd+0x64c/0x6c0 [ 126.649453][ C1] do_sys_openat2+0x121/0x1c0 [ 126.649467][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.649485][ C1] __x64_sys_openat+0x138/0x170 [ 126.649500][ C1] do_syscall_64+0xf6/0x210 [ 126.649512][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 126.649525][ C1] ? clear_bhb_loop+0x45/0xa0 [ 126.649539][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.649551][ C1] RIP: 0033:0x7f1e6b992477 [ 126.649564][ C1] Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 82 69 0d 00 f7 d8 64 89 02 48 83 [ 126.649575][ C1] RSP: 002b:00007ffe2b2efbb8 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 126.649587][ C1] RAX: ffffffffffffffda RBX: 00005618526a39e0 RCX: 00007f1e6b992477 [ 126.649597][ C1] RDX: 0000000000090800 RSI: 00005618526805b0 RDI: 00000000ffffff9c [ 126.649605][ C1] RBP: 00005618526e4290 R08: 0000000000090800 R09: 00005618526805b0 [ 126.649614][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 00005618526805b0 [ 126.649622][ C1] R13: 00000000000000fe R14: 00005618226361c4 R15: 0000000000000000 [ 126.649636][ C1] [ 126.649703][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.823816][ T6678] bond0: entered promiscuous mode [ 126.824627][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.829243][ T6678] bond_slave_0: entered promiscuous mode [ 127.819292][ T6678] bond_slave_1: entered promiscuous mode [ 127.834647][ T6678] bridge0: entered promiscuous mode [ 127.863752][ T6678] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 127.878549][ T6678] Cannot create hsr debugfs directory [ 127.885794][ T6678] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 132.824973][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831295][ T1297] ieee802154 phy1 wpan1: encryption failed: -22