last executing test programs: 15.198957165s ago: executing program 0 (id=237): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x194, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x14, 0xffff}, {0x4, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x79, 0x40, 0x467, 0x9, 0x2, 0xa9, 0x5, 0x3}}, {0xa, 0x2, [0x101, 0x6, 0xd140]}}, {{0x1c, 0x1, {0x7, 0xd, 0x8, 0x9, 0x0, 0x9, 0x2fb6}}, {0x4}}, {{0x1c, 0x1, {0x4, 0xc, 0x800, 0x13b1, 0x2, 0x6, 0x101, 0x4}}, {0xc, 0x2, [0x9, 0x27f8, 0x2, 0x2bf6]}}, {{0x1c, 0x1, {0x8, 0xd, 0x5, 0x5863, 0x1, 0x5, 0x10001, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x24, 0x9, 0x9, 0x5, 0x1, 0x2, 0x8, 0x8}}, {0x14, 0x2, [0x4, 0xe, 0x99f, 0x60, 0x3, 0xfff, 0x9, 0x3]}}, {{0x1c, 0x1, {0x0, 0x7, 0x1, 0x9, 0x1, 0x9, 0x64e4, 0x3}}, {0xa, 0x2, [0xffff, 0x1, 0x80]}}, {{0x1c, 0x1, {0x5, 0x5, 0x81, 0x2, 0x2, 0x81, 0x6, 0x1}}, {0x6, 0x2, [0x49]}}, {{0x1c, 0x1, {0x6, 0x40, 0x1010, 0x8, 0x1, 0x401, 0x5, 0x3}}, {0xa, 0x2, [0x19e, 0x9, 0x4]}}, {{0x1c, 0x1, {0x2, 0x3, 0x3, 0x8001, 0x2, 0x5, 0x9, 0x9}}, {0x16, 0x2, [0x7, 0x1, 0x6, 0x2, 0x4, 0x0, 0x8, 0x5, 0x40]}}]}]}, 0x194}}, 0x4090) 14.715662366s ago: executing program 1 (id=239): getpid() r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xc0}}, @filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x8a6, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe, 0x9, 0x9, 0x8, 0x7, 0x8, 0x4, 0xfffffff7, 0x200, 0x5, 0x1, 0xd, 0x9, 0x8, 0xd, 0x3, 0x7, 0x7, 0x18, 0x9, 0x6, 0xe353, 0x7, 0x4, 0xff, 0x1, 0x3ff, 0x5, 0x81, 0x80, 0x1, 0x0, 0x2, 0x2, 0xfffff603, 0x40000000, 0x2b37, 0x2, 0x6dc6, 0x4, 0x8, 0x0, 0x2, 0x3, 0x0, 0x5, 0xe, 0x6, 0x9, 0x2, 0x4, 0x1, 0x7, 0x7fffffff, 0x8000, 0xa, 0x4, 0x8, 0x7, 0x3, 0xffff78cc, 0x3, 0x3, 0x2, 0x4, 0x3, 0x3, 0x9, 0x0, 0x1f, 0x5, 0x7fff, 0x0, 0x3, 0x9, 0x3, 0x1, 0x1000, 0x17f1, 0x9, 0x1, 0x0, 0xfffffffc, 0x1ff, 0x3, 0x0, 0x4, 0x7, 0x0, 0x6, 0x0, 0x4, 0x7f, 0xffffffff, 0x0, 0x9, 0x6, 0x7, 0x7f, 0x3, 0x6, 0x4, 0x4c9, 0x6, 0x6, 0x4dd, 0x4, 0xff, 0xd2, 0x1, 0x1, 0xfcea, 0x5, 0x5, 0x9, 0x1f31, 0x4, 0x88000, 0x8000, 0x93, 0xcaf6, 0x7, 0x4, 0xffffffff, 0x1, 0x9c00, 0x6, 0x80000000, 0x4, 0x2, 0x80000001, 0x2, 0x80, 0x1, 0x2000, 0x0, 0x9, 0x4, 0x1, 0x2, 0x0, 0x4395, 0x80000001, 0xb, 0x401, 0xfffffe00, 0x9, 0x7, 0xf523, 0x0, 0x7, 0x80000000, 0x7fffffff, 0x5, 0x3, 0x5, 0x7f, 0xffff, 0x2e, 0x5, 0x3, 0x198, 0x1, 0x8b, 0x6, 0x8, 0x9, 0x548, 0x21d0, 0x7, 0x5, 0x7ff, 0x7, 0x2, 0x5, 0xffff, 0x80000000, 0x401, 0x4, 0xfffffff2, 0xd, 0x8, 0xbf, 0xf, 0x4, 0x401, 0xfff, 0x5, 0xfff, 0x1, 0x10, 0x7ee2, 0xb, 0x1, 0xf, 0x0, 0xc7f4, 0x0, 0x212, 0x6, 0x2, 0x1, 0xfffffffe, 0xffffff67, 0x1, 0x2, 0xfff, 0x80000000, 0x8, 0x8, 0x9, 0xfffffff7, 0x8, 0xbf0e, 0x2, 0xa9ab, 0x6, 0x3, 0x6, 0x5, 0x1, 0x1, 0x9043, 0x101, 0x375c, 0x6, 0x4, 0x81, 0x80, 0xb6, 0xffffffff, 0x1, 0x530, 0x10001, 0x1, 0x0, 0x5, 0x3, 0x8, 0x7, 0x1, 0x7, 0x895, 0x9, 0x9, 0x5, 0x0, 0x6, 0x3, 0xfffffff9, 0x9, 0xffffffff, 0xffffffff, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0xc, 0x1, 0xd, 0x3ff, 0x101, 0xd, 0xd, 0x80000000, 0x3, 0xfffffffd, 0x2, 0xcb, 0x7f, 0xbe38, 0x7, 0xd7, 0x7f, 0x9, 0xfd2, 0xfffffff9, 0x7d, 0xffffffff, 0x6, 0x7f, 0x100, 0x7fffffff, 0xe3, 0x7321, 0xffff, 0x0, 0x6, 0x800, 0x4, 0x5, 0x3, 0x5, 0xb, 0x4, 0x5, 0x9, 0x3d2, 0x7d, 0x2, 0x6, 0x5, 0x0, 0x9, 0x1, 0x8, 0xffff7fff, 0x3, 0x8, 0x1f5, 0x7, 0x5, 0x7, 0x9, 0xfff, 0x0, 0x1000, 0x5, 0x5, 0x8, 0x200, 0x483, 0x2, 0x80, 0x7, 0x100, 0x3, 0x0, 0x8, 0x100, 0x9, 0xaf9, 0xa4c7, 0xfffffff8, 0xfffffffc, 0x6, 0x7ff, 0x6, 0x5, 0x7, 0x2, 0x7, 0x40, 0x1, 0x8, 0xf3, 0x6, 0x8, 0x84f2, 0xee, 0xffffffff, 0x9, 0x8, 0x1, 0x3, 0xb05, 0x5, 0x5b0a, 0xb4e, 0x10, 0x9, 0x4, 0x882e, 0x1, 0x5, 0x8, 0x10000081, 0x6, 0x3, 0x5, 0x1, 0x508, 0x4, 0xfffff004, 0x7, 0x800, 0x40, 0x5e, 0xa, 0xfeeb, 0x2, 0xc, 0x3, 0x9, 0xa8, 0x2, 0x3, 0x80000001, 0x178, 0xda, 0x7, 0x5, 0x0, 0x8000, 0x9, 0x3, 0x5, 0x8, 0x1, 0x4f, 0xfffffffa, 0x6, 0x80000001, 0xd, 0x9, 0xa85, 0x5, 0x1, 0x401, 0x3, 0x6, 0x7f, 0x4, 0x1, 0xa4, 0x6, 0xb, 0x101, 0x4, 0x1, 0xf1, 0x6, 0xa, 0x9e67, 0xa, 0x5, 0xf34, 0x1, 0xca, 0x200, 0x3e4, 0x6e7, 0x6d, 0x0, 0x101, 0x1345, 0x1000, 0x1, 0x9, 0x1, 0xf, 0x0, 0x8, 0x3, 0xc0000000, 0x7, 0xa8b2, 0x5, 0x41, 0xe21, 0x9, 0x400, 0x4f40bdb8, 0x1a53, 0xfffffe00, 0x1, 0x8000, 0xba85, 0x6, 0x0, 0xab47, 0x3, 0xfffffffc, 0xa9, 0x80000000, 0x0, 0x9, 0x7ad4, 0x8, 0x3, 0x10, 0xfffffff9, 0xd, 0x6, 0x4, 0x4, 0x6, 0x3b, 0x77, 0x2, 0x4, 0x3, 0x7, 0x80000000, 0x2, 0x8924, 0x800, 0x1, 0x1000, 0x3, 0xc, 0xc, 0x8, 0xdb, 0x3, 0x4, 0x1, 0xffff8000, 0xdea0, 0x10001, 0x81, 0x0, 0x9, 0x1, 0xffff05e3, 0xfffffffe, 0x8, 0x8, 0x1, 0x8, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x2, 0x3, 0x4db, {0x2, 0x6c946bc6f361f16, 0x5, 0x3, 0x200, 0xf50}, {0x10, 0x2, 0x5, 0x1, 0xc25, 0x5}, 0x9, 0x5, 0x8000}}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x0, 0x1c, 0x2, {0x2, 0x0, @loopback}}, 0x24) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x0, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="f3a47923382d6f2436152cf1f6859b3c74234dce8747b6ad65ccdc533ea707dc", 0x20}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000100)="8372fc54aa9a80619579b6fb67d71348ef6b61c8d0dbdc5a8db5efb304333ba2f87a6b94328a68e63e86229f04f26f1f21ab4ce74595bf21132d94d1f13040779b463141f63da9dc25e833777a8a5aa7ce0d0481c769993d5cbc83d517bcad5eca1606c669f24baea4fa7d30c01976c8cc140ec84ed7372860244f193ebf9ea76d2b83f52bd9de3ba0548c1eed62097ad1cd932556b5", 0x96}], 0x3, &(0x7f0000002240)=[{0x90, 0x10e, 0x80000000, "35a3f7ccfac774b16505d93466e6de8940664e587ffdb71af593209565271a0d9c0c60090b2786a394c95890ef675a7f6cf8f201b00cdede7172651a77b8901b6d15ba4d246d6a44860ec05036416572b8a0a3b1659913c5d3edc80756450b09967bd8e770c1949450d67d61cbc02717d96fab80337500d3b8"}, {0x10, 0x108, 0x800}, {0x108, 0x107, 0x80000000, "3e93d0303c200b8c3d097a60662a01b9d37a53d992207a421b7e0087eef661a3afb146dc86927596d71b3d21ebaba0e9b6c34f30bdc160e34a6b6880170a7dea989ece3fd79907e095422aadef04c905ecd0b69bb7d4ea903c2971e9f8f2594eb1f44fe9d476aaaea10987bbf47fe2a7127dfb9e23e0d377deaebdf4f9f5d836443de4fa76aa5cb01173e431a9fa4d512f5fcde4f5935a3f2eb742d82677cc4f2b0bdba8f145f36685fb8110097940fdef876f6ca89c68d0cec4e224c831a92a750aef74e7c72362bbcc9fe3ca11c04bb9976300eb1bda056f0cee84758e5309329dae0ec1a8d1425ff24d0953825bb56e40bd0f"}, {0x58, 0x116, 0x5, "72adb111fc35cdbe759fb969f01072f170b0b76d8b43a72c0aa81994b72144ddf057c6644f9eb6434f19d99ff1fcdc9991e105452afcd7ed6a88dec7879fe9bc86"}, {0xe8, 0x10f, 0xfffff001, "144995e5d1d624f1dedb8c7700b7ed7795349a892700fd4a6ca9042a07d86fa32aee30032ad7dc82604f00055570178b3cbbe97ce56f397e733b9c81d6a9c5c4bb62e724e4e937622a37c3d378de87f3f9f7d1857a8f831dfe3353f8e69be2c6cd5251ab8bcc5f68c6dea8fde157c81535602f2aeb249b183e4a23099cd2899f3341664c214205b6e8992c293cef3385c153512799121661b805116e250472159f832b5f693ba9d595643c9a9befe1b464d2ee53a86ff1c9eda0116a22a55ba0ab9aaf8767ff35699f1144845f0a9f3175e4aa11"}, {0x1010, 0x0, 0x5b528743, "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"}, {0x18, 0x6, 0xfffffff8, "04e2"}, {0xd8, 0x10f, 0xfffffffa, "cbbbdfba90b3f192951ba5fe8694d0735b980e455c22d053a323e937895635fcffbdb9db681ae215af9cd8db3addd76bff022fdf9a3ca7c3f5e14f81aa7a9b282ec57d7436ffe00261fd08e2794a0304ed646142ee9aa83945745a1bf9a104d8a9fb17b1e3eaca2506a8ff543a1be5cb2f6fc6061e1f4ae89027a0fc60055b8b3c0a32580b878db16e46d1a49998c71a942c857b881336848e5dc0ac62815a343699cdc6f617b3ce1e9b00f12297b2314c15c8a621b394e84030901ed5bfe1b8decbe745"}, {0x1010, 0x104, 0x400, "32778d181e6a7c916e9e5372497b1f04cb3144953578bfe9bb810de42a7b20b6fbe0b3071d918c8ee8ac0571c0200ecf49692bdaced8cb52e2de0dad44b799ceec6d5d949fb048134cefa0ed6697f7685d6fe96915a557756fd789b368e70aa9b77e4477462b76902623effefbab4a21b7ad62a40cc4057db9e7745d4093f3f66dafade67f1329a2439d659249d613ccfda12276a3c017a137eb686714d6bcfcc1a218892b401e17f5cfe74616bf2e3a3a3310c478ed357dd82d65e69bc0c8af96d60cc592ebc091f831e16c551d10e8d03b145dd28a24e7647aeeee38641423ea0007222cc98b815e811116b8ea69acbcf6c509c4b39b78c3ee5d31b628bafed26ec384ebfea413575996b1f01c0dc9cd7fb73de391c038fc1c6994431731bc68b2358ad957394817eb264c6fac94a71a73ea02bb111c92ef40ac81162c23daa78f67339683f2d838b80c7c9df9793312a87a5be8f3bb92a40998bf1642a24a027c3421e193cb0f116ff90d8e54bca1acbb615f968d306adf7a8fc735b63c05167f0c2172b6666daa7bec3939c457beb14d6a3e9970a6bebde89beb271a4a6e650ce77e987413bac52122f2bd49d2bcba7b7d81a30d56cdb4ceab2123ee2b2e3c6a12aa0120b02a5f28ae0f6037e8f675144a42c572ed228e01145ab65822fd4d327d03f77bc36a5cbe95e8903d3cbd1f01b1eb0df6ee92295dd64b319db5991b83fde3280e9b2ba064eabd3712b3f60904c7cf0c79b0135a28fd2f49b736a2f652fb3f5019164e95bdc9cb169d4b675635782ca28c2557e317dc49e422dee1bde31a0bb54ff95cc37f5f8140f8e402a68fd57c5a87a50897ca497516c5aaabaaa0c199c564852a31f77be23b36466d7b46126999a07d86911e542489af0ab7815fc37ef0221b1916e4ec50e84385866f425adaf93d09494bb72931f1d293442c0fe109eee284f3ae5ed601821e83a7de4f75fc24efe983914ed48ad9c8f3893afef2c4ad1a9e7df1a3cda6cc6e0fe3db9f0e1f6f069d6a12d485eea3542d55a622faca56ef1530bff4945d31ca25209f6fa821c30f1dfb55c526a9be4d3afe60378bdd2c2b0ee46211a3ec0b60d7f0cc2c4875d05d8c7459054b867dffc24acd15ca5abacd0aa8453c94524d5aa007dd0ab0ceca75017bc884ac01302ac136685d58a4f52e0e83d9f42e95334dcf9bd882ecdfbf51c8bd4b20b115a9faf7b6716a13c07aff9bfc612e7b3a91248e782a62dda42b859d81479a8cbef96cf2ae1fb1d0ebc0d2e99472b76bc4d11d56252b6b627e900cb40b59c265037c0b1e2c15d675f05eec1642015833c62a6a06a6eca66ac9fcaa7528fc471dec442569852312705790effefaf38b5c63de956a9f459b5d8851dd847df8806b025d09732663e7c080d6d57348e5ff0dbfb3fa12dfa21160943afdaed3195ae0bb787b388b2c86ee4195d7c9e21d77b7e4f39009f479ddb92fea82f9c3b20e32c7da378e145adfd749968188ec9c0815acbd66f6375f185890cda7ef99aa59964bab6f57ed395b0ea8498edf5e395e6c3c3e6de8e0381a48659be4c038e1af405f32e9e6eb1ed56514ee5a7d682135dee8275df100bb39391f3a2b12f5255e5dc5f1c8c684cb26a22dbe42d4323f1066a35c45d449e498dd7278e62accac4e004fe7afff1408467718ce8969778bb944a6fc610ec5bbea52d07803f4ad0c4bcd4a8cd515b146ad40302e82d4a620782959228b93e4cb367b0af80d76901948afe513e94debff091a4eab6df79b62e5d15446e28fe268bec2babedf1ebfff0f31fe92473e3eee841b4f77bff05c31ef5c63dafb2217daa28312307e5a5b31f10291ade61a44f26ca266498900ea677fb5ff36ea1b69b469fe464f33eb9ac021f6b800ebbb9d595ae2ae7fe2d8ae8d3eb7c715d08ff75ce27cd2b7668a342360072a89796b4818c3f77490aac82349859c4cc00ad9b317674b35727acfd66d6dbc5ce8e9a8be168593f3ed44d45831bab1aa1f91cfa48f7bf46ca2bfbd9db7eb1296cd1d7b3ca63c3dd2a0866a04c1dae4349db64ad796f42536699646b4983cceeea0f3187f2fcfabcdd0130056dc87855f6e1b4d401324516cb6cb031c41ac3723c61539b3959c213cdde1a2e847840c8103690e78576188aa5a5f78515ec8e94e60640fa4b9ddaf20a6d4211f1833d65b6998ee2be5594d18f9ece7eda34fdca088438046294bfa14012f794ee68e55e126178560e050f5f444cd06f96bd2821208aa107e5175ead51bc37bd199cee1aab313ca5eaebaee1dab2db6f2086efa2f424e5cbc7e4b2311aa8049a7acdb44fabb936de526d1f2e2f7896d7a317c4d77834e1f3392eeb0e1b6fa676bde821979c2de2008d66e15609bdcde7eb1c8055c1a777e09ff9e233efb821ef6fb23275103b5feb357eea2d9b661bf4bb3013a171d84a169adfb091391e7fe68ea7725f64b91f3d3b869efe5f8e20926b4394c762735a01866b5520fae8afe432ca74f94689a5e1e4b730e9a2307ad4e3748d4f330027d16becf795634c3d7030aa26ee5af6e2aca8f0cae27249b822e6be57d62317e4a35d826897c9ace930766cca9fe2b1b284b7ca555f22178bf9296967468ca74038569fb9ea0623b6869de3c26c8f4978d783d132fa8b53a837be0cacd73f2f251b9e2c90a66dc9c89e7e265d1d42b6565375f025d539004dc7a98ae6cf1e0d6d76051c8383c6bf874d4fae67b83619fb8d49c91340015a294288dd53b1a647e7c7a62b91c9443748a6cbd69901b2daa6edbeb7c70daa485b64156034eb1ca6ffd16774e6332837e8508d1504efa21f737b9d0f9317b8e60be6cd6a6d40edff45009594c5cdc2acd3a3be065e46b08f7da2f945b22f5cf6b28b52e3f3e1db1e4d7045a8945af218d0b6f291b7d71aa7bda140be406e3ed7a777040d8900ed8c7ee5a9a3bda7e3b25f15eb5f045ec7e7fbe5e592a923f489dead4b49def6f1465cebee89ee232d3c4600717a21877d2d8ec5ae6f1a5f800db8dc631c78a872d033c4656ec34d67dd65a9baeb626360ce01d371330e10352c38a2d37be065918abab8f8259165f830a53c309ee8f93096636b8b047bd7c0a72f1dfa77df8842d721e0949866750c391742ef76e80ee2d2fdc2a3551d6c8c2f96693dab799d36a8967ed260f8e1a5bee2c621c9bfe0944375423e86a305abcf1f9b7841ec8d249412acaa780dbe876f6cc9defef1f96ec00fc26786eacf8b8084bec04e6c2ffe38601d9ceb89a1d77ed6223d9569042d3b0982ef3fc62fc11e0d9bf7063329bf54ce4870f14f898cbece361e766cfdca0cc9ba7c38920d361454ba69802676d221e982514ab3a40ca46e0177c0431580972841a31f738053a81129850eb96487a50efab296048d9bcd7df97699fac3af557cecc53051359710005c5812c1958b55615f65d9cac7bd2e6cbf0fae0bd327541f72735d84c38d7439ce95a7d5659070ceba0b34fe71fb873dbcf1cce45ed1cbaea5b1d792f1c8b460c55f9c5e272e07ee8bff43fb7b2654be148f8ab8bc438d0c1c7ef84631e1f3869c511898ddfdf1c97a6ec20a69c5231c6f49d00a12a710116c75cdc81f08b0b1f5a722a0a8415697b5fe09403f06c437508569502efaa5162ed553f933ea32e2fb92727075ab1d0c6107d562fe67b96e9ab10bf5d54922d05b480419087f88958b908bb74aed0f0d6f4f31f664ba09c812c0c7d6e6f64fc4d2c8136a00aacf2fc0f56bb21e33de177dea477a6599346f03cb4ce5c40c45464fa903044355434481f70f9ae8501e4b268072d834f7e635fbab6c61997d773b46e20efdcf519bdba7f8eea4fd19744ffdfc5170a20fc384ab48c72f42832f466d2915948e7fb453a0c96a75573f058014147524fadf3e6e2bb0c20fbee52feb6fbefd6430a76f0791807fe04a470e460432106e4e62873fb72b3a01d964616d448eeaa9db10e44106d719684cf9c8f0b5f4ec32d4582ff3916c8f31937b3f293b1b0b65dc5e9d2d64fc0f0686d79113f89fce35aef2dcf914c5425314b9206f4ae7aaeb1ecd8744d6dc9d891a696bdf7ad355b29067dc52647a9285261afcd174e62a0171f54eb898513ce7d51f666d61be51b5418f80e16d566e7fdf493d50f6bdb0674b83a6d06619fe769528ca8dc740f88c80f2238962f863fd64e519c8b75f22800e494ca0af7bd1d333bb56f99c91a5b30a73cfad43784c04259441b5e31d6fe1d45a10fd19b9f22bb6f7821a09033da3304bfdadda3ac43e14bcbbe2554465babc1adf8ac63e82578b04467f413989c5115f041e173f8c4307ae5670b951c6d3fbc29c55c55ef09fa24a231b68897d5ca5524ea132d3cb783a08987ea29d87edfb88c8f5433dbaa65fab69bb188f16868c311ca1bcffa4cb5a13d3ad82f0d5f0279279694a2d5e105116729ace1ce214a041d9e69eb6e6b0302a8ac845489b74cb4119c1f9972b3ac68ca2b2cf7e366908362c9f4df1a15be27a358532b5a785af84627c73efd6d42aec559e68dc10bedef4f23181620fc3bfb7f925d5cb5a00fc1987bf19eebfaeea63f28907e945873a08115f616752c8c9838039b1affba65dc9a380a2bf2a6a3803abbfa02a97d58b18b914b8569fc637fc3dd1c30c07810883907f94d9d5ac9e22f7d272c81c9aa29240cb3622a01bd5024f9d6150275916bd3abc16f5d4895c8bee547d1ad268d3cf5747ae8c7e4322c19090448e1dfbdc59b5ef6aad4912a73f98ac8317b282bd39e6e4b6054d799b8f86c97a15e3473dfb38be322cdfff025859d7dfa35f1462bed22084842f3784b273c729b8c6cd259482e0cda82f23b9f91b40cd318b6fccfb44bb3e88c8bea5f5a5edcdcad402c7a563918b4d083823738e2e14f0fb46787c7d7741c642eb9d4b5ba08603b73f8c5639d91e1efb1a3d2b8773f93b8dfa78d86bfc39bc63e5b9e735776f31fac77c78c0a9b0ae5f27d83fe0e1f803554d25debb00e7012f09b37564a27d6091d35921e91f3eb6cd24ff028a0512cb8898832c0cf377f8d73a91a7fbaf2195581ae3ef42f03717f5d3d73bfbdc2f070331cce66a7e3462fa0a2d9e41c161dcfcb6b2f4cc6101a0b8253ab4eb99a382315e47d9f7802a2eeb5dcf5321fdf0f8c26e9d8cb4ad13386cd88de20ed7f2f3eb04a632194fedce6fe79d58c9033996775ad70f14978f8513c171a7ddec4097056c2f7445c5b48910593c4267bdde552f76f885e087f8e93f185a1fb0ce6ce4516043d45710813008524c0711112efaf122e8e1d5c794afd693f21fe629cd78286781563cd88ff4df2b44c7e3dcbc84a0594b929a658354e72a725c99f4e595aaf30d99081eab620a31921db513a7af9904d1984b2ee0cde559e60903cd8e8e2f60c84b636a814e8a8cece8286fc07ccc84a20adb26d237a7b1ae84210388771c8223054eb46799d0cf676765bd8c2abd510b60670d3d6ecd320dd95de1fc09a277cf7c0984c79166f0217886be95bb1339d1d8599c69ffdb7980c73594b60d837500ee47fadfc35431dacd7f70282a5d01b1d0fe3045c247cc637bad462e0c0f5b1a3e56b323fdd846931248227a5e92e1b5d563a0630dabc798d4fefad590d7dcb0df6aa69d4662caa7e0d93ae4403b8f5b7c92894d512f1aaa95eef0b48e1f63d1cb126a4bc3d75b4675d70fd284354e0c04470a70af2889245008a11e37f47d54805dd8fe4c139d20283a67cfc9a862a8712a935ba39a3da5204bda14a2f601714f0f8ce523a9729541b999c135cdabc7022481898c58c7a8646c11ab5"}], 0x23f8}, 0x4000040) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000042c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x1, {0x2, 0x1, 0x3}, 0x2}, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f700"/124], 0x310) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}}, 0x1}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000440)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES8=r7, @ANYRES8, @ANYRES8=r6, @ANYRESDEC=r9], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x200400c0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x128, r7, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0xf8, 0x2a, [@fast_bss_trans={0x37, 0xf2, {0x3, 0x7, "b28e6af627e912ff4b8a6e344f801f1c", "14943b0201fb8c96efdae18700b4949d3479dd7983d9a48c0146c15c8461f15f", "57263c40939e0b72eb9f62088132f9073af04f677a9145f2d297ca1197d6a6f6", [{0x2, 0x1e, "03e19884cdd760813abe6130fc1acad0db53ae40d7f14945a782360106d6"}, {0x1, 0x5, "6893f087d3"}, {0x4, 0x27, "b3ca8f3830eea5508362bd39992dd972d2ab62fe93ba5fc873331591ca159adbde75c8b138cb10"}, {0x2, 0x1f, "319dfb98993e6191b8f83ff6cb7ace2a348db566d558d40db16602863d4633"}, {0x2, 0x1b, "7396a14fc58fc1de8a4c4065cc4d95c100afd7ddfa970bb982e633"}, {0x3, 0xa, "39e14177afb9a10df6cd"}, {0x4, 0x4, "12cb7a31"}]}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000d09000/0x3000)=nil, 0x3000, 0x8, 0x50, 0xffffffffffffffff, 0x0) syz_clone(0x50200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 14.674245067s ago: executing program 3 (id=240): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) epoll_create(0x207ffd) openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000f601000000000000000d0000000000005f00"/52], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$sndmidi(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x28) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x44378000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r7, 0x0) 11.249956079s ago: executing program 4 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x700}}, {0xc}}}]}]}, 0x48}}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xaf) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$tun(0xffffffffffffffff, 0x0, 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x101000) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xb7) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000) 10.949753816s ago: executing program 1 (id=244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000400)={0x34, 0x0, 0x1, 0x0, 0xffffffff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}]}, 0x34}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) 10.945910626s ago: executing program 0 (id=245): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) unshare(0x2c020400) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$security_smack_transmute(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioperm(0x0, 0x7, 0x7) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x5, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r5, 0x0) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./bus\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) 10.464995452s ago: executing program 1 (id=247): r0 = getpid() r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0xffd}}, 0x20) r2 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) r5 = io_uring_setup(0x85f, &(0x7f00000001c0)={0x0, 0x72a4, 0x4, 0x3, 0xf2, 0x0, r1}) io_uring_enter(r5, 0x537f, 0x2e7f, 0x17, &(0x7f0000000040)={[0x9]}, 0x8) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) migrate_pages(r0, 0x5, 0x0, &(0x7f0000000080)=0x272) 10.122946354s ago: executing program 4 (id=248): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) geteuid() mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={[{@dyn}]}) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x94a0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 9.508791694s ago: executing program 1 (id=249): openat$pfkey(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_emit_ethernet(0xe7, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@llc_tr={0x11, {@snap={0xaa, 0x1, "d057", "9a8e6a", 0x6006, "39f1284c35b6cc0ac14dba328f03ecd254f564dd59121f4545328a0e398a92c2d338c51628dd7ae8a503d4ba4c1aa11c1e4853f00e1be356f6a968aeb1fdabf3c63763f071c3c5dc5738dc4ac4ae5d03f008dac43d0010302a009ac3e388474512a08401f905c791d3d3850c3cdaa0e9ccf20107eaf8ff015b10fd9570dd8ad9e63f4f670f4a259267513cd84fc7c7870a283819ace7ee88314640cf6aa208fe2159f58da75001b9776b599049c03517c2f234b573c9a4bdb90dc43cc0bf9a699259a2ed2880bc72c38de8a4"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000020000000000000060018190000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x1293, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x3, 0x2dc}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x1e, &(0x7f0000000040)={0xac, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) close(r1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x183) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) 9.508270347s ago: executing program 2 (id=250): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) geteuid() mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={[{@dyn}]}) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x94a0}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 9.218355629s ago: executing program 0 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x406e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x10000000, 0x0, 'queue0\x00', 0xfffffffc}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0xf76091c88f27337, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xc040400) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x6, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fcdb000000000000000899004f000000760000000800c400010000800800c400100000000800c400090000000800c400080000000800c400090000003d00c500dedc7e3dd75ac2891b0daa0208d39b79e764fc23f00255ac5e0c8518d069a701e77e7c34f411f22c30a266599da0b6e2a2770638d692350e111139b15825b04e880000000800c3002f1770390800c4002ea200000800c40001010000"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x10) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r6, 0x7, 0x2, &(0x7f0000000180)=[{}, {}], 0x0) io_getevents(r6, 0x8, 0x1, &(0x7f0000000200)=[{}], 0x0) 7.625463836s ago: executing program 2 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002bc0)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000036c0)={&(0x7f00000032c0)=@file={0x0, './file0\x00'}, 0x9e, 0x0, 0x0, &(0x7f0000003680)=[@rights={{0x14}}], 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='f2fs_unlink_enter\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x16) connect$inet(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000691205000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.480771832s ago: executing program 1 (id=253): socket(0x10, 0x3, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$sndmidi(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x28) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x80a0000, 0x2, 0x0, 0x8, 0x0, [{0x6c, 0x6, 0x1, '\x00', 0x4}, {0x81, 0xf8, 0x6, '\x00', 0x6b}, {0x80, 0x7f, 0x3, '\x00', 0x5}, {0x2, 0x3, 0x51, '\x00', 0x65}, {0x9, 0x5, 0x8, '\x00', 0x9}, {0xfb, 0x40, 0x5, '\x00', 0x6}, {0x3, 0x6, 0x6, '\x00', 0x7}, {0x5, 0x3, 0x3, '\x00', 0x3}, {0x9, 0x64, 0x2, '\x00', 0x8}, {0x87, 0x8, 0x7, '\x00', 0x5}, {0x40, 0x5, 0x9b, '\x00', 0x9}, {0x0, 0x6, 0x1, '\x00', 0x9}, {0xf4, 0x7, 0xff, '\x00', 0x3}, {0x5, 0x80, 0x1, '\x00', 0x8}, {0x2, 0xd2, 0x9, '\x00', 0xff}, {0x45, 0x3, 0x7, '\x00', 0x6}, {0xe, 0xd9, 0x9, '\x00', 0x10}, {0x0, 0xe8, 0x0, '\x00', 0xd}, {0xc1, 0x1, 0xcb, '\x00', 0x2d}, {0x7, 0x1, 0x9, '\x00', 0x8}, {0x7d, 0x64, 0x72, '\x00', 0xab}, {0x8, 0xef, 0x8}, {0x0, 0x8, 0x4, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0x4}]}}) r7 = socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x44378000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r7, 0x0) 6.927112347s ago: executing program 3 (id=254): r0 = socket$inet_tcp(0x2, 0x1, 0x0) msgsnd(0x0, 0x0, 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000080004000008000024000e000001e4ffffff0000f50e0000000000000300000000000000010003f900000000"], 0x4c}}, 0x0) msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x20, 0x1000, 0x4a}, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000300)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4b, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e895"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 6.926093715s ago: executing program 4 (id=255): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xe9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x70000, 0x0, {0x77359400}, {0x0, 0x1, 0x5, 0x8, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) 6.819271565s ago: executing program 2 (id=256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket(0x11, 0x800000003, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfffe, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) 4.756716876s ago: executing program 2 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r4 = timerfd_create(0x8, 0x0) close(r4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0x7ffff024}, {0x6}]}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaadab5"], 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0xffffff70}, 0x1, 0x0, 0x0, 0x20005080}, 0x85) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x100002, "00efe1cebe0500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"aef5fb09e49d42d5433b8a9fbe751720728ee9ad443ca9a51ac0fd260b31d264", r8}) 4.54159714s ago: executing program 0 (id=258): r0 = syz_open_dev$video(0x0, 0x75, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x4, 0x7, 0xa, 0x1001}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f00000006c0)=ANY=[]) unshare(0x22020600) r7 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r7, 0x1) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x84, 0xba, 0xf4, 0x20, 0xe41, 0x4250, 0x6011, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x4e, 0x5, 0x1, 0x5, 0xa7, 0x1e, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000001140)={0x50, 0x0, r9, {0x7, 0x26, 0x2, 0x14, 0xfffe}}, 0x50) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_fuse_handle_req(r6, &(0x7f000000c680)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0xffefffff) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000000)=""/132, &(0x7f00000000c0)=0x84) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000140)={0xd2b7, 0x4, 0x4}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xdfffffff, 0x32315559, 0x780, 0x438, 0x0, @stepwise={{0x8b3, 0xfffffffa}, {0x4, 0x7}, {0x1, 0x40057b}}}) 4.44247171s ago: executing program 3 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc, 0x7, {0x0, 0x700}}, {0xc}}}]}]}, 0x48}}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xaf) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$tun(0xffffffffffffffff, 0x0, 0x42) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x101000) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xb7) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000) 4.335539723s ago: executing program 4 (id=260): openat$pfkey(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_emit_ethernet(0xe7, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@llc_tr={0x11, {@snap={0xaa, 0x1, "d057", "9a8e6a", 0x6006, "39f1284c35b6cc0ac14dba328f03ecd254f564dd59121f4545328a0e398a92c2d338c51628dd7ae8a503d4ba4c1aa11c1e4853f00e1be356f6a968aeb1fdabf3c63763f071c3c5dc5738dc4ac4ae5d03f008dac43d0010302a009ac3e388474512a08401f905c791d3d3850c3cdaa0e9ccf20107eaf8ff015b10fd9570dd8ad9e63f4f670f4a259267513cd84fc7c7870a283819ace7ee88314640cf6aa208fe2159f58da75001b9776b599049c03517c2f234b573c9a4bdb90dc43cc0bf9a699259a2ed2880bc72c38de8a4"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000020000000000000060018190000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x1293, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x3, 0x2dc}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x1e, &(0x7f0000000040)={0xac, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) close(r1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x183) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) fcntl$setlease(r4, 0x400, 0x1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x5, 0x5}}}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) 3.301412405s ago: executing program 3 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) mkdir(0x0, 0x3b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffb000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) syz_open_dev$vim2m(0x0, 0x7, 0x2) 2.406934245s ago: executing program 2 (id=262): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x1412, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20020080}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000540)=0xffffffffffffffff, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000003d000900000000000000000001000000040000001c0001801800108014000600fc02000000000000000000000000000108000200", @ANYRES32, @ANYBLOB="6f6ee52caa8ef92d0973cbb712e018683698588e1d476de5ab463bba0c053cd7c382d650300cc57f60ea59c2e9de049160f985ac089dddbe1d5886a4c31a136ce657689dd9205e6419f0b71f9afb1d71da73583346e1d438d15c1e8b7b537fabce0a0754c345712cfb9e4766ea66128e14369f26e36ec0db9c704595c7f59e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) close(r1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)='p', 0x1}, {&(0x7f0000000780)='x', 0x1}], 0x2}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.104601475s ago: executing program 4 (id=263): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fcntl$addseals(r5, 0x409, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x1, 0x20000000, &(0x7f0000000000), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) 422.825076ms ago: executing program 3 (id=264): syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312091d007abc2e79e9"], 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x82500, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000280)=0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 364.521856ms ago: executing program 4 (id=265): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) epoll_create(0x207ffd) openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000f601000000000000000d0000000000005f00"/52], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB=',\x00'/12], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$sndmidi(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x28) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x80a0000, 0x2, 0x0, 0x8, 0x0, [{0x6c, 0x6, 0x1, '\x00', 0x4}, {0x81, 0xf8, 0x6, '\x00', 0x6b}, {0x80, 0x7f, 0x3, '\x00', 0x5}, {0x2, 0x3, 0x51, '\x00', 0x65}, {0x9, 0x5, 0x8, '\x00', 0x9}, {0xfb, 0x40, 0x5, '\x00', 0x6}, {0x3, 0x6, 0x6, '\x00', 0x7}, {0x5, 0x3, 0x3, '\x00', 0x3}, {0x9, 0x64, 0x2, '\x00', 0x8}, {0x87, 0x8, 0x7, '\x00', 0x5}, {0x40, 0x5, 0x9b, '\x00', 0x9}, {0x0, 0x6, 0x1, '\x00', 0x9}, {0xf4, 0x7, 0xff, '\x00', 0x3}, {0x5, 0x80, 0x1, '\x00', 0x8}, {0x2, 0xd2, 0x9, '\x00', 0xff}, {0x45, 0x3, 0x7, '\x00', 0x6}, {0xe, 0xd9, 0x9, '\x00', 0x10}, {0x0, 0xe8, 0x0, '\x00', 0xd}, {0xc1, 0x1, 0xcb, '\x00', 0x2d}, {0x7, 0x1, 0x9, '\x00', 0x8}, {0x7d, 0x64, 0x72, '\x00', 0xab}, {0x8, 0xef, 0x8}, {0x0, 0x8, 0x4, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0x4}]}}) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 98.545822ms ago: executing program 0 (id=267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000"], 0x48) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket(0x11, 0x800000003, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfffe, 0x0, @local}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) 1.226174ms ago: executing program 2 (id=268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x2, @val=@perf_event={0xff}}, 0x18) syz_emit_ethernet(0x11dc0, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 0s ago: executing program 3 (id=269): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x74100, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5fb7700"}) r3 = syz_open_pts(r2, 0x0) r4 = syz_io_uring_setup(0x1f5e, &(0x7f0000000140)={0x0, 0xce8, 0x0, 0x1, 0xfffffeff}, &(0x7f00000000c0), &(0x7f0000000200)) r5 = dup3(r3, r4, 0x0) socket$kcm(0x2, 0xa, 0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e013d66642c7266dace6a74248164bc5a25078c78646e6f2d", @ANYRESHEX=r5, @ANYRES32=r1, @ANYRES64=r1]) read$msr(r5, &(0x7f0000000a00)=""/102378, 0x18fea) syz_open_dev$dri(0x0, 0x1, 0x0) gettid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080)={0xfffffffd, 0x80000801}, 0x8) bind$bt_sco(r6, &(0x7f0000000400), 0x8) listen(r6, 0x0) close_range(r6, 0xffffffffffffffff, 0xc566dd3c39cd6d7c) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x26, 0x0, @thr={&(0x7f0000000300)="5a474b7a214cb876fcdecb4b3b01e90b0953b07c0ce6bdea6596db7024fa70dd6d439e6fca87907130696c02179398b54063087db3e3fe6b7717c98b6584394ecc6a28d957a5255c031150c44ef980cf78c145bef49320f293b636cd5215cf307e10066277892805046a59d6349de85c327e301e56b09c326b677ce798804bcce0c091a70136d118e0396533f977538f7add1398a4d52c8692b520794d8a219e396a8a37f97ff58d1bc9b2e30765c27a02daaee3b92c4abdee7f75dd4744696b97c6f99617ff71efff0a3d5fa0be5edf01", &(0x7f0000000040)="c05a327647da4619a10cfbecb2e5c83ee85a09833206f190078d283d292624aad56950266ec331fce0406ea83d5b3b19afdf34f9d45b820764e2eb13aee7bd4437aeba88fed854d6d0ab31ee8302a9d3f9799fdc7cb80a304de8d8f70e37f16d4b2d6ba47e5fe5760b9da8860fa449813e3db9d660f1db587733eef4fbd1"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 71.285146][ T5808] cgroup: Unknown subsys name 'net' [ 71.421590][ T5808] cgroup: Unknown subsys name 'cpuset' [ 71.432008][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.143054][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.150102][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.838741][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.291266][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.308314][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.318906][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.327539][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.342829][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.349097][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.350587][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.379497][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.380953][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.397020][ T5135] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.404992][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.417072][ T5135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.428529][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.432600][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.439163][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.454673][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.455894][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.463947][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.475120][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.479586][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.495259][ T5135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.495335][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.503498][ T5135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.517500][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.527659][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.536367][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.566908][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.579844][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.590379][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.605578][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.908630][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 75.964006][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 76.151296][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.162690][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.170811][ T5818] bridge_slave_0: entered allmulticast mode [ 76.179797][ T5818] bridge_slave_0: entered promiscuous mode [ 76.189575][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.197571][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.205738][ T5832] bridge_slave_0: entered allmulticast mode [ 76.212741][ T5832] bridge_slave_0: entered promiscuous mode [ 76.228646][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 76.253858][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.263297][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.270843][ T5818] bridge_slave_1: entered allmulticast mode [ 76.279992][ T5818] bridge_slave_1: entered promiscuous mode [ 76.295971][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.305166][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.313771][ T5832] bridge_slave_1: entered allmulticast mode [ 76.321642][ T5832] bridge_slave_1: entered promiscuous mode [ 76.397412][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.420263][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.433540][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.457401][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.485353][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 76.525761][ T5832] team0: Port device team_slave_0 added [ 76.552095][ T5818] team0: Port device team_slave_0 added [ 76.561973][ T5832] team0: Port device team_slave_1 added [ 76.599913][ T5818] team0: Port device team_slave_1 added [ 76.648555][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.655919][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.684369][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.700945][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 76.732741][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.741178][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.768054][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.785163][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.793327][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.801170][ T5819] bridge_slave_0: entered allmulticast mode [ 76.809809][ T5819] bridge_slave_0: entered promiscuous mode [ 76.825854][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.833793][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.863118][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.876229][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.884209][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.913371][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.944694][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.952569][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.960783][ T5819] bridge_slave_1: entered allmulticast mode [ 76.968094][ T5819] bridge_slave_1: entered promiscuous mode [ 77.041375][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.051443][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.060259][ T5824] bridge_slave_0: entered allmulticast mode [ 77.067353][ T5824] bridge_slave_0: entered promiscuous mode [ 77.075726][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.084252][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.093673][ T5824] bridge_slave_1: entered allmulticast mode [ 77.101280][ T5824] bridge_slave_1: entered promiscuous mode [ 77.124644][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.166352][ T5832] hsr_slave_0: entered promiscuous mode [ 77.173217][ T5832] hsr_slave_1: entered promiscuous mode [ 77.191529][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.220554][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.236411][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.265737][ T5818] hsr_slave_0: entered promiscuous mode [ 77.273751][ T5818] hsr_slave_1: entered promiscuous mode [ 77.280810][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.291020][ T5818] Cannot create hsr debugfs directory [ 77.321827][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.333677][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.342457][ T5830] bridge_slave_0: entered allmulticast mode [ 77.350537][ T5830] bridge_slave_0: entered promiscuous mode [ 77.362356][ T5819] team0: Port device team_slave_0 added [ 77.371857][ T5819] team0: Port device team_slave_1 added [ 77.388362][ T5824] team0: Port device team_slave_0 added [ 77.394639][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.402157][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.410347][ T5830] bridge_slave_1: entered allmulticast mode [ 77.417904][ T5830] bridge_slave_1: entered promiscuous mode [ 77.427961][ T5827] Bluetooth: hci0: command tx timeout [ 77.454035][ T5824] team0: Port device team_slave_1 added [ 77.480579][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.488175][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.515272][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.551962][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.572118][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.579563][ T5827] Bluetooth: hci1: command tx timeout [ 77.579573][ T54] Bluetooth: hci4: command tx timeout [ 77.580139][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.620072][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.651959][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.667113][ T5827] Bluetooth: hci2: command tx timeout [ 77.684021][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.691798][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.720284][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.737659][ T5827] Bluetooth: hci3: command tx timeout [ 77.770722][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.777956][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.804877][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.826571][ T5830] team0: Port device team_slave_0 added [ 77.852752][ T5830] team0: Port device team_slave_1 added [ 77.863417][ T5819] hsr_slave_0: entered promiscuous mode [ 77.870498][ T5819] hsr_slave_1: entered promiscuous mode [ 77.876872][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.884923][ T5819] Cannot create hsr debugfs directory [ 77.997777][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.006377][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.041433][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.069382][ T5824] hsr_slave_0: entered promiscuous mode [ 78.076093][ T5824] hsr_slave_1: entered promiscuous mode [ 78.083569][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.093637][ T5824] Cannot create hsr debugfs directory [ 78.132408][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.139750][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.170186][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.349478][ T5830] hsr_slave_0: entered promiscuous mode [ 78.360547][ T5830] hsr_slave_1: entered promiscuous mode [ 78.367498][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.375408][ T5830] Cannot create hsr debugfs directory [ 78.408983][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.424422][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.459913][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.491613][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.555257][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.567741][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.588586][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.598418][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.695093][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.714786][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.727806][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.740631][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.814019][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.843435][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.879220][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.895137][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.955676][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.987997][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.014634][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.022800][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.040133][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.102243][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.134141][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.161854][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.170156][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.221723][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.238266][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.246614][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.274212][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.323231][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.331318][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.341882][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.349138][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.370164][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.382218][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.436289][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.473674][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.484324][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.491663][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.499384][ T5827] Bluetooth: hci0: command tx timeout [ 79.502343][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.512099][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.563821][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.571430][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.582803][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.590139][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.606101][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.634258][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.648044][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.661133][ T5827] Bluetooth: hci4: command tx timeout [ 79.667867][ T54] Bluetooth: hci1: command tx timeout [ 79.700437][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.708091][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.737640][ T5827] Bluetooth: hci2: command tx timeout [ 79.753697][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.761321][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.812472][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.827465][ T5827] Bluetooth: hci3: command tx timeout [ 80.174924][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.276450][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.331131][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.355221][ T5818] veth0_vlan: entered promiscuous mode [ 80.418838][ T5818] veth1_vlan: entered promiscuous mode [ 80.439893][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.471296][ T5824] veth0_vlan: entered promiscuous mode [ 80.501364][ T5824] veth1_vlan: entered promiscuous mode [ 80.545172][ T5819] veth0_vlan: entered promiscuous mode [ 80.557699][ T5818] veth0_macvtap: entered promiscuous mode [ 80.578474][ T5824] veth0_macvtap: entered promiscuous mode [ 80.592856][ T5824] veth1_macvtap: entered promiscuous mode [ 80.601127][ T5818] veth1_macvtap: entered promiscuous mode [ 80.621088][ T5819] veth1_vlan: entered promiscuous mode [ 80.661449][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.687783][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.695863][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.710791][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.722769][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.736416][ T5832] veth0_vlan: entered promiscuous mode [ 80.766094][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.779832][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.792286][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.803851][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.813595][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.822917][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.832391][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.855354][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.866318][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.878253][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.887582][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.902296][ T5830] veth0_vlan: entered promiscuous mode [ 80.920844][ T5819] veth0_macvtap: entered promiscuous mode [ 80.932225][ T5832] veth1_vlan: entered promiscuous mode [ 80.955453][ T5830] veth1_vlan: entered promiscuous mode [ 80.966073][ T5819] veth1_macvtap: entered promiscuous mode [ 81.065200][ T5830] veth0_macvtap: entered promiscuous mode [ 81.080202][ T5830] veth1_macvtap: entered promiscuous mode [ 81.120454][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.136636][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.150195][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.162892][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.175112][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.208957][ T5832] veth0_macvtap: entered promiscuous mode [ 81.224471][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.236649][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.248136][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.261822][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.275486][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.299210][ T5832] veth1_macvtap: entered promiscuous mode [ 81.322507][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.333834][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.345451][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.354784][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.368534][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.369532][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.391387][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.391732][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.418903][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.432059][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.442578][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.454009][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.465754][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.492334][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.504887][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.527885][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.540724][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.553826][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.567402][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.578503][ T5827] Bluetooth: hci0: command tx timeout [ 81.581625][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.600167][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.612665][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.665842][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.675210][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.686288][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.697863][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.712977][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.727951][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.742084][ T5827] Bluetooth: hci1: command tx timeout [ 81.742218][ T5827] Bluetooth: hci4: command tx timeout [ 81.757496][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.770575][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.780841][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.794310][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.805867][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.820360][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.830875][ T5827] Bluetooth: hci2: command tx timeout [ 81.836242][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.851032][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.864466][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.878787][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.895968][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.911798][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.915084][ T5827] Bluetooth: hci3: command tx timeout [ 81.929137][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.929168][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.965030][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.981663][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.012684][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022914][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.045018][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.059245][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.093264][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.107211][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.117811][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.128831][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.233658][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.258846][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.260490][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.430283][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.475179][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.531795][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.548943][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.583190][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.584502][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.647494][ T5906] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.899407][ T4885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.916687][ T4885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.923855][ T5873] hid-generic 0FFF:0009:015D.0001: item fetching failed at offset 0/1 [ 82.947337][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.961438][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.974363][ T5873] hid-generic 0FFF:0009:015D.0001: probe with driver hid-generic failed with error -22 [ 83.437121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.657142][ T5827] Bluetooth: hci0: command tx timeout [ 83.813123][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.844879][ T54] Bluetooth: hci1: command tx timeout [ 83.844975][ T5827] Bluetooth: hci4: command tx timeout [ 83.954076][ T5922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.989585][ T5827] Bluetooth: hci2: command tx timeout [ 83.996315][ T5827] Bluetooth: hci3: command tx timeout [ 84.777178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.786937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 85.016532][ T5927] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 85.058115][ T5927] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 85.487005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 85.691386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.061005][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'. [ 86.157343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.168561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.219396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.509916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.612350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 87.844776][ T46] cfg80211: failed to load regulatory.db [ 88.288632][ T5947] FAULT_INJECTION: forcing a failure. [ 88.288632][ T5947] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.306802][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.3.13 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 88.306823][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.306836][ T5947] Call Trace: [ 88.306842][ T5947] [ 88.306848][ T5947] dump_stack_lvl+0x241/0x360 [ 88.306884][ T5947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.306908][ T5947] ? __pfx__printk+0x10/0x10 [ 88.306942][ T5947] ? __pfx_lock_release+0x10/0x10 [ 88.306971][ T5947] should_fail_ex+0x3b0/0x4e0 [ 88.306993][ T5947] _copy_from_iter+0x1e9/0x1c20 [ 88.307031][ T5947] ? __pfx__copy_from_iter+0x10/0x10 [ 88.307053][ T5947] ? __pfx__copy_from_iter+0x10/0x10 [ 88.307080][ T5947] ? page_copy_sane+0x154/0x260 [ 88.307104][ T5947] copy_page_from_iter+0x7a/0x100 [ 88.307128][ T5947] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 88.307163][ T5947] tun_get_user+0x193c/0x48a0 [ 88.307197][ T5947] ? __lock_acquire+0x1397/0x2100 [ 88.307223][ T5947] ? __pfx_tun_get_user+0x10/0x10 [ 88.307261][ T5947] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 88.307281][ T5947] ? tun_get+0x1e/0x2f0 [ 88.307301][ T5947] ? __pfx_lock_release+0x10/0x10 [ 88.307333][ T5947] ? tun_get+0x1e/0x2f0 [ 88.307353][ T5947] ? tun_get+0x27d/0x2f0 [ 88.307375][ T5947] tun_chr_write_iter+0x10d/0x1f0 [ 88.307399][ T5947] vfs_write+0xacf/0xd10 [ 88.307426][ T5947] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 88.307448][ T5947] ? __pfx_vfs_write+0x10/0x10 [ 88.307474][ T5947] ? __fget_files+0x2a/0x410 [ 88.307496][ T5947] ? __fget_files+0x2a/0x410 [ 88.307523][ T5947] ksys_write+0x18f/0x2b0 [ 88.307547][ T5947] ? __pfx_ksys_write+0x10/0x10 [ 88.307580][ T5947] do_syscall_64+0xf3/0x230 [ 88.307600][ T5947] ? clear_bhb_loop+0x35/0x90 [ 88.307624][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.307644][ T5947] RIP: 0033:0x7f09d1d8b7df [ 88.307666][ T5947] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 88.307679][ T5947] RSP: 002b:00007f09d2c0c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 88.307697][ T5947] RAX: ffffffffffffffda RBX: 00007f09d1fa6160 RCX: 00007f09d1d8b7df [ 88.307709][ T5947] RDX: 000000000000fed7 RSI: 00000000200002c0 RDI: 00000000000000c8 [ 88.307719][ T5947] RBP: 00007f09d2c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 88.307736][ T5947] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000002 [ 88.307746][ T5947] R13: 0000000000000000 R14: 00007f09d1fa6160 R15: 00007ffdb349fe08 [ 88.307771][ T5947] [ 91.281227][ T5965] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 92.330837][ T5974] overlayfs: failed to resolve './file0': -2 [ 95.075666][ T5870] IPVS: starting estimator thread 0... [ 95.580766][ T6003] IPVS: using max 20 ests per chain, 48000 per kthread [ 100.291296][ T6025] tmpfs: Bad value for 'mpol' [ 101.408294][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.737083][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 101.785104][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.916855][ T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.004258][ T46] usb 3-1: New USB device found, idVendor=0eb0, idProduct=9020, bcdDevice= c.31 [ 102.004290][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.004310][ T46] usb 3-1: Product: syz [ 102.004323][ T46] usb 3-1: Manufacturer: syz [ 102.004335][ T46] usb 3-1: SerialNumber: syz [ 102.020391][ T46] usb 3-1: config 0 descriptor?? [ 102.145278][ T6046] netlink: 'syz.3.38': attribute type 72 has an invalid length. [ 102.145334][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 102.246216][ T6034] capability: warning: `syz.2.35' uses deprecated v2 capabilities in a way that may be insecure [ 103.357073][ T46] usb 3-1: USB disconnect, device number 2 [ 103.607387][ T2153] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.848988][ T2153] usb 1-1: Using ep0 maxpacket: 32 [ 104.053167][ T2153] usb 1-1: config 0 has an invalid interface number: 78 but max is 0 [ 104.094611][ T2153] usb 1-1: config 0 has no interface number 0 [ 104.122336][ T2153] usb 1-1: config 0 interface 78 has no altsetting 0 [ 104.138640][ T2153] usb 1-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11 [ 104.167041][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.193043][ T2153] usb 1-1: Product: syz [ 104.203754][ T2153] usb 1-1: Manufacturer: syz [ 104.430824][ T2153] usb 1-1: SerialNumber: syz [ 104.453356][ T2153] usb 1-1: config 0 descriptor?? [ 106.720251][ T2153] usb 1-1: can't set config #0, error -71 [ 106.785662][ T2153] usb 1-1: USB disconnect, device number 2 [ 106.786909][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.917560][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.967627][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 107.240405][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 107.391898][ T5872] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 107.492496][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.505535][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.536059][ T5872] usb 4-1: config 0 descriptor?? [ 107.590963][ T8] usb 3-1: string descriptor 0 read error: -71 [ 107.616001][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.647326][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.665620][ T8] usb 3-1: config 0 descriptor?? [ 107.898080][ T5873] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.159793][ T8] usb 3-1: can't set config #0, error -71 [ 108.232722][ T8] usb 3-1: USB disconnect, device number 3 [ 108.346637][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 108.387303][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 108.420387][ T5873] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 108.437918][ T5873] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.448524][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.468834][ T5872] ntrig 0003:1B96:0003.0002: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.3-1/input0 [ 108.491465][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.516937][ T5873] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.541755][ T5873] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.552334][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.727087][ T5871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.837107][ T5873] usb 2-1: usb_control_msg returned -32 [ 109.842909][ T5873] usbtmc 2-1:16.0: can't read capabilities [ 110.037252][ T5871] usb 1-1: device descriptor read/64, error -71 [ 110.334195][ T5872] usb 4-1: USB disconnect, device number 2 [ 110.336401][ T6106] ISOFS: Unable to identify CD-ROM format. [ 110.436906][ T5871] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.750942][ T5871] usb 1-1: device descriptor read/64, error -71 [ 110.859375][ T6094] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.868226][ T6094] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.878687][ T5871] usb usb1-port1: attempt power cycle [ 111.297018][ T5871] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.328756][ T5871] usb 1-1: device descriptor read/8, error -71 [ 112.089009][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.124324][ T5873] usb 2-1: USB disconnect, device number 2 [ 112.220523][ T5871] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.276978][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 112.305502][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.364095][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.427387][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.468289][ T5872] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 112.487035][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.499363][ T5871] usb 1-1: device not accepting address 6, error -71 [ 112.501547][ T5872] usb 3-1: config 0 descriptor?? [ 112.527361][ T5871] usb usb1-port1: unable to enumerate USB device [ 112.592020][ T6130] netlink: 'syz.3.59': attribute type 9 has an invalid length. [ 112.626330][ T29] audit: type=1326 audit(1737956613.525:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 112.651101][ T29] audit: type=1326 audit(1737956613.555:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 112.656936][ T5873] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 112.698072][ T29] audit: type=1326 audit(1737956613.575:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 112.756425][ T29] audit: type=1326 audit(1737956613.575:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09d1d8b690 code=0x7ffc0000 [ 112.795758][ T29] audit: type=1326 audit(1737956613.575:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09d1d8b690 code=0x7ffc0000 [ 112.824763][ T29] audit: type=1326 audit(1737956613.575:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 112.858752][ T29] audit: type=1326 audit(1737956613.575:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 112.880171][ T5871] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.895029][ T29] audit: type=1326 audit(1737956613.575:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 112.896172][ T5873] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.932847][ T29] audit: type=1326 audit(1737956613.575:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 112.953759][ T5873] usb 2-1: config 0 has no interface number 0 [ 112.975987][ T5872] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0003/input/input5 [ 112.995216][ T5873] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 113.002387][ T29] audit: type=1326 audit(1737956613.575:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6129 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 113.012155][ T5873] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 113.051696][ T5873] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 113.066445][ T5873] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 113.601534][ T5871] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 113.610602][ T5872] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0003/input/input6 [ 113.616594][ T5871] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 113.628124][ T5873] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.642371][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.671359][ T5871] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 113.674378][ T5872] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 113.682143][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.698418][ T5873] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.717892][ T5871] usb 1-1: config 0 descriptor?? [ 113.744601][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.772383][ T5871] usb-storage 1-1:0.0: USB Mass Storage device detected [ 113.791159][ T5871] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 113.802318][ T5873] usb 2-1: config 0 descriptor?? [ 113.819667][ T6128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.877382][ T5873] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 113.946893][ T6147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 114.064736][ T2153] usb 1-1: USB disconnect, device number 7 [ 114.180817][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.254404][ T5871] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 114.328022][ T46] usb 2-1: USB disconnect, device number 3 [ 114.366996][ T46] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 115.687000][ T2153] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.075567][ T2153] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 116.178778][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.212565][ T2153] usb 4-1: config 0 descriptor?? [ 116.348023][ T5884] usb 3-1: USB disconnect, device number 4 [ 116.639651][ T2153] ntrig 0003:1B96:0003.0004: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.3-1/input0 [ 116.728711][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.758190][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 117.768353][ T5872] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 117.778716][ T5872] usb 2-1: config 0 has no interface number 0 [ 117.785877][ T5872] usb 2-1: config 0 interface 78 has no altsetting 0 [ 117.796940][ T5872] usb 2-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11 [ 117.818054][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.826308][ T5872] usb 2-1: Product: syz [ 117.831115][ T5872] usb 2-1: Manufacturer: syz [ 117.835890][ T5872] usb 2-1: SerialNumber: syz [ 117.858028][ T5872] usb 2-1: config 0 descriptor?? [ 117.868282][ T5872] snd_usb_pod 2-1:0.78: Line 6 BassPODxt found [ 118.587362][ T5872] snd_usb_pod 2-1:0.78: endpoint not available, using fallback values [ 118.592927][ T2153] usb 4-1: USB disconnect, device number 3 [ 118.610590][ T5872] snd_usb_pod 2-1:0.78: invalid control EP [ 118.637269][ T5872] snd_usb_pod 2-1:0.78: cannot start listening: -22 [ 118.648764][ T5872] snd_usb_pod 2-1:0.78: Line 6 BassPODxt now disconnected [ 118.685994][ T5872] snd_usb_pod 2-1:0.78: probe with driver snd_usb_pod failed with error -22 [ 118.921951][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'. [ 119.552700][ T8] usb 2-1: USB disconnect, device number 4 [ 119.863063][ T6202] FAULT_INJECTION: forcing a failure. [ 119.863063][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.877101][ T6202] CPU: 0 UID: 0 PID: 6202 Comm: syz.2.78 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 119.877125][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 119.877135][ T6202] Call Trace: [ 119.877142][ T6202] [ 119.877149][ T6202] dump_stack_lvl+0x241/0x360 [ 119.877181][ T6202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.877204][ T6202] ? __pfx__printk+0x10/0x10 [ 119.877228][ T6202] ? __pfx_lock_release+0x10/0x10 [ 119.877257][ T6202] should_fail_ex+0x3b0/0x4e0 [ 119.877278][ T6202] _copy_from_user+0x2d/0xb0 [ 119.877295][ T6202] copy_clone_args_from_user+0x1ca/0x840 [ 119.877326][ T6202] ? ksys_write+0x22a/0x2b0 [ 119.877349][ T6202] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 119.877379][ T6202] ? vfs_write+0x7fa/0xd10 [ 119.877405][ T6202] __se_sys_clone3+0xe5/0x360 [ 119.877424][ T6202] ? do_sys_openat2+0x17a/0x1d0 [ 119.877442][ T6202] ? __pfx___se_sys_clone3+0x10/0x10 [ 119.877485][ T6202] ? do_syscall_64+0x100/0x230 [ 119.877508][ T6202] ? do_syscall_64+0xb6/0x230 [ 119.877529][ T6202] do_syscall_64+0xf3/0x230 [ 119.877547][ T6202] ? clear_bhb_loop+0x35/0x90 [ 119.877571][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.877590][ T6202] RIP: 0033:0x7f9f1c18cd29 [ 119.877605][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.877617][ T6202] RSP: 002b:00007f9f1cfe2f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 119.877645][ T6202] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9f1c18cd29 [ 119.877657][ T6202] RDX: 00007f9f1cfe2f20 RSI: 0000000000000058 RDI: 00007f9f1cfe2f20 [ 119.877666][ T6202] RBP: 00007f9f1cfe3090 R08: 0000000000000000 R09: 0000000000000058 [ 119.877676][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.877686][ T6202] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 119.877711][ T6202] [ 120.070603][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.005070][ T6223] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.015223][ T6223] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.024221][ T6240] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.035138][ T6240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.513843][ T6255] syz.3.91: attempt to access beyond end of device [ 126.513843][ T6255] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 127.338415][ T6255] syz.3.91: attempt to access beyond end of device [ 127.338415][ T6255] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 127.438117][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 128.140799][ T6255] syz.3.91: attempt to access beyond end of device [ 128.140799][ T6255] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 128.258623][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 128.270899][ T6255] syz.3.91: attempt to access beyond end of device [ 128.270899][ T6255] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 128.285613][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.92'. [ 128.321563][ T6255] syz.3.91: attempt to access beyond end of device [ 128.321563][ T6255] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 128.335967][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 128.365248][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 128.398645][ T6255] syz.3.91: attempt to access beyond end of device [ 128.398645][ T6255] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 128.439901][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 128.478763][ T6255] syz.3.91: attempt to access beyond end of device [ 128.478763][ T6255] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 128.659925][ T6255] syz.3.91: attempt to access beyond end of device [ 128.659925][ T6255] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 128.741761][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 128.756313][ T6255] syz.3.91: attempt to access beyond end of device [ 128.756313][ T6255] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 128.779848][ T6270] hsr_slave_1 (unregistering): left promiscuous mode [ 128.799348][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 128.813572][ T6255] syz.3.91: attempt to access beyond end of device [ 128.813572][ T6255] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 128.876984][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 128.939294][ T6255] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 129.046959][ T6255] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 129.520622][ T6284] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 129.662441][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 131.105558][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 134.136094][ T6313] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 134.426528][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.433737][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.894999][ T6315] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 136.459150][ T6322] trusted_key: syz.3.106 sent an empty control message without MSG_MORE. [ 136.472529][ T6322] usb usb8: usbfs: process 6322 (syz.3.106) did not claim interface 0 before use [ 136.932330][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 138.574525][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 138.574543][ T29] audit: type=1326 audit(1737956639.465:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 138.816920][ T29] audit: type=1326 audit(1737956639.475:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.035368][ T29] audit: type=1326 audit(1737956639.535:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.169287][ T29] audit: type=1326 audit(1737956639.535:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.257180][ T2153] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.286505][ T29] audit: type=1326 audit(1737956639.535:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.314254][ T6358] mmap: syz.0.115 (6358) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.405796][ T29] audit: type=1326 audit(1737956639.535:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.468728][ T2153] usb 3-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 139.479516][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.524947][ T29] audit: type=1326 audit(1737956639.535:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.558836][ T2153] usb 3-1: config 0 descriptor?? [ 139.590970][ T29] audit: type=1326 audit(1737956639.535:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.624451][ T29] audit: type=1326 audit(1737956639.535:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.650596][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.725013][ T29] audit: type=1326 audit(1737956639.535:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 139.833278][ T46] usb 5-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 139.860259][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 139.880952][ T46] usb 5-1: config 0 has no interface number 0 [ 139.916894][ T46] usb 5-1: config 0 interface 76 has no altsetting 0 [ 139.940109][ T46] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 9.a0 [ 139.984639][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.015564][ T2153] ntrig 0003:1B96:0003.0005: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.2-1/input0 [ 140.055562][ T46] usb 5-1: config 0 descriptor?? [ 140.065942][ T46] gspca_main: spca501-2.14.0 probing 0000:0000 [ 141.049355][ T46] gspca_spca501: reg write: error -110 [ 141.055947][ T46] spca501 5-1:0.76: Reg write failed for 0x02,0x0f,0x05 [ 141.197534][ T46] spca501 5-1:0.76: probe with driver spca501 failed with error -22 [ 141.807979][ T5871] usb 5-1: USB disconnect, device number 2 [ 145.539210][ T5873] usb 3-1: USB disconnect, device number 5 [ 151.486879][ T2153] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.736586][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 151.736601][ T29] audit: type=1326 audit(1737956652.635:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 152.060319][ T6426] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.645287][ T2153] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.677494][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 152.696844][ T2153] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 152.706549][ T2153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.754294][ T2153] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 152.761120][ T29] audit: type=1326 audit(1737956652.635:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 152.777302][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.839811][ T2153] usb 1-1: config 0 descriptor?? [ 152.864909][ T29] audit: type=1326 audit(1737956653.655:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 152.867246][ T2153] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 153.142153][ T2153] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 153.165617][ T29] audit: type=1326 audit(1737956653.655:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 153.308130][ T29] audit: type=1326 audit(1737956653.655:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 153.460679][ T29] audit: type=1326 audit(1737956653.655:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 153.614616][ T29] audit: type=1326 audit(1737956653.655:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 154.266867][ T29] audit: type=1326 audit(1737956653.655:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 154.328645][ T5870] usb 1-1: USB disconnect, device number 8 [ 154.527344][ T29] audit: type=1326 audit(1737956653.655:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 154.630758][ T29] audit: type=1326 audit(1737956653.685:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6421 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 156.091034][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.139'. [ 156.391937][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 157.830015][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.142'. [ 159.840497][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 162.397846][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 162.397861][ T29] audit: type=1326 audit(1737956663.295:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 162.527224][ T29] audit: type=1326 audit(1737956663.345:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 163.493329][ T29] audit: type=1326 audit(1737956663.355:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 163.548077][ T6470] netlink: 830 bytes leftover after parsing attributes in process `syz.1.146'. [ 163.559258][ T29] audit: type=1326 audit(1737956663.355:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 163.627331][ T29] audit: type=1326 audit(1737956663.355:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 163.690195][ T29] audit: type=1326 audit(1737956663.355:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 163.728390][ T29] audit: type=1326 audit(1737956663.355:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 163.792803][ T29] audit: type=1326 audit(1737956663.355:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 163.818742][ T6470] Bluetooth: MGMT ver 1.23 [ 163.836979][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.150'. [ 163.882701][ T29] audit: type=1326 audit(1737956663.355:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 164.050573][ T29] audit: type=1326 audit(1737956663.375:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062478cd29 code=0x7ffc0000 [ 164.362191][ T5901] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.579828][ T5901] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 164.888392][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.899310][ T5901] usb 4-1: config 0 descriptor?? [ 165.328080][ T5901] ath6kl: Failed to submit usb control message: -71 [ 165.403843][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 165.427596][ T5901] ath6kl: Unable to send get target info: -71 [ 165.497252][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.154'. [ 165.977170][ T54] Bluetooth: hci0: command tx timeout [ 166.136825][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 166.147283][ T5901] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 166.179719][ T5901] usb 4-1: USB disconnect, device number 4 [ 167.997807][ T6507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.008154][ T6507] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.577133][ T5872] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.784553][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.797501][ T5872] usb 4-1: config 0 has no interfaces? [ 171.813677][ T5872] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 171.823637][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.836444][ T5872] usb 4-1: config 0 descriptor?? [ 172.002369][ T6540] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.012034][ T6540] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 172.417297][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 172.417343][ T29] audit: type=1800 audit(1737956673.205:100): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.164" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 173.416556][ T6548] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.426881][ T6548] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.539032][ T46] usb 4-1: USB disconnect, device number 5 [ 174.947391][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.619447][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.706922][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 176.437745][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 176.447527][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.557279][ T5872] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 176.566470][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.082806][ T5872] usb 5-1: config 0 descriptor?? [ 177.136206][ T5872] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 177.147501][ T5872] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 177.182104][ T29] audit: type=1326 audit(1737956678.085:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.232561][ T29] audit: type=1326 audit(1737956678.085:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.354591][ T29] audit: type=1326 audit(1737956678.085:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.418562][ T29] audit: type=1326 audit(1737956678.085:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.460111][ T29] audit: type=1326 audit(1737956678.085:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.482443][ T29] audit: type=1326 audit(1737956678.085:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.505404][ T29] audit: type=1326 audit(1737956678.085:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.591980][ T29] audit: type=1326 audit(1737956678.085:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.646172][ T29] audit: type=1326 audit(1737956678.135:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.675897][ T29] audit: type=1326 audit(1737956678.135:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.704479][ T29] audit: type=1326 audit(1737956678.135:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.836853][ T29] audit: type=1326 audit(1737956678.135:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 177.903210][ T29] audit: type=1326 audit(1737956678.135:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 178.127339][ T29] audit: type=1326 audit(1737956678.135:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6577 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 178.314351][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 179.017734][ T5873] usb 5-1: USB disconnect, device number 3 [ 179.116384][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 185.158534][ T6636] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 185.167800][ T6636] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 186.006883][ T5872] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.631976][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.000495][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 187.037089][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 187.052689][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.106550][ T5872] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 187.131751][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.153657][ T5872] usb 4-1: config 0 descriptor?? [ 187.176312][ T6651] netlink: 'syz.0.193': attribute type 10 has an invalid length. [ 187.259906][ T5872] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 187.277046][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.495047][ T5872] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 188.139891][ T6651] team0: Port device bond0 added [ 188.193418][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 188.502285][ T6651] syz.0.193 (6651) used greatest stack depth: 17648 bytes left [ 188.643841][ T2153] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.608082][ T5871] usb 4-1: USB disconnect, device number 6 [ 193.073442][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 193.073460][ T29] audit: type=1326 audit(1737956693.975:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 193.713642][ T29] audit: type=1326 audit(1737956693.975:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 194.923850][ T29] audit: type=1326 audit(1737956695.715:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.119768][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.128804][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.141066][ T29] audit: type=1326 audit(1737956695.725:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.165423][ T29] audit: type=1326 audit(1737956695.735:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.187703][ T29] audit: type=1326 audit(1737956695.885:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.210473][ T29] audit: type=1326 audit(1737956696.075:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.315725][ T29] audit: type=1326 audit(1737956696.075:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.345600][ T29] audit: type=1326 audit(1737956696.075:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.446297][ T29] audit: type=1326 audit(1737956696.075:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6677 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 195.699381][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 200.419851][ T6724] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.429711][ T6724] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.492945][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 202.254750][ T5135] Bluetooth: hci4: command 0x0406 tx timeout [ 202.276842][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 202.280089][ T5135] Bluetooth: hci0: command 0x0406 tx timeout [ 202.284360][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 202.289082][ T5135] Bluetooth: hci2: command 0x0406 tx timeout [ 203.704218][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 204.768117][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 205.637263][ T6755] pim6reg: entered allmulticast mode [ 205.697006][ T6755] pim6reg: left allmulticast mode [ 205.775832][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 205.775851][ T29] audit: type=1326 audit(1737956706.675:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.775889][ T29] audit: type=1326 audit(1737956706.675:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.775920][ T29] audit: type=1326 audit(1737956706.675:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.775949][ T29] audit: type=1326 audit(1737956706.675:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.775980][ T29] audit: type=1326 audit(1737956706.675:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.776010][ T29] audit: type=1326 audit(1737956706.675:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.776039][ T29] audit: type=1326 audit(1737956706.675:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.776069][ T29] audit: type=1326 audit(1737956706.675:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.776099][ T29] audit: type=1326 audit(1737956706.675:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.776130][ T29] audit: type=1326 audit(1737956706.675:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6759 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1c18cd29 code=0x7ffc0000 [ 205.852402][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.954077][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.996950][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 206.189350][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.218'. [ 206.326925][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 206.341864][ T5873] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 206.375448][ T5873] usb 5-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 206.392832][ T5873] usb 5-1: config 0 has no interface number 0 [ 206.404911][ T5873] usb 5-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=b4.09 [ 206.414764][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.430867][ T5873] usb 5-1: Product: syz [ 206.435128][ T5873] usb 5-1: Manufacturer: syz [ 206.449707][ T5873] usb 5-1: SerialNumber: syz [ 206.466032][ T5873] usb 5-1: config 0 descriptor?? [ 206.481663][ T5873] option 5-1:0.196: GSM modem (1-port) converter detected [ 206.663641][ T6770] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.673606][ T6770] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.742466][ T5873] usb 5-1: USB disconnect, device number 4 [ 206.752254][ T5873] option 5-1:0.196: device disconnected [ 207.424261][ T6778] kAFS: No cell specified [ 208.197603][ T2153] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 208.366751][ T2153] usb 2-1: Using ep0 maxpacket: 32 [ 208.869231][ T2153] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.873633][ T6791] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 208.887791][ T6791] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 208.887906][ T2153] usb 2-1: config 0 has no interface number 0 [ 208.910963][ T2153] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 208.922234][ T2153] usb 2-1: config 0 interface 1 has no altsetting 0 [ 208.992855][ T2153] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 209.003703][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.012084][ T2153] usb 2-1: Product: syz [ 209.032566][ T2153] usb 2-1: Manufacturer: syz [ 209.062809][ T2153] usb 2-1: SerialNumber: syz [ 209.221161][ T2153] usb 2-1: config 0 descriptor?? [ 209.652955][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.682678][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.907736][ T6803] netlink: 68 bytes leftover after parsing attributes in process `syz.4.232'. [ 211.629809][ T2153] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 211.706775][ T2153] cx231xx 2-1:0.1: Not found matching IAD interface [ 211.764052][ T2153] usb 2-1: USB disconnect, device number 6 [ 211.889777][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 211.889796][ T29] audit: type=1326 audit(1737956712.795:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 211.981824][ T29] audit: type=1326 audit(1737956712.795:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 212.004356][ T29] audit: type=1326 audit(1737956712.835:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 212.206171][ T29] audit: type=1326 audit(1737956712.835:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 213.203296][ T29] audit: type=1326 audit(1737956712.835:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 213.225725][ T29] audit: type=1326 audit(1737956712.925:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 215.070843][ T29] audit: type=1326 audit(1737956712.925:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 215.151206][ T29] audit: type=1326 audit(1737956712.935:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 215.297835][ T29] audit: type=1326 audit(1737956712.935:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 215.323643][ T29] audit: type=1326 audit(1737956712.935:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6818 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d1d8cd29 code=0x7ffc0000 [ 216.069131][ T6850] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.078938][ T6850] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.246186][ T6852] ISOFS: Unable to identify CD-ROM format. [ 219.454224][ T6882] netlink: 44 bytes leftover after parsing attributes in process `syz.3.254'. [ 219.686143][ T46] IPVS: starting estimator thread 0... [ 220.407868][ T6887] IPVS: using max 24 ests per chain, 57600 per kthread [ 221.737386][ T6882] binder_alloc: 6881: binder_install_single_page failed to insert page at offset 0 with -14 [ 223.088391][ T5872] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.798532][ T6914] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 223.808090][ T6914] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 223.836895][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 223.875126][ T5872] usb 1-1: config 0 has an invalid interface number: 78 but max is 0 [ 224.050947][ T5872] usb 1-1: config 0 has no interface number 0 [ 224.248905][ T5872] usb 1-1: config 0 interface 78 has no altsetting 0 [ 224.302574][ T5872] usb 1-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11 [ 224.630739][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.764957][ T5872] usb 1-1: Product: syz [ 224.772950][ T5872] usb 1-1: Manufacturer: syz [ 224.778043][ T5872] usb 1-1: SerialNumber: syz [ 224.786120][ T5872] usb 1-1: config 0 descriptor?? [ 224.795813][ T5872] snd_usb_pod 1-1:0.78: Line 6 BassPODxt found [ 225.033571][ T5872] snd_usb_pod 1-1:0.78: set_interface failed [ 225.047042][ T5872] snd_usb_pod 1-1:0.78: Line 6 BassPODxt now disconnected [ 225.055165][ T5872] snd_usb_pod 1-1:0.78: probe with driver snd_usb_pod failed with error -71 [ 225.987087][ T5872] usb 1-1: USB disconnect, device number 9 [ 226.202219][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 226.202239][ T29] audit: type=1326 audit(1737956727.105:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 226.242319][ T29] audit: type=1326 audit(1737956727.105:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 226.266848][ T29] audit: type=1326 audit(1737956727.145:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 226.490606][ T29] audit: type=1326 audit(1737956727.145:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 226.753246][ T29] audit: type=1326 audit(1737956727.145:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 227.120575][ T6933] BUG: Bad page state in process syz.2.268 pfn:23367 [ 227.121785][ T29] audit: type=1326 audit(1737956727.165:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 227.127796][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x23367 [ 227.127825][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 227.127856][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 227.127871][ T6933] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 227.127882][ T6933] page dumped because: page_pool leak [ 227.127901][ T6933] page_owner tracks the page as allocated [ 227.195887][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120470226, free_ts 226330739712 [ 227.212911][ T6933] post_alloc_hook+0x1f3/0x230 [ 227.217765][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 227.223455][ T6933] __alloc_pages_noprof+0x292/0x710 [ 227.228722][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 227.234180][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 227.240257][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 227.245100][ T6933] do_xdp_generic+0x505/0xd30 [ 227.249814][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 227.255556][ T6933] __netif_receive_skb+0x12f/0x650 [ 227.260983][ T6933] netif_receive_skb+0x1e8/0x890 [ 227.265936][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 227.270694][ T6933] tun_get_user+0x30cc/0x48a0 [ 227.275434][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 227.280538][ T6933] vfs_write+0xacf/0xd10 [ 227.284791][ T6933] ksys_write+0x18f/0x2b0 [ 227.289171][ T6933] do_syscall_64+0xf3/0x230 [ 227.293666][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 227.300042][ T6933] free_unref_folios+0xe23/0x1890 [ 227.305086][ T6933] folios_put_refs+0x76c/0x860 [ 227.310017][ T6933] free_pages_and_swap_cache+0x5c8/0x690 [ 227.315655][ T6933] tlb_flush_mmu+0x3a3/0x680 [ 227.320311][ T6933] tlb_finish_mmu+0xd4/0x200 [ 227.324924][ T6933] exit_mmap+0x4d5/0xca0 [ 227.329208][ T6933] __mmput+0x115/0x410 [ 227.333284][ T6933] exit_mm+0x220/0x310 [ 227.337417][ T6933] do_exit+0x9ad/0x28e0 [ 227.341617][ T6933] do_group_exit+0x207/0x2c0 [ 227.346258][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 227.351371][ T6933] x64_sys_call+0x26a8/0x26b0 [ 227.356093][ T6933] do_syscall_64+0xf3/0x230 [ 227.360702][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.366601][ T6933] Modules linked in: [ 227.370575][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Not tainted 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 227.370589][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 227.370596][ T6933] Call Trace: [ 227.370601][ T6933] [ 227.370607][ T6933] dump_stack_lvl+0x241/0x360 [ 227.370626][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.370640][ T6933] ? __pfx_print_modules+0x10/0x10 [ 227.370657][ T6933] bad_page+0x176/0x1d0 [ 227.370669][ T6933] free_unref_page+0xf9e/0x1000 [ 227.370688][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 227.370710][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 227.370724][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 227.370737][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 227.370766][ T6933] do_xdp_generic+0x757/0xd30 [ 227.370784][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 227.370802][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 227.370824][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 227.370841][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 227.370861][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 227.370873][ T6933] ? mark_lock+0x9a/0x360 [ 227.370885][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 227.370899][ T6933] ? __lock_acquire+0x1397/0x2100 [ 227.370921][ T6933] __netif_receive_skb+0x12f/0x650 [ 227.370932][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 227.370943][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 227.370955][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 227.370968][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 227.370981][ T6933] ? netif_receive_skb+0x131/0x890 [ 227.370990][ T6933] ? netif_receive_skb+0x131/0x890 [ 227.370999][ T6933] netif_receive_skb+0x1e8/0x890 [ 227.371008][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 227.371020][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 227.371035][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 227.371046][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 227.371059][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.371072][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 227.371086][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 227.371108][ T6933] tun_get_user+0x30cc/0x48a0 [ 227.371121][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 227.371138][ T6933] ? __lock_acquire+0x1397/0x2100 [ 227.371153][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 227.371175][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 227.371187][ T6933] ? tun_get+0x1e/0x2f0 [ 227.371198][ T6933] ? __pfx_lock_release+0x10/0x10 [ 227.371217][ T6933] ? tun_get+0x1e/0x2f0 [ 227.371228][ T6933] ? tun_get+0x27d/0x2f0 [ 227.371241][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 227.371255][ T6933] vfs_write+0xacf/0xd10 [ 227.371291][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 227.371303][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 227.371318][ T6933] ? __fget_files+0x2a/0x410 [ 227.371331][ T6933] ? __fget_files+0x2a/0x410 [ 227.371347][ T6933] ksys_write+0x18f/0x2b0 [ 227.371361][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 227.371375][ T6933] ? do_syscall_64+0x100/0x230 [ 227.371388][ T6933] ? do_syscall_64+0xb6/0x230 [ 227.371400][ T6933] do_syscall_64+0xf3/0x230 [ 227.371412][ T6933] ? clear_bhb_loop+0x35/0x90 [ 227.371425][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.371437][ T6933] RIP: 0033:0x7f9f1c18b7df [ 227.371448][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 227.371455][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 227.371465][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 227.371472][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 227.371478][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 227.371483][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 227.371489][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 227.371503][ T6933] [ 227.371507][ T6933] Disabling lock debugging due to kernel taint [ 227.758037][ T6933] BUG: Bad page state in process syz.2.268 pfn:7f0ec [ 227.764800][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807f0eca00 pfn:0x7f0ec [ 227.774957][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 227.782123][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 227.790766][ T6933] raw: ffff88807f0eca00 0000000000000001 00000000ffffffff 0000000000000000 [ 227.799395][ T6933] page dumped because: page_pool leak [ 227.804777][ T6933] page_owner tracks the page as allocated [ 227.810581][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120458791, free_ts 226330744497 [ 227.827592][ T6933] post_alloc_hook+0x1f3/0x230 [ 227.832354][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 227.837967][ T6933] __alloc_pages_noprof+0x292/0x710 [ 227.843174][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 227.848686][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 227.854657][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 227.859567][ T6933] do_xdp_generic+0x505/0xd30 [ 227.864241][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 227.870307][ T6933] __netif_receive_skb+0x12f/0x650 [ 227.875630][ T6933] netif_receive_skb+0x1e8/0x890 [ 227.880693][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 227.885379][ T6933] tun_get_user+0x30cc/0x48a0 [ 227.890126][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 227.895227][ T6933] vfs_write+0xacf/0xd10 [ 227.899528][ T6933] ksys_write+0x18f/0x2b0 [ 227.903868][ T6933] do_syscall_64+0xf3/0x230 [ 227.908463][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 227.914966][ T6933] free_unref_folios+0xe23/0x1890 [ 227.920081][ T6933] folios_put_refs+0x76c/0x860 [ 227.924873][ T6933] free_pages_and_swap_cache+0x5c8/0x690 [ 227.930777][ T6933] tlb_flush_mmu+0x3a3/0x680 [ 227.935359][ T6933] tlb_finish_mmu+0xd4/0x200 [ 227.940106][ T6933] exit_mmap+0x4d5/0xca0 [ 227.944351][ T6933] __mmput+0x115/0x410 [ 227.948460][ T6933] exit_mm+0x220/0x310 [ 227.952512][ T6933] do_exit+0x9ad/0x28e0 [ 227.956748][ T6933] do_group_exit+0x207/0x2c0 [ 227.961354][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 227.966375][ T6933] x64_sys_call+0x26a8/0x26b0 [ 227.971191][ T6933] do_syscall_64+0xf3/0x230 [ 227.975731][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.981686][ T6933] Modules linked in: [ 227.985598][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 227.985617][ T6933] Tainted: [B]=BAD_PAGE [ 227.985620][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 227.985627][ T6933] Call Trace: [ 227.985633][ T6933] [ 227.985639][ T6933] dump_stack_lvl+0x241/0x360 [ 227.985659][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.985672][ T6933] ? __pfx_print_modules+0x10/0x10 [ 227.985685][ T6933] bad_page+0x176/0x1d0 [ 227.985697][ T6933] free_unref_page+0xf9e/0x1000 [ 227.985712][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 227.985729][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 227.985740][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 227.985748][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 227.985768][ T6933] do_xdp_generic+0x757/0xd30 [ 227.985782][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 227.985797][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 227.985813][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 227.985825][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 227.985841][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 227.985851][ T6933] ? mark_lock+0x9a/0x360 [ 227.985863][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 227.985875][ T6933] ? __lock_acquire+0x1397/0x2100 [ 227.985890][ T6933] __netif_receive_skb+0x12f/0x650 [ 227.985900][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 227.985911][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 227.985920][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 227.985932][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 227.985944][ T6933] ? netif_receive_skb+0x131/0x890 [ 227.985952][ T6933] ? netif_receive_skb+0x131/0x890 [ 227.985961][ T6933] netif_receive_skb+0x1e8/0x890 [ 227.985969][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 227.985980][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 227.985991][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 227.986003][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 227.986015][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.986026][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 227.986037][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 227.986052][ T6933] tun_get_user+0x30cc/0x48a0 [ 227.986064][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 227.986077][ T6933] ? __lock_acquire+0x1397/0x2100 [ 227.986089][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 227.986104][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 227.986120][ T6933] ? tun_get+0x1e/0x2f0 [ 227.986131][ T6933] ? __pfx_lock_release+0x10/0x10 [ 227.986144][ T6933] ? tun_get+0x1e/0x2f0 [ 227.986155][ T6933] ? tun_get+0x27d/0x2f0 [ 227.986166][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 227.986178][ T6933] vfs_write+0xacf/0xd10 [ 227.986193][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 227.986204][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 227.986217][ T6933] ? __fget_files+0x2a/0x410 [ 227.986229][ T6933] ? __fget_files+0x2a/0x410 [ 227.986241][ T6933] ksys_write+0x18f/0x2b0 [ 227.986255][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 227.986267][ T6933] ? do_syscall_64+0x100/0x230 [ 227.986279][ T6933] ? do_syscall_64+0xb6/0x230 [ 227.986290][ T6933] do_syscall_64+0xf3/0x230 [ 227.986301][ T6933] ? clear_bhb_loop+0x35/0x90 [ 227.986314][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.986326][ T6933] RIP: 0033:0x7f9f1c18b7df [ 227.986337][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 227.986344][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 227.986355][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 227.986362][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 227.986368][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 227.986374][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 227.986380][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 227.986389][ T6933] [ 227.986398][ T6933] BUG: Bad page state in process syz.2.268 pfn:27c27 [ 228.379875][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2007a pfn:0x27c27 [ 228.389156][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 228.396802][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 228.405892][ T6933] raw: 000000000002007a 0000000000000001 00000000ffffffff 0000000000000000 [ 228.415840][ T6933] page dumped because: page_pool leak [ 228.421507][ T6933] page_owner tracks the page as allocated [ 228.428002][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120447376, free_ts 226330749973 [ 228.446954][ T6933] post_alloc_hook+0x1f3/0x230 [ 228.452005][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 228.457942][ T6933] __alloc_pages_noprof+0x292/0x710 [ 228.463262][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 228.468972][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 228.474889][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 228.479892][ T6933] do_xdp_generic+0x505/0xd30 [ 228.485170][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 228.490990][ T6933] __netif_receive_skb+0x12f/0x650 [ 228.496201][ T6933] netif_receive_skb+0x1e8/0x890 [ 228.501342][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 228.506038][ T6933] tun_get_user+0x30cc/0x48a0 [ 228.511285][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 228.516822][ T6933] vfs_write+0xacf/0xd10 [ 228.521751][ T6933] ksys_write+0x18f/0x2b0 [ 228.526204][ T6933] do_syscall_64+0xf3/0x230 [ 228.530873][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 228.537511][ T6933] free_unref_folios+0xe23/0x1890 [ 228.542596][ T6933] folios_put_refs+0x76c/0x860 [ 228.547649][ T6933] free_pages_and_swap_cache+0x5c8/0x690 [ 228.553407][ T6933] tlb_flush_mmu+0x3a3/0x680 [ 228.558070][ T6933] tlb_finish_mmu+0xd4/0x200 [ 228.562658][ T6933] exit_mmap+0x4d5/0xca0 [ 228.566944][ T6933] __mmput+0x115/0x410 [ 228.571019][ T6933] exit_mm+0x220/0x310 [ 228.575186][ T6933] do_exit+0x9ad/0x28e0 [ 228.579401][ T6933] do_group_exit+0x207/0x2c0 [ 228.584179][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 228.589409][ T6933] x64_sys_call+0x26a8/0x26b0 [ 228.594118][ T6933] do_syscall_64+0xf3/0x230 [ 228.598678][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.604612][ T6933] Modules linked in: [ 228.608599][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 228.608616][ T6933] Tainted: [B]=BAD_PAGE [ 228.608619][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 228.608625][ T6933] Call Trace: [ 228.608632][ T6933] [ 228.608637][ T6933] dump_stack_lvl+0x241/0x360 [ 228.608656][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.608670][ T6933] ? __pfx_print_modules+0x10/0x10 [ 228.608683][ T6933] bad_page+0x176/0x1d0 [ 228.608694][ T6933] free_unref_page+0xf9e/0x1000 [ 228.608710][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 228.608727][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 228.608738][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 228.608746][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 228.608767][ T6933] do_xdp_generic+0x757/0xd30 [ 228.608781][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 228.608795][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 228.608815][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 228.608828][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 228.608844][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 228.608854][ T6933] ? mark_lock+0x9a/0x360 [ 228.608865][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 228.608878][ T6933] ? __lock_acquire+0x1397/0x2100 [ 228.608893][ T6933] __netif_receive_skb+0x12f/0x650 [ 228.608903][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 228.608913][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 228.608923][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 228.608936][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 228.608947][ T6933] ? netif_receive_skb+0x131/0x890 [ 228.608955][ T6933] ? netif_receive_skb+0x131/0x890 [ 228.608964][ T6933] netif_receive_skb+0x1e8/0x890 [ 228.608974][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 228.608985][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 228.608996][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 228.609007][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 228.609019][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.609031][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 228.609041][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 228.609057][ T6933] tun_get_user+0x30cc/0x48a0 [ 228.609069][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 228.609082][ T6933] ? __lock_acquire+0x1397/0x2100 [ 228.609094][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 228.609109][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 228.609121][ T6933] ? tun_get+0x1e/0x2f0 [ 228.609131][ T6933] ? __pfx_lock_release+0x10/0x10 [ 228.609145][ T6933] ? tun_get+0x1e/0x2f0 [ 228.609160][ T6933] ? tun_get+0x27d/0x2f0 [ 228.609172][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 228.609184][ T6933] vfs_write+0xacf/0xd10 [ 228.609199][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 228.609210][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 228.609223][ T6933] ? __fget_files+0x2a/0x410 [ 228.609235][ T6933] ? __fget_files+0x2a/0x410 [ 228.609247][ T6933] ksys_write+0x18f/0x2b0 [ 228.609260][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 228.609272][ T6933] ? do_syscall_64+0x100/0x230 [ 228.609285][ T6933] ? do_syscall_64+0xb6/0x230 [ 228.609296][ T6933] do_syscall_64+0xf3/0x230 [ 228.609306][ T6933] ? clear_bhb_loop+0x35/0x90 [ 228.609319][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.609332][ T6933] RIP: 0033:0x7f9f1c18b7df [ 228.609341][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 228.609348][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 228.609359][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 228.609366][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 228.609372][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 228.609378][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 228.609383][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 228.609392][ T6933] [ 228.609400][ T6933] BUG: Bad page state in process syz.2.268 pfn:27d67 [ 229.003042][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27d67 [ 229.011865][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 229.019076][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 229.027731][ T6933] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 229.036318][ T6933] page dumped because: page_pool leak [ 229.041805][ T6933] page_owner tracks the page as allocated [ 229.047585][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120436119, free_ts 226330754731 [ 229.064735][ T6933] post_alloc_hook+0x1f3/0x230 [ 229.069591][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 229.075282][ T6933] __alloc_pages_noprof+0x292/0x710 [ 229.080568][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 229.086051][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 229.092065][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 229.096974][ T6933] do_xdp_generic+0x505/0xd30 [ 229.101645][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 229.107442][ T6933] __netif_receive_skb+0x12f/0x650 [ 229.112635][ T6933] netif_receive_skb+0x1e8/0x890 [ 229.117651][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 229.122339][ T6933] tun_get_user+0x30cc/0x48a0 [ 229.127157][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 229.132166][ T6933] vfs_write+0xacf/0xd10 [ 229.136396][ T6933] ksys_write+0x18f/0x2b0 [ 229.140937][ T6933] do_syscall_64+0xf3/0x230 [ 229.145441][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 229.151861][ T6933] free_unref_folios+0xe23/0x1890 [ 229.156995][ T6933] folios_put_refs+0x76c/0x860 [ 229.161754][ T6933] free_pages_and_swap_cache+0x5c8/0x690 [ 229.167444][ T6933] tlb_flush_mmu+0x3a3/0x680 [ 229.172035][ T6933] tlb_finish_mmu+0xd4/0x200 [ 229.176769][ T6933] exit_mmap+0x4d5/0xca0 [ 229.181201][ T6933] __mmput+0x115/0x410 [ 229.185258][ T6933] exit_mm+0x220/0x310 [ 229.189410][ T6933] do_exit+0x9ad/0x28e0 [ 229.193581][ T6933] do_group_exit+0x207/0x2c0 [ 229.198191][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 229.203216][ T6933] x64_sys_call+0x26a8/0x26b0 [ 229.207916][ T6933] do_syscall_64+0xf3/0x230 [ 229.212492][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.218429][ T6933] Modules linked in: [ 229.222343][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 229.222363][ T6933] Tainted: [B]=BAD_PAGE [ 229.222366][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 229.222373][ T6933] Call Trace: [ 229.222378][ T6933] [ 229.222384][ T6933] dump_stack_lvl+0x241/0x360 [ 229.222403][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.222416][ T6933] ? __pfx_print_modules+0x10/0x10 [ 229.222430][ T6933] bad_page+0x176/0x1d0 [ 229.222441][ T6933] free_unref_page+0xf9e/0x1000 [ 229.222456][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 229.222473][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 229.222484][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 229.222492][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 229.222512][ T6933] do_xdp_generic+0x757/0xd30 [ 229.222526][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 229.222541][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 229.222557][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 229.222569][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 229.222584][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 229.222594][ T6933] ? mark_lock+0x9a/0x360 [ 229.222606][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 229.222618][ T6933] ? __lock_acquire+0x1397/0x2100 [ 229.222634][ T6933] __netif_receive_skb+0x12f/0x650 [ 229.222643][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 229.222654][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 229.222664][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 229.222676][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 229.222688][ T6933] ? netif_receive_skb+0x131/0x890 [ 229.222696][ T6933] ? netif_receive_skb+0x131/0x890 [ 229.222705][ T6933] netif_receive_skb+0x1e8/0x890 [ 229.222713][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 229.222724][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 229.222735][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 229.222746][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 229.222758][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.222769][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 229.222780][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 229.222795][ T6933] tun_get_user+0x30cc/0x48a0 [ 229.222807][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 229.222821][ T6933] ? __lock_acquire+0x1397/0x2100 [ 229.222833][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 229.222848][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.222859][ T6933] ? tun_get+0x1e/0x2f0 [ 229.222880][ T6933] ? __pfx_lock_release+0x10/0x10 [ 229.222894][ T6933] ? tun_get+0x1e/0x2f0 [ 229.222905][ T6933] ? tun_get+0x27d/0x2f0 [ 229.222916][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 229.222928][ T6933] vfs_write+0xacf/0xd10 [ 229.222942][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.222954][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 229.222967][ T6933] ? __fget_files+0x2a/0x410 [ 229.222979][ T6933] ? __fget_files+0x2a/0x410 [ 229.222991][ T6933] ksys_write+0x18f/0x2b0 [ 229.223004][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 229.223016][ T6933] ? do_syscall_64+0x100/0x230 [ 229.223029][ T6933] ? do_syscall_64+0xb6/0x230 [ 229.223039][ T6933] do_syscall_64+0xf3/0x230 [ 229.223050][ T6933] ? clear_bhb_loop+0x35/0x90 [ 229.223063][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.223075][ T6933] RIP: 0033:0x7f9f1c18b7df [ 229.223084][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 229.223092][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.223104][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 229.223111][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 229.223117][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 229.223123][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 229.223128][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 229.223137][ T6933] [ 229.223145][ T6933] BUG: Bad page state in process syz.2.268 pfn:27a6a [ 229.557493][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.622456][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27a6a [ 229.631316][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 229.638560][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 229.647190][ T6933] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 229.655774][ T6933] page dumped because: page_pool leak [ 229.661438][ T6933] page_owner tracks the page as allocated [ 229.667192][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120424523, free_ts 226330759599 [ 229.684536][ T6933] post_alloc_hook+0x1f3/0x230 [ 229.689367][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 229.694918][ T6933] __alloc_pages_noprof+0x292/0x710 [ 229.700199][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 229.705675][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 229.711611][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 229.716457][ T6933] do_xdp_generic+0x505/0xd30 [ 229.721210][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 229.727015][ T6933] __netif_receive_skb+0x12f/0x650 [ 229.732186][ T6933] netif_receive_skb+0x1e8/0x890 [ 229.737209][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 229.741917][ T6933] tun_get_user+0x30cc/0x48a0 [ 229.746609][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 229.751714][ T6933] vfs_write+0xacf/0xd10 [ 229.755968][ T6933] ksys_write+0x18f/0x2b0 [ 229.760342][ T6933] do_syscall_64+0xf3/0x230 [ 229.764838][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 229.771244][ T6933] free_unref_folios+0xe23/0x1890 [ 229.776315][ T6933] folios_put_refs+0x76c/0x860 [ 229.781195][ T6933] free_pages_and_swap_cache+0x5c8/0x690 [ 229.786891][ T6933] tlb_flush_mmu+0x3a3/0x680 [ 229.791517][ T6933] tlb_finish_mmu+0xd4/0x200 [ 229.796116][ T6933] exit_mmap+0x4d5/0xca0 [ 229.800462][ T6933] __mmput+0x115/0x410 [ 229.804540][ T6933] exit_mm+0x220/0x310 [ 229.808652][ T6933] do_exit+0x9ad/0x28e0 [ 229.813157][ T6933] do_group_exit+0x207/0x2c0 [ 229.817785][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 229.822831][ T6933] x64_sys_call+0x26a8/0x26b0 [ 229.827542][ T6933] do_syscall_64+0xf3/0x230 [ 229.832144][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.838218][ T6933] Modules linked in: [ 229.842105][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 229.842119][ T6933] Tainted: [B]=BAD_PAGE [ 229.842123][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 229.842129][ T6933] Call Trace: [ 229.842134][ T6933] [ 229.842140][ T6933] dump_stack_lvl+0x241/0x360 [ 229.842158][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.842171][ T6933] ? __pfx_print_modules+0x10/0x10 [ 229.842184][ T6933] bad_page+0x176/0x1d0 [ 229.842196][ T6933] free_unref_page+0xf9e/0x1000 [ 229.842211][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 229.842227][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 229.842238][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 229.842246][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 229.842266][ T6933] do_xdp_generic+0x757/0xd30 [ 229.842281][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 229.842295][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 229.842311][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 229.842323][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 229.842339][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 229.842349][ T6933] ? mark_lock+0x9a/0x360 [ 229.842361][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 229.842373][ T6933] ? __lock_acquire+0x1397/0x2100 [ 229.842388][ T6933] __netif_receive_skb+0x12f/0x650 [ 229.842398][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 229.842408][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 229.842418][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 229.842430][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 229.842442][ T6933] ? netif_receive_skb+0x131/0x890 [ 229.842450][ T6933] ? netif_receive_skb+0x131/0x890 [ 229.842458][ T6933] netif_receive_skb+0x1e8/0x890 [ 229.842466][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 229.842478][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 229.842488][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 229.842500][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 229.842512][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.842524][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 229.842534][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 229.842549][ T6933] tun_get_user+0x30cc/0x48a0 [ 229.842561][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 229.842575][ T6933] ? __lock_acquire+0x1397/0x2100 [ 229.842587][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 229.842602][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.842613][ T6933] ? tun_get+0x1e/0x2f0 [ 229.842624][ T6933] ? __pfx_lock_release+0x10/0x10 [ 229.842637][ T6933] ? tun_get+0x1e/0x2f0 [ 229.842648][ T6933] ? tun_get+0x27d/0x2f0 [ 229.842659][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 229.842671][ T6933] vfs_write+0xacf/0xd10 [ 229.842685][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.842697][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 229.842710][ T6933] ? __fget_files+0x2a/0x410 [ 229.842721][ T6933] ? __fget_files+0x2a/0x410 [ 229.842733][ T6933] ksys_write+0x18f/0x2b0 [ 229.842746][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 229.842759][ T6933] ? do_syscall_64+0x100/0x230 [ 229.842772][ T6933] ? do_syscall_64+0xb6/0x230 [ 229.842783][ T6933] do_syscall_64+0xf3/0x230 [ 229.842793][ T6933] ? clear_bhb_loop+0x35/0x90 [ 229.842821][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.842834][ T6933] RIP: 0033:0x7f9f1c18b7df [ 229.842844][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 229.842851][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 229.842861][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 229.842868][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 229.842874][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 229.842879][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 229.842885][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 229.842894][ T6933] [ 229.842902][ T6933] BUG: Bad page state in process syz.2.268 pfn:11f57 [ 230.235419][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888011f57b40 pfn:0x11f57 [ 230.245526][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 230.252664][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 230.261280][ T6933] raw: ffff888011f57b40 0000000000000001 00000000ffffffff 0000000000000000 [ 230.269878][ T6933] page dumped because: page_pool leak [ 230.275246][ T6933] page_owner tracks the page as allocated [ 230.281026][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120413588, free_ts 226330769255 [ 230.298025][ T6933] post_alloc_hook+0x1f3/0x230 [ 230.302788][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 230.308363][ T6933] __alloc_pages_noprof+0x292/0x710 [ 230.313646][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 230.319184][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 230.325120][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 230.330022][ T6933] do_xdp_generic+0x505/0xd30 [ 230.334711][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 230.340549][ T6933] __netif_receive_skb+0x12f/0x650 [ 230.345680][ T6933] netif_receive_skb+0x1e8/0x890 [ 230.350693][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 230.355434][ T6933] tun_get_user+0x30cc/0x48a0 [ 230.360308][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 230.365434][ T6933] vfs_write+0xacf/0xd10 [ 230.369734][ T6933] ksys_write+0x18f/0x2b0 [ 230.374074][ T6933] do_syscall_64+0xf3/0x230 [ 230.378742][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 230.385078][ T6933] free_unref_page+0xd2c/0x1000 [ 230.389989][ T6933] tlb_finish_mmu+0x11f/0x200 [ 230.394827][ T6933] exit_mmap+0x4d5/0xca0 [ 230.399143][ T6933] __mmput+0x115/0x410 [ 230.403232][ T6933] exit_mm+0x220/0x310 [ 230.407344][ T6933] do_exit+0x9ad/0x28e0 [ 230.411500][ T6933] do_group_exit+0x207/0x2c0 [ 230.416162][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 230.421220][ T6933] x64_sys_call+0x26a8/0x26b0 [ 230.425939][ T6933] do_syscall_64+0xf3/0x230 [ 230.430658][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.436557][ T6933] Modules linked in: [ 230.440495][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 230.440512][ T6933] Tainted: [B]=BAD_PAGE [ 230.440515][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 230.440521][ T6933] Call Trace: [ 230.440527][ T6933] [ 230.440533][ T6933] dump_stack_lvl+0x241/0x360 [ 230.440551][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.440565][ T6933] ? __pfx_print_modules+0x10/0x10 [ 230.440578][ T6933] bad_page+0x176/0x1d0 [ 230.440590][ T6933] free_unref_page+0xf9e/0x1000 [ 230.440605][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 230.440623][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 230.440634][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 230.440641][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 230.440661][ T6933] do_xdp_generic+0x757/0xd30 [ 230.440676][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 230.440690][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 230.440706][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 230.440719][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 230.440734][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 230.440744][ T6933] ? mark_lock+0x9a/0x360 [ 230.440756][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 230.440769][ T6933] ? __lock_acquire+0x1397/0x2100 [ 230.440784][ T6933] __netif_receive_skb+0x12f/0x650 [ 230.440793][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 230.440804][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 230.440814][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 230.440826][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 230.440838][ T6933] ? netif_receive_skb+0x131/0x890 [ 230.440846][ T6933] ? netif_receive_skb+0x131/0x890 [ 230.440854][ T6933] netif_receive_skb+0x1e8/0x890 [ 230.440862][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 230.440874][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 230.440885][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 230.440896][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 230.440908][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.440922][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 230.440933][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 230.440948][ T6933] tun_get_user+0x30cc/0x48a0 [ 230.440960][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 230.440973][ T6933] ? __lock_acquire+0x1397/0x2100 [ 230.440986][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 230.441007][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 230.441018][ T6933] ? tun_get+0x1e/0x2f0 [ 230.441029][ T6933] ? __pfx_lock_release+0x10/0x10 [ 230.441042][ T6933] ? tun_get+0x1e/0x2f0 [ 230.441053][ T6933] ? tun_get+0x27d/0x2f0 [ 230.441064][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 230.441077][ T6933] vfs_write+0xacf/0xd10 [ 230.441091][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 230.441103][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 230.441116][ T6933] ? __fget_files+0x2a/0x410 [ 230.441127][ T6933] ? __fget_files+0x2a/0x410 [ 230.441139][ T6933] ksys_write+0x18f/0x2b0 [ 230.441152][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 230.441165][ T6933] ? do_syscall_64+0x100/0x230 [ 230.441178][ T6933] ? do_syscall_64+0xb6/0x230 [ 230.441188][ T6933] do_syscall_64+0xf3/0x230 [ 230.441199][ T6933] ? clear_bhb_loop+0x35/0x90 [ 230.441212][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.441224][ T6933] RIP: 0033:0x7f9f1c18b7df [ 230.441234][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 230.441242][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 230.441253][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 230.441259][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 230.441265][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 230.441271][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 230.441276][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 230.441286][ T6933] [ 230.441294][ T6933] BUG: Bad page state in process syz.2.268 pfn:33d74 [ 230.835852][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033d743c0 pfn:0x33d74 [ 230.846093][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 230.853413][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 230.862170][ T6933] raw: ffff888033d743c0 0000000000000001 00000000ffffffff 0000000000000000 [ 230.870889][ T6933] page dumped because: page_pool leak [ 230.876269][ T6933] page_owner tracks the page as allocated [ 230.882049][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120402464, free_ts 226330775366 [ 230.899157][ T6933] post_alloc_hook+0x1f3/0x230 [ 230.903928][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 230.909550][ T6933] __alloc_pages_noprof+0x292/0x710 [ 230.914825][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 230.920354][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 230.926263][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 230.931349][ T6933] do_xdp_generic+0x505/0xd30 [ 230.936058][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 230.941849][ T6933] __netif_receive_skb+0x12f/0x650 [ 230.947046][ T6933] netif_receive_skb+0x1e8/0x890 [ 230.952015][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 230.956780][ T6933] tun_get_user+0x30cc/0x48a0 [ 230.961443][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 230.966455][ T6933] vfs_write+0xacf/0xd10 [ 230.970760][ T6933] ksys_write+0x18f/0x2b0 [ 230.975107][ T6933] do_syscall_64+0xf3/0x230 [ 230.979672][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 230.985979][ T6933] free_unref_page+0xd2c/0x1000 [ 230.991002][ T6933] tlb_finish_mmu+0x11f/0x200 [ 230.995680][ T6933] exit_mmap+0x4d5/0xca0 [ 231.000005][ T6933] __mmput+0x115/0x410 [ 231.004166][ T6933] exit_mm+0x220/0x310 [ 231.008296][ T6933] do_exit+0x9ad/0x28e0 [ 231.012441][ T6933] do_group_exit+0x207/0x2c0 [ 231.017075][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 231.022186][ T6933] x64_sys_call+0x26a8/0x26b0 [ 231.026905][ T6933] do_syscall_64+0xf3/0x230 [ 231.031675][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.037633][ T6933] Modules linked in: [ 231.041621][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 231.041638][ T6933] Tainted: [B]=BAD_PAGE [ 231.041641][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.041647][ T6933] Call Trace: [ 231.041654][ T6933] [ 231.041659][ T6933] dump_stack_lvl+0x241/0x360 [ 231.041676][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.041690][ T6933] ? __pfx_print_modules+0x10/0x10 [ 231.041703][ T6933] bad_page+0x176/0x1d0 [ 231.041714][ T6933] free_unref_page+0xf9e/0x1000 [ 231.041729][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 231.041746][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 231.041758][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 231.041766][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 231.041786][ T6933] do_xdp_generic+0x757/0xd30 [ 231.041801][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 231.041816][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 231.041831][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 231.041844][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 231.041859][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 231.041870][ T6933] ? mark_lock+0x9a/0x360 [ 231.041881][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 231.041894][ T6933] ? __lock_acquire+0x1397/0x2100 [ 231.041914][ T6933] __netif_receive_skb+0x12f/0x650 [ 231.041924][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 231.041935][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 231.041945][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 231.041957][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 231.041969][ T6933] ? netif_receive_skb+0x131/0x890 [ 231.041977][ T6933] ? netif_receive_skb+0x131/0x890 [ 231.041986][ T6933] netif_receive_skb+0x1e8/0x890 [ 231.041994][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 231.042006][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 231.042017][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 231.042029][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 231.042041][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.042053][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 231.042063][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 231.042079][ T6933] tun_get_user+0x30cc/0x48a0 [ 231.042091][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 231.042104][ T6933] ? __lock_acquire+0x1397/0x2100 [ 231.042116][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 231.042132][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 231.042143][ T6933] ? tun_get+0x1e/0x2f0 [ 231.042156][ T6933] ? __pfx_lock_release+0x10/0x10 [ 231.042170][ T6933] ? tun_get+0x1e/0x2f0 [ 231.042180][ T6933] ? tun_get+0x27d/0x2f0 [ 231.042191][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 231.042204][ T6933] vfs_write+0xacf/0xd10 [ 231.042219][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 231.042231][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 231.042243][ T6933] ? __fget_files+0x2a/0x410 [ 231.042255][ T6933] ? __fget_files+0x2a/0x410 [ 231.042267][ T6933] ksys_write+0x18f/0x2b0 [ 231.042281][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 231.042293][ T6933] ? do_syscall_64+0x100/0x230 [ 231.042306][ T6933] ? do_syscall_64+0xb6/0x230 [ 231.042316][ T6933] do_syscall_64+0xf3/0x230 [ 231.042327][ T6933] ? clear_bhb_loop+0x35/0x90 [ 231.042340][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.042352][ T6933] RIP: 0033:0x7f9f1c18b7df [ 231.042362][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 231.042369][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 231.042381][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 231.042388][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 231.042394][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 231.042400][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 231.042406][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 231.042415][ T6933] [ 231.042423][ T6933] BUG: Bad page state in process syz.2.268 pfn:3360f [ 231.437725][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803360fb40 pfn:0x3360f [ 231.447828][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 231.454995][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 231.464322][ T6933] raw: ffff88803360fb40 0000000000000001 00000000ffffffff 0000000000000000 [ 231.472936][ T6933] page dumped because: page_pool leak [ 231.478353][ T6933] page_owner tracks the page as allocated [ 231.484054][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120391306, free_ts 226330780965 [ 231.501049][ T6933] post_alloc_hook+0x1f3/0x230 [ 231.505836][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 231.511438][ T6933] __alloc_pages_noprof+0x292/0x710 [ 231.516786][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 231.522335][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 231.528344][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 231.533297][ T6933] do_xdp_generic+0x505/0xd30 [ 231.538009][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 231.543765][ T6933] __netif_receive_skb+0x12f/0x650 [ 231.548932][ T6933] netif_receive_skb+0x1e8/0x890 [ 231.553888][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 231.558596][ T6933] tun_get_user+0x30cc/0x48a0 [ 231.563265][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 231.568324][ T6933] vfs_write+0xacf/0xd10 [ 231.572586][ T6933] ksys_write+0x18f/0x2b0 [ 231.576944][ T6933] do_syscall_64+0xf3/0x230 [ 231.581455][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 231.587912][ T6933] free_unref_page+0xd2c/0x1000 [ 231.592768][ T6933] tlb_finish_mmu+0x11f/0x200 [ 231.597473][ T6933] exit_mmap+0x4d5/0xca0 [ 231.602052][ T6933] __mmput+0x115/0x410 [ 231.606155][ T6933] exit_mm+0x220/0x310 [ 231.610340][ T6933] do_exit+0x9ad/0x28e0 [ 231.614507][ T6933] do_group_exit+0x207/0x2c0 [ 231.619168][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 231.624223][ T6933] x64_sys_call+0x26a8/0x26b0 [ 231.628965][ T6933] do_syscall_64+0xf3/0x230 [ 231.633516][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.639494][ T6933] Modules linked in: [ 231.643568][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 231.643588][ T6933] Tainted: [B]=BAD_PAGE [ 231.643591][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.643598][ T6933] Call Trace: [ 231.643604][ T6933] [ 231.643610][ T6933] dump_stack_lvl+0x241/0x360 [ 231.643629][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.643642][ T6933] ? __pfx_print_modules+0x10/0x10 [ 231.643656][ T6933] bad_page+0x176/0x1d0 [ 231.643667][ T6933] free_unref_page+0xf9e/0x1000 [ 231.643682][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 231.643700][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 231.643711][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 231.643719][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 231.643739][ T6933] do_xdp_generic+0x757/0xd30 [ 231.643753][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 231.643779][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 231.643796][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 231.643808][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 231.643824][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 231.643834][ T6933] ? mark_lock+0x9a/0x360 [ 231.643847][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 231.643860][ T6933] ? __lock_acquire+0x1397/0x2100 [ 231.643875][ T6933] __netif_receive_skb+0x12f/0x650 [ 231.643884][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 231.643895][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 231.643905][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 231.643917][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 231.643929][ T6933] ? netif_receive_skb+0x131/0x890 [ 231.643938][ T6933] ? netif_receive_skb+0x131/0x890 [ 231.643946][ T6933] netif_receive_skb+0x1e8/0x890 [ 231.643955][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 231.643966][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 231.643977][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 231.643988][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 231.644000][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.644012][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 231.644023][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 231.644038][ T6933] tun_get_user+0x30cc/0x48a0 [ 231.644050][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 231.644064][ T6933] ? __lock_acquire+0x1397/0x2100 [ 231.644076][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 231.644091][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 231.644102][ T6933] ? tun_get+0x1e/0x2f0 [ 231.644113][ T6933] ? __pfx_lock_release+0x10/0x10 [ 231.644127][ T6933] ? tun_get+0x1e/0x2f0 [ 231.644138][ T6933] ? tun_get+0x27d/0x2f0 [ 231.644149][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 231.644162][ T6933] vfs_write+0xacf/0xd10 [ 231.644177][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 231.644189][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 231.644202][ T6933] ? __fget_files+0x2a/0x410 [ 231.644213][ T6933] ? __fget_files+0x2a/0x410 [ 231.644225][ T6933] ksys_write+0x18f/0x2b0 [ 231.644238][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 231.644251][ T6933] ? do_syscall_64+0x100/0x230 [ 231.644263][ T6933] ? do_syscall_64+0xb6/0x230 [ 231.644273][ T6933] do_syscall_64+0xf3/0x230 [ 231.644284][ T6933] ? clear_bhb_loop+0x35/0x90 [ 231.644298][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.644310][ T6933] RIP: 0033:0x7f9f1c18b7df [ 231.644320][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 231.644327][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 231.644338][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 231.644345][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 231.644350][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 231.644356][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 231.644362][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 231.644371][ T6933] [ 231.644379][ T6933] BUG: Bad page state in process syz.2.268 pfn:28450 [ 232.038229][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028450c80 pfn:0x28450 [ 232.048358][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 232.055475][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 232.064285][ T6933] raw: ffff888028450c80 0000000000000001 00000000ffffffff 0000000000000000 [ 232.072926][ T6933] page dumped because: page_pool leak [ 232.078375][ T6933] page_owner tracks the page as allocated [ 232.084111][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120379911, free_ts 226330786212 [ 232.101138][ T6933] post_alloc_hook+0x1f3/0x230 [ 232.105907][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 232.111592][ T6933] __alloc_pages_noprof+0x292/0x710 [ 232.116852][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 232.122401][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 232.128361][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 232.133247][ T6933] do_xdp_generic+0x505/0xd30 [ 232.138019][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 232.143737][ T6933] __netif_receive_skb+0x12f/0x650 [ 232.148955][ T6933] netif_receive_skb+0x1e8/0x890 [ 232.153911][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 232.158678][ T6933] tun_get_user+0x30cc/0x48a0 [ 232.163558][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 232.168672][ T6933] vfs_write+0xacf/0xd10 [ 232.172925][ T6933] ksys_write+0x18f/0x2b0 [ 232.177395][ T6933] do_syscall_64+0xf3/0x230 [ 232.182089][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 232.188500][ T6933] free_unref_page+0xd2c/0x1000 [ 232.193434][ T6933] tlb_finish_mmu+0x11f/0x200 [ 232.198223][ T6933] exit_mmap+0x4d5/0xca0 [ 232.202476][ T6933] __mmput+0x115/0x410 [ 232.206739][ T6933] exit_mm+0x220/0x310 [ 232.210815][ T6933] do_exit+0x9ad/0x28e0 [ 232.214951][ T6933] do_group_exit+0x207/0x2c0 [ 232.219595][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 232.224849][ T6933] x64_sys_call+0x26a8/0x26b0 [ 232.229603][ T6933] do_syscall_64+0xf3/0x230 [ 232.234296][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.240542][ T6933] Modules linked in: [ 232.244516][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 232.244533][ T6933] Tainted: [B]=BAD_PAGE [ 232.244536][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 232.244543][ T6933] Call Trace: [ 232.244549][ T6933] [ 232.244555][ T6933] dump_stack_lvl+0x241/0x360 [ 232.244573][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.244585][ T6933] ? __pfx_print_modules+0x10/0x10 [ 232.244599][ T6933] bad_page+0x176/0x1d0 [ 232.244610][ T6933] free_unref_page+0xf9e/0x1000 [ 232.244626][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 232.244643][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 232.244654][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 232.244662][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 232.244683][ T6933] do_xdp_generic+0x757/0xd30 [ 232.244697][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 232.244712][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 232.244728][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 232.244741][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 232.244757][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 232.244767][ T6933] ? mark_lock+0x9a/0x360 [ 232.244785][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 232.244797][ T6933] ? __lock_acquire+0x1397/0x2100 [ 232.244813][ T6933] __netif_receive_skb+0x12f/0x650 [ 232.244823][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 232.244833][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 232.244843][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 232.244856][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 232.244868][ T6933] ? netif_receive_skb+0x131/0x890 [ 232.244876][ T6933] ? netif_receive_skb+0x131/0x890 [ 232.244884][ T6933] netif_receive_skb+0x1e8/0x890 [ 232.244893][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 232.244905][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 232.244915][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 232.244927][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 232.244939][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.244951][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 232.244961][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 232.244977][ T6933] tun_get_user+0x30cc/0x48a0 [ 232.244989][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 232.245003][ T6933] ? __lock_acquire+0x1397/0x2100 [ 232.245015][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 232.245033][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.245044][ T6933] ? tun_get+0x1e/0x2f0 [ 232.245055][ T6933] ? __pfx_lock_release+0x10/0x10 [ 232.245068][ T6933] ? tun_get+0x1e/0x2f0 [ 232.245079][ T6933] ? tun_get+0x27d/0x2f0 [ 232.245090][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 232.245103][ T6933] vfs_write+0xacf/0xd10 [ 232.245117][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 232.245129][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 232.245142][ T6933] ? __fget_files+0x2a/0x410 [ 232.245154][ T6933] ? __fget_files+0x2a/0x410 [ 232.245166][ T6933] ksys_write+0x18f/0x2b0 [ 232.245180][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 232.245192][ T6933] ? do_syscall_64+0x100/0x230 [ 232.245205][ T6933] ? do_syscall_64+0xb6/0x230 [ 232.245216][ T6933] do_syscall_64+0xf3/0x230 [ 232.245227][ T6933] ? clear_bhb_loop+0x35/0x90 [ 232.245240][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.245253][ T6933] RIP: 0033:0x7f9f1c18b7df [ 232.245262][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 232.245270][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 232.245281][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 232.245287][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 232.245293][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.245300][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 232.245305][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 232.245315][ T6933] [ 232.245323][ T6933] BUG: Bad page state in process syz.2.268 pfn:34e57 [ 232.645292][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x34e57 [ 232.655453][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 232.662690][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 232.672164][ T6933] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 232.680838][ T6933] page dumped because: page_pool leak [ 232.686197][ T6933] page_owner tracks the page as allocated [ 232.691963][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120368753, free_ts 226330802931 [ 232.708937][ T6933] post_alloc_hook+0x1f3/0x230 [ 232.713695][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 232.719285][ T6933] __alloc_pages_noprof+0x292/0x710 [ 232.724481][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 232.729996][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 232.736074][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 232.741235][ T6933] do_xdp_generic+0x505/0xd30 [ 232.745908][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 232.751664][ T6933] __netif_receive_skb+0x12f/0x650 [ 232.756836][ T6933] netif_receive_skb+0x1e8/0x890 [ 232.761859][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 232.766523][ T6933] tun_get_user+0x30cc/0x48a0 [ 232.771248][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 232.776258][ T6933] vfs_write+0xacf/0xd10 [ 232.780530][ T6933] ksys_write+0x18f/0x2b0 [ 232.784845][ T6933] do_syscall_64+0xf3/0x230 [ 232.789383][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 232.795707][ T6933] free_unref_page+0xd2c/0x1000 [ 232.800616][ T6933] tlb_finish_mmu+0x11f/0x200 [ 232.805307][ T6933] exit_mmap+0x4d5/0xca0 [ 232.809591][ T6933] __mmput+0x115/0x410 [ 232.813643][ T6933] exit_mm+0x220/0x310 [ 232.817751][ T6933] do_exit+0x9ad/0x28e0 [ 232.821907][ T6933] do_group_exit+0x207/0x2c0 [ 232.826554][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 232.831678][ T6933] x64_sys_call+0x26a8/0x26b0 [ 232.836593][ T6933] do_syscall_64+0xf3/0x230 [ 232.841460][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.847407][ T6933] Modules linked in: [ 232.851305][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 232.851321][ T6933] Tainted: [B]=BAD_PAGE [ 232.851325][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 232.851331][ T6933] Call Trace: [ 232.851336][ T6933] [ 232.851341][ T6933] dump_stack_lvl+0x241/0x360 [ 232.851359][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.851372][ T6933] ? __pfx_print_modules+0x10/0x10 [ 232.851385][ T6933] bad_page+0x176/0x1d0 [ 232.851397][ T6933] free_unref_page+0xf9e/0x1000 [ 232.851411][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 232.851428][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 232.851439][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 232.851448][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 232.851468][ T6933] do_xdp_generic+0x757/0xd30 [ 232.851482][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 232.851497][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 232.851513][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 232.851527][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 232.851542][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 232.851552][ T6933] ? mark_lock+0x9a/0x360 [ 232.851564][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 232.851577][ T6933] ? __lock_acquire+0x1397/0x2100 [ 232.851592][ T6933] __netif_receive_skb+0x12f/0x650 [ 232.851606][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 232.851616][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 232.851627][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 232.851639][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 232.851651][ T6933] ? netif_receive_skb+0x131/0x890 [ 232.851659][ T6933] ? netif_receive_skb+0x131/0x890 [ 232.851667][ T6933] netif_receive_skb+0x1e8/0x890 [ 232.851676][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 232.851688][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 232.851699][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 232.851711][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 232.851722][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.851734][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 232.851745][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 232.851765][ T6933] tun_get_user+0x30cc/0x48a0 [ 232.851777][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 232.851790][ T6933] ? __lock_acquire+0x1397/0x2100 [ 232.851802][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 232.851818][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.851829][ T6933] ? tun_get+0x1e/0x2f0 [ 232.851840][ T6933] ? __pfx_lock_release+0x10/0x10 [ 232.851854][ T6933] ? tun_get+0x1e/0x2f0 [ 232.851865][ T6933] ? tun_get+0x27d/0x2f0 [ 232.851876][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 232.851889][ T6933] vfs_write+0xacf/0xd10 [ 232.851904][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 232.851916][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 232.851929][ T6933] ? __fget_files+0x2a/0x410 [ 232.851941][ T6933] ? __fget_files+0x2a/0x410 [ 232.851953][ T6933] ksys_write+0x18f/0x2b0 [ 232.851966][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 232.851979][ T6933] ? do_syscall_64+0x100/0x230 [ 232.851991][ T6933] ? do_syscall_64+0xb6/0x230 [ 232.852005][ T6933] do_syscall_64+0xf3/0x230 [ 232.852015][ T6933] ? clear_bhb_loop+0x35/0x90 [ 232.852028][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.852041][ T6933] RIP: 0033:0x7f9f1c18b7df [ 232.852050][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 232.852058][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 232.852069][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 232.852076][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 232.852082][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.852087][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 232.852093][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 232.852103][ T6933] [ 232.852111][ T6933] BUG: Bad page state in process syz.2.268 pfn:1eb66 [ 233.279193][ T6933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x1eb66 [ 233.289434][ T6933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 233.296542][ T6933] raw: 00fff00000000000 dead000000000040 ffff888021ae4000 0000000000000000 [ 233.305379][ T6933] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 233.314026][ T6933] page dumped because: page_pool leak [ 233.319443][ T6933] page_owner tracks the page as allocated [ 233.325156][ T6933] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6933, tgid 6932 (syz.2.268), ts 227120357677, free_ts 226330809042 [ 233.342314][ T6933] post_alloc_hook+0x1f3/0x230 [ 233.347235][ T6933] get_page_from_freelist+0x3651/0x37a0 [ 233.352809][ T6933] __alloc_pages_noprof+0x292/0x710 [ 233.358113][ T6933] alloc_pages_bulk_noprof+0x70b/0xcc0 [ 233.363559][ T6933] __page_pool_alloc_pages_slow+0x122/0x690 [ 233.369642][ T6933] skb_pp_cow_data+0xcc8/0x1720 [ 233.374552][ T6933] do_xdp_generic+0x505/0xd30 [ 233.379346][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 233.385070][ T6933] __netif_receive_skb+0x12f/0x650 [ 233.390361][ T6933] netif_receive_skb+0x1e8/0x890 [ 233.395299][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 233.400069][ T6933] tun_get_user+0x30cc/0x48a0 [ 233.404762][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 233.409815][ T6933] vfs_write+0xacf/0xd10 [ 233.414071][ T6933] ksys_write+0x18f/0x2b0 [ 233.418538][ T6933] do_syscall_64+0xf3/0x230 [ 233.423141][ T6933] page last free pid 6925 tgid 6925 stack trace: [ 233.429537][ T6933] free_unref_page+0xd2c/0x1000 [ 233.434389][ T6933] tlb_finish_mmu+0x11f/0x200 [ 233.439419][ T6933] exit_mmap+0x4d5/0xca0 [ 233.443917][ T6933] __mmput+0x115/0x410 [ 233.448229][ T6933] exit_mm+0x220/0x310 [ 233.452399][ T6933] do_exit+0x9ad/0x28e0 [ 233.456591][ T6933] do_group_exit+0x207/0x2c0 [ 233.461322][ T6933] __x64_sys_exit_group+0x3f/0x40 [ 233.466546][ T6933] x64_sys_call+0x26a8/0x26b0 [ 233.471441][ T6933] do_syscall_64+0xf3/0x230 [ 233.476232][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.482274][ T6933] Modules linked in: [ 233.486163][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.2.268 Tainted: G B 6.13.0-syzkaller-07644-gc2da8b3f914f #0 [ 233.486180][ T6933] Tainted: [B]=BAD_PAGE [ 233.486184][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.486190][ T6933] Call Trace: [ 233.486196][ T6933] [ 233.486202][ T6933] dump_stack_lvl+0x241/0x360 [ 233.486220][ T6933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.486234][ T6933] ? __pfx_print_modules+0x10/0x10 [ 233.486248][ T6933] bad_page+0x176/0x1d0 [ 233.486259][ T6933] free_unref_page+0xf9e/0x1000 [ 233.486274][ T6933] bpf_xdp_frags_shrink_tail+0x3b3/0x780 [ 233.486291][ T6933] bpf_xdp_adjust_tail+0x1c3/0x200 [ 233.486303][ T6933] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 233.486311][ T6933] bpf_prog_run_generic_xdp+0x686/0x1510 [ 233.486331][ T6933] do_xdp_generic+0x757/0xd30 [ 233.486346][ T6933] ? __pfx_do_xdp_generic+0x10/0x10 [ 233.486361][ T6933] ? __skb_flow_dissect+0x4f1/0x7d00 [ 233.486377][ T6933] __netif_receive_skb_core+0x1be5/0x4540 [ 233.486390][ T6933] ? handle_mm_fault+0x18ac/0x1c60 [ 233.486405][ T6933] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 233.486416][ T6933] ? mark_lock+0x9a/0x360 [ 233.486428][ T6933] ? __pfx___skb_flow_dissect+0x10/0x10 [ 233.486441][ T6933] ? __lock_acquire+0x1397/0x2100 [ 233.486456][ T6933] __netif_receive_skb+0x12f/0x650 [ 233.486466][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 233.486477][ T6933] ? __pfx___netif_receive_skb+0x10/0x10 [ 233.486486][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 233.486499][ T6933] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 233.486511][ T6933] ? netif_receive_skb+0x131/0x890 [ 233.486520][ T6933] ? netif_receive_skb+0x131/0x890 [ 233.486528][ T6933] netif_receive_skb+0x1e8/0x890 [ 233.486537][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 233.486549][ T6933] ? __pfx_netif_receive_skb+0x10/0x10 [ 233.486559][ T6933] ? tun_rx_batched+0x160/0x8f0 [ 233.486571][ T6933] tun_rx_batched+0x1b7/0x8f0 [ 233.486583][ T6933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.486596][ T6933] ? __pfx_lock_acquire+0x10/0x10 [ 233.486607][ T6933] ? __pfx_tun_rx_batched+0x10/0x10 [ 233.486630][ T6933] tun_get_user+0x30cc/0x48a0 [ 233.486648][ T6933] ? tun_get_user+0x2bba/0x48a0 [ 233.486676][ T6933] ? __lock_acquire+0x1397/0x2100 [ 233.486697][ T6933] ? __pfx_tun_get_user+0x10/0x10 [ 233.486725][ T6933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 233.486742][ T6933] ? tun_get+0x1e/0x2f0 [ 233.486759][ T6933] ? __pfx_lock_release+0x10/0x10 [ 233.486780][ T6933] ? tun_get+0x1e/0x2f0 [ 233.486797][ T6933] ? tun_get+0x27d/0x2f0 [ 233.486808][ T6933] tun_chr_write_iter+0x10d/0x1f0 [ 233.486821][ T6933] vfs_write+0xacf/0xd10 [ 233.486836][ T6933] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 233.486848][ T6933] ? __pfx_vfs_write+0x10/0x10 [ 233.486861][ T6933] ? __fget_files+0x2a/0x410 [ 233.486874][ T6933] ? __fget_files+0x2a/0x410 [ 233.486886][ T6933] ksys_write+0x18f/0x2b0 [ 233.486900][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 233.486913][ T6933] ? do_syscall_64+0x100/0x230 [ 233.486925][ T6933] ? do_syscall_64+0xb6/0x230 [ 233.486935][ T6933] do_syscall_64+0xf3/0x230 [ 233.486946][ T6933] ? clear_bhb_loop+0x35/0x90 [ 233.486960][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.486972][ T6933] RIP: 0033:0x7f9f1c18b7df [ 233.486983][ T6933] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 233.486991][ T6933] RSP: 002b:00007f9f1cfe3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 233.487002][ T6933] RAX: ffffffffffffffda RBX: 00007f9f1c3a5fa0 RCX: 00007f9f1c18b7df [ 233.487009][ T6933] RDX: 0000000000011dc0 RSI: 0000000020000140 RDI: 00000000000000c8 [ 233.487016][ T6933] RBP: 00007f9f1c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 233.487022][ T6933] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 233.487027][ T6933] R13: 0000000000000000 R14: 00007f9f1c3a5fa0 R15: 00007fff158896e8 [ 233.487037][ T6933] [ 233.877164][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.886717][ C0] sched: DL replenish lagged too much [ 234.284676][ T29] audit: type=1326 audit(1737956727.165:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.397683][ T29] audit: type=1326 audit(1737956727.165:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.420882][ T29] audit: type=1326 audit(1737956727.175:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.444929][ T29] audit: type=1326 audit(1737956727.175:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.470377][ T29] audit: type=1326 audit(1737956727.225:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.499469][ T29] audit: type=1326 audit(1737956727.225:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.550429][ T29] audit: type=1326 audit(1737956727.225:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.574608][ T29] audit: type=1326 audit(1737956727.225:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.603303][ T29] audit: type=1326 audit(1737956727.225:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000 [ 234.626814][ T29] audit: type=1326 audit(1737956727.225:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6927 comm="syz.4.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4a18cd29 code=0x7ffc0000