last executing test programs: 8.684061214s ago: executing program 4 (id=2291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0xe0}}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000100000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a3000000000090001"], 0x4b0}}, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) syz_open_dev$cec(0x0, 0x0, 0x321001) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x40c32aec156fcff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r7, 0x0, 0x17) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000b40)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x100f5, 0x8, 0x0, 0x0}}, 0x10) 7.551941017s ago: executing program 4 (id=2294): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000007000)="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", 0x2d9}], 0x1}}], 0x1, 0x10c4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f00000000c0)=""/3, &(0x7f0000000100)=0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x335) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendto(r7, &(0x7f00000010c0)="905759418a11e0d4e9a46c1af3efc0420c8da2acd9085e10ce4ab85f0bca6e987d56f79970f3819952724904008436314da920e0c3c9923b4f529b82e96e40bf3c8b4ecbc113624f243e3b275434dadac4a47caf453138", 0x57, 0x0, &(0x7f0000001140)=@vsock={0x28, 0x0, 0x0, @local}, 0x80) pwritev2(r6, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x1000000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) stat(&(0x7f000000d2c0)='./bus\x00', &(0x7f000000d300)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd8, 0xca, 0x8d, 0x40, 0x5d1, 0x2021, 0x3100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0xfe, 0x0, 0xc8, 0x91, 0xef}}]}}]}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000047c00000400000014000180080016000000000006000600800a0000080002"], 0x1034}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) 7.235578021s ago: executing program 0 (id=2295): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000007ffffff7"], 0x18}, 0x0) 7.053289503s ago: executing program 0 (id=2296): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x4}) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/227, 0xe3}], 0x7, &(0x7f0000000f00)=""/208, 0xd0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x7f}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f0000001680)=""/237, 0xed}], 0x4, &(0x7f0000001480)=""/37, 0x25}}], 0x3, 0x40010163, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r2, 0x6, 0x0, [0x2], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x2, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x1, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1efc, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, 0x7, 0x0, 0x5, 0x3, 0x800, 0x0, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001e80)={r2, "6afbaeb308877313225ff8c934a34a5e"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000880)={0xb, 0x5e3844bd5ef35053, {0x5, @struct={0x2, 0x3}, r2, 0x7, 0x0, 0xffff, 0x8000, 0x5, 0xa8, @struct={0x20, 0x32}, 0x6, 0x5, [0x4, 0x80000000000007, 0x0, 0x5, 0x4, 0x5]}, {0x0, @usage=0x5, 0x0, 0xffffffffffffffff, 0x100000001, 0x2, 0x134, 0x80000000000000, 0x80, @usage=0xffffffff, 0x0, 0xff, [0x80000000, 0x6, 0x5, 0x9, 0x3, 0x1]}, {0x3, @usage=0x1ff, 0x0, 0x400, 0x20, 0xdf0, 0x7f, 0x6, 0x20, @struct={0x1}, 0x1a0d, 0x4939afa6, [0xfffffffffffffffd, 0x0, 0x4, 0x1]}, {0x0, 0x9}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={r2, 0x4, 0x0, [0x7, 0xfffffffffffff919, 0x3, 0x8001], [0x7d3, 0x3, 0x7ff, 0xffffffffffffff42, 0x7ff, 0x9, 0x4, 0xffff, 0x8000000000000000, 0x3, 0x3, 0x8000000000000001, 0x11c0, 0xff, 0x1, 0x8, 0xf52, 0x1485, 0x6, 0x200, 0xffffffffc1d67abe, 0x10001, 0x4, 0x3ff80, 0x2, 0x2c, 0x100000000, 0x20000000, 0x0, 0x100000001, 0x7, 0x65, 0x1, 0x7c4a, 0x8, 0xb3, 0xfffffffffffffff8, 0x9, 0x9, 0x4, 0x9, 0x1, 0x0, 0x5, 0x5, 0x800000000000007f, 0xc36, 0xfffffffffffffffb, 0x5a2f, 0x3ffffffffffd, 0x40, 0x9, 0x5d46, 0x9, 0x9, 0x1, 0x100000001, 0x5, 0x9, 0x0, 0x4, 0x1, 0xffff, 0x6, 0x9, 0x3f, 0x100000000, 0x1, 0x8, 0x7, 0x0, 0x6, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x80, 0x6, 0xb7, 0xfffffffffffffffe, 0x0, 0x7, 0x3, 0x6, 0x2, 0x1, 0xfffffffc, 0x48b9, 0x1, 0xfff, 0x7, 0x3f, 0x1b4, 0x4ef, 0x683e, 0x8, 0xa31, 0xa952, 0x5, 0xf29, 0x2, 0x8, 0x1, 0x3296, 0x3, 0x1ff, 0x9fb1, 0xc9cc, 0x400, 0x8, 0x7, 0x6c9, 0x9, 0x7fff, 0x1, 0x3, 0x50, 0x0, 0x3, 0x5, 0x6, 0x2f]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={r2, 0x0, 0x1, [0x4, 0x7, 0x5, 0x9, 0x2], [0x6, 0x4, 0x2, 0x71, 0xd4, 0x8, 0x9, 0x3ff, 0x3, 0x6, 0x3, 0x0, 0x8, 0x0, 0xd, 0x1, 0x80000040, 0x80000000, 0x7f, 0x8ab, 0x1, 0x4, 0x10000, 0x0, 0x0, 0xfffffffffffffff1, 0x4, 0x5, 0x1bff, 0x8000000000000000, 0x10001, 0x1, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffa, 0x9, 0x4, 0xfffffffffffffe00, 0x2, 0x7a, 0x5d9, 0x0, 0x5, 0xffffffffbcd4a458, 0x3, 0x5, 0x2285, 0x3, 0x7fffffffffffffff, 0x401, 0x7, 0xffffffffffffffff, 0x1, 0x6, 0x1, 0x5, 0x1000000000000, 0xffffffff, 0x7, 0x3, 0xfffffffffffffff7, 0x5, 0x8000, 0x4, 0x7, 0x7, 0x5ed, 0x8, 0x1, 0x3, 0x1, 0x550, 0x9, 0x2, 0xe469, 0x7, 0x0, 0x3, 0x987b, 0x723, 0xc, 0x3efa, 0x3fd495b1, 0x4, 0x6, 0x18c, 0x4, 0x7fffffffffffffff, 0x1, 0x6a0, 0x1, 0x8, 0xa, 0x100000001, 0x9, 0xec, 0x1000000000000, 0x5, 0x0, 0x1, 0x2, 0x5, 0x8, 0x4, 0xb, 0x1, 0x5, 0x7fffffff, 0xc5, 0xd91, 0xfffffffffffffffe, 0x8, 0x4, 0x8, 0x7fffffffffffffff, 0x7b2, 0x8001, 0x5, 0xffffffffffffffea, 0xfffffffffffffff8, 0x7]}) 6.789414308s ago: executing program 0 (id=2297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002"], 0x5c}, 0x1, 0x900000000000000}, 0x0) 6.50791735s ago: executing program 0 (id=2298): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="1a010300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESDEC], 0x3}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) r4 = dup(r3) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x164], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x200000, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8ed4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe160, 0x1], [0x0, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r6, 0x1) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffe9b, {0x5, 0x0, "012674"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000002a006bcd9e3fe3dc6e48aa31086b876c1d0000007ea6020069000000000000000f00008bc3a0e69ee517d34460bc24cab556a705251e6182949a3651f60a84c9f5d1938037fb86a6d0bdd7fcf52b4509c5bb5a00f6985300", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.605430786s ago: executing program 4 (id=2301): syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000800140004006e696376763000000000000000000000080005000900000005005300010000000a00180003030303030300000800050004"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5.399542182s ago: executing program 4 (id=2303): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000100)={0x265, 0x703, 0x0, 0xfffffffffffffffa, 0xfffffffffffffff1, 0x4, 0x7f, 0x3, 0x3}) r3 = msgget(0x2, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) (async) r6 = getpgid(0xffffffffffffffff) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000300)={{0x0, r4, r2, r1, r2, 0x23, 0x800}, 0x0, 0x0, 0x6, 0xec3, 0xffffffff, 0x0, 0x7, 0x0, 0x1, 0xb, r5, r6}) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0xffffffffffffffff, 0x66580) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f00000003c0)={0x5}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x5, 0x71e, [0x0, 0x20000440, 0x2000068c, 0x200007aa], 0x0, &(0x7f0000000400), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x6, 0xfbfb, 'gre0\x00', 'vcan0\x00', 'batadv0\x00', 'macsec0\x00', @multicast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x10e, 0x10e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0xd, {0x5, 0x0, 0x0, @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x0, 0x5, 0x2, 0x5, @link_local, [0x0, 0xff, 0xff, 0x1fe, 0xff, 0xff], 0x4e20, 0x4e21, 0x6bc, 0x4, 0x5, 0x1, 0x1000, 0x7fff, 0xbe, 0xffff}, 0x20, 0x490}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xfc, 0x1, 0xd, 0x6}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0xbf, {0x5}}}}}, {0x9, 0x0, 0x8884, 'vlan1\x00', 'syzkaller0\x00', 'macsec0\x00', 'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x8, {0x3}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x8, 0x88f8, 'veth0_virt_wifi\x00', 'pimreg0\x00', 'syzkaller0\x00', 'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0xff], 0x9e, 0x9e, 0xee, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x401, 0x2}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7, {0x100}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x3, 0x41, 0x1a, 'syz_tun\x00', 'veth0_virt_wifi\x00', 'ip6gretap0\x00', 'pim6reg\x00', @link_local, [0xff, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff], 0xae, 0xde, 0x156, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x9, 0x1, 0x1}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}], @common=@nflog={'nflog\x00', 0x50, {{0xe148, 0x6, 0x5, 0x0, 0x0, "be42637fe0cea9a95f2be9c68e2c8f95e09e82ac876901a7a9603aed44f74ff909305acce03aa07aac9a29e68326afb601148370cfa26052fd1d0d9db197bb49"}}}}, {0x11, 0x2, 0xc, 'vlan0\x00', 'vlan0\x00', 'ip6gre0\x00', 'sit0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x106, 0x186, 0x1fe, [@ip={{'ip\x00', 0x0, 0x20}, {{@local, @broadcast, 0xffffff00, 0x0, 0xe5, 0x29, 0x6, 0x20, 0x4e22, 0x4e21, 0x4e20, 0x4e23}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'Q.931\x00'}}}], [@common=@log={'log\x00', 0x28, {{0x58, "8e8cf91437b18c0d88412949b1e70455050c7f1b3d00227950e32f665b90", 0x2}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@nflog={'nflog\x00', 0x50, {{0x4, 0xb474, 0xffc0, 0x0, 0x0, "18fd96b32401234b4be287159c7e6f272f4fda575fbcd907d09aabfca4c0bf9b37155cf42890a9655e5706bc788862a72415a5b4202026f03306957581a2a054"}}}}]}]}, 0x796) (async) rmdir(&(0x7f0000000c00)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r7, {r4, r2}}, './file0\x00'}) (async) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000d40)={{0x1, r9, 0xffffffffffffffff, r10, r2, 0x4, 0x4}, 0x0, 0x0, 0x2, 0xffff, 0xd5e, 0x8000000000000000, 0x2, 0x961, 0xafe, 0xf, r5, 0xffffffffffffffff}) (async) msgget(0x3, 0x201) openat$fuse(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) (async) ioctl$FBIOGET_CON2FBMAP(r8, 0x460f, &(0x7f0000000e00)={0x1c, 0x2}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r11, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x8c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xded2}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000008c}, 0xc0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r11) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r11) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r12, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x10000, 0xf}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) msgctl$IPC_RMID(r3, 0x0) msgget(0x3, 0x291) recvmmsg(r11, &(0x7f0000006bc0)=[{{&(0x7f0000001180)=@xdp, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001200)=""/134, 0x86}, {&(0x7f00000012c0)=""/221, 0xdd}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/213, 0xd5}, {&(0x7f00000025c0)=""/201, 0xc9}, {&(0x7f00000026c0)=""/212, 0xd4}], 0x7, &(0x7f0000002840)=""/128, 0x80}, 0x5821}, {{&(0x7f00000028c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002940)=""/153, 0x99}, {&(0x7f0000002a00)=""/238, 0xee}, {&(0x7f0000002b00)=""/169, 0xa9}, {&(0x7f0000002bc0)=""/145, 0x91}, {&(0x7f0000002c80)=""/74, 0x4a}], 0x5, &(0x7f0000002d80)}, 0x3}, {{&(0x7f0000002dc0)=@tipc, 0x80, &(0x7f0000003080)=[{&(0x7f0000002e40)=""/214, 0xd6}, {&(0x7f0000002f40)=""/14, 0xe}, {&(0x7f0000002f80)=""/238, 0xee}], 0x3, &(0x7f00000030c0)=""/90, 0x5a}, 0x10}, {{&(0x7f0000003140)=@alg, 0x80, &(0x7f0000003680)=[{&(0x7f00000031c0)=""/218, 0xda}, {&(0x7f00000032c0)=""/102, 0x66}, {&(0x7f0000003340)=""/184, 0xb8}, {&(0x7f0000003400)=""/188, 0xbc}, {&(0x7f00000034c0)=""/56, 0x38}, {&(0x7f0000003500)=""/110, 0x6e}, {&(0x7f0000003580)=""/165, 0xa5}, {&(0x7f0000003640)}], 0x8, &(0x7f0000003700)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004700)=@xdp, 0x80, &(0x7f0000004980)=[{&(0x7f0000004780)=""/198, 0xc6}, {&(0x7f0000004880)=""/68, 0x44}, {&(0x7f0000004900)=""/104, 0x68}], 0x3, &(0x7f00000049c0)=""/106, 0x6a}, 0xa}, {{&(0x7f0000004a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005b80)=[{&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/151, 0x97}], 0x2, &(0x7f0000005bc0)=""/4096, 0x1000}, 0x2}], 0x6, 0x40000043, &(0x7f0000006d40)) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000006d80)={[0xa2, 0x33, 0x2, 0x4, 0x7, 0x1ff, 0x9, 0x7f1, 0x7, 0x1, 0x6000000, 0x8, 0x3389969f, 0x5, 0x1, 0x6], 0xffff1000, 0x321612}) (async) recvfrom(r14, &(0x7f0000006e40)=""/186, 0xba, 0x40000000, &(0x7f0000006f00)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) 5.387272239s ago: executing program 4 (id=2304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uhid(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000480)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x612, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff7, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8df}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}, 0x54}}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r4 = getuid() setreuid(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000490000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES64=r5], 0x40}}, 0x0) 5.145049294s ago: executing program 4 (id=2307): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) r5 = fcntl$dupfd(r1, 0x0, r4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r5, 0x0) syz_io_uring_setup(0x1750, &(0x7f0000001480), &(0x7f0000001500), &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2}]}, 0x2c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001e1"], 0xfdef) 4.85611596s ago: executing program 2 (id=2309): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=""/5}, 0x20) 4.801407398s ago: executing program 2 (id=2310): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x1170, 0x1170, 0x150, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x30}, 0x0, 0x128, 0x150, 0x0, {0x10000000}, [@common=@inet=@multiport={{0x50}, {0x80, 0x0, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0xfffc, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x4000000, 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 4.70917391s ago: executing program 2 (id=2311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000060000", @ANYRES32], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.616220849s ago: executing program 2 (id=2312): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc0]}, 0x45c) r1 = dup(r0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 4.552593738s ago: executing program 2 (id=2313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}, 0x1, 0x0, 0x6000000}, 0x0) 4.494207127s ago: executing program 2 (id=2314): socket$nl_generic(0x10, 0x3, 0x10) (async) dup(0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 3.435198825s ago: executing program 0 (id=2315): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000980)={0x30, 0x7}, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000fbf80e1004231f02af5f010203010902120001000000000904"], 0x0) socket(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x232242, 0x0) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x125}, &(0x7f00000004c0), 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8a01, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)) writev(r4, &(0x7f0000000040)=[{0x0}], 0x1) r5 = socket$inet6(0xa, 0x3, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x9, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) gettid() r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)) 2.981123749s ago: executing program 1 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a04010000060a010400000000000000110200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32"], 0x12c}}, 0x0) 2.929154476s ago: executing program 1 (id=2317): socket(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1400000031000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, &(0x7f00000024c0)="aaf3cc6fba94a9a7bd5ff5733fef19ce8c27c78f7d80da2396a588156b4bbff6e203c33e831e87b449c5711b49c90b8cd70416e7e4fbf5b64387cafd640b9bb732a5aa8f1be0ba9d03366d2bfc8823df462748fe7299330e4e34e540be2564b6e84791092c917a003ca6ea2a5fe2f5bc0ab927b18ac6832e580190ab921e23074e3e20b5f24e42026772a0e9838d94607d451b8a823c862c695072b929529562f5c9491e72d961b746fab3760e924ca909fae0d529cebf09730e3b8bd36b8bce9e8de554e73a9455feaaee0173df982f2c3307", 0xd3, 0x20000800, &(0x7f00000000c0)={0xa, 0x4e23, 0xfe6, @private0, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x1, @raw_data="6e5e0d8af755aaeb4e563231029c6060cb90186ad12fcff681d35bf8204529cf75d5c236c4ba611e967817b3c9e2bd07fa0c1777bf78f1c3e2b902b713ed09332fe333bf46606760d3b64c0ff252e15c61a0ebb4c49886cd31bca3d2906cb584a927283e6ba03b1121c8ecdc3829085bfc5ba3f3ce60e0bfe2f26cd3206b004da5328b1237de048a0bb6ab9c562ab4ba7a314d4414b03f09ed995423b147395f48627834f74b0f25bfb593fec9e3d90034e7aa5310b5e6b168e4adebc9df10815ccde151483bd6fe"}) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x10}}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) r8 = dup3(r5, r2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}], 0x46, 0x0, &(0x7f0000000440)="713db22cd7588061077ce5c0ca304a2a7b53c0926c71356ef9fb53ff71c4381e3c952221a37fd23596966b13d4b104fa4b53ec3065339f90f5960dc43dadbaa6a80900000000"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.00416579s ago: executing program 1 (id=2319): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32], 0x8c}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x700000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe10859224ad54afac1f2875397bdb22d0000b445a1a93c01000000000000007d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2]}}) 1.922444017s ago: executing program 1 (id=2322): openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x256f16877c9e1f29, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00"}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0x100000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0xfffffffffffffff4}, 0x0, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x2}, 0x0, 0x0) 1.819931368s ago: executing program 1 (id=2324): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x0, 0xf8]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x5, 0x20], 0x6, 0x3}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x12ee6d772310561e, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x40}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.771317642s ago: executing program 1 (id=2326): syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmmsg$inet(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="53a67efdacfa4ab18431c9e24e323439a70a20d97410e9559f832ff32ebd21a0941f33f17da9ff837ce52508d87c9b15a4b658786ceb5c8b2bd173b3d95b1627c1c8cae65161a267eb7b93f4817960ba8d04a85c286132bef8cde53ff22a21c34fcb3734d37b4afb868eddfcf0125c5ae73db565db7cc224d28bab43f099d1e2e19353ca0513073fd2f4b451ebd390", 0x8f}, {&(0x7f0000000200)="690b8626f162df6fb6d7c4da14db33eb50317a56f1dec2ce32d22d06a4d28e29a2a24a4c6db342d3339ed5737a4281bf50bd1722eb3d0acf2242d72b59787800d4116347579ec969c7ede250c30c4f576a548e92938431ceb310d47ad8b16303c17007a2b98d336610e5a66256b606b877ca3d0c1e714ff0f29526be5bfa6b329203d9a02e82b3b8e6b09f73bed3f531f4c1850980747c0ccaa4f9dffd9cddefe22a263d2d8fd88555e7e75eb4d206", 0xaf}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1e}}}}], 0x40}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="ca4501faa0ec43f67d1e550a5980cd54754cd82842f19b4728b2355a382130cfd085aa1fc85288f22a", 0x29}], 0x1, &(0x7f0000000500)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20000001) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000640)="f8e8e51d7f803a6bd2b4e55e231c811c19b932236a323d281ae3a65b71be6e6430ac211090dbd00f39719e8623130856184254535a03d816726b76aa7727d53e086acc4dc55e", 0x46}, {&(0x7f00000006c0)="c2b5bd6aa7484c9ef62e676a46f229a2f55edda386186ff22370f9994d052c7e1baf723dba5c5a6b40f74cf74b8034abeda3912eb2618b8bb29a8cfb0a592ea0eca8788dcb557b52e104972d2fd64ecf39076291558d8627ee442e2aebaa25a013e3c84e8aad411e19f6945b7b916904f3152044ac5446ace16777dddde21638706208a11fb4d2324eb805cdb90bd7d70ab10134b72b4972df7bf8bb1bfdd006f95cde08bbb7ebb031502e8ece7081ba2bc51d9416494127091252785f1f4e29ba2b5c0e650185c2ae99adc94042ce10bd552aba75bd2805c186d20bbcaf82797d6eb722762f6dd5e8aa66ba74d1146498904929cac1", 0xf6}, {&(0x7f0000000580)="c7e07dcdc1bdab23bf3ce823da90ff317aedeff7bbf8d54fd8f554b1ee4f656dc59123", 0x23}, {&(0x7f00000007c0)="99e52560b62b1eeb7c6f6eca3311572c50f996894ecfc6d702b0cd846857131a4b744c840f17ce4ca2f149a740bdd35e5d9e3ce6dd3c28370f1921c519d76913ccde336d3e41c45410e6ea27705e0d1604e9a257681e3d25c041f1c25dc14841b64b3804e5ac741f4f106e5e4c9a4440cf762d30dcb750ed089ccf33368281b8b8feff8993222b0b0d25b20c569b41f1c3bfbfe2254b", 0x96}, {&(0x7f0000000880)="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", 0x1000}], 0x5}}, {{&(0x7f0000001900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x3, {0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001980)="417b79768f5eb61dac4ece7bb5b53f6012e18d5ac2f01d772e882fa8033801832f9b9a933ff7d8fec97dca39535a5dac68feae5e2d3d32a399252b07fa858c9e1212738a3ed0b02e0e54338ec35906951bb3e45bd9bb24e65a975eda856ffeee6d6ed46ba6c6dc2f403bbf3cd06775aba7679e17725e22926895b44c77f6efe0c84fc1421341d0cb8bb117472a1a98ef42", 0x91}, {&(0x7f0000001a40)="29780e9dfc08c322a3b883a31baac81e31c7bdbdac302365298bee0a15593b5c1004bc9a66f6bfa1bb46ba317c4550e653830df1c83eb3633a026f91da4459452f5745673eafe5ebe877626f3ab85968bc102c17c14295301d33f02c705714a469b84976a29818583741b9d4266d4d92345a8d56ba785047e8d35cb3267bfbea5f422a54c7111db5160114e9e37bb9088c22319dde5c061f419da9c3fea16df998bf70a055782863a9a7efa8b8034c4240e0686db37b9d36d3fb594ec59c", 0xbe}, {&(0x7f0000001b00)="4df232a436e30ed502d7c9c9203f31aa6ee5850ac027b3ee258fd33e5345945f4030fe49babae2086d6b1f25e41aceb6dc1182ea0afd72d5313d8ab50ee3c5faf1fe7333c33e58dca5dff3908886978b8ad80ac4fe08db5bca6ef4d5a0", 0x5d}, {&(0x7f0000001b80)="7ea46826879d6a6c4c5ec0be58cfd4ae1a5d62ef7ca8f4350f197b27211364470a2965cab214de759c21e9a94bf16d68fb9f067cf0f0a5ceb1a7c574853e8ae2d8cfd190e1a2b54a13079495a8dcbe670a1d7285e0860a50fef03f1c100fefa0166b2d8ba1cd032fc892dcf644c3a4dd769f218a0b0fa94982e0ab63b3b7a900944c8f087edd79f797a2945a944d47dae50a5d5ac9e17c00f5b416f71649bf", 0x9f}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="13bb7a987652ab312ff7f90d18bfcc5296e01038b30285633c4c6a69fab191d2aac551f1b52eb9169b3084bd8cdd27e0a54914ded8947b537a2cb442ea80394741bfcd628d760e95d14a7bb383adfbb72409142740476b34ab9aa4f9d6a94ec804324a63e56e1907548fb9d779408123700df726732bbd631d1ccd67ccbde16699d992c5606b48f639b2d3857879f5219b2c85d63e1416646969fbca5a8c0b5cb56f521c82ceb466b0bca31aeaeb8734fcc3639f7cd993b970b7962648a141bbf9ab74ba50faf3cf85006478b059cd0739786e4595fe70c19dc64609", 0xdc}, {0x0}, {&(0x7f0000002d80)="5a989391a137fcb61e3e936408362e2846e0dfb9613d9b151ff3689025f8a2c5", 0x20}], 0x8, &(0x7f0000002e40)=[{0x90, 0x110, 0x1, "f967af73228f6ba0eb7eb0ebde5cace8bd881230b1109d6a1bc769ef3a2f8d232d03af61221ba042036698b9d9c68b8863a01856a4a604930c8071ed002df1490d89240c342ecd398e2b24ae125d68a47ec662f2a4c132e6503426c20eacebadc16b2c229ffac6adffea8fe72aae71dc94f0eedc64ff5484bd22"}, {0xe0, 0x136, 0x4, "1e1c762c4e150ca802797bf3816017ba4a2933c21d6dff7165df62ce393b58002d6c0b9604215be67a3b713d1688f01fc6c3af7c4e2b11ce7d03ae78bf84326484a03dbf0340a7b9749f82b105524b3fb4a5e83ceeda7cf72b2c80f63f974e04cd2c94e18a494312f68d13953b3920bba2083f3467a66080f64a1b376f23e78481cc2571d26b2e42caebc6033e17517eadd5f654bd0198797ed64201658cdbbf5325fcbc79e2e7f2d8e476d06cdb4befc5b00b82515638d73ed1d163a32fe607e53d0de1991155added73f0286"}, {0x110, 0x103, 0x9, "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"}, {0xd8, 0x103, 0x8, "1e5f338f964331dc2cb67a8f164191003bb8dca8e8842e6e09fb468ff9e46ac2d77cb3fb7e46a085398eb7a15a9cfadd6dd18c8779b0be264cc3b8ec77a25024ada002c794404d2c8e9e2cf248a6689e1bed3e9a6a791f1f9db20044620a9c7a8fe77d2ae5ad5873ccd54416ead9dca05ddfdf2ac5b68ef5da30baf41be9e7685da60b6635084b698579134d84dc2f13959c19ba9044f77627ceecb90d649371d401e43e357bad2a78c0ae83eb85a8c3e16c771c765fe1ce9724746d7f27a3872e9a3d"}, {0x100, 0x116, 0x6161, "edc95bcf17c182586271ec287c19b2a93e58a188309a158f0061ca738a24618841161f20194c93d8a8a09b12414174d95f8e892bac9307839ba0477c2cf3920236b0b13d6c3a86992e4ef40dec849366c8939cfb0d81eae7ebe33868de5a3a2eb3c8a3c02e5223d78fc68fe02c6e5d809cb8946cb7bda0bf5e1966cb4fe252aa5479bee63fbbf209b399a61a58a8f1eda0a8be1a7760ffc4eaa87e166c0952a2020223b214433f25da23609fda46813b9a4b06c4dfce24e08e19312191842a0180bc855070f128629170869060e87066824427ad8c41b0b0be310cc6a0c9cb7d2252a0a8cce3831a09ed661fd51336"}], 0x458}}], 0x2, 0x82) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/disk', 0x141b82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1ff, 0x12) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x14, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc04}}, 0x20}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x2, [0x0, 0x0]}) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r8}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}}) 1.141548836s ago: executing program 3 (id=2328): r0 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000c80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0}}, {{&(0x7f0000000ec0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000024c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000}}], 0x18}}], 0x2, 0x4f401) 1.079190889s ago: executing program 3 (id=2329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0xe0}}, 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000160000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a3000000000090001"], 0x4b0}}, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) syz_open_dev$cec(0x0, 0x0, 0x321001) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x40c32aec156fcff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r7, 0x0, 0x17) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000b40)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x100f5, 0x8, 0x0, 0x0}}, 0x10) 424.518454ms ago: executing program 0 (id=2330): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r1, 0x1, 0x2, 0x0, &(0x7f0000000140)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0xdf) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x21c, 0x0, 0x11, 0x148, 0xf4, 0x10, 0x1ac, 0x2a8, 0x2a8, 0x1ac, 0x2a8, 0xac, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x10, 0x70, 0xd0, 0x1c}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x3, 0x5, 0x6, 0x6, 0x2], 0x4, 0x4}, {0x4, [0x1, 0x4, 0x6, 0x6, 0x0, 0x4], 0x2, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3e, 0xefa, 0x2, '\x00', {0x7f}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x278) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000006e90025c0f0003000000c3935d007cebb8bca8ff0fb0c31889d159a000c74b5a285af09faf0363b2d4321299806823da4003fa59f7ac47b8619be7e680beab5402e538e19b2be3f39e962289f834523c14962045282e4a223c9bfb4246590dd1da4b97651103daa11de2b4f7e10d116db4a1ed1ca9170d000000000000004007246e67d9cd91178dd60c94e5e194e12200"/165], 0x28}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f00000000c0)=""/44, 0x2c) getdents(r6, &(0x7f0000000040)=""/44, 0x2c) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12234e344004b5202c04051eb4be22341875a83200000001090212"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x3, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x40}}], 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 187.905557ms ago: executing program 3 (id=2331): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x4}) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/227, 0xe3}], 0x7, &(0x7f0000000f00)=""/208, 0xd0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)=""/168, 0xa8}], 0x1}, 0x7f}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f0000001680)=""/237, 0xed}], 0x4, &(0x7f0000001480)=""/37, 0x25}}], 0x3, 0x40010163, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r2, 0x6, 0x0, [0x2], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x2, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x1, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1efc, 0xfffffffffffffffa, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x8, 0x3, 0x7, 0x0, 0x5, 0x3, 0x800, 0x0, 0x3]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001e80)={r2, "6afbaeb308877313225ff8c934a34a5e"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000880)={0xb, 0x5e3844bd5ef35053, {0x5, @struct={0x2, 0x3}, r2, 0x7, 0x0, 0xffff, 0x8000, 0x5, 0xa8, @struct={0x20, 0x32}, 0x6, 0x5, [0x4, 0x80000000000007, 0x0, 0x5, 0x4, 0x5]}, {0x0, @usage=0x5, 0x0, 0xffffffffffffffff, 0x100000001, 0x2, 0x134, 0x80000000000000, 0x80, @usage=0xffffffff, 0x0, 0xff, [0x80000000, 0x6, 0x5, 0x9, 0x3, 0x1]}, {0x3, @usage=0x1ff, 0x0, 0x400, 0x20, 0xdf0, 0x7f, 0x6, 0x20, @struct={0x1}, 0x1a0d, 0x4939afa6, [0xfffffffffffffffd, 0x0, 0x4, 0x1]}, {0x0, 0x9}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={r2, 0x4, 0x0, [0x7, 0xfffffffffffff919, 0x3, 0x8001], [0x7d3, 0x3, 0x7ff, 0xffffffffffffff42, 0x7ff, 0x9, 0x4, 0xffff, 0x8000000000000000, 0x3, 0x3, 0x8000000000000001, 0x11c0, 0xff, 0x1, 0x8, 0xf52, 0x1485, 0x6, 0x200, 0xffffffffc1d67abe, 0x10001, 0x4, 0x3ff80, 0x2, 0x2c, 0x100000000, 0x20000000, 0x0, 0x100000001, 0x7, 0x65, 0x1, 0x7c4a, 0x8, 0xb3, 0xfffffffffffffff8, 0x9, 0x9, 0x4, 0x9, 0x1, 0x0, 0x5, 0x5, 0x800000000000007f, 0xc36, 0xfffffffffffffffb, 0x5a2f, 0x3ffffffffffd, 0x40, 0x9, 0x5d46, 0x9, 0x9, 0x1, 0x100000001, 0x5, 0x9, 0x0, 0x4, 0x1, 0xffff, 0x6, 0x9, 0x3f, 0x100000000, 0x1, 0x8, 0x7, 0x0, 0x6, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x80, 0x6, 0xb7, 0xfffffffffffffffe, 0x0, 0x7, 0x3, 0x6, 0x2, 0x1, 0xfffffffc, 0x48b9, 0x1, 0xfff, 0x7, 0x3f, 0x1b4, 0x4ef, 0x683e, 0x8, 0xa31, 0xa952, 0x5, 0xf29, 0x2, 0x8, 0x1, 0x3296, 0x3, 0x1ff, 0x9fb1, 0xc9cc, 0x400, 0x8, 0x7, 0x6c9, 0x9, 0x7fff, 0x1, 0x3, 0x50, 0x0, 0x3, 0x5, 0x6, 0x2f]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={r2, 0x0, 0x1, [0x4, 0x7, 0x5, 0x9, 0x2], [0x6, 0x4, 0x2, 0x71, 0xd4, 0x8, 0x9, 0x3ff, 0x3, 0x6, 0x3, 0x0, 0x8, 0x0, 0xd, 0x1, 0x80000040, 0x80000000, 0x7f, 0x8ab, 0x1, 0x4, 0x10000, 0x0, 0x0, 0xfffffffffffffff1, 0x4, 0x5, 0x1bff, 0x8000000000000000, 0x10001, 0x1, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffa, 0x9, 0x4, 0xfffffffffffffe00, 0x2, 0x7a, 0x5d9, 0x0, 0x5, 0xffffffffbcd4a458, 0x3, 0x5, 0x2285, 0x3, 0x7fffffffffffffff, 0x401, 0x7, 0xffffffffffffffff, 0x1, 0x6, 0x1, 0x5, 0x1000000000000, 0xffffffff, 0x7, 0x3, 0xfffffffffffffff7, 0x5, 0x8000, 0x4, 0x7, 0x7, 0x5ed, 0x8, 0x1, 0x3, 0x1, 0x550, 0x9, 0x2, 0xe469, 0x7, 0x0, 0x3, 0x987b, 0x723, 0xc, 0x3efa, 0x3fd495b1, 0x4, 0x6, 0x18c, 0x4, 0x7fffffffffffffff, 0x1, 0x6a0, 0x1, 0x8, 0xa, 0x100000001, 0x9, 0xec, 0x1000000000000, 0x5, 0x0, 0x1, 0x2, 0x5, 0x8, 0x4, 0xb, 0x1, 0x5, 0x7fffffff, 0xc5, 0xd91, 0xfffffffffffffffe, 0x8, 0x4, 0x8, 0x7fffffffffffffff, 0x7b2, 0x8001, 0x5, 0xffffffffffffffea, 0xfffffffffffffff8, 0x7]}) 169.169872ms ago: executing program 3 (id=2332): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, 0x0, 0x0) 113.486337ms ago: executing program 3 (id=2333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xffffffa1, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x10}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 3 (id=2334): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ptrace(0x11, 0x0) connect$tipc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4351}, {r0, 0x2001}, {r2, 0x5202}, {r0, 0x8141}, {r3, 0x80}], 0x5, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x4, 0x1546, 0x5, 0xfff8, 0x2b, 0xff29, 0x9, {0x0, @in6={{0xa, 0x4e23, 0xfffffffd, @private0, 0x4}}, 0x1, 0x7, 0x25, 0x0, 0x10}}, &(0x7f0000000040)=0xb0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={@multicast2, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {@dev}, {@private}]}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './control/file0', [{}]}, 0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00000b6000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 392.791255][T12254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.799872][T12254] Cannot create hsr debugfs directory [ 392.893484][ T5234] Bluetooth: hci4: command tx timeout [ 392.920098][T12208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.932510][T12208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 393.000764][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'. [ 393.047543][T12208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 393.283947][T12208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.477201][ T4019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.498684][ T4019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.512829][ T4019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.521880][ T4019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.538817][ T5234] Bluetooth: hci2: command tx timeout [ 393.554189][ T4019] hsr_slave_0: left promiscuous mode [ 393.560458][ T4019] hsr_slave_1: left promiscuous mode [ 393.602162][ T4019] veth1_macvtap: left promiscuous mode [ 393.607821][ T4019] veth0_macvtap: left promiscuous mode [ 393.614236][ T4019] veth1_vlan: left promiscuous mode [ 393.619583][ T4019] veth0_vlan: left promiscuous mode [ 393.625883][ T4019] veth1_macvtap: left promiscuous mode [ 393.631458][ T4019] veth0_macvtap: left promiscuous mode [ 393.637542][ T4019] veth1_vlan: left promiscuous mode [ 393.642872][ T4019] veth0_vlan: left promiscuous mode [ 394.341438][ T4019] team0 (unregistering): Port device team_slave_1 removed [ 394.384576][ T4019] team0 (unregistering): Port device team_slave_0 removed [ 394.813291][ T5234] Bluetooth: hci3: command tx timeout [ 395.618631][ T5234] Bluetooth: hci2: command tx timeout [ 395.652095][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.853084][T12368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1823'. [ 395.865991][T12184] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.919145][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.926331][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.947634][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.954826][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.072429][T12208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.196375][T12184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.258347][T12208] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.285592][T12381] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 396.333640][T12381] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 396.389555][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.396744][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.428495][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.435669][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.541334][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.667330][T12208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.736391][T12254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.781152][T12254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.811334][T12254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.844778][T12254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.900662][T12208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.980936][T12184] veth0_vlan: entered promiscuous mode [ 397.048621][T12184] veth1_vlan: entered promiscuous mode [ 397.145516][T12208] veth0_vlan: entered promiscuous mode [ 397.190018][T12184] veth0_macvtap: entered promiscuous mode [ 397.226398][T12254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.237083][T12208] veth1_vlan: entered promiscuous mode [ 397.251728][T12184] veth1_macvtap: entered promiscuous mode [ 397.303092][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.346960][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.369131][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.389669][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.410793][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.429305][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.448094][T12254] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.474759][T12184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.491947][T12184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.509077][T12184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.518531][T12184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.555573][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.562728][ T5656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.673013][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.680195][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.697344][ T5234] Bluetooth: hci2: command tx timeout [ 397.701033][T12208] veth0_macvtap: entered promiscuous mode [ 397.754248][T12208] veth1_macvtap: entered promiscuous mode [ 397.905651][T12254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.926530][T12254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.973620][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.997143][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.040910][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.064682][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.075025][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.085919][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.102499][T12208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.143085][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.174748][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.189298][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.200484][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.214661][T12208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.236673][ T4019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.265873][T12208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.277635][T12208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.283505][ T4019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.292163][T12208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.305917][T12208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.338345][T12254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.502825][T12254] veth0_vlan: entered promiscuous mode [ 398.611660][T12254] veth1_vlan: entered promiscuous mode [ 398.664255][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.704481][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.788883][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.792646][T12254] veth0_macvtap: entered promiscuous mode [ 398.810626][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.856658][T12254] veth1_macvtap: entered promiscuous mode [ 399.037029][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.053731][ T29] audit: type=1326 audit(1728836854.348:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12450 comm="syz.0.1831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e6d97dff9 code=0x0 [ 399.103387][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.117865][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.143960][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.181594][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.195210][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.208473][T12254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.240086][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.265158][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.278311][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.299494][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.313422][T12254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.326022][T12254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.339112][T12254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.353725][T12254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.368440][T12254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.377968][T12254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.394426][T12254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.523644][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.560389][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.602821][ T4019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.617566][ T4019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.059599][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'. [ 400.890391][T12499] netlink: 'syz.2.1836': attribute type 10 has an invalid length. [ 400.962305][T12499] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 401.109927][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.125213][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.222567][T12510] loop2: detected capacity change from 0 to 7 [ 401.246636][T12510] Dev loop2: unable to read RDB block 7 [ 401.254687][T12510] loop2: unable to read partition table [ 401.265231][T12512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.295511][T12510] loop2: partition table beyond EOD, truncated [ 401.301723][T12510] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 401.311800][T12512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.437267][T12513] binder: 12511:12513 ioctl c018620c 20000340 returned -22 [ 401.497839][T12513] binder: 12511:12513 unknown command 0 [ 401.518530][T12513] binder: 12511:12513 ioctl c0306201 20000a80 returned -22 [ 401.963642][ T1180] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 402.113224][ T1180] usb 4-1: Using ep0 maxpacket: 32 [ 402.123395][ T1180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.143160][ T1180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.182055][ T1180] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 402.233171][ T1180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.262444][T12551] loop2: detected capacity change from 0 to 7 [ 402.271563][ T1180] usb 4-1: config 0 descriptor?? [ 402.299332][T12551] Dev loop2: unable to read RDB block 7 [ 402.303253][ T1180] hub 4-1:0.0: USB hub found [ 402.323313][T12551] loop2: unable to read partition table [ 402.349760][T12551] loop2: partition table beyond EOD, truncated [ 402.369907][T12551] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 402.509792][ T1180] hub 4-1:0.0: 1 port detected [ 402.574876][T12562] hsr0: entered promiscuous mode [ 402.580085][T12562] macvlan2: entered allmulticast mode [ 402.598611][T12562] hsr0: entered allmulticast mode [ 402.612121][T12562] hsr_slave_0: entered allmulticast mode [ 402.621822][T12562] hsr_slave_1: entered allmulticast mode [ 402.631770][T12562] hsr0: left allmulticast mode [ 402.641961][T12562] hsr_slave_0: left allmulticast mode [ 402.649141][T12562] hsr_slave_1: left allmulticast mode [ 402.882324][T12577] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 402.893377][T12577] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1852'. [ 402.902914][T12577] team0: entered promiscuous mode [ 402.908727][T12577] team_slave_0: entered promiscuous mode [ 402.916777][T12577] team_slave_1: entered promiscuous mode [ 402.923049][T12577] bridge0: port 3(team0) entered blocking state [ 402.936462][T12577] bridge0: port 3(team0) entered disabled state [ 402.943357][T12577] team0: entered allmulticast mode [ 402.952067][T12577] team_slave_0: entered allmulticast mode [ 402.958137][T12577] team_slave_1: entered allmulticast mode [ 402.975436][T12577] bridge0: port 3(team0) entered blocking state [ 402.981773][T12577] bridge0: port 3(team0) entered forwarding state [ 403.022189][T12579] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.041631][T12580] syz_tun: entered promiscuous mode [ 403.043340][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.047953][T12580] syz_tun: entered allmulticast mode [ 403.065458][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.091019][T12580] team0: Port device syz_tun added [ 403.113486][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 403.152419][ T5294] hub 4-1:0.0: activate --> -90 [ 403.414916][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.436416][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.060581][ T5294] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 404.076961][ T938] usb 4-1: USB disconnect, device number 85 [ 404.082972][ T5294] usb 4-1-port1: connect-debounce failed [ 404.121492][T12614] Cannot find map_set index 0 as target [ 404.186866][T12616] FAULT_INJECTION: forcing a failure. [ 404.186866][T12616] name failslab, interval 1, probability 0, space 0, times 0 [ 404.200007][T12616] CPU: 1 UID: 0 PID: 12616 Comm: syz.4.1860 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 404.210802][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.220852][T12616] Call Trace: [ 404.224142][T12616] [ 404.227088][T12616] dump_stack_lvl+0x241/0x360 [ 404.231795][T12616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.237017][T12616] ? __pfx__printk+0x10/0x10 [ 404.241621][T12616] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 404.247601][T12616] ? __pfx___might_resched+0x10/0x10 [ 404.252907][T12616] should_fail_ex+0x3b0/0x4e0 [ 404.257600][T12616] should_failslab+0xac/0x100 [ 404.262289][T12616] ? __alloc_skb+0x1c3/0x440 [ 404.266881][T12616] kmem_cache_alloc_node_noprof+0x71/0x320 [ 404.272706][T12616] __alloc_skb+0x1c3/0x440 [ 404.277142][T12616] ? __pfx___alloc_skb+0x10/0x10 [ 404.282103][T12616] ? netlink_autobind+0xd6/0x2f0 [ 404.287050][T12616] ? netlink_autobind+0x2b0/0x2f0 [ 404.292066][T12616] netlink_sendmsg+0x638/0xcb0 [ 404.296827][T12616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.302100][T12616] ? aa_sock_msg_perm+0x91/0x160 [ 404.307045][T12616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.312315][T12616] __sock_sendmsg+0x221/0x270 [ 404.317000][T12616] ____sys_sendmsg+0x52a/0x7e0 [ 404.321757][T12616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.327034][T12616] __sys_sendmsg+0x292/0x380 [ 404.331611][T12616] ? __pfx___sys_sendmsg+0x10/0x10 [ 404.336722][T12616] ? __pfx_vfs_write+0x10/0x10 [ 404.341485][T12616] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.347803][T12616] ? do_syscall_64+0x100/0x230 [ 404.352554][T12616] ? do_syscall_64+0xb6/0x230 [ 404.357219][T12616] do_syscall_64+0xf3/0x230 [ 404.361712][T12616] ? clear_bhb_loop+0x35/0x90 [ 404.366381][T12616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.372264][T12616] RIP: 0033:0x7f0bbf37dff9 [ 404.376687][T12616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.396288][T12616] RSP: 002b:00007f0bc0254038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.404697][T12616] RAX: ffffffffffffffda RBX: 00007f0bbf535f80 RCX: 00007f0bbf37dff9 [ 404.412655][T12616] RDX: 0000000000000040 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 404.420616][T12616] RBP: 00007f0bc0254090 R08: 0000000000000000 R09: 0000000000000000 [ 404.428579][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.436538][T12616] R13: 0000000000000000 R14: 00007f0bbf535f80 R15: 00007f0bbf65fa28 [ 404.444504][T12616] [ 404.507643][T12620] syzkaller1: entered promiscuous mode [ 404.514419][T12620] syzkaller1: entered allmulticast mode [ 404.650436][T12624] binder: 12623:12624 ioctl c0306201 20001a80 returned -14 [ 404.701059][T12630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1865'. [ 404.747177][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1866'. [ 404.833395][T12638] netlink: 'syz.4.1868': attribute type 10 has an invalid length. [ 405.127239][T12644] input: syz1 as /devices/virtual/input/input50 [ 405.271802][T12651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 405.528939][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 405.538404][T12668] netlink: 'syz.2.1879': attribute type 15 has an invalid length. [ 406.476631][T12685] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 406.486463][T12685] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 406.518535][T12689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1887'. [ 406.527738][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 406.737032][T12700] sctp: [Deprecated]: syz.4.1891 (pid 12700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.737032][T12700] Use struct sctp_sack_info instead [ 406.798945][T12702] netlink: 'syz.3.1892': attribute type 10 has an invalid length. [ 406.806954][T12702] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1892'. [ 406.816962][T12702] team0: entered promiscuous mode [ 406.822260][T12702] team_slave_0: entered promiscuous mode [ 406.833474][T12702] team_slave_1: entered promiscuous mode [ 406.840329][T12702] bridge0: port 3(team0) entered blocking state [ 406.853205][T12702] bridge0: port 3(team0) entered disabled state [ 406.859649][T12702] team0: entered allmulticast mode [ 406.871305][T12702] team_slave_0: entered allmulticast mode [ 406.878628][T12702] team_slave_1: entered allmulticast mode [ 406.897439][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.902813][T12702] bridge0: port 3(team0) entered blocking state [ 406.912236][T12702] bridge0: port 3(team0) entered forwarding state [ 406.924486][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.946782][T12704] syz_tun: entered promiscuous mode [ 406.952127][T12704] syz_tun: entered allmulticast mode [ 406.959011][T12704] team0: Port device syz_tun added [ 406.959054][T12709] RDS: rds_bind could not find a transport for ::ffff:10.1.0.254, load rds_tcp or rds_rdma? [ 407.077843][T12716] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 407.125563][T12718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.147763][T12718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.325307][T12728] FAULT_INJECTION: forcing a failure. [ 407.325307][T12728] name failslab, interval 1, probability 0, space 0, times 0 [ 407.338466][T12728] CPU: 1 UID: 0 PID: 12728 Comm: syz.3.1898 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 407.349227][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.359283][T12728] Call Trace: [ 407.362553][T12728] [ 407.365478][T12728] dump_stack_lvl+0x241/0x360 [ 407.370164][T12728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.375358][T12728] ? __pfx__printk+0x10/0x10 [ 407.379953][T12728] should_fail_ex+0x3b0/0x4e0 [ 407.384629][T12728] ? skb_clone+0x20c/0x390 [ 407.389047][T12728] should_failslab+0xac/0x100 [ 407.393737][T12728] ? skb_clone+0x20c/0x390 [ 407.398159][T12728] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 407.403533][T12728] skb_clone+0x20c/0x390 [ 407.407768][T12728] ? dev_queue_xmit_nit+0x220/0xc10 [ 407.412966][T12728] dev_queue_xmit_nit+0x419/0xc10 [ 407.417993][T12728] ? dev_queue_xmit_nit+0x2b/0xc10 [ 407.423116][T12728] ? validate_xmit_skb+0x9f9/0x1120 [ 407.428323][T12728] dev_hard_start_xmit+0x15f/0x7e0 [ 407.433454][T12728] ? __pfx_validate_xmit_skb+0x10/0x10 [ 407.438911][T12728] __dev_queue_xmit+0x1b11/0x3ed0 [ 407.443931][T12728] ? kasan_save_track+0x51/0x80 [ 407.448776][T12728] ? do_syscall_64+0xf3/0x230 [ 407.453451][T12728] ? __dev_queue_xmit+0x2da/0x3ed0 [ 407.458562][T12728] ? __pfx___dev_queue_xmit+0x10/0x10 [ 407.463952][T12728] ? __copy_skb_header+0x437/0x5b0 [ 407.469102][T12728] ? __asan_memcpy+0x40/0x70 [ 407.473712][T12728] ? __copy_skb_header+0x437/0x5b0 [ 407.478836][T12728] ? __skb_clone+0x454/0x6c0 [ 407.483469][T12728] ? skb_clone+0x240/0x390 [ 407.487909][T12728] __netlink_deliver_tap+0x54d/0x7c0 [ 407.493209][T12728] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.498415][T12728] netlink_deliver_tap+0x19d/0x1b0 [ 407.503552][T12728] netlink_unicast+0x7c4/0x990 [ 407.508350][T12728] ? __pfx_netlink_unicast+0x10/0x10 [ 407.513658][T12728] ? __virt_addr_valid+0x183/0x530 [ 407.518798][T12728] ? __check_object_size+0x48e/0x900 [ 407.524119][T12728] netlink_sendmsg+0x8e4/0xcb0 [ 407.528918][T12728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.534210][T12728] ? aa_sock_msg_perm+0x91/0x160 [ 407.539156][T12728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.544437][T12728] __sock_sendmsg+0x221/0x270 [ 407.549135][T12728] ____sys_sendmsg+0x52a/0x7e0 [ 407.553920][T12728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.559225][T12728] __sys_sendmsg+0x292/0x380 [ 407.563823][T12728] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.568953][T12728] ? __pfx_vfs_write+0x10/0x10 [ 407.573748][T12728] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.580097][T12728] ? do_syscall_64+0x100/0x230 [ 407.584883][T12728] ? do_syscall_64+0xb6/0x230 [ 407.589556][T12728] do_syscall_64+0xf3/0x230 [ 407.594055][T12728] ? clear_bhb_loop+0x35/0x90 [ 407.598727][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.604628][T12728] RIP: 0033:0x7f9c8e37dff9 [ 407.609086][T12728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.628696][T12728] RSP: 002b:00007f9c8f0bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.637118][T12728] RAX: ffffffffffffffda RBX: 00007f9c8e535f80 RCX: 00007f9c8e37dff9 [ 407.645108][T12728] RDX: 0000000000000040 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 407.653081][T12728] RBP: 00007f9c8f0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 407.661055][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.669019][T12728] R13: 0000000000000000 R14: 00007f9c8e535f80 R15: 00007f9c8e65fa28 [ 407.677000][T12728] [ 407.680141][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.829907][T12738] tipc: Started in network mode [ 407.835064][T12738] tipc: Node identity 003a0000000000000000000000002d01, cluster identity 4711 [ 407.845341][T12738] tipc: Enabling of bearer rejected, failed to enable media [ 407.992705][T12744] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 407.999653][T12744] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 408.011043][T12744] hsr_slave_0: left promiscuous mode [ 408.020042][T12744] hsr_slave_1: left promiscuous mode [ 408.043320][ T5285] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 408.147564][T12747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1903'. [ 408.159150][T12747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1903'. [ 408.203262][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 408.212190][ T5285] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=1b.62 [ 408.222035][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.230772][ T5285] usb 4-1: Product: syz [ 408.243870][ T5285] usb 4-1: Manufacturer: syz [ 408.248500][ T5285] usb 4-1: SerialNumber: syz [ 408.273666][ T5285] usb 4-1: config 0 descriptor?? [ 408.284960][ T5285] usb 4-1: selecting invalid altsetting 3 [ 408.298096][ T5285] comedi comedi0: could not set alternate setting 3 in high speed [ 408.316781][ T5285] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 408.332624][ T5285] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 408.407197][T12758] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 408.492609][ T5285] usb 4-1: USB disconnect, device number 86 [ 409.808578][T12772] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 409.997098][T12783] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 410.144309][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.158528][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.383650][ T938] IPVS: starting estimator thread 0... [ 410.484692][T12795] IPVS: using max 20 ests per chain, 48000 per kthread [ 410.599985][ T5656] IPVS: stop unused estimator thread 0... [ 410.820644][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.830891][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.869078][T12805] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 410.875882][T12805] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 410.895945][T12805] vhci_hcd vhci_hcd.0: Device attached [ 410.912302][T12808] vhci_hcd: cannot find the pending unlink 0 [ 411.174432][ T1180] usb 18-1: SetAddress Request (2) to port 0 [ 411.183308][T12808] vhci_hcd: connection closed [ 411.188389][ T11] vhci_hcd: stop threads [ 411.188933][ T1180] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 411.194171][ T11] vhci_hcd: release socket [ 411.211973][ T11] vhci_hcd: disconnect device [ 411.223521][ T1180] usb 18-1: enqueue for inactive port 0 [ 411.448268][ T5234] Bluetooth: hci3: unexpected event 0x0e length: 1 < 3 [ 411.634927][ T1180] usb usb18-port1: attempt power cycle [ 411.762242][T12821] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 411.830915][T12823] loop2: detected capacity change from 0 to 7 [ 411.839770][T12823] Dev loop2: unable to read RDB block 7 [ 411.848703][T12823] loop2: unable to read partition table [ 411.858583][T12823] loop2: partition table beyond EOD, truncated [ 411.865382][T12823] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.919959][T12828] FAULT_INJECTION: forcing a failure. [ 411.919959][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 411.932858][T12828] CPU: 0 UID: 0 PID: 12828 Comm: syz.4.1935 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 411.943646][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.953720][T12828] Call Trace: [ 411.957015][T12828] [ 411.959962][T12828] dump_stack_lvl+0x241/0x360 [ 411.964667][T12828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.969885][T12828] ? __pfx__printk+0x10/0x10 [ 411.974501][T12828] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 411.980080][T12828] ? __pfx___might_resched+0x10/0x10 [ 411.985404][T12828] should_fail_ex+0x3b0/0x4e0 [ 411.990110][T12828] ? skb_clone+0x20c/0x390 [ 411.994551][T12828] should_failslab+0xac/0x100 [ 411.999259][T12828] ? skb_clone+0x20c/0x390 [ 412.003697][T12828] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 412.006566][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 412.009072][T12828] ? ref_tracker_free+0x643/0x7e0 [ 412.022942][T12828] skb_clone+0x20c/0x390 [ 412.027207][T12828] nl_fib_input+0x182/0xb60 [ 412.031745][T12828] ? __pfx_nl_fib_input+0x10/0x10 [ 412.036795][T12828] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.042008][T12828] ? skb_clone+0x240/0x390 [ 412.046445][T12828] ? __pfx_lock_release+0x10/0x10 [ 412.051498][T12828] ? __netlink_deliver_tap+0x77e/0x7c0 [ 412.056988][T12828] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.062214][T12828] netlink_unicast+0x7f6/0x990 [ 412.067014][T12828] ? __pfx_netlink_unicast+0x10/0x10 [ 412.072320][T12828] ? __virt_addr_valid+0x183/0x530 [ 412.077449][T12828] ? __check_object_size+0x48e/0x900 [ 412.082760][T12828] netlink_sendmsg+0x8e4/0xcb0 [ 412.087572][T12828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.092889][T12828] ? aa_sock_msg_perm+0x91/0x160 [ 412.097841][T12828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.103126][T12828] __sock_sendmsg+0x221/0x270 [ 412.107812][T12828] ____sys_sendmsg+0x52a/0x7e0 [ 412.112576][T12828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.117857][T12828] __sys_sendmsg+0x292/0x380 [ 412.122440][T12828] ? __pfx___sys_sendmsg+0x10/0x10 [ 412.127549][T12828] ? __pfx_vfs_write+0x10/0x10 [ 412.132313][T12828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 412.138645][T12828] ? do_syscall_64+0x100/0x230 [ 412.143421][T12828] ? do_syscall_64+0xb6/0x230 [ 412.148110][T12828] do_syscall_64+0xf3/0x230 [ 412.152608][T12828] ? clear_bhb_loop+0x35/0x90 [ 412.157281][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.163177][T12828] RIP: 0033:0x7f0bbf37dff9 [ 412.167584][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.187194][T12828] RSP: 002b:00007f0bc0254038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.195634][T12828] RAX: ffffffffffffffda RBX: 00007f0bbf535f80 RCX: 00007f0bbf37dff9 [ 412.203630][T12828] RDX: 0000000000000040 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 412.211625][T12828] RBP: 00007f0bc0254090 R08: 0000000000000000 R09: 0000000000000000 [ 412.219620][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.227620][T12828] R13: 0000000000000000 R14: 00007f0bbf535f80 R15: 00007f0bbf65fa28 [ 412.235625][T12828] [ 412.255471][ T1180] usb usb18-port1: unable to enumerate USB device [ 412.288367][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 412.301011][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.320090][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.451260][T12848] tipc: Started in network mode [ 412.458638][T12848] tipc: Node identity 00000000000000000004000000002d2d, cluster identity 4711 [ 412.469604][T12848] tipc: Enabling of bearer rejected, failed to enable media [ 412.642704][T12857] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 412.698598][T12857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1945'. [ 412.759005][T12861] loop2: detected capacity change from 0 to 7 [ 412.781410][T12861] Dev loop2: unable to read RDB block 7 [ 412.791643][T12861] loop2: unable to read partition table [ 412.798383][T12861] loop2: partition table beyond EOD, truncated [ 412.812618][T12861] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.025505][T12868] Cannot find map_set index 0 as target [ 413.357072][T12870] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 413.373536][ T5322] IPVS: starting estimator thread 0... [ 413.463228][T12873] IPVS: using max 32 ests per chain, 76800 per kthread [ 413.541100][ T5234] Bluetooth: hci3: command tx timeout [ 413.602322][T12875] input: syz0 as /devices/virtual/input/input52 [ 413.994978][ T11] IPVS: stop unused estimator thread 0... [ 414.576935][T12883] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 414.606411][T12883] syz_tun: entered allmulticast mode [ 414.655775][T12883] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 415.693473][ T5294] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 415.693534][ T5234] Bluetooth: hci4: command 0x0c1a tx timeout [ 415.699890][ T5294] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 415.717743][T12907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1964'. [ 415.778035][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.788276][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.863197][ T5284] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 415.993710][T12913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1960'. [ 416.033215][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 416.041936][ T5284] usb 4-1: config 0 has an invalid interface number: 73 but max is 1 [ 416.053141][ T5284] usb 4-1: config 0 has an invalid interface number: 3 but max is 1 [ 416.061981][ T5284] usb 4-1: config 0 has no interface number 0 [ 416.075963][ T5284] usb 4-1: config 0 has no interface number 1 [ 416.082416][T12917] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1966'. [ 416.092507][ T5284] usb 4-1: config 0 interface 73 altsetting 251 has a duplicate endpoint with address 0xB, skipping [ 416.105446][T12917] x_tables: ip_tables: udp match: only valid for protocol 17 [ 416.118796][ T5284] usb 4-1: config 0 interface 73 altsetting 251 bulk endpoint 0xF has invalid maxpacket 1023 [ 416.140330][ T5284] usb 4-1: config 0 interface 73 altsetting 251 bulk endpoint 0x4 has invalid maxpacket 1023 [ 416.169928][ T5284] usb 4-1: config 0 interface 73 altsetting 251 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 416.201547][ T5284] usb 4-1: config 0 interface 73 altsetting 251 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 416.223001][T12919] netlink: 'syz.1.1967': attribute type 4 has an invalid length. [ 416.231996][T12919] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1967'. [ 416.241798][ T5284] usb 4-1: config 0 interface 73 altsetting 251 endpoint 0x8F has invalid maxpacket 61155, setting to 1024 [ 416.264313][ T5284] usb 4-1: config 0 interface 73 altsetting 251 bulk endpoint 0x8F has invalid maxpacket 1024 [ 416.274740][ T5284] usb 4-1: config 0 interface 73 altsetting 251 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 416.287936][ T5284] usb 4-1: config 0 interface 73 has no altsetting 0 [ 416.294782][ T5284] usb 4-1: config 0 interface 3 has no altsetting 0 [ 416.304059][ T5284] usb 4-1: New USB device found, idVendor=093a, idProduct=2472, bcdDevice= b.63 [ 416.313155][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.321221][ T5284] usb 4-1: Product: syz [ 416.328282][ T5284] usb 4-1: Manufacturer: syz [ 416.374585][ T5284] usb 4-1: SerialNumber: syz [ 416.401985][ T5284] usb 4-1: config 0 descriptor?? [ 416.412939][T12921] loop2: detected capacity change from 0 to 7 [ 416.427133][T12921] Dev loop2: unable to read RDB block 7 [ 416.445997][T12905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.454493][T12905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.462377][T12905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.471884][T12921] loop2: unable to read partition table [ 416.491669][T12921] loop2: partition table beyond EOD, truncated [ 416.499322][T12921] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 416.675748][T12905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.720477][T12927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1971'. [ 416.733000][T12929] loop2: detected capacity change from 0 to 7 [ 416.739794][T12905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.748865][T12929] Dev loop2: unable to read RDB block 7 [ 416.762397][T12929] loop2: unable to read partition table [ 416.784881][T12929] loop2: partition table beyond EOD, truncated [ 416.804276][T12929] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 416.808780][ T5284] usb 4-1: USB disconnect, device number 87 [ 416.842605][T12932] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 416.883591][T12932] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1973'. [ 417.163286][ T5284] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 417.270227][T12954] netlink: 'syz.4.1983': attribute type 29 has an invalid length. [ 417.282558][T12954] netlink: 'syz.4.1983': attribute type 29 has an invalid length. [ 417.297855][T12954] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1983'. [ 417.343277][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 417.354709][ T5284] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 417.366679][ T5284] usb 4-1: config 0 has no interface number 0 [ 417.384832][T12959] input: syz0 as /devices/virtual/input/input53 [ 417.398495][ T5284] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 417.433437][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.445150][ T5284] usb 4-1: config 0 descriptor?? [ 417.498138][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.530908][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.564552][ T5284] viperboard 4-1:0.143: version 0.00 found at bus 004 address 088 [ 417.588345][ T5284] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 417.606456][ T5284] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 417.667384][ T5284] usb 4-1: USB disconnect, device number 88 [ 417.853240][ T5234] Bluetooth: hci3: command 0x0c1a tx timeout [ 417.853250][ T5294] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 417.853271][ T5294] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 417.933338][T12967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1987'. [ 417.957465][T12967] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 418.218327][T12588] syz_tun (unregistering): left promiscuous mode [ 418.245904][T12588] syz_tun (unregistering): left allmulticast mode [ 418.257032][T12971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.275650][T12971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.336168][T12588] team0: Port device syz_tun removed [ 418.346405][T12975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.357983][T12975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.398848][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 418.450538][T12976] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 418.487484][T12976] bond1: (slave gre1): Error -95 calling set_mac_address [ 418.561597][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.701501][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.879679][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.004407][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.131247][ T12] team0: left allmulticast mode [ 419.138471][ T12] team_slave_0: left allmulticast mode [ 419.144608][ T12] team_slave_1: left allmulticast mode [ 419.150259][ T12] bridge0: port 3(team0) entered disabled state [ 419.159463][ T12] bridge_slave_1: left allmulticast mode [ 419.166196][ T12] bridge_slave_1: left promiscuous mode [ 419.171866][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.180914][ T12] bridge_slave_0: left allmulticast mode [ 419.187138][ T12] bridge_slave_0: left promiscuous mode [ 419.192793][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.560272][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.571470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.582354][ T12] bond0 (unregistering): Released all slaves [ 419.651224][ T12] tipc: Left network mode [ 419.933344][ T5294] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 419.933458][ T5234] Bluetooth: hci2: command 0x0c1a tx timeout [ 419.939451][ T5294] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 420.271300][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.271339][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.278390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.278421][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.320919][ T12] veth1_macvtap: left promiscuous mode [ 420.320989][ T12] veth0_macvtap: left promiscuous mode [ 420.321113][ T12] veth1_vlan: left promiscuous mode [ 420.321202][ T12] veth0_vlan: left promiscuous mode [ 420.377739][T13013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.378052][T13013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.680705][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.718306][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.732748][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.742626][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.744399][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 420.744730][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.748209][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.748470][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.748931][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.750414][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.751008][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 420.751272][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.494088][ T12] team_slave_1 (unregistering): left promiscuous mode [ 421.516025][ T12] team0 (unregistering): Port device team_slave_1 removed [ 421.594772][ T12] team_slave_0 (unregistering): left promiscuous mode [ 421.608322][ T12] team0 (unregistering): Port device team_slave_0 removed [ 422.597505][T13032] chnl_net:caif_netlink_parms(): no params data found [ 422.772678][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.794480][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.813784][ T5234] Bluetooth: hci4: command tx timeout [ 422.841234][T13032] bridge_slave_0: entered allmulticast mode [ 422.897288][T13032] bridge_slave_0: entered promiscuous mode [ 422.917474][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.941367][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.964234][T13032] bridge_slave_1: entered allmulticast mode [ 422.986010][T13032] bridge_slave_1: entered promiscuous mode [ 423.071903][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.089716][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.199905][T13032] team0: Port device team_slave_0 added [ 423.245313][T13032] team0: Port device team_slave_1 added [ 423.316280][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.331340][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.364323][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.400647][T13069] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2003'. [ 423.414152][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.424567][T13069] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 423.432092][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.468688][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.486739][T13073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.514594][T13073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.567959][T13070] syz_tun (unregistering): left promiscuous mode [ 423.591835][T13070] syz_tun (unregistering): left allmulticast mode [ 423.599038][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.639478][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.674560][T13070] team0: Port device syz_tun removed [ 423.761612][T13032] hsr_slave_0: entered promiscuous mode [ 423.791908][T13032] hsr_slave_1: entered promiscuous mode [ 424.133297][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 424.471765][T13116] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 424.861084][T13032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.877430][T13032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.892080][T13032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.904380][ T5234] Bluetooth: hci4: command tx timeout [ 424.922549][T13032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.101879][T13032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.115193][T13126] netlink: 'syz.4.2013': attribute type 10 has an invalid length. [ 425.135967][T13126] syz_tun: left promiscuous mode [ 425.149883][T13126] syz_tun: left allmulticast mode [ 425.170044][T13126] team0: Port device syz_tun removed [ 425.197938][T13126] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 425.311920][T13032] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.352319][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.359512][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.429862][T13138] netlink: 'syz.4.2015': attribute type 27 has an invalid length. [ 425.459591][T13141] FAULT_INJECTION: forcing a failure. [ 425.459591][T13141] name failslab, interval 1, probability 0, space 0, times 0 [ 425.472545][T13141] CPU: 0 UID: 0 PID: 13141 Comm: syz.0.2016 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 425.483341][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 425.493420][T13141] Call Trace: [ 425.496726][T13141] [ 425.499678][T13141] dump_stack_lvl+0x241/0x360 [ 425.504387][T13141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.509610][T13141] ? __pfx__printk+0x10/0x10 [ 425.514240][T13141] ? ref_tracker_alloc+0x332/0x490 [ 425.519381][T13141] should_fail_ex+0x3b0/0x4e0 [ 425.524096][T13141] ? skb_clone+0x20c/0x390 [ 425.528538][T13141] should_failslab+0xac/0x100 [ 425.533241][T13141] ? skb_clone+0x20c/0x390 [ 425.537677][T13141] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 425.543089][T13141] skb_clone+0x20c/0x390 [ 425.547353][T13141] __netlink_deliver_tap+0x3cc/0x7c0 [ 425.552647][T13141] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.557843][T13141] netlink_deliver_tap+0x19d/0x1b0 [ 425.562951][T13141] netlink_unicast+0x7c4/0x990 [ 425.567719][T13141] ? __pfx_netlink_unicast+0x10/0x10 [ 425.573002][T13141] ? __virt_addr_valid+0x183/0x530 [ 425.578110][T13141] ? __check_object_size+0x48e/0x900 [ 425.583400][T13141] netlink_sendmsg+0x8e4/0xcb0 [ 425.588170][T13141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.593453][T13141] ? aa_sock_msg_perm+0x91/0x160 [ 425.598390][T13141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.603669][T13141] __sock_sendmsg+0x221/0x270 [ 425.608347][T13141] ____sys_sendmsg+0x52a/0x7e0 [ 425.613117][T13141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.618422][T13141] __sys_sendmsg+0x292/0x380 [ 425.623179][T13141] ? __pfx___sys_sendmsg+0x10/0x10 [ 425.628290][T13141] ? __pfx_vfs_write+0x10/0x10 [ 425.633063][T13141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 425.639391][T13141] ? do_syscall_64+0x100/0x230 [ 425.644155][T13141] ? do_syscall_64+0xb6/0x230 [ 425.648824][T13141] do_syscall_64+0xf3/0x230 [ 425.653317][T13141] ? clear_bhb_loop+0x35/0x90 [ 425.658008][T13141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.663911][T13141] RIP: 0033:0x7f7e6d97dff9 [ 425.668323][T13141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.687931][T13141] RSP: 002b:00007f7e6e840038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.696351][T13141] RAX: ffffffffffffffda RBX: 00007f7e6db35f80 RCX: 00007f7e6d97dff9 [ 425.704322][T13141] RDX: 0000000000000040 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 425.712287][T13141] RBP: 00007f7e6e840090 R08: 0000000000000000 R09: 0000000000000000 [ 425.720256][T13141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.728237][T13141] R13: 0000000000000000 R14: 00007f7e6db35f80 R15: 00007f7e6dc5fa28 [ 425.736229][T13141] [ 425.781624][T13032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.794666][T13032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.808322][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.815533][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.899677][T13032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.933310][ T5285] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 426.004808][T13032] veth0_vlan: entered promiscuous mode [ 426.029993][T13032] veth1_vlan: entered promiscuous mode [ 426.083988][T13032] veth0_macvtap: entered promiscuous mode [ 426.097254][T13032] veth1_macvtap: entered promiscuous mode [ 426.115185][ T5285] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 426.121514][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.134799][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.142591][ T5285] usb 4-1: config 0 descriptor?? [ 426.159665][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.170453][ T5285] cp210x 4-1:0.0: cp210x converter detected [ 426.174881][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.190114][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.214557][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.230128][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.242248][T13032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.270885][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.288710][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.301144][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.317888][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.328667][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.341027][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.356807][T13032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.385607][T13032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.400078][T13032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.410262][T13032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.425468][T13032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.581287][ T5285] usb 4-1: cp210x converter now attached to ttyUSB0 [ 426.721505][T13177] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2023'. [ 426.783152][ T1180] usb 4-1: USB disconnect, device number 89 [ 426.815619][ T1180] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 426.824358][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.824381][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.837859][ T1180] cp210x 4-1:0.0: device disconnected [ 426.974484][ T5234] Bluetooth: hci4: command tx timeout [ 426.998324][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.998350][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.005434][T13197] syz.4.2027: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 427.005512][T13197] CPU: 0 UID: 0 PID: 13197 Comm: syz.4.2027 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 427.005537][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.005552][T13197] Call Trace: [ 427.005561][T13197] [ 427.005571][T13197] dump_stack_lvl+0x241/0x360 [ 427.005602][T13197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.005625][T13197] ? __pfx__printk+0x10/0x10 [ 427.005659][T13197] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 427.005684][T13197] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 427.005711][T13197] warn_alloc+0x278/0x410 [ 427.005743][T13197] ? stack_depot_save_flags+0x29/0x830 [ 427.005772][T13197] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 427.005796][T13197] ? __pfx_warn_alloc+0x10/0x10 [ 427.005820][T13197] ? kasan_save_track+0x3f/0x80 [ 427.005840][T13197] ? __kasan_kmalloc+0x98/0xb0 [ 427.005864][T13197] ? xsk_setsockopt+0x598/0x950 [ 427.005888][T13197] ? do_sock_setsockopt+0x3af/0x720 [ 427.005909][T13197] ? __sys_setsockopt+0x1a2/0x250 [ 427.005929][T13197] ? __x64_sys_setsockopt+0xb5/0xd0 [ 427.005949][T13197] ? do_syscall_64+0xf3/0x230 [ 427.005968][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.006005][T13197] __vmalloc_node_range_noprof+0x126/0x13f0 [ 427.006050][T13197] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 427.006075][T13197] ? __kasan_kmalloc+0x98/0xb0 [ 427.006095][T13197] ? xskq_create+0x54/0x170 [ 427.006123][T13197] vmalloc_user_noprof+0x74/0x80 [ 427.006144][T13197] ? xskq_create+0xb6/0x170 [ 427.006168][T13197] xskq_create+0xb6/0x170 [ 427.006195][T13197] xsk_init_queue+0xa1/0x100 [ 427.006221][T13197] xsk_setsockopt+0x598/0x950 [ 427.006247][T13197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 427.006273][T13197] ? __pfx_aa_sk_perm+0x10/0x10 [ 427.006293][T13197] ? __pfx_lock_acquire+0x10/0x10 [ 427.006321][T13197] ? __fget_files+0x29/0x470 [ 427.006342][T13197] ? aa_sock_opt_perm+0x79/0x120 [ 427.006366][T13197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 427.006391][T13197] do_sock_setsockopt+0x3af/0x720 [ 427.006420][T13197] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 427.006441][T13197] ? __fget_files+0x29/0x470 [ 427.006466][T13197] ? __fget_files+0x3f3/0x470 [ 427.006488][T13197] ? __fget_files+0x29/0x470 [ 427.006517][T13197] __sys_setsockopt+0x1a2/0x250 [ 427.006537][T13197] __x64_sys_setsockopt+0xb5/0xd0 [ 427.006580][T13197] do_syscall_64+0xf3/0x230 [ 427.006600][T13197] ? clear_bhb_loop+0x35/0x90 [ 427.006622][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.006649][T13197] RIP: 0033:0x7f0bbf37dff9 [ 427.006667][T13197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.006685][T13197] RSP: 002b:00007f0bc0233038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 427.006708][T13197] RAX: ffffffffffffffda RBX: 00007f0bbf536058 RCX: 00007f0bbf37dff9 [ 427.006733][T13197] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 427.006748][T13197] RBP: 00007f0bbf3f0296 R08: 0000000000000020 R09: 0000000000000000 [ 427.006763][T13197] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 427.006777][T13197] R13: 0000000000000000 R14: 00007f0bbf536058 R15: 00007f0bbf65fa28 [ 427.006808][T13197] [ 427.006818][T13197] Mem-Info: [ 427.006840][T13197] active_anon:5002 inactive_anon:441 isolated_anon:0 [ 427.006840][T13197] active_file:14512 inactive_file:223 isolated_file:0 [ 427.006840][T13197] unevictable:768 dirty:286 writeback:0 [ 427.006840][T13197] slab_reclaimable:5162 slab_unreclaimable:96062 [ 427.006840][T13197] mapped:22512 shmem:1278 pagetables:1064 [ 427.006840][T13197] sec_pagetables:0 bounce:0 [ 427.006840][T13197] kernel_misc_reclaimable:0 [ 427.006840][T13197] free:1384202 free_pcp:760 free_cma:0 [ 427.006895][T13197] Node 0 active_anon:20008kB inactive_anon:1764kB active_file:57904kB inactive_file:888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89908kB dirty:1140kB writeback:0kB shmem:3576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10944kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no [ 427.006948][T13197] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 427.006995][T13197] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.007056][T13197] lowmem_reserve[]: 0 2465 2466 0 0 [ 427.007105][T13197] Node 0 DMA32 free:1596760kB boost:2048kB min:36248kB low:44796kB high:53344kB reserved_highatomic:0KB active_anon:19672kB inactive_anon:1752kB active_file:57420kB inactive_file:856kB unevictable:1536kB writepending:1140kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:2888kB local_pcp:1940kB free_cma:0kB [ 427.007164][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 427.007210][T13197] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:336kB inactive_anon:12kB active_file:484kB inactive_file:32kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 427.007265][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 427.007312][T13197] Node 1 Normal free:3924688kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:4kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 427.007369][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 427.007416][T13197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 427.007562][T13197] Node 0 DMA32: 176*4kB (ME) 795*8kB (UME) 674*16kB (UME) 976*32kB (UME) 432*64kB (UME) 169*128kB (UME) 111*256kB (UM) 47*512kB (UM) 30*1024kB (UM) 13*2048kB (UM) 339*4096kB (UM) = 1596728kB [ 427.007775][T13197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 427.007901][T13197] Node 1 Normal: 204*4kB (UME) 62*8kB (UME) 45*16kB (UME) 165*32kB (UME) 89*64kB (UME) 42*128kB (UME) 19*256kB (UM) 6*512kB (UME) 3*1024kB (UE) 4*2048kB (UE) 949*4096kB (UM) = 3924688kB [ 427.008101][T13197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.008119][T13197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.008137][T13197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.008159][T13197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.008177][T13197] 16014 total pagecache pages [ 427.008186][T13197] 1 pages in swap cache [ 427.008196][T13197] Free swap = 124436kB [ 427.008206][T13197] Total swap = 124996kB [ 427.008217][T13197] 2097051 pages RAM [ 427.008227][T13197] 0 pages HighMem/MovableOnly [ 427.008237][T13197] 427076 pages reserved [ 427.008246][T13197] 0 pages cma reserved [ 427.139977][T13204] tipc: Enabling of bearer rejected, failed to enable media [ 427.513416][T13225] input: syz0 as /devices/virtual/input/input54 [ 428.562342][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 428.730894][T13262] loop2: detected capacity change from 0 to 7 [ 428.752753][T13262] Dev loop2: unable to read RDB block 7 [ 428.770295][T13262] loop2: unable to read partition table [ 428.795789][T13262] loop2: partition table beyond EOD, truncated [ 428.822941][T13262] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.968743][T13280] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 ! [ 429.054113][ T5234] Bluetooth: hci4: command tx timeout [ 429.067346][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 429.128769][T13286] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 429.141088][T13286] bond2: (slave gre1): Error -95 calling set_mac_address [ 429.489451][T13319] netlink: 'syz.1.2056': attribute type 27 has an invalid length. [ 430.169478][T13352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.180049][T13352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.253431][ T1180] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 430.263406][ T1180] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 430.286298][T13357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.330485][T13357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.482205][T13368] loop2: detected capacity change from 0 to 7 [ 430.494628][T13368] Dev loop2: unable to read RDB block 7 [ 430.500350][T13368] loop2: unable to read partition table [ 430.509312][T13368] loop2: partition table beyond EOD, truncated [ 430.515879][T13368] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.734515][T13374] sctp: [Deprecated]: syz.3.2069 (pid 13374) Use of int in maxseg socket option. [ 430.734515][T13374] Use struct sctp_assoc_value instead [ 430.775739][T13374] IPVS: set_ctl: invalid protocol: 53 0.0.0.0:0 [ 430.971544][T13378] x_tables: duplicate underflow at hook 2 [ 431.181356][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'. [ 431.489320][T13387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2073'. [ 432.340531][T13394] binder: BINDER_SET_CONTEXT_MGR already set [ 432.356556][T13394] binder: 13392:13394 ioctl 4018620d 20000040 returned -16 [ 432.472879][T13397] loop2: detected capacity change from 0 to 7 [ 432.482346][T13397] Dev loop2: unable to read RDB block 7 [ 432.491324][T13397] loop2: unable to read partition table [ 432.499138][T13397] loop2: partition table beyond EOD, truncated [ 432.507680][T13397] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 432.565175][T13399] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 432.678804][T13403] Cannot find map_set index 0 as target [ 432.861987][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2082'. [ 434.170946][T13426] sch_tbf: peakrate 9 is lower than or equals to rate 18428595723600419182 ! [ 434.368017][T13438] tipc: Enabling of bearer rejected, failed to enable media [ 434.790169][T13459] vlan2: entered promiscuous mode [ 434.802496][T13459] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 434.833379][T13459] vlan2: entered allmulticast mode [ 434.843269][T13459] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 434.869668][T13459] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 434.883363][T13459] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 434.932413][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.953399][T13462] syzkaller1: entered promiscuous mode [ 434.959197][T13462] syzkaller1: entered allmulticast mode [ 434.968095][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.999531][T13467] syzkaller1: entered promiscuous mode [ 435.043229][T13467] syzkaller1: entered allmulticast mode [ 435.119810][ T25] IPVS: starting estimator thread 0... [ 435.123310][T13454] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 435.213371][T13473] IPVS: using max 18 ests per chain, 43200 per kthread [ 435.372051][ T4019] IPVS: stop unused estimator thread 0... [ 435.378225][ T5322] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 435.523244][ T5322] usb 4-1: device descriptor read/64, error -71 [ 435.773494][ T5322] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 435.913213][ T5322] usb 4-1: device descriptor read/64, error -71 [ 436.023546][ T5322] usb usb4-port1: attempt power cycle [ 436.373246][ T5322] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 436.403976][ T5322] usb 4-1: device descriptor read/8, error -71 [ 436.653690][ T5322] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 436.677236][ T5322] usb 4-1: device descriptor read/8, error -71 [ 436.726463][T13489] warning: `syz.1.2111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 436.793593][ T5322] usb usb4-port1: unable to enumerate USB device [ 436.918038][T13491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.050856][T13495] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 437.059277][T13495] macvtap1: entered promiscuous mode [ 437.067179][T13495] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 437.199783][T13500] tipc: Started in network mode [ 437.205284][T13500] tipc: Node identity 003a0000000000000000000000002d01, cluster identity 4711 [ 437.214962][T13500] tipc: Enabling of bearer rejected, failed to enable media [ 437.257418][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.266416][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.011314][T13506] syzkaller1: entered promiscuous mode [ 438.018890][T13506] syzkaller1: entered allmulticast mode [ 438.160842][T13509] tipc: Enabling of bearer rejected, failed to enable media [ 438.169479][T13508] tipc: Enabling of bearer rejected, failed to enable media [ 438.260527][T13512] input: syz0 as /devices/virtual/input/input56 [ 438.366454][T13516] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 438.803360][ T5322] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 438.973449][ T5322] usb 4-1: Using ep0 maxpacket: 8 [ 438.981336][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 438.993718][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.006094][ T5322] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 439.016311][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.028718][ T5322] usb 4-1: config 0 descriptor?? [ 439.244651][T13523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.257378][T13523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.326067][T13523] xt_CT: No such helper "snmp" [ 439.538772][T13523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.561561][T13523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.691565][ T5322] usbhid 4-1:0.0: can't add hid device: -71 [ 439.700562][ T5322] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 439.712834][ T5322] usb 4-1: USB disconnect, device number 94 [ 439.843611][T13532] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2127'. [ 439.853726][T13532] 0ªX¹¦À: renamed from caif0 [ 439.859523][T13532] 0ªX¹¦À: entered allmulticast mode [ 439.865782][T13532] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 440.176668][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.183157][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.367813][T13545] vlan2: entered promiscuous mode [ 440.383372][T13545] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 440.398176][T13545] vlan2: entered allmulticast mode [ 440.410120][T13545] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 440.431683][T13545] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 440.448107][T13545] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 440.494577][T13547] loop2: detected capacity change from 0 to 7 [ 440.519524][T13547] Dev loop2: unable to read RDB block 7 [ 440.537920][T13547] loop2: unable to read partition table [ 440.559646][T13547] loop2: partition table beyond EOD, truncated [ 440.579159][T13547] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.592887][T13549] bridge_slave_1: left allmulticast mode [ 440.602644][T13549] bridge_slave_1: left promiscuous mode [ 440.629346][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.665226][T13549] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 440.808286][ T5294] IPVS: starting estimator thread 0... [ 440.838724][T13560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.923589][T13558] IPVS: using max 16 ests per chain, 38400 per kthread [ 441.091866][T13566] dummy0: entered promiscuous mode [ 441.098250][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'. [ 441.099484][T13566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.121439][T13566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.151736][T13563] dummy0: left promiscuous mode [ 441.352681][T13582] loop2: detected capacity change from 0 to 7 [ 441.360581][T13582] Dev loop2: unable to read RDB block 7 [ 441.367278][T13582] loop2: unable to read partition table [ 441.377256][T13582] loop2: partition table beyond EOD, truncated [ 441.386258][T13582] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 441.506622][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 441.755900][T13599] binder: 13597:13599 ioctl c018620c 20000340 returned -22 [ 441.812882][T13598] binder: 13597:13598 unknown command 0 [ 441.833318][T13598] binder: 13597:13598 ioctl c0306201 20000a80 returned -22 [ 441.840969][T13603] syzkaller1: entered promiscuous mode [ 441.853333][T13603] syzkaller1: entered allmulticast mode [ 441.878188][T13603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.908730][T13603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.955311][ T29] audit: type=1326 audit(1728836897.258:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.2.2153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x0 [ 442.111248][T13614] Cannot find map_set index 0 as target [ 442.827558][T13624] input: syz1 as /devices/virtual/input/input57 [ 443.037822][T13630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.091161][T13630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.255649][T13637] netlink: 'syz.2.2162': attribute type 2 has an invalid length. [ 443.937230][T13651] binder_alloc: 13647: binder_alloc_buf, no vma [ 444.097637][T13653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2168'. [ 444.245414][T13657] loop2: detected capacity change from 0 to 7 [ 444.252231][T13657] Dev loop2: unable to read RDB block 7 [ 444.259006][T13657] loop2: unable to read partition table [ 444.265190][T13657] loop2: partition table beyond EOD, truncated [ 444.271455][T13657] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 444.353282][ T1180] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 444.503222][ T1180] usb 4-1: Using ep0 maxpacket: 8 [ 444.510272][ T1180] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 444.519291][ T1180] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.530126][ T1180] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.540127][ T1180] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.550537][ T1180] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.564033][ T1180] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 444.573083][ T1180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.795736][ T1180] usb 4-1: usb_control_msg returned -32 [ 444.801666][ T1180] usbtmc 4-1:16.0: can't read capabilities [ 444.839209][T13666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2172'. [ 444.881584][T13669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.890843][T13670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.901763][T13669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.904668][T13670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.201612][T13674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.214083][T13674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.243623][T10734] bond0: (slave syz_tun): Releasing backup interface [ 445.348646][ T5674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.527484][ T5674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.609558][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.621724][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.621782][ T5674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.641037][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.655763][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.664977][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 445.673355][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.701307][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.718652][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.738770][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.746801][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.746862][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.763065][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.775969][ T5674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.787146][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 445.796406][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.983924][ T5674] bridge_slave_0: left allmulticast mode [ 445.991303][ T5674] bridge_slave_0: left promiscuous mode [ 446.001576][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.566199][ T5674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.577592][ T5674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.588836][ T5674] bond0 (unregistering): Released all slaves [ 446.609571][T13701] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2179'. [ 446.629131][T13682] chnl_net:caif_netlink_parms(): no params data found [ 446.696009][ T5674] tipc: Left network mode [ 446.781048][T13682] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.787997][T13708] loop2: detected capacity change from 0 to 7 [ 446.789685][T13682] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.799064][T13708] Dev loop2: unable to read RDB block 7 [ 446.802276][T13682] bridge_slave_0: entered allmulticast mode [ 446.807431][T13708] loop2: unable to read partition table [ 446.819426][T13708] loop2: partition table beyond EOD, truncated [ 446.827915][T13708] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.834542][T13682] bridge_slave_0: entered promiscuous mode [ 446.857018][T13682] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.888591][T13682] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.910006][T13682] bridge_slave_1: entered allmulticast mode [ 446.935730][T13682] bridge_slave_1: entered promiscuous mode [ 447.020251][T13682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.029911][ T5285] usb 4-1: USB disconnect, device number 95 [ 447.079789][T13682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.169272][ T5674] hsr_slave_0: left promiscuous mode [ 447.182374][ T5674] hsr_slave_1: left promiscuous mode [ 447.235848][ T5674] veth1_macvtap: left promiscuous mode [ 447.241421][ T5674] veth0_macvtap: left promiscuous mode [ 447.247476][ T5674] veth1_vlan: left promiscuous mode [ 447.252818][ T5674] veth0_vlan: left promiscuous mode [ 447.856200][ T5234] Bluetooth: hci1: command tx timeout [ 447.909480][ T5674] team0 (unregistering): Port device team_slave_1 removed [ 447.964539][ T5674] team0 (unregistering): Port device team_slave_0 removed [ 448.493075][T13682] team0: Port device team_slave_0 added [ 448.525417][T13682] team0: Port device team_slave_1 added [ 448.707865][T13682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.754476][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.809610][T13750] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2189'. [ 448.837006][T13682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.852359][T13682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.877607][T13682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.943845][T13682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.959815][T13756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.977993][T13758] netlink: 'syz.1.2193': attribute type 10 has an invalid length. [ 448.987350][T13758] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2193'. [ 449.007328][T13758] team0: entered promiscuous mode [ 449.020345][T13758] team_slave_0: entered promiscuous mode [ 449.041068][T13758] team_slave_1: entered promiscuous mode [ 449.066633][T13758] bridge0: port 2(team0) entered blocking state [ 449.094745][T13758] bridge0: port 2(team0) entered disabled state [ 449.113042][T13758] team0: entered allmulticast mode [ 449.150571][T13758] team_slave_0: entered allmulticast mode [ 449.187178][T13758] team_slave_1: entered allmulticast mode [ 449.233877][T13758] bridge0: port 2(team0) entered blocking state [ 449.240264][T13758] bridge0: port 2(team0) entered forwarding state [ 449.404521][T13760] syz_tun: entered promiscuous mode [ 449.455174][T13760] syz_tun: entered allmulticast mode [ 449.567447][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.583615][T13760] team0: Port device syz_tun added [ 449.664394][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.720243][T13682] hsr_slave_0: entered promiscuous mode [ 449.766308][T13682] hsr_slave_1: entered promiscuous mode [ 449.780446][T13682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.803536][T13682] Cannot create hsr debugfs directory [ 449.935612][ T5234] Bluetooth: hci1: command tx timeout [ 450.303900][ T25] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 450.474655][ T25] usb 4-1: config 0 has an invalid descriptor of length 29, skipping remainder of the config [ 450.494754][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 450.524812][ T25] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 450.544651][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.574326][ T25] usb 4-1: config 0 descriptor?? [ 450.770388][T13807] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2200'. [ 450.798335][ T1180] usb 4-1: USB disconnect, device number 96 [ 450.879593][T13682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.892081][T13682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.912185][T13682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.931050][T13682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 450.998316][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 451.174903][T13682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.212131][T13816] netlink: 'syz.1.2202': attribute type 10 has an invalid length. [ 451.228479][T13816] syz_tun: left allmulticast mode [ 451.240829][T13816] team0: Port device syz_tun removed [ 451.251364][T13816] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 451.290476][T13682] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.359576][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.366752][ T5674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.462243][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.469393][ T5674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.570088][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'. [ 451.620614][T13682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.788082][T13682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.814547][T13830] input: syz1 as /devices/virtual/input/input58 [ 451.930164][T13840] syz.2.2207: attempt to access beyond end of device [ 451.930164][T13840] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 452.023203][ T5234] Bluetooth: hci1: command tx timeout [ 452.633993][T13682] veth0_vlan: entered promiscuous mode [ 452.642840][T13682] veth1_vlan: entered promiscuous mode [ 452.672422][T13682] veth0_macvtap: entered promiscuous mode [ 452.680886][T13682] veth1_macvtap: entered promiscuous mode [ 452.764540][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.775341][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.785861][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.796726][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.809303][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.820031][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.829882][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.843358][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.877565][T13682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.939609][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.981720][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.061069][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.100349][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.130789][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.165628][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.225396][T13682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.282031][T13682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.334664][T13682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.404976][T13682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.441117][T13682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.494414][T13682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.527818][T13682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.684459][ T5674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.699685][ T5674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.741318][T13879] tipc: Enabling of bearer rejected, failed to enable media [ 453.772188][ T4019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.800937][ T4019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.918116][T13883] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2215'. [ 454.153337][ T5234] Bluetooth: hci1: command tx timeout [ 454.881597][T13897] bond0: (slave syz_tun): Releasing backup interface [ 454.984071][ T25] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 455.153560][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 455.167216][ T25] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 455.188369][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.214888][ T25] usb 4-1: Product: syz [ 455.224597][ T25] usb 4-1: Manufacturer: syz [ 455.229033][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.229204][ T25] usb 4-1: SerialNumber: syz [ 455.249525][ T25] usb 4-1: config 0 descriptor?? [ 455.284288][ T25] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 455.349830][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.456172][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.492359][T13906] fuse: Unknown parameter 'ÿÿ0x000000000000000b' [ 455.520988][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.530837][ T25] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 455.541996][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.552911][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.561809][ T25] usb 4-1: USB disconnect, device number 97 [ 455.568716][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.597052][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 455.608542][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.643597][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.838944][T13929] chnl_net:caif_netlink_parms(): no params data found [ 455.921174][ T11] team0: left allmulticast mode [ 455.929997][ T11] team_slave_0: left allmulticast mode [ 455.941482][ T11] team_slave_1: left allmulticast mode [ 455.951087][ T11] bridge0: port 3(team0) entered disabled state [ 455.967878][ T11] bridge_slave_1: left allmulticast mode [ 455.977080][ T11] bridge_slave_1: left promiscuous mode [ 455.989577][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.006691][ T11] bridge_slave_0: left allmulticast mode [ 456.012543][ T11] bridge_slave_0: left promiscuous mode [ 456.024744][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.146051][T13950] syz.3.2224: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 456.176857][T13950] CPU: 0 UID: 0 PID: 13950 Comm: syz.3.2224 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 456.187687][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 456.197773][T13950] Call Trace: [ 456.201082][T13950] [ 456.204040][T13950] dump_stack_lvl+0x241/0x360 [ 456.208750][T13950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.213979][T13950] ? __pfx__printk+0x10/0x10 [ 456.218614][T13950] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 456.225062][T13950] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 456.231599][T13950] warn_alloc+0x278/0x410 [ 456.235957][T13950] ? stack_depot_save_flags+0x29/0x830 [ 456.241454][T13950] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 456.247548][T13950] ? __pfx_warn_alloc+0x10/0x10 [ 456.252431][T13950] ? kasan_save_track+0x3f/0x80 [ 456.257306][T13950] ? __kasan_kmalloc+0x98/0xb0 [ 456.262103][T13950] ? xsk_setsockopt+0x598/0x950 [ 456.266981][T13950] ? do_sock_setsockopt+0x3af/0x720 [ 456.272207][T13950] ? __sys_setsockopt+0x1a2/0x250 [ 456.277258][T13950] ? __x64_sys_setsockopt+0xb5/0xd0 [ 456.282488][T13950] ? do_syscall_64+0xf3/0x230 [ 456.287194][T13950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.293306][T13950] __vmalloc_node_range_noprof+0x126/0x13f0 [ 456.299254][T13950] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 456.305616][T13950] ? __kasan_kmalloc+0x98/0xb0 [ 456.310420][T13950] ? xskq_create+0x54/0x170 [ 456.314960][T13950] vmalloc_user_noprof+0x74/0x80 [ 456.319926][T13950] ? xskq_create+0xb6/0x170 [ 456.324458][T13950] xskq_create+0xb6/0x170 [ 456.328826][T13950] xsk_init_queue+0xa1/0x100 [ 456.333445][T13950] xsk_setsockopt+0x598/0x950 [ 456.338159][T13950] ? __pfx_xsk_setsockopt+0x10/0x10 [ 456.343384][T13950] ? __pfx_aa_sk_perm+0x10/0x10 [ 456.348259][T13950] ? __pfx_lock_acquire+0x10/0x10 [ 456.353312][T13950] ? __fget_files+0x29/0x470 [ 456.358015][T13950] ? aa_sock_opt_perm+0x79/0x120 [ 456.362990][T13950] ? __pfx_xsk_setsockopt+0x10/0x10 [ 456.368242][T13950] do_sock_setsockopt+0x3af/0x720 [ 456.373302][T13950] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 456.378873][T13950] ? __fget_files+0x29/0x470 [ 456.383499][T13950] ? __fget_files+0x3f3/0x470 [ 456.388211][T13950] ? __fget_files+0x29/0x470 [ 456.392844][T13950] __sys_setsockopt+0x1a2/0x250 [ 456.397723][T13950] __x64_sys_setsockopt+0xb5/0xd0 [ 456.402784][T13950] do_syscall_64+0xf3/0x230 [ 456.407321][T13950] ? clear_bhb_loop+0x35/0x90 [ 456.412027][T13950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.418394][T13950] RIP: 0033:0x7f9c8e37dff9 [ 456.422831][T13950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.442471][T13950] RSP: 002b:00007f9c8f0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 456.450937][T13950] RAX: ffffffffffffffda RBX: 00007f9c8e535f80 RCX: 00007f9c8e37dff9 [ 456.458943][T13950] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 456.466942][T13950] RBP: 00007f9c8e3f0296 R08: 0000000000000020 R09: 0000000000000000 [ 456.474956][T13950] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 456.482956][T13950] R13: 0000000000000000 R14: 00007f9c8e535f80 R15: 00007f9c8e65fa28 [ 456.490997][T13950] [ 456.494061][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.526393][T13950] Mem-Info: [ 456.529601][T13950] active_anon:4841 inactive_anon:441 isolated_anon:0 [ 456.529601][T13950] active_file:14521 inactive_file:239 isolated_file:0 [ 456.529601][T13950] unevictable:768 dirty:211 writeback:0 [ 456.529601][T13950] slab_reclaimable:5058 slab_unreclaimable:96864 [ 456.529601][T13950] mapped:22276 shmem:1298 pagetables:942 [ 456.529601][T13950] sec_pagetables:0 bounce:0 [ 456.529601][T13950] kernel_misc_reclaimable:0 [ 456.529601][T13950] free:1379733 free_pcp:3156 free_cma:0 [ 456.574682][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.582030][T13950] Node 0 active_anon:19364kB inactive_anon:1764kB active_file:57940kB inactive_file:952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89080kB dirty:844kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10896kB pagetables:3768kB sec_pagetables:0kB all_unreclaimable? no [ 456.614302][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.621773][T13950] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 456.652100][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.660966][T13950] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.707375][T13950] lowmem_reserve[]: 0 2465 2466 0 0 [ 456.725925][T13950] Node 0 DMA32 free:1588660kB boost:2048kB min:36248kB low:44796kB high:53344kB reserved_highatomic:0KB active_anon:18816kB inactive_anon:1652kB active_file:57456kB inactive_file:920kB unevictable:1536kB writepending:844kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:3164kB local_pcp:1448kB free_cma:0kB [ 456.758369][T13950] lowmem_reserve[]: 0 0 0 0 0 [ 456.763217][T13950] Node 0 Normal free:20kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:288kB inactive_anon:12kB active_file:484kB inactive_file:32kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:20kB free_cma:0kB [ 456.791476][T13950] lowmem_reserve[]: 0 0 0 0 0 [ 456.796335][T13950] Node 1 Normal free:3914912kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9852kB local_pcp:9232kB free_cma:0kB [ 456.827928][T13950] lowmem_reserve[]: 0 0 0 0 0 [ 456.832705][T13950] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 456.853543][T13950] Node 0 DMA32: 538*4kB (UME) 768*8kB (UME) 693*16kB (UME) 622*32kB (UME) 465*64kB (UME) 166*128kB (UME) 122*256kB (UM) 51*512kB (UM) 31*1024kB (UM) 11*2048kB (UM) 339*4096kB (UM) = 1590456kB [ 456.872917][T13950] Node 0 Normal: 9*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36kB [ 456.885541][T13950] Node 1 Normal: 208*4kB (UME) 65*8kB (UME) 48*16kB (UME) 166*32kB (UME) 90*64kB (UME) 45*128kB (UME) 19*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 5*2048kB (UME) 946*4096kB (UM) = 3915016kB [ 456.904387][T13950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.914848][T13950] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.924283][T13950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.937280][T13950] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.983205][T13950] 16011 total pagecache pages [ 456.987937][T13950] 1 pages in swap cache [ 456.992107][T13950] Free swap = 124436kB [ 457.013756][T13950] Total swap = 124996kB [ 457.018556][T13950] 2097051 pages RAM [ 457.022918][T13950] 0 pages HighMem/MovableOnly [ 457.033334][T13950] 427076 pages reserved [ 457.052931][T13950] 0 pages cma reserved [ 457.276965][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.291200][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.302225][ T11] bond0 (unregistering): Released all slaves [ 457.403719][ T11] tipc: Left network mode [ 457.440878][T13929] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.448262][T13929] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.459093][T13929] bridge_slave_0: entered allmulticast mode [ 457.468300][T13929] bridge_slave_0: entered promiscuous mode [ 457.479149][T13929] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.487240][T13929] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.494715][T13929] bridge_slave_1: entered allmulticast mode [ 457.504400][T13929] bridge_slave_1: entered promiscuous mode [ 457.577894][T13929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.590563][T13929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.648999][ T5285] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 457.672759][ T11] hsr_slave_0: left promiscuous mode [ 457.691656][ T11] hsr_slave_1: left promiscuous mode [ 457.697867][ T5241] Bluetooth: hci0: command tx timeout [ 457.706980][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.723306][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.731993][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.743543][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.808544][ T11] veth1_macvtap: left promiscuous mode [ 457.814414][ T11] veth0_macvtap: left promiscuous mode [ 457.820183][ T11] veth1_vlan: left promiscuous mode [ 457.830133][ T5285] usb 4-1: device descriptor read/64, error -71 [ 457.840657][ T11] veth0_vlan: left promiscuous mode [ 458.079744][ T5285] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 458.214702][ T5285] usb 4-1: device descriptor read/64, error -71 [ 458.324748][ T5285] usb usb4-port1: attempt power cycle [ 458.427199][ T11] team_slave_1 (unregistering): left promiscuous mode [ 458.437702][ T11] team0 (unregistering): Port device team_slave_1 removed [ 458.482103][ T11] team_slave_0 (unregistering): left promiscuous mode [ 458.501116][ T11] team0 (unregistering): Port device team_slave_0 removed [ 458.663436][ T5285] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 458.695055][ T5285] usb 4-1: device descriptor read/8, error -71 [ 458.865907][T13987] netlink: 'syz.1.2230': attribute type 10 has an invalid length. [ 458.930693][T13929] team0: Port device team_slave_0 added [ 458.943507][ T5285] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 458.959683][T13929] team0: Port device team_slave_1 added [ 458.983747][ T5285] usb 4-1: device descriptor read/8, error -71 [ 459.040357][T13929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.058766][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.086168][T13929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.113417][ T5285] usb usb4-port1: unable to enumerate USB device [ 459.131543][T13929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.172211][T13929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.229045][T13929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.435031][T13929] hsr_slave_0: entered promiscuous mode [ 459.469732][T13929] hsr_slave_1: entered promiscuous mode [ 459.480830][T13929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.497366][T13929] Cannot create hsr debugfs directory [ 459.776789][ T5241] Bluetooth: hci0: command tx timeout [ 459.780699][T14003] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 459.790619][ T8] IPVS: starting estimator thread 0... [ 459.896397][T14032] IPVS: using max 21 ests per chain, 50400 per kthread [ 460.251336][ T11] IPVS: stop unused estimator thread 0... [ 460.272072][T14043] binder: 14042:14043 ioctl c018620c 20000340 returned -22 [ 460.290496][T14043] binder: 14042:14043 unknown command 0 [ 460.297266][T14043] binder: 14042:14043 ioctl c0306201 20000a80 returned -22 [ 460.369917][T14049] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 460.421412][T14049] syz_tun: entered promiscuous mode [ 460.444744][T14049] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 460.592187][T14067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.610246][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2245'. [ 460.853841][T13929] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.874158][T14076] loop2: detected capacity change from 0 to 7 [ 460.887960][T14076] Dev loop2: unable to read RDB block 7 [ 460.898418][T13929] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.904240][T14076] loop2: unable to read partition table [ 460.911924][T14076] loop2: partition table beyond EOD, truncated [ 460.918933][T14076] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 460.927369][T14078] vlan2: entered promiscuous mode [ 460.933374][T14078] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 460.940874][T14078] vlan2: entered allmulticast mode [ 460.946478][T14078] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 460.957259][T14078] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 460.967064][ T4686] Dev loop2: unable to read RDB block 7 [ 460.972639][ T4686] loop2: unable to read partition table [ 460.982558][ T4686] loop2: partition table beyond EOD, truncated [ 460.988922][T14078] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 461.079084][T13929] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.090054][T13929] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.123049][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 461.204929][T13032] bond0: (slave syz_tun): Releasing backup interface [ 461.238799][T14085] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 461.264053][T14085] bond1: (slave gre1): Error -95 calling set_mac_address [ 461.424563][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.601592][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.688780][T13929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.705000][T13929] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.736258][T13929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.746684][T13929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.772924][T13929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.802121][T13929] veth0_vlan: entered promiscuous mode [ 461.812902][T13929] veth1_vlan: entered promiscuous mode [ 461.835275][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.842929][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.881030][ T5241] Bluetooth: hci0: command tx timeout [ 461.893670][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.900839][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.931829][T13929] veth0_macvtap: entered promiscuous mode [ 461.946336][T13929] veth1_macvtap: entered promiscuous mode [ 462.041391][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.084108][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.124503][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.163412][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.185845][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.197118][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.209818][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.219138][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.232793][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 462.238990][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.253491][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.314870][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.373607][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.396501][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.411320][T13929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.448661][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.590441][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.657004][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.671438][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.684022][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.700365][ T29] audit: type=1326 audit(1728836918.008:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 462.708595][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.732960][ T29] audit: type=1326 audit(1728836918.008:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 462.740535][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.767464][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.777393][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.790456][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.793171][ T29] audit: type=1326 audit(1728836918.008:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 462.811809][T13929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.882488][T13929] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.891909][ T29] audit: type=1326 audit(1728836918.008:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 462.912107][T13929] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.923226][ T29] audit: type=1326 audit(1728836918.008:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 462.967496][T13929] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.971643][ T29] audit: type=1326 audit(1728836918.008:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 462.988172][T13929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.020606][ T29] audit: type=1326 audit(1728836918.008:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 463.064984][ T1180] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 463.118816][ T29] audit: type=1326 audit(1728836918.008:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 463.183256][ T29] audit: type=1326 audit(1728836918.008:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 463.215490][ T1180] usb 4-1: device descriptor read/64, error -71 [ 463.268019][ T29] audit: type=1326 audit(1728836918.008:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14101 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8df7d7dff9 code=0x7fc00000 [ 463.298349][ T12] team0: left allmulticast mode [ 463.337961][ T12] team_slave_0: left allmulticast mode [ 463.353453][ T12] team_slave_1: left allmulticast mode [ 463.373746][ T12] bridge0: port 2(team0) entered disabled state [ 463.398493][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.463570][ T1180] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 463.613357][ T1180] usb 4-1: device descriptor read/64, error -71 [ 463.733700][ T1180] usb usb4-port1: attempt power cycle [ 463.933561][ T5241] Bluetooth: hci0: command tx timeout [ 464.059163][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.073511][ T1180] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 464.082221][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.094602][ T1180] usb 4-1: device descriptor read/8, error -71 [ 464.104296][ T12] bond0 (unregistering): Released all slaves [ 464.333268][ T1180] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 464.341228][ T5241] Bluetooth: hci4: command tx timeout [ 464.363976][ T1180] usb 4-1: device descriptor read/8, error -71 [ 464.369152][T14118] chnl_net:caif_netlink_parms(): no params data found [ 464.476032][ T1180] usb usb4-port1: unable to enumerate USB device [ 464.534553][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.561618][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.625935][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.646599][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.691204][ T12] hsr_slave_0: left promiscuous mode [ 464.710326][ T12] hsr_slave_1: left promiscuous mode [ 464.724325][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.742890][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.765729][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.784495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.809876][ T12] veth1_macvtap: left promiscuous mode [ 464.820587][ T12] veth0_macvtap: left promiscuous mode [ 464.828780][ T12] veth1_vlan: left promiscuous mode [ 464.839820][ T12] veth0_vlan: left promiscuous mode [ 465.611524][ T12] team_slave_1 (unregistering): left promiscuous mode [ 465.631217][ T12] team0 (unregistering): Port device team_slave_1 removed [ 465.743440][ T12] team_slave_0 (unregistering): left promiscuous mode [ 465.763946][ T12] team0 (unregistering): Port device team_slave_0 removed [ 466.019107][T14187] fuse: Invalid gid '0x0000000000000003' [ 466.292502][T14189] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2269'. [ 466.416249][ T5241] Bluetooth: hci4: command tx timeout [ 467.123756][T14118] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.132329][T14199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.171805][T14118] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.238750][T14118] bridge_slave_0: entered allmulticast mode [ 467.241486][T14203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.260371][T14118] bridge_slave_0: entered promiscuous mode [ 467.296410][T14118] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.309377][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.320992][T14118] bridge_slave_1: entered allmulticast mode [ 467.329564][T14118] bridge_slave_1: entered promiscuous mode [ 467.384212][T14203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.399296][T14118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.410331][T14118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.434225][T14118] team0: Port device team_slave_0 added [ 467.441700][T14118] team0: Port device team_slave_1 added [ 467.598420][T14118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.649162][T14203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.653149][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.703396][T14118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.734662][T14203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.743523][T14118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.754086][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.783508][T14118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.059392][T14224] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 468.095097][T14118] hsr_slave_0: entered promiscuous mode [ 468.129311][T14118] hsr_slave_1: entered promiscuous mode [ 468.494480][ T5241] Bluetooth: hci4: command tx timeout [ 469.879087][T14118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 469.910641][T14118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 469.951949][T14118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 469.984652][T14118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 469.996171][T14274] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 470.265911][T14118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.322848][T14118] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.375570][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.382756][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.470826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.477996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.512405][T14289] vlan4: entered promiscuous mode [ 470.541183][T14289] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 470.561228][T14294] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2291'. [ 470.564199][T14289] vlan4: entered allmulticast mode [ 470.575866][ T5241] Bluetooth: hci4: command tx timeout [ 470.602147][T14289] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 470.644289][T14289] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 470.666050][T14289] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 470.826551][T14118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.852934][T14118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.030955][T14118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.052766][T14307] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 471.107089][T14118] veth0_vlan: entered promiscuous mode [ 471.141250][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2292'. [ 471.181273][T14118] veth1_vlan: entered promiscuous mode [ 471.295645][T14118] veth0_macvtap: entered promiscuous mode [ 471.355168][T14118] veth1_macvtap: entered promiscuous mode [ 471.418082][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.491597][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.572724][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.663987][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.710713][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.741946][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.766301][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.781729][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.795829][T14118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.804848][T14318] netlink: 'syz.4.2294': attribute type 10 has an invalid length. [ 471.841724][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.851296][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.870036][T14318] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.877203][T14318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.884575][T14318] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.891638][T14318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.919954][T14318] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 471.949667][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 471.988041][T14321] bridge_slave_1: left allmulticast mode [ 472.014646][T14321] bridge_slave_1: left promiscuous mode [ 472.020400][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.112698][T14321] bridge_slave_0: left allmulticast mode [ 472.128570][T14321] bridge_slave_0: left promiscuous mode [ 472.183823][T14321] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.231037][T14321] bond0: (slave bridge0): Releasing backup interface [ 472.379851][T14344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2297'. [ 472.397191][T14340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.406806][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 472.444427][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.459329][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.480307][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.540539][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.588271][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.607730][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.630728][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.642828][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.659400][T14118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.669765][T14340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.702830][T14321] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2294'. [ 472.730678][T14118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.740338][T14118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.755853][T14118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.770797][T14118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.918715][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.918738][ T5666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.918770][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.932674][ T5666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.244381][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'. [ 473.562718][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 473.583755][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 473.593924][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 473.847228][T14368] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 473.857372][T14368] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 474.263505][ T5283] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 474.403468][ T5283] usb 4-1: device descriptor read/64, error -71 [ 474.501842][T14385] input: syz1 as /devices/virtual/input/input59 [ 474.654389][ T5283] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 474.793236][ T5283] usb 4-1: device descriptor read/64, error -71 [ 474.915048][ T5283] usb usb4-port1: attempt power cycle [ 475.253277][ T5283] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 475.274367][ T5283] usb 4-1: device descriptor read/8, error -71 [ 475.513229][ T5283] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 475.535608][ T5283] usb 4-1: device descriptor read/8, error -71 [ 475.644853][ T5283] usb usb4-port1: unable to enumerate USB device [ 475.660940][T14396] fuse: Bad value for 'fd' [ 476.139561][T14398] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2316'. [ 476.148858][T14398] x_tables: ip_tables: udp match: only valid for protocol 17 [ 476.260760][T14401] netlink: 'syz.1.2317': attribute type 9 has an invalid length. [ 476.270851][T14401] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2317'. [ 476.306316][T14401] netlink: 'syz.1.2317': attribute type 9 has an invalid length. [ 477.100244][T14405] loop2: detected capacity change from 0 to 7 [ 477.107604][T14405] Dev loop2: unable to read RDB block 7 [ 477.117807][T14405] loop2: unable to read partition table [ 477.125982][T14405] loop2: partition table beyond EOD, truncated [ 477.132311][T14405] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 477.182513][T14409] __nla_validate_parse: 1 callbacks suppressed [ 477.182533][T14409] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2321'. [ 477.202796][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'. [ 477.307265][T14415] SET target dimension over the limit! [ 477.447280][ T8] IPVS: starting estimator thread 0... [ 477.469269][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 477.553323][T14423] IPVS: using max 22 ests per chain, 52800 per kthread [ 477.848902][ T4019] IPVS: stop unused estimator thread 0... [ 477.881206][T14426] loop2: detected capacity change from 0 to 7 [ 477.892693][T14426] Dev loop2: unable to read RDB block 7 [ 477.901902][T14426] loop2: unable to read partition table [ 477.908369][T14426] loop2: partition table beyond EOD, truncated [ 477.915344][T14426] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.153920][T14432] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2329'. [ 479.215372][ T30] INFO: task kworker/1:3:5281 blocked for more than 143 seconds. [ 479.238646][ T30] Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 479.263081][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.293337][ T30] task:kworker/1:3 state:D stack:21040 pid:5281 tgid:5281 ppid:2 flags:0x00004000 [ 479.318380][ T30] Workqueue: usb_hub_wq hub_event [ 479.323983][ T30] Call Trace: [ 479.332102][ T30] [ 479.339708][ T30] __schedule+0x1895/0x4b30 [ 479.349095][ T30] ? __pfx___schedule+0x10/0x10 [ 479.360698][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.378568][ T30] ? __pfx_lock_release+0x10/0x10 [ 479.391876][ T30] ? kick_pool+0x1bd/0x620 [ 479.439230][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.453409][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 479.460039][ T30] ? schedule+0x90/0x320 [ 479.470166][ T30] schedule+0x14b/0x320 [ 479.477888][ T30] schedule_preempt_disabled+0x13/0x30 [ 479.483784][ T30] __mutex_lock+0x6a7/0xd70 [ 479.488538][ T30] ? __mutex_lock+0x52a/0xd70 [ 479.493984][ T30] ? adu_disconnect+0xca/0x2b0 [ 479.499117][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 479.504563][ T30] ? usb_hcd_flush_endpoint+0x3d1/0x3f0 [ 479.510356][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 479.516850][ T30] adu_disconnect+0xca/0x2b0 [ 479.532452][ T30] usb_unbind_interface+0x25e/0x940 [ 479.546809][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 479.559906][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 479.567776][ T30] device_release_driver_internal+0x503/0x7c0 [ 479.581522][ T30] bus_remove_device+0x34f/0x420 [ 479.592684][ T30] device_del+0x57a/0x9b0 [ 479.600674][ T30] ? kobject_put+0x272/0x480 [ 479.608341][ T30] ? __pfx_device_del+0x10/0x10 [ 479.626582][ T30] ? kobject_put+0x44d/0x480 [ 479.635524][ T30] usb_disable_device+0x3bf/0x850 [ 479.647270][ T30] usb_disconnect+0x340/0x950 [ 479.659518][ T30] hub_event+0x1ebc/0x5150 [ 479.678360][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 479.685480][ T30] ? __pfx_hub_event+0x10/0x10 [ 479.690288][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 479.705489][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 479.713882][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 479.720628][ T30] ? process_scheduled_works+0x976/0x1850 [ 479.727481][ T30] process_scheduled_works+0xa63/0x1850 [ 479.733646][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.739932][ T30] ? assign_work+0x364/0x3d0 [ 479.755274][ T30] worker_thread+0x870/0xd30 [ 479.766112][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 479.777793][ T30] ? __kthread_parkme+0x169/0x1d0 [ 479.789583][ T30] ? __pfx_worker_thread+0x10/0x10 [ 479.801228][ T30] kthread+0x2f0/0x390 [ 479.812597][ T30] ? __pfx_worker_thread+0x10/0x10 [ 479.818336][ T30] ? __pfx_kthread+0x10/0x10 [ 479.823434][ T30] ret_from_fork+0x4b/0x80 [ 479.828011][ T30] ? __pfx_kthread+0x10/0x10 [ 479.833005][ T30] ret_from_fork_asm+0x1a/0x30 [ 479.840864][ T30] [ 479.847578][ T30] [ 479.847578][ T30] Showing all locks held in the system: [ 479.858052][ T30] 4 locks held by kworker/u8:0/11: [ 479.863825][ T30] 1 lock held by khungtaskd/30: [ 479.868965][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 479.880222][ T30] 6 locks held by kworker/1:1/46: [ 479.885717][ T30] #0: ffff88801e2fed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 479.897716][ T30] #1: ffffc90000b67d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 479.910198][ T30] #2: ffff8880283d5190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 479.922729][ T30] #3: ffff88805ecad190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 479.947546][ T30] #4: ffff8880766bf160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 479.965518][ T30] #5: ffffffff8f6856e8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 479.981326][ T30] 2 locks held by getty/4988: [ 479.986660][ T30] #0: ffff88803214a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 479.998050][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 480.008742][ T30] 6 locks held by kworker/1:3/5281: [ 480.014766][ T30] #0: ffff88801e2fed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 480.027931][ T30] #1: ffffc90003d67d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 480.042356][ T30] #2: ffff888143fe1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 480.055579][ T30] #3: ffff888063e12190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 480.066423][ T30] #4: ffff8880470a4160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 480.081068][ T30] #5: ffffffff8f6856e8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 480.092286][ T30] 6 locks held by kworker/1:4/5282: [ 480.105898][ T30] #0: ffff88801e2fed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 480.122697][ T30] #1: ffffc90003d77d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 480.138723][ T30] #2: ffff8880283d3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 480.148174][ T30] #3: ffff88806e130190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 480.158738][ T30] #4: ffff88806034a160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 480.170573][ T30] #5: ffffffff8f6856e8 (adutux_mutex){+.+.}-{3:3}, at: adu_disconnect+0xca/0x2b0 [ 480.181094][ T30] 1 lock held by syz.4.1442/10896: [ 480.186545][ T30] #0: ffffffff8f6856e8 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870 [ 480.196075][ T30] 1 lock held by syz.4.2307/14376: [ 480.202192][ T30] #0: ffff888143fe1190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770 [ 480.211695][ T30] 1 lock held by syz.2.2314/14390: [ 480.217864][ T30] #0: ffff8880283d5190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770 [ 480.227207][ T30] 2 locks held by syz.3.2334/14446: [ 480.232579][ T30] [ 480.237355][ T30] ============================================= [ 480.237355][ T30] [ 480.247846][ T30] NMI backtrace for cpu 0 [ 480.252205][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 480.262718][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 480.272779][ T30] Call Trace: [ 480.276067][ T30] [ 480.278991][ T30] dump_stack_lvl+0x241/0x360 [ 480.283672][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.288861][ T30] ? __pfx__printk+0x10/0x10 [ 480.293455][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 480.298392][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 480.303846][ T30] ? _printk+0xd5/0x120 [ 480.308012][ T30] ? __pfx__printk+0x10/0x10 [ 480.312602][ T30] ? __wake_up_klogd+0xcc/0x110 [ 480.317449][ T30] ? __pfx__printk+0x10/0x10 [ 480.322038][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 480.327059][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 480.333033][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 480.339009][ T30] watchdog+0xff4/0x1040 [ 480.343256][ T30] ? watchdog+0x1ea/0x1040 [ 480.347673][ T30] ? __pfx_watchdog+0x10/0x10 [ 480.352340][ T30] kthread+0x2f0/0x390 [ 480.356405][ T30] ? __pfx_watchdog+0x10/0x10 [ 480.361086][ T30] ? __pfx_kthread+0x10/0x10 [ 480.365676][ T30] ret_from_fork+0x4b/0x80 [ 480.370102][ T30] ? __pfx_kthread+0x10/0x10 [ 480.374689][ T30] ret_from_fork_asm+0x1a/0x30 [ 480.379459][ T30] [ 480.383005][ T30] Sending NMI from CPU 0 to CPUs 1: [ 480.388616][ C1] NMI backtrace for cpu 1 [ 480.388629][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 480.388649][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 480.388660][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 480.388685][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x37d/0x780 [ 480.388710][ C1] Code: 64 24 10 49 8d 9c 24 e0 0a 00 00 49 81 c4 00 0b 00 00 45 31 ed 49 83 fd 31 0f 83 a1 00 00 00 4c 89 e0 48 c1 e8 03 0f b6 04 10 <84> c0 75 50 8b 43 20 a9 00 00 04 00 74 28 31 d2 a9 00 00 03 00 0f [ 480.388724][ C1] RSP: 0018:ffffc90000117960 EFLAGS: 00000806 [ 480.388739][ C1] RAX: 0000000000000000 RBX: ffff88801ce864e0 RCX: ffffffff8170ce6a [ 480.388751][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff942c7868 [ 480.388763][ C1] RBP: ffffc90000117a08 R08: ffffffff942c786f R09: 1ffffffff2858f0d [ 480.388777][ C1] R10: dffffc0000000000 R11: fffffbfff2858f0e R12: ffff88801ce86500 [ 480.388790][ C1] R13: 0000000000000000 R14: ffff88801ce864d8 R15: 1ffff110039d0c9b [ 480.388802][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 480.388816][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.388829][ C1] CR2: 0000000020234030 CR3: 0000000027bd8000 CR4: 00000000003526f0 [ 480.388844][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 480.388854][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 480.388865][ C1] Call Trace: [ 480.388871][ C1] [ 480.388879][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 480.388898][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 480.388918][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 480.388941][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 480.388960][ C1] ? nmi_handle+0x14f/0x5a0 [ 480.388976][ C1] ? nmi_handle+0x2a/0x5a0 [ 480.388993][ C1] ? lockdep_hardirqs_on_prepare+0x37d/0x780 [ 480.389013][ C1] ? default_do_nmi+0x63/0x160 [ 480.389032][ C1] ? exc_nmi+0x123/0x1f0 [ 480.389049][ C1] ? end_repeat_nmi+0xf/0x53 [ 480.389067][ C1] ? mark_lock+0x9a/0x360 [ 480.389083][ C1] ? lockdep_hardirqs_on_prepare+0x37d/0x780 [ 480.389103][ C1] ? lockdep_hardirqs_on_prepare+0x37d/0x780 [ 480.389125][ C1] ? lockdep_hardirqs_on_prepare+0x37d/0x780 [ 480.389145][ C1] [ 480.389151][ C1] [ 480.389158][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 480.389180][ C1] ? rcu_is_watching+0x15/0xb0 [ 480.389199][ C1] trace_hardirqs_on+0x28/0x40 [ 480.389217][ C1] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 480.389238][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 480.389258][ C1] ? kcov_remote_stop+0x180/0x6e0 [ 480.389276][ C1] ? kcov_remote_stop+0x78/0x6e0 [ 480.389293][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 480.389315][ C1] skb_dequeue+0x113/0x150 [ 480.389336][ C1] ieee80211_iface_work+0x281/0xf20 [ 480.389360][ C1] cfg80211_wiphy_work+0x2db/0x490 [ 480.389377][ C1] ? process_scheduled_works+0x976/0x1850 [ 480.389398][ C1] process_scheduled_works+0xa63/0x1850 [ 480.389426][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 480.389447][ C1] ? assign_work+0x364/0x3d0 [ 480.389468][ C1] worker_thread+0x870/0xd30 [ 480.389491][ C1] ? __kthread_parkme+0x169/0x1d0 [ 480.389512][ C1] ? __pfx_worker_thread+0x10/0x10 [ 480.389531][ C1] kthread+0x2f0/0x390 [ 480.389552][ C1] ? __pfx_worker_thread+0x10/0x10 [ 480.389570][ C1] ? __pfx_kthread+0x10/0x10 [ 480.389586][ C1] ret_from_fork+0x4b/0x80 [ 480.389605][ C1] ? __pfx_kthread+0x10/0x10 [ 480.389620][ C1] ret_from_fork_asm+0x1a/0x30 [ 480.389644][ C1] [ 480.803281][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 480.810215][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 480.820722][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 480.830775][ T30] Call Trace: [ 480.834048][ T30] [ 480.836993][ T30] dump_stack_lvl+0x241/0x360 [ 480.841686][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.846877][ T30] ? __pfx__printk+0x10/0x10 [ 480.851460][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 480.857443][ T30] ? vscnprintf+0x5d/0x90 [ 480.861786][ T30] panic+0x349/0x880 [ 480.865692][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 480.871850][ T30] ? __pfx_panic+0x10/0x10 [ 480.876266][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 480.881628][ T30] ? __irq_work_queue_local+0x137/0x410 [ 480.887175][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 480.892540][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 480.898686][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 480.904831][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 480.910975][ T30] watchdog+0x1033/0x1040 [ 480.915299][ T30] ? watchdog+0x1ea/0x1040 [ 480.919737][ T30] ? __pfx_watchdog+0x10/0x10 [ 480.924406][ T30] kthread+0x2f0/0x390 [ 480.928466][ T30] ? __pfx_watchdog+0x10/0x10 [ 480.933149][ T30] ? __pfx_kthread+0x10/0x10 [ 480.937730][ T30] ret_from_fork+0x4b/0x80 [ 480.942140][ T30] ? __pfx_kthread+0x10/0x10 [ 480.946721][ T30] ret_from_fork_asm+0x1a/0x30 [ 480.951493][ T30] [ 480.954786][ T30] Kernel Offset: disabled [ 480.959107][ T30] Rebooting in 86400 seconds..