last executing test programs: 1m44.209482272s ago: executing program 4 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@empty, 0x4e23, 0x100, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x88, r1, r2}, {0xfffffffffffffff9, 0x4, 0x2, 0x401, 0x6, 0xb, 0x0, 0x9}, {0x5, 0x6dc, 0x5, 0x1}, 0xb, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x0, 0x1, 0x9, 0x6f9f, 0x0, 0x2}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000500), 0xffffffffffffff2f, 0x82) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x2d, 0x2c, 0xfffffffc, 0x8019, 0xb00, 0x7ffd, 0x6, 0xf4, 0xffffffffffffffff}}) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x51, 0x1, 0x9, 0x14, 0x1, 0x7, 0x7f, 0x3, 0x7, 0x9, 0x1, 0x3, 0x8}, 0xe) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100000000000800030001eeff00ffefdafd6f64e3b37eb1b544c3f1c910dcbabcc0"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x22a, 0x3, 0x6}, &(0x7f0000000080)=0x10) 1m25.821844592s ago: executing program 4 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@empty, 0x4e23, 0x100, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x88, r1, r2}, {0xfffffffffffffff9, 0x4, 0x2, 0x401, 0x6, 0xb, 0x0, 0x9}, {0x5, 0x6dc, 0x5, 0x1}, 0xb, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x0, 0x1, 0x9, 0x6f9f, 0x0, 0x2}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000500), 0xffffffffffffff2f, 0x82) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x2d, 0x2c, 0xfffffffc, 0x8019, 0xb00, 0x7ffd, 0x6, 0xf4, 0xffffffffffffffff}}) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x51, 0x1, 0x9, 0x14, 0x1, 0x7, 0x7f, 0x3, 0x7, 0x9, 0x1, 0x3, 0x8}, 0xe) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100000000000800030001eeff00ffefdafd6f64e3b37eb1b544c3f1c910dcbabcc0"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x22a, 0x3, 0x6}, &(0x7f0000000080)=0x10) 1m6.383688338s ago: executing program 4 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@empty, 0x4e23, 0x100, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x88, r1, r2}, {0xfffffffffffffff9, 0x4, 0x2, 0x401, 0x6, 0xb, 0x0, 0x9}, {0x5, 0x6dc, 0x5, 0x1}, 0xb, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x0, 0x1, 0x9, 0x6f9f, 0x0, 0x2}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000500), 0xffffffffffffff2f, 0x82) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x2d, 0x2c, 0xfffffffc, 0x8019, 0xb00, 0x7ffd, 0x6, 0xf4, 0xffffffffffffffff}}) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x51, 0x1, 0x9, 0x14, 0x1, 0x7, 0x7f, 0x3, 0x7, 0x9, 0x1, 0x3, 0x8}, 0xe) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100000000000800030001eeff00ffefdafd6f64e3b37eb1b544c3f1c910dcbabcc0"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x22a, 0x3, 0x6}, &(0x7f0000000080)=0x10) 45.091352052s ago: executing program 4 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@empty, 0x4e23, 0x100, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x88, r1, r2}, {0xfffffffffffffff9, 0x4, 0x2, 0x401, 0x6, 0xb, 0x0, 0x9}, {0x5, 0x6dc, 0x5, 0x1}, 0xb, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x0, 0x1, 0x9, 0x6f9f, 0x0, 0x2}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000500), 0xffffffffffffff2f, 0x82) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x2d, 0x2c, 0xfffffffc, 0x8019, 0xb00, 0x7ffd, 0x6, 0xf4, 0xffffffffffffffff}}) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x51, 0x1, 0x9, 0x14, 0x1, 0x7, 0x7f, 0x3, 0x7, 0x9, 0x1, 0x3, 0x8}, 0xe) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100000000000800030001eeff00ffefdafd6f64e3b37eb1b544c3f1c910dcbabcc0"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x22a, 0x3, 0x6}, &(0x7f0000000080)=0x10) 24.290018461s ago: executing program 4 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@empty, 0x4e23, 0x100, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x88, r1, r2}, {0xfffffffffffffff9, 0x4, 0x2, 0x401, 0x6, 0xb, 0x0, 0x9}, {0x5, 0x6dc, 0x5, 0x1}, 0xb, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x0, 0x1, 0x9, 0x6f9f, 0x0, 0x2}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000500), 0xffffffffffffff2f, 0x82) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x2d, 0x2c, 0xfffffffc, 0x8019, 0xb00, 0x7ffd, 0x6, 0xf4, 0xffffffffffffffff}}) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x51, 0x1, 0x9, 0x14, 0x1, 0x7, 0x7f, 0x3, 0x7, 0x9, 0x1, 0x3, 0x8}, 0xe) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100000000000800030001eeff00ffefdafd6f64e3b37eb1b544c3f1c910dcbabcc0"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x22a, 0x3, 0x6}, &(0x7f0000000080)=0x10) 10.369179568s ago: executing program 4 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@empty, 0x4e23, 0x100, 0x4e20, 0x800, 0xa, 0x80, 0xa0, 0x88, r1, r2}, {0xfffffffffffffff9, 0x4, 0x2, 0x401, 0x6, 0xb, 0x0, 0x9}, {0x5, 0x6dc, 0x5, 0x1}, 0xb, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3506, 0x0, 0x1, 0x9, 0x6f9f, 0x0, 0x2}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$dri(&(0x7f0000000500), 0xffffffffffffff2f, 0x82) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{}, {}]}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x11, 0x1, {0x2d, 0x2c, 0xfffffffc, 0x8019, 0xb00, 0x7ffd, 0x6, 0xf4, 0xffffffffffffffff}}) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x51, 0x1, 0x9, 0x14, 0x1, 0x7, 0x7f, 0x3, 0x7, 0x9, 0x1, 0x3, 0x8}, 0xe) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100000000000800030001eeff00ffefdafd6f64e3b37eb1b544c3f1c910dcbabcc0"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x22a, 0x3, 0x6}, &(0x7f0000000080)=0x10) 7.96132445s ago: executing program 1 (id=1184): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = fanotify_init(0x40, 0x400) fanotify_mark(r1, 0x2, 0x1019, 0xffffffffffffffff, 0x0) 7.749758542s ago: executing program 1 (id=1187): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000180001800800000000000000ac1414bb08000200ac0314bb18000280"], 0x44}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000240), 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "4620f63a4e575c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setfsgid(0x0) r4 = getuid() setreuid(0xee00, r4) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x2004000, &(0x7f00000031c0)=ANY=[@ANYBLOB='mode=00000000000000000000001,', @ANYRESHEX=0x0, @ANYBLOB=',grpquota_inode_h{rdlimit=57,nr_bloc\bs=--9x1e,n', @ANYRESHEX=0x0, @ANYBLOB=',context=unconfined_u,mask=MAY_WRITE,fsmagic=0x0000000000001000,fowner>', @ANYRESDEC=r4, @ANYBLOB=',dont_appraise,fsname=/dev/input']) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x400}, 0x0, &(0x7f0000000040)) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000d00), 0x4) sendto$inet(r3, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r3, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) 7.440748146s ago: executing program 0 (id=1188): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x22, 0x2, 0x3) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x7d, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 5.756573876s ago: executing program 0 (id=1189): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fallocate(r4, 0x44, 0x6, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r5, r5, 0x0, 0x40008) close_range(r5, 0xffffffffffffffff, 0x0) 5.649773683s ago: executing program 3 (id=1190): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="865d5cef", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0xf000}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000100)={@remote, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x7, 0x65d4, 0xd, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x40, 0x10, 0x5, 0x4}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="150200fe0f0000002000128009000100766c616e000000001000028006000100000000000400038008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x50}, 0x1, 0xba01, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x218, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) 5.551416408s ago: executing program 1 (id=1191): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r0 = io_uring_setup(0x4e8f, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x19, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f3aaaaaabaaaaa08004500001c"], 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x4f) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{}, {}, @broadcast}, 0x1, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) socket(0x27, 0x2, 0x4) 4.551133379s ago: executing program 3 (id=1193): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x55}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f0000000bc0)="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", 0x259}, {&(0x7f0000000fc0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf03", 0x2e}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0xffffffffffffff75) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) iopl(0x3) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x1000000}, 0x18) iopl(0x60) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0xb044, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0xfc, 0xd7, 0x5, 0x24, @time={0x5a7, 0x3}, {0xb0, 0x1}, {0x3}, @note={0x1, 0x6, 0x4, 0x1, 0xf076}}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) 4.401782688s ago: executing program 2 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000000700)=""/152, 0x98}], 0x6, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/188, 0xbc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/155, 0x9b}, {&(0x7f00000009c0)=""/254, 0xfe}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x8, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b0000000300000004000006040000000700000000000000030000000000000000000000000000000000000000000000000000000000000d00000000001706eb9a000005000000000000002e61615f2e"], 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001600010000000000000000000a0000000c000080080002"], 0x20}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x4) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000002c0)={0x6, 0x56542df, 0xfff, 0x80080, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5421, &(0x7f0000000b40)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') preadv(r9, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0) 3.56594222s ago: executing program 0 (id=1195): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='omfs\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.289116803s ago: executing program 2 (id=1196): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) read(0xffffffffffffffff, &(0x7f0000001a00)=""/177, 0xb1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r4, &(0x7f0000003400), 0x0, 0x4051) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0xf, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x1000000000000) socket$kcm(0x10, 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=@target={'target ', {'PCI:', '4', ':', '4', ':', '10', '.', 'f'}}, 0x14) 3.149986272s ago: executing program 3 (id=1197): r0 = socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc60040003", 0x17}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.957805875s ago: executing program 3 (id=1198): socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000001380)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x7) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) 2.076230181s ago: executing program 1 (id=1199): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000600)=0x1001600, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/73, 0x49, 0x0, &(0x7f0000000440)=""/166, 0xa6}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x73c, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x0, 0x7, 0x6, 0x8, 0x28000000}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4aefe3bebac5152f}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r3, @fallback=0x2a, r4, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x9, 0x5, 0x5}, 0x10, r5, r0, 0x0, &(0x7f0000000580)=[r0], 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, 0x0, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x181003) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r10, 0xc0984124, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) shutdown(r6, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000640), 0x8, 0x200) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r11}, &(0x7f0000000140)=0x8) 2.001945429s ago: executing program 3 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = io_uring_setup(0x2375, &(0x7f0000000000)={0x0, 0x0, 0x80}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{0x0}, {0x0}], &(0x7f0000000180)=[0x0, 0x1f], 0x2}, 0x20) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x68040200) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000380)={'raw\x00', 0x0, [0x0, 0x0, 0x0, 0xfffffffc]}, &(0x7f0000003240)=0x54) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.887059062s ago: executing program 1 (id=1201): openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161042, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getqdisc={0x3c, 0x26, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {0xc}, {0xc, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x200}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x10d, 0xf4, 0xfffffffffffffffe, &(0x7f0000000000)=0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x6, 0x0, 0x3, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x644, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0xc69, &(0x7f0000000140)={0x0, 0x72ac, 0x1, 0x3, 0x307, 0x0, r5}, &(0x7f00000001c0), &(0x7f0000000200)) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x10}}, {@uname={'uname', 0x3d, '{\x01?\xf9\xa2\xb2c\xact-\x95\xa4\xff&/},!a\x10\xdb\x91,0\x91\xed\xe8b\xde|*Es\xda\xe5\xe0\xc1\xdaP\"\x1b\xfc\xa9\xfb\x9b\xe7+\xfe\xfd\xb3|D\x8a\xa2\'d]\xa7\x03\x8a\xc8*O\xd0\xf7\xbfj\xe6/B`W\x8f\x15\x1f\xe1d\x9c;\xe7\xe43\x03\xeeV\xe4\x83\xca\x9dG\xd9\x94\x9e\xe9ji\x8d\x7f\xc9N\x04\xe3\xadq\xdaV\bhw\x95\x87z\xb6U'}}, {@dfltuid={'dfltuid', 0x3d, r8}}, {@cache_readahead}, {@access_any}]}}) 1.578726207s ago: executing program 2 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{0x21, 0x0, 0x3e7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x9590f6cc3aa711f2) 1.42961254s ago: executing program 2 (id=1203): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="865d5cef", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0xf000}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000100)={@remote, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x7, 0x65d4, 0xd, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x40, 0x10, 0x5, 0x4}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="150200fe0f0000002000128009000100766c616e000000001000028006000100000000000400038008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x50}, 0x1, 0xba01, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x218, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) 1.310740216s ago: executing program 2 (id=1204): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000300), 0xc3, 0x101400) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0), 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001140)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280"], 0x78}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r6, &(0x7f0000001080)='\b\x00', 0xfffffffffffffea6, 0x48000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%((@\x00') r7 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r7, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r7, &(0x7f0000cfb000/0x3000)=nil, 0x2000) 1.231206465s ago: executing program 1 (id=1205): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fallocate(r4, 0x44, 0x6, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r5, r5, 0x0, 0x40008) close_range(r5, 0xffffffffffffffff, 0x0) 860.797785ms ago: executing program 2 (id=1206): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x24341) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x28007) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x1132ccf3, 0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) dup(r9) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='bfs\x00', 0x0, 0x0) r10 = syz_open_procfs(r5, &(0x7f0000000500)='smaps\x00') syz_fuse_handle_req(r10, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) 860.41582ms ago: executing program 3 (id=1207): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @multicast1}}) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8b2}}]}) syz_usb_connect$uac1(0x1, 0xba, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0xb, 0xa0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0x9}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x5, 0x5, [0x7, 0x5, 0x3, 0x7, 0x4], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x0, 0x24, 0x2, 0x2, 0x3, 0x2, 0x6, "1e85"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x6, 0x6, "63bda1e50f6f0448c3"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x7, 0x7, ':z'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x8, 0x4, {0x7, 0x25, 0x1, 0x0, 0x9, 0xfc7a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xff80, 0x721, 0x1, "efddcac71a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x5, 0x90, {0x7, 0x25, 0x1, 0x80, 0x10, 0x2}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0xe9, 0x4a, 0x20, 0x8}, 0x51, &(0x7f0000000280)=ANY=[@ANYBLOB="050f510005281003303f3d5c9130878036ef98e27de34cb9b6f535c79c496dac5f468eb948e859bfe0f9ec12b4cb9fcacdcabdf277ccdc7eb1fbad1c0a1003000a32a782905cc933bbf69b6ab80000f7090003100b03100b1410040da3e36935"], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140a}}, {0x56, &(0x7f00000001c0)=@string={0x62, 0x3, "6dd2278e5a3dc54a0d56c3f3b99593ec8297268344d20c778e2ffbc46e3c27ebb11acc4f54687c324c25f01e74f93257554fd426ca0010c96b7b17095dbaf3c2bfdf0d015c82ec8e91176283bd40fdbc1aac70b8959c5ae9a01c4a6dace9e9bf"}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) 462.468595ms ago: executing program 0 (id=1208): mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xb) 54.098123ms ago: executing program 0 (id=1209): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r0, 0x0, 0x6f) 0s ago: executing program 0 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000"], 0xd4}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) write$smackfs_netlabel(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='00000000000000062410.00000000000000000003.00000000000000028916.000/000000@'], 0x6f) kernel console output (not intermixed with test programs): device number 39 [ 457.592526][ T6733] bridge_slave_1: left allmulticast mode [ 457.598263][ T6733] bridge_slave_1: left promiscuous mode [ 457.608275][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.617555][ T6733] bridge_slave_0: left allmulticast mode [ 457.623891][ T6733] bridge_slave_0: left promiscuous mode [ 457.629606][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.021955][ T6733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.040643][ T6733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.052810][ T6733] bond0 (unregistering): Released all slaves [ 458.313473][ T6733] hsr_slave_0: left promiscuous mode [ 458.319638][ T6733] hsr_slave_1: left promiscuous mode [ 458.331050][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.338561][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.353418][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.364819][ T6733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.397675][ T6733] veth1_macvtap: left promiscuous mode [ 458.407614][ T6733] veth0_macvtap: left promiscuous mode [ 458.415702][ T6733] veth1_vlan: left promiscuous mode [ 458.425374][ T6733] veth0_vlan: left promiscuous mode [ 459.313335][T10956] netlink: 'syz.1.950': attribute type 9 has an invalid length. [ 459.327308][T10956] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.950'. [ 459.403425][ T6733] team0 (unregistering): Port device team_slave_1 removed [ 459.521797][ T6733] team0 (unregistering): Port device team_slave_0 removed [ 459.553247][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.588615][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.610135][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.622300][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.632487][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 459.641759][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.992814][ T29] audit: type=1400 audit(1731617775.160:255): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=10964 comm="syz.3.951" [ 461.549325][ T29] audit: type=1326 audit(1731617776.710:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.585193][ T29] audit: type=1326 audit(1731617776.710:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.610205][ T29] audit: type=1326 audit(1731617776.710:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.638178][ T29] audit: type=1326 audit(1731617776.710:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.669838][ T29] audit: type=1326 audit(1731617776.710:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.720263][ T29] audit: type=1326 audit(1731617776.710:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.742447][ T5852] Bluetooth: hci3: command tx timeout [ 461.775801][ T29] audit: type=1326 audit(1731617776.710:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.839726][ T29] audit: type=1326 audit(1731617776.710:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.861330][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.877147][ T29] audit: type=1326 audit(1731617776.710:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 461.898732][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.915016][ T29] audit: type=1326 audit(1731617776.710:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10976 comm="syz.0.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 462.192017][T10958] netlink: 'syz.1.950': attribute type 9 has an invalid length. [ 462.199788][T10958] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.950'. [ 462.876348][T10962] chnl_net:caif_netlink_parms(): no params data found [ 463.578475][T11022] netlink: 'syz.1.961': attribute type 3 has an invalid length. [ 463.596482][T11022] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.961'. [ 463.608111][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.621141][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.655134][T10962] bridge_slave_0: entered allmulticast mode [ 463.682895][T10962] bridge_slave_0: entered promiscuous mode [ 463.789313][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.822942][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.830281][ T5852] Bluetooth: hci3: command tx timeout [ 463.839913][T10962] bridge_slave_1: entered allmulticast mode [ 463.850714][T10962] bridge_slave_1: entered promiscuous mode [ 464.027850][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.408708][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.178360][T10962] team0: Port device team_slave_0 added [ 465.412289][T10962] team0: Port device team_slave_1 added [ 465.792096][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.805022][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.833588][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.847484][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.900250][ T5852] Bluetooth: hci3: command tx timeout [ 465.932951][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.977434][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.003415][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.049580][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.107517][T10962] hsr_slave_0: entered promiscuous mode [ 466.122464][T10962] hsr_slave_1: entered promiscuous mode [ 466.407500][ T5889] IPVS: starting estimator thread 0... [ 466.453542][T11065] netlink: 'syz.0.969': attribute type 9 has an invalid length. [ 466.467351][T11065] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.969'. [ 466.611210][T11063] IPVS: using max 17 ests per chain, 40800 per kthread [ 466.710531][T11067] netlink: 'syz.0.969': attribute type 9 has an invalid length. [ 466.718405][T11067] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.969'. [ 466.870431][ T5889] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 467.040197][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 467.047828][ T5889] usb 2-1: config 1 has an invalid interface number: 201 but max is 2 [ 467.056616][ T5889] usb 2-1: config 1 has an invalid interface number: 57 but max is 2 [ 467.072486][ T5889] usb 2-1: config 1 has an invalid interface number: 46 but max is 2 [ 467.102598][ T5889] usb 2-1: config 1 has no interface number 0 [ 467.122380][ T5889] usb 2-1: config 1 has no interface number 1 [ 467.147840][ T5889] usb 2-1: config 1 has no interface number 2 [ 467.165524][ T5889] usb 2-1: config 1 interface 201 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 467.196767][ T5889] usb 2-1: config 1 interface 201 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 467.248977][ T5889] usb 2-1: config 1 interface 201 altsetting 7 endpoint 0xA has invalid maxpacket 511, setting to 64 [ 467.295551][ T5889] usb 2-1: config 1 interface 57 altsetting 64 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 467.349427][ T5889] usb 2-1: config 1 interface 57 altsetting 64 bulk endpoint 0xC has invalid maxpacket 32 [ 467.373664][ T5889] usb 2-1: config 1 interface 57 altsetting 64 endpoint 0xB has invalid maxpacket 96, setting to 64 [ 467.391353][T11079] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.417709][ T5889] usb 2-1: config 1 interface 57 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 467.480153][ T5889] usb 2-1: config 1 interface 46 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 467.496060][ T5889] usb 2-1: config 1 interface 46 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 467.561137][ T5889] usb 2-1: config 1 interface 46 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 467.615802][ T5889] usb 2-1: config 1 interface 46 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 467.640148][ T5889] usb 2-1: config 1 interface 46 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 467.662225][ T5889] usb 2-1: config 1 interface 46 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 467.677749][ T5889] usb 2-1: config 1 interface 46 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 467.688689][ T5889] usb 2-1: config 1 interface 46 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 467.699662][ T5889] usb 2-1: config 1 interface 201 has no altsetting 0 [ 467.706817][ T5889] usb 2-1: config 1 interface 57 has no altsetting 0 [ 467.713882][ T5889] usb 2-1: config 1 interface 46 has no altsetting 0 [ 467.758994][ T5889] usb 2-1: New USB device found, idVendor=0db0, idProduct=3822, bcdDevice=6a.34 [ 467.771190][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.790111][ T5889] usb 2-1: Product: င [ 467.805869][ T5889] usb 2-1: Manufacturer: à¡  [ 467.810853][ T5889] usb 2-1: SerialNumber: င [ 467.828711][ T5889] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 467.850808][ T5889] usb 2-1: no configuration chosen from 1 choice [ 467.990367][ T5852] Bluetooth: hci3: command tx timeout [ 468.040072][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 468.040121][ T29] audit: type=1400 audit(1731617783.200:296): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=11090 comm="syz.3.976" [ 469.818301][T11113] netlink: 'syz.3.981': attribute type 3 has an invalid length. [ 470.153632][T10962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.195063][T10962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.243692][T10962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 470.290686][T10962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 470.292908][T11125] netlink: 'syz.3.983': attribute type 3 has an invalid length. [ 470.305432][T11125] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.983'. [ 470.528652][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.592369][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.643219][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.650461][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.740957][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.748206][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.911661][ T5889] usb 2-1: USB disconnect, device number 38 [ 471.038764][T11144] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 471.096822][T11144] team0: Device veth0_macvtap failed to register rx_handler [ 471.183974][T11148] IPVS: Unknown mcast interface: vlan0 [ 471.522687][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.658744][T11165] netlink: 56 bytes leftover after parsing attributes in process `syz.0.988'. [ 471.668438][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'. [ 471.678021][T11165] netlink: 43 bytes leftover after parsing attributes in process `syz.0.988'. [ 471.687536][T11165] netlink: 'syz.0.988': attribute type 2 has an invalid length. [ 471.697678][T11165] netlink: 43 bytes leftover after parsing attributes in process `syz.0.988'. [ 472.251168][ T29] audit: type=1400 audit(1731617787.410:297): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=11168 comm="syz.2.991" [ 472.251317][ T5889] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 472.887569][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.898704][ T5889] usb 1-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 472.924605][T11187] netlink: 'syz.2.995': attribute type 21 has an invalid length. [ 472.932687][T11187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.995'. [ 472.942325][T11187] netlink: 'syz.2.995': attribute type 4 has an invalid length. [ 472.943692][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.950927][T11187] netlink: 'syz.2.995': attribute type 3 has an invalid length. [ 472.966911][T11187] netlink: 3 bytes leftover after parsing attributes in process `syz.2.995'. [ 473.068951][ T5889] usb 1-1: config 0 descriptor?? [ 473.084060][ T5889] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 473.186442][T10962] veth0_vlan: entered promiscuous mode [ 473.207751][T10962] veth1_vlan: entered promiscuous mode [ 473.262636][T10962] veth0_macvtap: entered promiscuous mode [ 473.275548][T10962] veth1_macvtap: entered promiscuous mode [ 473.300804][ T5926] usb 1-1: USB disconnect, device number 29 [ 473.354861][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.368383][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.381768][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.392778][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.403450][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.414407][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.425231][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.436738][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.451113][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.474238][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.493226][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.509270][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.525849][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.536574][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.553952][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.566627][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.584487][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.602314][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.623575][T10962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.639086][T10962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.649716][T10962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.666725][T10962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.915888][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.939165][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.009392][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.047296][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.582509][ T29] audit: type=1326 audit(1731617790.750:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.431330][ T29] audit: type=1326 audit(1731617790.750:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.618102][ T29] audit: type=1326 audit(1731617790.750:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.640704][ T29] audit: type=1326 audit(1731617790.750:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.663218][ T29] audit: type=1326 audit(1731617790.750:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.685296][ T29] audit: type=1326 audit(1731617790.750:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.707165][ T29] audit: type=1326 audit(1731617790.750:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.729111][ T29] audit: type=1326 audit(1731617790.750:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.751578][ T29] audit: type=1326 audit(1731617790.750:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.773860][ T29] audit: type=1326 audit(1731617790.750:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11241 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 476.837541][ T3445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.936367][ T3445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.149093][ T3445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.226964][ T3445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.396466][ T3445] bridge_slave_1: left allmulticast mode [ 477.412653][ T3445] bridge_slave_1: left promiscuous mode [ 477.418473][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.437701][ T3445] bridge_slave_0: left allmulticast mode [ 477.444518][ T3445] bridge_slave_0: left promiscuous mode [ 477.451744][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.899700][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.913241][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.923970][ T3445] bond0 (unregistering): Released all slaves [ 478.186147][ T3445] hsr_slave_0: left promiscuous mode [ 478.196202][ T3445] hsr_slave_1: left promiscuous mode [ 478.203694][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.216234][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.226325][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.242876][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.277018][ T3445] veth1_macvtap: left promiscuous mode [ 478.286190][ T3445] veth0_macvtap: left promiscuous mode [ 478.297218][ T3445] veth1_vlan: left promiscuous mode [ 478.306164][ T3445] veth0_vlan: left promiscuous mode [ 479.233332][T11308] syz.3.1007: attempt to access beyond end of device [ 479.233332][T11308] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 479.303227][T11311] xt_l2tp: v2 doesn't support IP mode [ 479.910913][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.921771][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.934907][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.956234][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.973561][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 479.981335][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.415830][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 480.953883][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 481.888829][T11335] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1013'. [ 482.049515][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 482.049537][ T29] audit: type=1326 audit(1731617797.210:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 482.091000][ T5142] Bluetooth: hci3: command tx timeout [ 482.283482][ T29] audit: type=1326 audit(1731617797.210:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 482.619906][ T29] audit: type=1326 audit(1731617797.270:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 482.842971][ T29] audit: type=1326 audit(1731617797.300:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 482.916212][ T29] audit: type=1326 audit(1731617797.300:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 482.962005][T11321] chnl_net:caif_netlink_parms(): no params data found [ 482.988473][ T29] audit: type=1326 audit(1731617797.310:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 483.264168][ T29] audit: type=1326 audit(1731617797.320:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 483.290441][ T5889] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 483.298399][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 483.327850][ T29] audit: type=1326 audit(1731617797.320:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 483.349993][ T29] audit: type=1326 audit(1731617797.320:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 483.372280][ T29] audit: type=1326 audit(1731617797.320:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11346 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 483.460771][ T5889] usb 3-1: device descriptor read/64, error -32 [ 483.534733][T11321] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.556344][T11321] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.740367][T11321] bridge_slave_0: entered allmulticast mode [ 483.750163][T11321] bridge_slave_0: entered promiscuous mode [ 483.831870][T11375] syz.1.1020: attempt to access beyond end of device [ 483.831870][T11375] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 483.906460][T11377] xt_l2tp: v2 doesn't support IP mode [ 484.520348][ T5889] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 484.528463][T11321] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.556879][ T5142] Bluetooth: hci3: command tx timeout [ 484.591083][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.598543][T11321] bridge_slave_1: entered allmulticast mode [ 484.606702][T11321] bridge_slave_1: entered promiscuous mode [ 484.971924][ T5889] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 484.980115][ T5889] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 484.989154][ T5889] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 485.010182][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.048405][ T5889] usb 3-1: config 0 has no interface number 0 [ 485.300655][T11321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.616860][T11321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.647249][ T5889] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.720624][ T5889] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 485.774950][ T5889] usb 3-1: config 0 interface 8 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 485.815539][ T5889] usb 3-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 485.861691][T11321] team0: Port device team_slave_0 added [ 485.888306][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.907751][T11321] team0: Port device team_slave_1 added [ 485.921384][ T5889] usb 3-1: config 0 descriptor?? [ 485.927078][T11357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 486.171961][ T5889] usb 3-1: USB disconnect, device number 41 [ 486.206617][T11321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.250185][ T8] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 486.261713][ T5886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 486.265030][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.326984][T11321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.373193][T11321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.397842][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.410471][ T8] usb 1-1: device descriptor read/64, error -71 [ 486.431802][ T8434] udevd[8434]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.462616][T11321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.473487][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 486.480615][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 486.488242][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.514434][ T5886] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.539674][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.567993][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.582403][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 486.590545][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.620508][ T5142] Bluetooth: hci3: command tx timeout [ 486.625902][ T5886] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.686352][T11321] hsr_slave_0: entered promiscuous mode [ 486.699149][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.772769][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.773055][ T8] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 486.899881][T11321] hsr_slave_1: entered promiscuous mode [ 486.981547][ T5886] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 487.077775][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 487.123654][ T5886] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.442899][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 487.520111][ T5886] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 487.520649][ T8] usb 1-1: device descriptor read/64, error -71 [ 487.611245][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 487.611266][ T29] audit: type=1326 audit(1731617802.770:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 487.613595][ T5886] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 487.617429][ T29] audit: type=1326 audit(1731617802.770:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 487.639474][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.671232][ T8] usb usb1-port1: attempt power cycle [ 487.678263][ T5886] usb 2-1: Product: syz [ 487.688440][ T5886] usb 2-1: Manufacturer: syz [ 487.693201][ T5886] usb 2-1: SerialNumber: syz [ 487.842364][T11425] SET target dimension over the limit! [ 488.291746][ T8] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 488.425002][ T29] audit: type=1326 audit(1731617802.770:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.447362][ T29] audit: type=1326 audit(1731617802.770:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.454252][ T8] usb 1-1: device descriptor read/8, error -71 [ 488.469421][ T29] audit: type=1326 audit(1731617802.780:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.497590][ T29] audit: type=1326 audit(1731617802.780:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.519875][ T29] audit: type=1326 audit(1731617802.780:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.543874][ T29] audit: type=1326 audit(1731617802.780:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.565984][ T29] audit: type=1326 audit(1731617802.780:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.587935][ T29] audit: type=1326 audit(1731617802.780:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11419 comm="syz.3.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f890b97e719 code=0x7ffc0000 [ 488.655721][ T5886] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 488.677709][ T5886] usb 2-1: USB disconnect, device number 39 [ 488.706000][ T5142] Bluetooth: hci3: command tx timeout [ 488.766860][ T8] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 488.801020][ T8] usb 1-1: device descriptor read/8, error -71 [ 488.940905][ T8] usb usb1-port1: unable to enumerate USB device [ 489.150442][ T5889] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 489.301903][ T5889] usb 4-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 489.337612][ T5889] usb 4-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 490.051489][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 490.059800][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.068079][ T5889] usb 4-1: Product: syz [ 490.072968][ T5889] usb 4-1: Manufacturer: syz [ 490.077606][ T5889] usb 4-1: SerialNumber: syz [ 490.140221][ T5840] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 490.181641][T11321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.194660][T11321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.222707][T11321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.232794][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 490.245481][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 490.256654][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.256669][T11321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 490.281463][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 490.329516][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 490.349411][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 490.360504][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 490.380875][ T5840] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 490.389420][ T5840] usb 2-1: config 0 has no interface number 0 [ 490.397346][ T5840] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 490.415227][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 490.430210][ T5840] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 490.442698][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.457994][ T5840] usb 2-1: config 0 interface 41 has no altsetting 0 [ 490.468533][T11321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.480164][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 490.489674][ T5840] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 490.510767][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.511334][T11321] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.518839][ T5840] usb 2-1: Product: syz [ 490.518862][ T5840] usb 2-1: Manufacturer: syz [ 490.518882][ T5840] usb 2-1: SerialNumber: syz [ 490.520876][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.539813][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.554572][ T7808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.562068][ T5840] usb 2-1: config 0 descriptor?? [ 490.570759][T11441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 490.579892][T11441] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 490.580210][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 490.605851][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.613160][ T7808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.623631][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 490.639348][ T9] usb 3-1: config 0 has no interface number 0 [ 490.649172][ T8] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 490.659424][T11321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.676555][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 490.686396][T11321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.689984][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 490.707116][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 490.718017][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 490.727972][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.740514][ T9] usb 3-1: Product: syz [ 490.744779][ T9] usb 3-1: Manufacturer: syz [ 490.749459][ T9] usb 3-1: SerialNumber: syz [ 490.759581][ T9] usb 3-1: config 0 descriptor?? [ 490.786845][T11452] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 490.798866][T11452] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 490.822080][T11441] netlink: 'syz.1.1036': attribute type 9 has an invalid length. [ 490.844750][T11441] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1036'. [ 490.943741][T11462] netlink: 'syz.1.1036': attribute type 9 has an invalid length. [ 490.982503][T11462] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1036'. [ 491.109826][ T5840] dm9601 2-1:0.41: probe with driver dm9601 failed with error -71 [ 491.146479][T11452] netlink: 'syz.2.1037': attribute type 9 has an invalid length. [ 491.155000][ T5840] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 491.189192][T11452] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1037'. [ 491.201057][ T5840] usb 2-1: USB disconnect, device number 40 [ 491.302488][T11468] netlink: 'syz.2.1037': attribute type 9 has an invalid length. [ 491.314670][T11321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.350211][T11468] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1037'. [ 491.501059][ T9] dm9601 3-1:0.41: probe with driver dm9601 failed with error -71 [ 491.520657][ T9] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 491.539147][ T9] usb 3-1: USB disconnect, device number 42 [ 491.757881][T11321] veth0_vlan: entered promiscuous mode [ 491.793070][T11321] veth1_vlan: entered promiscuous mode [ 491.865684][T11321] veth0_macvtap: entered promiscuous mode [ 491.885812][ T5889] qmi_wwan 4-1:1.0: skipping garbage [ 491.897011][ T5889] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -22 [ 491.917107][ T5889] usb 4-1: USB disconnect, device number 43 [ 491.935208][T11321] veth1_macvtap: entered promiscuous mode [ 491.970786][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.000293][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.021183][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.036966][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.048590][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.065703][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.084658][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.095443][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.107468][T11321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.117648][T11495] netlink: 'syz.1.1039': attribute type 4 has an invalid length. [ 492.137666][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.158293][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.169306][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.200465][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.220549][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.250157][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.281653][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.331176][ T9] usb 1-1: USB disconnect, device number 34 [ 492.367729][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.503759][T11321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.556580][T11321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.574606][T11321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.593826][T11321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.606036][T11321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.734437][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 492.734455][ T29] audit: type=1326 audit(1731617807.900:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 492.762357][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.140976][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.155313][ T29] audit: type=1326 audit(1731617807.940:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 493.167451][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.209144][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 493.341900][ T29] audit: type=1326 audit(1731617807.970:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 493.612093][ T8406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.635150][ T29] audit: type=1326 audit(1731617807.970:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 493.662134][ T8406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.809877][ T29] audit: type=1326 audit(1731617807.970:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 493.906230][ T29] audit: type=1326 audit(1731617807.970:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 494.004853][ T29] audit: type=1326 audit(1731617807.980:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 494.033722][ T29] audit: type=1326 audit(1731617807.980:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 494.177519][ T29] audit: type=1326 audit(1731617807.980:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 494.260879][ T29] audit: type=1326 audit(1731617807.980:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11510 comm="syz.1.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 494.270536][ T5916] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 494.290814][ T46] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 494.460623][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 494.496453][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 494.503288][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 494.528396][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.550295][ T5916] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 494.564413][ T5916] usb 1-1: config 0 has no interface number 0 [ 494.577831][ T46] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.594785][ T5916] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 494.607086][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.624588][ T5916] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 494.647812][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 494.666636][ T5916] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 494.679952][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 494.692659][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.706846][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.716378][ T5916] usb 1-1: Product: syz [ 494.720774][ T46] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.733434][ T5916] usb 1-1: Manufacturer: syz [ 494.738227][ T5916] usb 1-1: SerialNumber: syz [ 494.743209][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.764153][ T5916] usb 1-1: config 0 descriptor?? [ 494.813641][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 494.875869][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 494.898805][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.940360][ T46] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.980712][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.045160][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.055028][ T8406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.126601][ T46] usb 2-1: string descriptor 0 read error: -22 [ 495.154101][ T46] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 495.167265][ T5916] usb 1-1: USB disconnect, device number 35 [ 495.193234][ T8434] udevd[8434]: setting owner of /dev/bus/usb/001/035 to uid=0, gid=0 failed: No such file or directory [ 495.214084][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.297797][ T46] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 495.401760][ T8434] udevd[8434]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.424399][ T8406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.485976][ T5889] usb 2-1: USB disconnect, device number 41 [ 495.953432][ T8406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.235470][ T8406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.531203][ T8406] bridge_slave_1: left allmulticast mode [ 496.538574][ T8406] bridge_slave_1: left promiscuous mode [ 496.553521][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.566512][ T8406] bridge_slave_0: left allmulticast mode [ 496.572678][ T8406] bridge_slave_0: left promiscuous mode [ 496.578411][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.979359][ T8406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.993024][ T8406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.006597][ T8406] bond0 (unregistering): Released all slaves [ 497.727730][ T5916] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 498.047634][ T5916] usb 3-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 498.100535][ T5916] usb 3-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 498.190752][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.229270][ T5916] usb 3-1: Product: syz [ 498.292342][ T5916] usb 3-1: Manufacturer: syz [ 498.340109][ T5916] usb 3-1: SerialNumber: syz [ 498.380746][ T46] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 498.399892][ T8406] hsr_slave_0: left promiscuous mode [ 498.471391][ T8406] hsr_slave_1: left promiscuous mode [ 498.547699][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.567393][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.570416][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.587115][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 498.592840][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.613363][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.624569][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.632850][ T46] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 498.641583][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 498.649439][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.663876][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.680935][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.690201][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.714627][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.725007][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.735325][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.749097][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.757672][ T8406] veth1_macvtap: left promiscuous mode [ 498.758871][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.764119][ T8406] veth0_macvtap: left promiscuous mode [ 498.792778][ T8406] veth1_vlan: left promiscuous mode [ 498.798176][ T8406] veth0_vlan: left promiscuous mode [ 499.075567][ T46] usb 2-1: GET_CAPABILITIES returned 0 [ 499.087850][ T46] usbtmc 2-1:16.0: can't read capabilities [ 499.276903][ T5889] usb 2-1: USB disconnect, device number 42 [ 499.720932][ T8406] team0 (unregistering): Port device team_slave_1 removed [ 499.802198][ T8406] team0 (unregistering): Port device team_slave_0 removed [ 500.124591][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 500.124620][ T29] audit: type=1326 audit(1731617815.290:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.154057][ T5889] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 500.171233][ T29] audit: type=1326 audit(1731617815.330:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.210212][ T29] audit: type=1326 audit(1731617815.330:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.232588][ T29] audit: type=1326 audit(1731617815.330:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.260155][ T29] audit: type=1326 audit(1731617815.330:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.286879][ T5916] qmi_wwan 3-1:1.0: skipping garbage [ 500.290240][ T29] audit: type=1326 audit(1731617815.330:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.314260][ T5916] qmi_wwan 3-1:1.0: probe with driver qmi_wwan failed with error -22 [ 500.338434][ T5889] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 500.341532][ T5916] usb 3-1: USB disconnect, device number 43 [ 500.351313][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.364295][ T29] audit: type=1326 audit(1731617815.330:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.398495][ T5889] usb 2-1: Product: syz [ 500.402968][ T5889] usb 2-1: Manufacturer: syz [ 500.414432][ T29] audit: type=1326 audit(1731617815.330:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.421875][ T5889] usb 2-1: SerialNumber: syz [ 500.457637][ T29] audit: type=1326 audit(1731617815.330:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.485167][ T29] audit: type=1326 audit(1731617815.330:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11603 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc1277e719 code=0x7ffc0000 [ 500.509036][ T5889] usb 2-1: config 0 descriptor?? [ 500.700315][ T5852] Bluetooth: hci3: command tx timeout [ 500.780736][T11602] loop9: detected capacity change from 0 to 7 [ 500.798293][T11602] Dev loop9: unable to read RDB block 7 [ 500.805443][T11602] loop9: AHDI p2 p3 p4 [ 500.811838][T11602] loop9: partition table partially beyond EOD, truncated [ 500.852328][T11602] loop9: p2 start 2961973428 is beyond EOD, truncated [ 500.863714][T11602] loop9: p3 start 1756542996 is beyond EOD, truncated [ 501.079123][T11612] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 501.245712][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 501.346848][ T5889] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 501.415407][ T5889] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 501.509206][ T5889] usb 2-1: USB disconnect, device number 43 [ 501.638077][T11589] chnl_net:caif_netlink_parms(): no params data found [ 501.966222][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.985797][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.422283][T11614] uprobe: syz.0.1058:11614 failed to unregister, leaking uprobe [ 502.554967][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 502.701961][ T5889] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 502.781324][ T5852] Bluetooth: hci3: command tx timeout [ 503.031470][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 503.089456][T11589] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.106648][T11589] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.114033][T11589] bridge_slave_0: entered allmulticast mode [ 503.121084][T11589] bridge_slave_0: entered promiscuous mode [ 503.128877][T11589] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.136214][T11589] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.144520][T11589] bridge_slave_1: entered allmulticast mode [ 503.151704][T11589] bridge_slave_1: entered promiscuous mode [ 503.226836][ T5889] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 503.243337][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.258110][T11589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.272488][ T5889] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.286598][T11589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.304664][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.396472][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.477074][ T5889] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 503.492019][T11589] team0: Port device team_slave_0 added [ 503.500126][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 503.522814][T11589] team0: Port device team_slave_1 added [ 503.540117][ T5889] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.716436][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.741008][T11589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.748045][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.748066][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.779025][ T5889] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 503.785920][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.796947][T11589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.155302][T11589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.177905][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.203870][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.436321][T11589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.671270][T11589] hsr_slave_0: entered promiscuous mode [ 504.702399][T11589] hsr_slave_1: entered promiscuous mode [ 504.738465][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 504.750081][ T5889] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.762362][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 504.773620][ T5889] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 504.793581][ T5889] usb 4-1: string descriptor 0 read error: -22 [ 504.799923][ T5889] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 504.809458][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.834102][ T5889] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 504.850201][ T5916] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 504.860601][ T5852] Bluetooth: hci3: command tx timeout [ 505.021014][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 505.052385][ T5916] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 505.074930][ T5916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.087952][ T46] usb 4-1: USB disconnect, device number 44 [ 505.119515][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 505.154542][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 505.175493][ T5916] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.216850][ T5916] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 505.230352][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.472809][ T5916] usb 1-1: GET_CAPABILITIES returned 0 [ 505.509379][ T5916] usbtmc 1-1:16.0: can't read capabilities [ 505.703979][ T46] usb 1-1: USB disconnect, device number 36 [ 506.043477][T11589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.053001][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 506.053022][ T29] audit: type=1326 audit(1731617821.220:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 506.080972][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.153194][T11589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.189339][T11589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.197326][ T29] audit: type=1326 audit(1731617821.220:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 506.233012][T11589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.250515][ T29] audit: type=1326 audit(1731617821.220:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 506.327819][ T29] audit: type=1326 audit(1731617821.220:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 506.429929][ T29] audit: type=1326 audit(1731617821.220:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 506.570922][ T29] audit: type=1326 audit(1731617821.220:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 507.285759][ T5852] Bluetooth: hci3: command tx timeout [ 507.292085][ T29] audit: type=1326 audit(1731617821.220:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 507.313754][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.320095][ T29] audit: type=1326 audit(1731617821.220:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 507.342457][ T29] audit: type=1326 audit(1731617821.220:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 507.364026][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.371779][ T29] audit: type=1326 audit(1731617821.220:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11684 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fe77e719 code=0x7ffc0000 [ 507.634845][T11589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.711922][T11589] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.744711][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.752012][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.857588][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.864821][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.501445][T11717] block nbd0: NBD_DISCONNECT [ 509.315167][T11716] delete_channel: no stack [ 509.442419][T11589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.370669][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 510.540592][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 510.570979][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 510.631267][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 510.682837][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.750242][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.898498][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 510.913347][T11759] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1078'. [ 510.990223][T11759] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 511.022459][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 511.037763][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.100688][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.145986][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.157827][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.177848][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 511.196469][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.236269][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.268105][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.278815][T11589] veth0_vlan: entered promiscuous mode [ 511.280541][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.317708][ T9] usb 3-1: string descriptor 0 read error: -22 [ 511.324602][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 511.329955][T11589] veth1_vlan: entered promiscuous mode [ 511.344325][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.353446][ T5889] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 511.426467][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 511.530561][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 511.538835][ T5889] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 511.548800][ T5889] usb 1-1: config 0 has no interface number 0 [ 511.557724][T11589] veth0_macvtap: entered promiscuous mode [ 511.564059][ T5889] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 511.582831][T11589] veth1_macvtap: entered promiscuous mode [ 511.598115][ T5889] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 511.620821][ T9] usb 3-1: USB disconnect, device number 44 [ 511.641713][ T5889] usb 1-1: config 0 interface 41 has no altsetting 0 [ 511.668332][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.678553][ T5889] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 511.692547][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.700111][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.720382][ T5840] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 511.737108][ T5889] usb 1-1: Product: syz [ 511.745802][ T5889] usb 1-1: Manufacturer: syz [ 511.750156][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.750598][ T5889] usb 1-1: SerialNumber: syz [ 511.788628][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.800606][ T5889] usb 1-1: config 0 descriptor?? [ 511.805043][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.819279][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.841065][T11766] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 511.848769][T11766] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 511.871593][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.888443][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.901294][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 511.916741][T11589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.922942][ T5840] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 511.944948][ T5840] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.947369][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.965854][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.965890][ T5840] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.965917][ T5840] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.965990][ T5840] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 511.966014][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.028806][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.038875][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.049574][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.068400][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.108157][T11766] netlink: 'syz.0.1079': attribute type 9 has an invalid length. [ 512.122641][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.136972][T11766] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1079'. [ 512.149076][T11589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.167038][T11589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.197648][T11589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.229866][ T5840] usb 4-1: GET_CAPABILITIES returned 0 [ 512.239915][ T5840] usbtmc 4-1:16.0: can't read capabilities [ 512.302700][T11589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.351941][T11589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.362342][T11589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.372253][T11589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.416400][T11781] netlink: 'syz.0.1079': attribute type 9 has an invalid length. [ 512.429964][ T5840] usb 4-1: USB disconnect, device number 45 [ 512.490142][T11781] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1079'. [ 514.295026][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 514.320281][ T5889] dm9601 1-1:0.41: probe with driver dm9601 failed with error -71 [ 514.330393][ T5889] sr9700 1-1:0.41: probe with driver sr9700 failed with error -71 [ 514.332504][T11797] veth5: entered allmulticast mode [ 514.346504][ T5889] usb 1-1: USB disconnect, device number 37 [ 514.389843][T11793] netlink: 'syz.1.1083': attribute type 9 has an invalid length. [ 514.398588][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.403030][T11793] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1083'. [ 514.437931][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.605015][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.641119][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.230932][T11803] serio: Serial port ttynull [ 515.972811][T11815] netlink: 'syz.2.1085': attribute type 3 has an invalid length. [ 515.998616][T11815] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1085'. [ 516.299795][ T8406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.511459][ T8406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.593137][ T8406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.683742][ T8406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.846502][ T8406] bridge_slave_1: left allmulticast mode [ 516.852472][ T8406] bridge_slave_1: left promiscuous mode [ 516.859145][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.874273][ T8406] bridge_slave_0: left allmulticast mode [ 516.881076][ T8406] bridge_slave_0: left promiscuous mode [ 516.886861][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.365890][ T8406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.379409][ T8406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.391483][ T8406] bond0 (unregistering): Released all slaves [ 517.779022][ T8406] hsr_slave_0: left promiscuous mode [ 517.787272][ T8406] hsr_slave_1: left promiscuous mode [ 517.798472][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.806468][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.817249][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.825606][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.867505][ T8406] veth1_macvtap: left promiscuous mode [ 517.896144][ T8406] veth0_macvtap: left promiscuous mode [ 517.915894][ T8406] veth1_vlan: left promiscuous mode [ 517.931601][ T8406] veth0_vlan: left promiscuous mode [ 518.655668][T11857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 518.669117][T11857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 518.676567][ T46] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 518.689728][T11857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 518.705745][T11857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 518.835275][T11857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 518.889617][T11857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 518.992695][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 519.065017][ T46] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 519.086772][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.097174][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.108264][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.119721][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.140251][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.149893][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.517594][ T46] usb 4-1: GET_CAPABILITIES returned 0 [ 519.524222][ T46] usbtmc 4-1:16.0: can't read capabilities [ 520.227046][ T5887] usb 4-1: USB disconnect, device number 46 [ 520.355618][T11866] serio: Serial port ttynull [ 520.466876][T11869] netlink: 'syz.1.1097': attribute type 3 has an invalid length. [ 520.487959][T11869] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1097'. [ 520.557184][ T8406] team0 (unregistering): Port device team_slave_1 removed [ 520.614030][ T8406] team0 (unregistering): Port device team_slave_0 removed [ 521.100480][ T5852] Bluetooth: hci3: command tx timeout [ 521.484179][ T46] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 521.947883][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 522.674945][ T46] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 522.683158][ T46] usb 1-1: config 0 has no interface number 0 [ 522.845498][ T46] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 522.874131][ T46] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 522.930298][ T5887] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 522.966893][T11854] chnl_net:caif_netlink_parms(): no params data found [ 523.092110][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 523.106045][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.146266][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.167209][ T46] usb 1-1: config 0 interface 41 has no altsetting 0 [ 523.182748][ T5852] Bluetooth: hci3: command tx timeout [ 523.206761][ T46] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 523.210091][ T5887] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 523.224456][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.233802][ T46] usb 1-1: Product: syz [ 523.238013][ T46] usb 1-1: Manufacturer: syz [ 523.243275][ T46] usb 1-1: SerialNumber: syz [ 523.284394][ T46] usb 1-1: config 0 descriptor?? [ 523.290632][T11880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 523.307984][T11880] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 523.349352][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.350701][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.366353][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.376643][T11854] bridge_slave_0: entered allmulticast mode [ 523.413626][T11854] bridge_slave_0: entered promiscuous mode [ 523.612070][ T5887] usb 4-1: config 0 descriptor?? [ 523.782443][T11854] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.028216][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.043328][T11880] netlink: 'syz.0.1100': attribute type 9 has an invalid length. [ 524.051418][T11854] bridge_slave_1: entered allmulticast mode [ 524.074852][T11854] bridge_slave_1: entered promiscuous mode [ 524.089801][T11880] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1100'. [ 524.214460][T11854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.264022][T11854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.325202][T11917] netlink: 'syz.0.1100': attribute type 9 has an invalid length. [ 524.357448][T11917] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1100'. [ 524.423389][T11854] team0: Port device team_slave_0 added [ 524.437993][T11920] serio: Serial port ttynull [ 524.464283][T11854] team0: Port device team_slave_1 added [ 524.529297][T11854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.552077][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.591046][ T46] dm9601 1-1:0.41: probe with driver dm9601 failed with error -71 [ 524.614695][T11924] netlink: 'syz.2.1106': attribute type 3 has an invalid length. [ 524.615066][ T46] sr9700 1-1:0.41: probe with driver sr9700 failed with error -71 [ 524.638828][T11854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.641065][T11924] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1106'. [ 524.655575][T11854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.670203][T11854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.679028][ T46] usb 1-1: USB disconnect, device number 38 [ 524.699482][T11854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.713576][ T5887] uclogic 0003:5543:006E.0008: failed retrieving Huion firmware version: -71 [ 524.722656][ T5887] uclogic 0003:5543:006E.0008: failed probing parameters: -71 [ 524.740266][ T5887] uclogic 0003:5543:006E.0008: probe with driver uclogic failed with error -71 [ 524.765650][ T5887] usb 4-1: USB disconnect, device number 47 [ 524.918729][T11854] hsr_slave_0: entered promiscuous mode [ 524.941914][T11854] hsr_slave_1: entered promiscuous mode [ 525.191502][ T5840] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 525.269292][ T5852] Bluetooth: hci3: command tx timeout [ 525.370222][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 525.428049][ T5840] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 525.447014][ T5840] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.535101][T11949] syz.0.1110: attempt to access beyond end of device [ 525.535101][T11949] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 525.618823][T11950] xt_l2tp: v2 doesn't support IP mode [ 526.178477][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.190104][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.200192][ T5840] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.316195][ T5840] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 526.322299][T11951] netlink: 'syz.3.1111': attribute type 3 has an invalid length. [ 526.325425][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.388145][T11951] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1111'. [ 526.602400][ T5840] usb 3-1: GET_CAPABILITIES returned 0 [ 526.607994][ T5840] usbtmc 3-1:16.0: can't read capabilities [ 526.808149][ T46] usb 3-1: USB disconnect, device number 45 [ 527.386053][ T5852] Bluetooth: hci3: command tx timeout [ 528.770166][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 530.143139][T11854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.319763][T11854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.346752][T11854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 530.550977][T11854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 530.627810][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 531.038916][T11999] kvm: kvm [11993]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x20000100 [ 531.194194][T11854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.252603][T11854] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.531354][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.538595][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.862730][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.870072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.040555][ T5926] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 532.230168][ T5926] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 532.260115][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.267566][T12025] netlink: 'syz.2.1125': attribute type 9 has an invalid length. [ 532.308849][T12025] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1125'. [ 532.319218][T12021] serio: Serial port ttynull [ 532.365334][ T5926] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 532.374803][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.383276][ T5926] usb 4-1: Product: syz [ 532.387489][ T5926] usb 4-1: Manufacturer: syz [ 532.392501][ T5926] usb 4-1: SerialNumber: syz [ 532.411467][ T5926] usb 4-1: config 0 descriptor?? [ 532.461479][T12034] netlink: 'syz.0.1124': attribute type 3 has an invalid length. [ 532.487287][T12034] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1124'. [ 532.584858][ T5840] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 532.740755][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 532.853406][ T5840] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 532.971938][ T5840] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.201583][T11854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.208534][ T5840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.228180][ T5840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.275436][ T5840] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.328088][ T5840] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.358730][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.593417][ T5840] usb 2-1: GET_CAPABILITIES returned 0 [ 533.598998][ T5840] usbtmc 2-1:16.0: can't read capabilities [ 533.763389][T11854] veth0_vlan: entered promiscuous mode [ 533.786346][T11854] veth1_vlan: entered promiscuous mode [ 533.842422][ T5840] usb 2-1: USB disconnect, device number 44 [ 533.907883][T11854] veth0_macvtap: entered promiscuous mode [ 534.189482][T11854] veth1_macvtap: entered promiscuous mode [ 534.225444][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.236604][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.248066][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.259188][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.269625][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.284954][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.300575][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.311659][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.331173][T11854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.347626][ T5886] usb 4-1: USB disconnect, device number 48 [ 534.382543][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.408185][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.446946][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.458047][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.484626][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.669376][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.700442][T11854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.730248][T11854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.621436][T11854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.739044][T11854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.800930][T11854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.872006][T11854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.913135][T11854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.020262][ T5887] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 536.192904][T12093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1132'. [ 536.272190][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 536.325746][ T5887] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 536.334359][ T5887] usb 2-1: config 0 has no interface number 0 [ 536.350299][ T5887] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 536.370215][ T5887] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 536.376030][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.390224][ T5887] usb 2-1: config 0 interface 41 has no altsetting 0 [ 536.408279][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.420993][ T5887] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 536.432362][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.440322][ T46] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 536.440832][ T5887] usb 2-1: Product: syz [ 536.452988][ T5887] usb 2-1: Manufacturer: syz [ 536.458372][ T5887] usb 2-1: SerialNumber: syz [ 536.470281][ T5887] usb 2-1: config 0 descriptor?? [ 536.482626][T12085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.490495][T12085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.502622][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.517142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.560636][ T5916] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 536.603841][ T46] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 536.622857][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.634107][ T46] usb 1-1: Product: syz [ 536.647251][ T46] usb 1-1: Manufacturer: syz [ 536.669783][ T46] usb 1-1: SerialNumber: syz [ 536.712290][ T5916] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 536.721571][ T5916] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 536.742878][ T46] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 536.762028][T12085] netlink: 'syz.1.1135': attribute type 9 has an invalid length. [ 536.770206][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 536.809259][ T5926] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 536.810209][T12085] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1135'. [ 536.839733][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 536.869872][ T5916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 537.046679][ T5916] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 537.058069][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 537.066619][ T5916] usb 3-1: Product: syz [ 537.070979][ T5916] usb 3-1: Manufacturer: syz [ 537.075129][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.316342][ T5916] usb 3-1: can't set config #1, error -71 [ 537.324412][ T5916] usb 3-1: USB disconnect, device number 46 [ 537.349911][T12115] netlink: 'syz.1.1135': attribute type 9 has an invalid length. [ 537.358032][T12115] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1135'. [ 537.435714][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.582697][ T9] usb 1-1: USB disconnect, device number 39 [ 537.649858][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.667406][ T5887] dm9601 2-1:0.41: probe with driver dm9601 failed with error -71 [ 537.682202][ T5887] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 537.694471][ T5887] usb 2-1: USB disconnect, device number 45 [ 537.704357][ T8434] udevd[8434]: failed to send result of seq 23559 to main daemon: Connection refused [ 537.741164][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.829852][ T11] bridge_slave_1: left allmulticast mode [ 537.838723][ T11] bridge_slave_1: left promiscuous mode [ 537.846151][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.868026][ T11] bridge_slave_0: left allmulticast mode [ 537.873993][ T11] bridge_slave_0: left promiscuous mode [ 537.879733][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.908482][ T5926] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 537.922419][ T5926] ath9k_htc: Failed to initialize the device [ 537.929348][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 538.276350][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.287774][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.298541][ T11] bond0 (unregistering): Released all slaves [ 538.547380][ T11] hsr_slave_0: left promiscuous mode [ 538.553759][ T11] hsr_slave_1: left promiscuous mode [ 538.559943][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.568697][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.578024][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.585639][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.607984][ T11] veth1_macvtap: left promiscuous mode [ 538.613644][ T11] veth0_macvtap: left promiscuous mode [ 538.619202][ T11] veth1_vlan: left promiscuous mode [ 538.624809][ T11] veth0_vlan: left promiscuous mode [ 539.125378][ T11] team0 (unregistering): Port device team_slave_1 removed [ 539.176665][ T11] team0 (unregistering): Port device team_slave_0 removed [ 539.557883][T11857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 539.568818][T11857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.592718][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.604373][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.616835][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 539.624841][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 539.860205][ T5926] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 540.021185][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 540.029268][ T5926] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 540.038320][ T5926] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.048903][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.059555][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.087492][ T5916] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 540.094400][T12140] chnl_net:caif_netlink_parms(): no params data found [ 540.101923][ T5926] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.102231][ T5926] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 540.144679][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.153219][ T46] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 540.293073][ T5916] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 540.302581][T12140] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.309777][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.327757][T12140] bridge_slave_0: entered allmulticast mode [ 540.329034][ T5916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.335855][T12140] bridge_slave_0: entered promiscuous mode [ 540.353236][T12140] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.359355][ T46] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 540.360691][T12140] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.361074][T12140] bridge_slave_1: entered allmulticast mode [ 540.376302][ T5926] usb 1-1: GET_CAPABILITIES returned 0 [ 540.388766][ T5926] usbtmc 1-1:16.0: can't read capabilities [ 540.394889][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.417478][ T5916] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 540.485934][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.494354][ T5916] usb 3-1: Product: syz [ 540.503984][ T5916] usb 3-1: Manufacturer: syz [ 540.510821][ T5916] usb 3-1: SerialNumber: syz [ 540.525932][T12162] Process accounting resumed [ 540.560528][ T46] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 540.599236][T12140] bridge_slave_1: entered promiscuous mode [ 540.659093][ T5916] usb 3-1: config 0 descriptor?? [ 540.722950][ T5926] usb 1-1: USB disconnect, device number 40 [ 540.887031][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.081890][ T46] usb 4-1: Product: syz [ 541.158372][T12140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.167750][ T46] usb 4-1: Manufacturer: syz [ 541.172588][ T46] usb 4-1: SerialNumber: syz [ 541.179369][ T46] usb 4-1: config 0 descriptor?? [ 541.183547][T12140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.244352][T12140] team0: Port device team_slave_0 added [ 541.263712][T12140] team0: Port device team_slave_1 added [ 541.317889][T12140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.325356][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.351371][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.359398][T12140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.382379][T12140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.513765][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.539832][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.662097][ T5142] Bluetooth: hci3: command tx timeout [ 541.848944][T12140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.276190][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 542.276241][ T29] audit: type=1400 audit(1731617857.440:564): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=12170 comm="syz.0.1150" [ 542.583637][ T46] usb 4-1: USB disconnect, device number 49 [ 542.799962][T12174] FAULT_INJECTION: forcing a failure. [ 542.799962][T12174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.815982][T12174] CPU: 1 UID: 0 PID: 12174 Comm: syz.1.1151 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 542.819145][ T8] usb 3-1: USB disconnect, device number 47 [ 542.826794][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 542.826817][T12174] Call Trace: [ 542.826827][T12174] [ 542.826837][T12174] dump_stack_lvl+0x241/0x360 [ 542.826878][T12174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.826906][T12174] ? __pfx__printk+0x10/0x10 [ 542.826938][T12174] ? __pfx_lock_release+0x10/0x10 [ 542.826980][T12174] should_fail_ex+0x3b0/0x4e0 [ 542.827011][T12174] _copy_from_user+0x2f/0xc0 [ 542.827034][T12174] memdup_user+0x64/0xc0 [ 542.882376][T12174] strndup_user+0x68/0xc0 [ 542.886741][T12174] __se_sys_mount+0x9f/0x3c0 [ 542.891346][T12174] ? irqentry_exit+0x63/0x90 [ 542.895941][T12174] ? lockdep_hardirqs_on+0x99/0x150 [ 542.901150][T12174] ? __pfx___se_sys_mount+0x10/0x10 [ 542.906364][T12174] ? __x64_sys_mount+0x20/0xc0 [ 542.911142][T12174] do_syscall_64+0xf3/0x230 [ 542.915653][T12174] ? clear_bhb_loop+0x35/0x90 [ 542.920358][T12174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.926267][T12174] RIP: 0033:0x7fe1fe77e719 [ 542.930685][T12174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.950296][T12174] RSP: 002b:00007fe1ff4f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.958718][T12174] RAX: ffffffffffffffda RBX: 00007fe1fe935f80 RCX: 00007fe1fe77e719 [ 542.966693][T12174] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 542.974687][T12174] RBP: 00007fe1ff4f4090 R08: 0000000020000100 R09: 0000000000000000 [ 542.982688][T12174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.990663][T12174] R13: 0000000000000000 R14: 00007fe1fe935f80 R15: 00007ffef6aaf618 [ 542.998663][T12174] [ 543.001761][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.063956][T12140] hsr_slave_0: entered promiscuous mode [ 543.080734][T12140] hsr_slave_1: entered promiscuous mode [ 543.168442][T12183] FAULT_INJECTION: forcing a failure. [ 543.168442][T12183] name failslab, interval 1, probability 0, space 0, times 0 [ 543.209323][T12183] CPU: 1 UID: 0 PID: 12183 Comm: syz.0.1153 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 543.220253][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 543.228009][T12185] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1154'. [ 543.230412][T12183] Call Trace: [ 543.230426][T12183] [ 543.230436][T12183] dump_stack_lvl+0x241/0x360 [ 543.230474][T12183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.230504][T12183] ? __pfx__printk+0x10/0x10 [ 543.230535][T12183] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 543.230562][T12183] ? __pfx___might_resched+0x10/0x10 [ 543.258562][T12185] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 543.260306][T12183] should_fail_ex+0x3b0/0x4e0 [ 543.260346][T12183] should_failslab+0xac/0x100 [ 543.260380][T12183] ? __alloc_skb+0x1c3/0x440 [ 543.260409][T12183] kmem_cache_alloc_node_noprof+0x71/0x320 [ 543.260433][T12183] ? __mutex_unlock_slowpath+0x21d/0x750 [ 543.260466][T12183] __alloc_skb+0x1c3/0x440 [ 543.260492][T12183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.260519][T12183] ? kmem_cache_free+0x1a2/0x420 [ 543.260545][T12183] ? __pfx___alloc_skb+0x10/0x10 [ 543.260573][T12183] ? __pfx_pfkey_broadcast+0x10/0x10 [ 543.260599][T12183] ? pfkey_broadcast+0x3e3/0x400 [ 543.260635][T12183] pfkey_sendmsg+0xce4/0x1050 [ 543.260677][T12183] ? smack_socket_sendmsg+0x178/0x540 [ 543.260711][T12183] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 543.260760][T12183] ? __might_fault+0xaa/0x120 [ 543.260789][T12183] ? __pfx_lock_release+0x10/0x10 [ 543.260819][T12183] ? __import_iovec+0x590/0x870 [ 543.365205][T12183] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 543.370345][T12183] __sock_sendmsg+0x221/0x270 [ 543.375035][T12183] ____sys_sendmsg+0x52a/0x7e0 [ 543.379826][T12183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.385132][T12183] ? rcu_is_watching+0x15/0xb0 [ 543.389912][T12183] ? __might_fault+0xaa/0x120 [ 543.394627][T12183] __sys_sendmmsg+0x3ab/0x730 [ 543.399343][T12183] ? __pfx___sys_sendmmsg+0x10/0x10 [ 543.404568][T12183] ? __pfx_lock_release+0x10/0x10 [ 543.409609][T12183] ? kstrtouint_from_user+0x128/0x190 [ 543.415013][T12183] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 543.420944][T12183] ? ksys_write+0x229/0x2b0 [ 543.425498][T12183] ? __pfx_lock_release+0x10/0x10 [ 543.430547][T12183] ? vfs_write+0x730/0xd30 [ 543.434981][T12183] ? __mutex_unlock_slowpath+0x21d/0x750 [ 543.440642][T12183] ? __fget_files+0x3f3/0x470 [ 543.445347][T12183] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 543.451350][T12183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 543.457695][T12183] ? do_syscall_64+0x100/0x230 [ 543.462477][T12183] __x64_sys_sendmmsg+0xa0/0xb0 [ 543.467370][T12183] do_syscall_64+0xf3/0x230 [ 543.471914][T12183] ? clear_bhb_loop+0x35/0x90 [ 543.476618][T12183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.482533][T12183] RIP: 0033:0x7fdc1277e719 [ 543.486957][T12183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.506614][T12183] RSP: 002b:00007fdc13566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 543.515070][T12183] RAX: ffffffffffffffda RBX: 00007fdc12935f80 RCX: 00007fdc1277e719 [ 543.523065][T12183] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000003 [ 543.531049][T12183] RBP: 00007fdc13566090 R08: 0000000000000000 R09: 0000000000000000 [ 543.539038][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 543.547026][T12183] R13: 0000000000000000 R14: 00007fdc12935f80 R15: 00007ffe90a22fa8 [ 543.555028][T12183] [ 543.558149][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.781404][ T5142] Bluetooth: hci3: command tx timeout [ 544.070752][T12199] syz.2.1157: attempt to access beyond end of device [ 544.070752][T12199] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 544.149673][T12200] xt_l2tp: v2 doesn't support IP mode [ 544.837088][T12187] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 544.862781][T12187] netlink: 'syz.1.1155': attribute type 10 has an invalid length. [ 544.938871][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.946273][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.986951][T12187] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.994320][T12187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.001823][T12187] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.010322][T12187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.057506][T12187] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 545.157281][ T3489] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 545.397196][T12140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.864254][T12222] random: crng reseeded on system resumption [ 546.368422][ T5142] Bluetooth: hci3: command tx timeout [ 546.619494][T12140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.634424][T12140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.641897][ T5888] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 546.668175][T12140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 547.089853][T12210] Invalid ELF header magic: != ELF [ 547.172621][T12228] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1166'. [ 547.201544][T12228] netlink: 'syz.2.1166': attribute type 1 has an invalid length. [ 547.232242][T12140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.319649][T12140] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.385421][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.392634][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.448693][T12230] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð#>÷‰r¹[›5´Û­00000000000000000000005 [ 547.467739][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.474930][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.557365][ T5888] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 547.569788][T12140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.583790][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.607938][ T5888] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 547.631029][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.639149][ T5888] usb 1-1: Product: syz [ 547.650570][ T5888] usb 1-1: Manufacturer: syz [ 547.655372][ T5888] usb 1-1: SerialNumber: syz [ 547.674946][ T5888] usb 1-1: config 0 descriptor?? [ 547.728620][T12241] FAULT_INJECTION: forcing a failure. [ 547.728620][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 547.741672][T12241] CPU: 1 UID: 0 PID: 12241 Comm: syz.2.1171 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 547.752495][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 547.762703][T12241] Call Trace: [ 547.766036][T12241] [ 547.769011][T12241] dump_stack_lvl+0x241/0x360 [ 547.773751][T12241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.779015][T12241] ? __pfx__printk+0x10/0x10 [ 547.783663][T12241] ? fs_reclaim_acquire+0x93/0x130 [ 547.788837][T12241] ? __pfx___might_resched+0x10/0x10 [ 547.794236][T12241] should_fail_ex+0x3b0/0x4e0 [ 547.798965][T12241] ? tomoyo_encode+0x26f/0x540 [ 547.803791][T12241] should_failslab+0xac/0x100 [ 547.808584][T12241] ? tomoyo_encode+0x26f/0x540 [ 547.813417][T12241] __kmalloc_noprof+0xd8/0x400 [ 547.818248][T12241] tomoyo_encode+0x26f/0x540 [ 547.822910][T12241] tomoyo_mount_permission+0x356/0xb80 [ 547.828451][T12241] ? stack_depot_save_flags+0x29/0x830 [ 547.833969][T12241] ? tomoyo_mount_permission+0x295/0xb80 [ 547.839850][T12241] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 547.845944][T12241] ? hook_sb_mount+0x10b/0x420 [ 547.850752][T12241] ? security_sb_mount+0x22/0x2f0 [ 547.855838][T12241] security_sb_mount+0xe0/0x2f0 [ 547.860739][T12241] path_mount+0xb9/0xfa0 [ 547.865032][T12241] ? kmem_cache_free+0x1a2/0x420 [ 547.870014][T12241] ? user_path_at+0x44/0x60 [ 547.874561][T12241] __se_sys_mount+0x2d6/0x3c0 [ 547.879288][T12241] ? __pfx___se_sys_mount+0x10/0x10 [ 547.884523][T12241] ? do_syscall_64+0x100/0x230 [ 547.889311][T12241] ? __x64_sys_mount+0x20/0xc0 [ 547.894092][T12241] do_syscall_64+0xf3/0x230 [ 547.898611][T12241] ? clear_bhb_loop+0x35/0x90 [ 547.903302][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.909221][T12241] RIP: 0033:0x7fe2f1f7e719 [ 547.913642][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.933267][T12241] RSP: 002b:00007fe2f2d79038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.941693][T12241] RAX: ffffffffffffffda RBX: 00007fe2f2135f80 RCX: 00007fe2f1f7e719 [ 547.949686][T12241] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000000000000 [ 547.957672][T12241] RBP: 00007fe2f2d79090 R08: 0000000020000440 R09: 0000000000000000 [ 547.965648][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.973623][T12241] R13: 0000000000000000 R14: 00007fe2f2135f80 R15: 00007ffd1b2c0448 [ 547.981626][T12241] [ 547.984668][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.016973][T12140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.395661][ T5852] Bluetooth: hci3: command tx timeout [ 548.463412][T12140] veth0_vlan: entered promiscuous mode [ 548.539791][T12140] veth1_vlan: entered promiscuous mode [ 548.645325][T12140] veth0_macvtap: entered promiscuous mode [ 548.679388][T12140] veth1_macvtap: entered promiscuous mode [ 548.756462][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.781243][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.792398][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.803536][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.815760][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.011762][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.066098][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.116585][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.158404][T12140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.230821][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.253057][ T5926] usb 1-1: USB disconnect, device number 41 [ 549.270097][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.290107][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.310114][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.330125][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.350039][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.370357][T12140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.390107][T12140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.422389][T12140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.464798][T12140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.484054][T12140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.510328][T12140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.529713][T12140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.545561][T12269] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1177'. [ 549.560149][T12269] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 549.773755][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.800374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.872310][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.907843][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.038636][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.183519][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.312749][T12288] syz.2.1178: attempt to access beyond end of device [ 551.312749][T12288] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 551.368479][T12289] trusted_key: encrypted_key: insufficient parameters specified [ 551.618969][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.697637][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.815507][ T35] bridge_slave_1: left allmulticast mode [ 551.821459][ T35] bridge_slave_1: left promiscuous mode [ 551.827165][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.836059][ T35] bridge_slave_0: left allmulticast mode [ 551.841946][ T35] bridge_slave_0: left promiscuous mode [ 551.847718][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.237735][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.249535][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.262505][ T35] bond0 (unregistering): Released all slaves [ 552.527785][ T35] hsr_slave_0: left promiscuous mode [ 552.534146][ T35] hsr_slave_1: left promiscuous mode [ 552.541113][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.548579][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.556454][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.565182][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.586033][ T35] veth1_macvtap: left promiscuous mode [ 552.591676][ T35] veth0_macvtap: left promiscuous mode [ 552.597272][ T35] veth1_vlan: left promiscuous mode [ 552.603580][ T35] veth0_vlan: left promiscuous mode [ 553.100917][ T35] team0 (unregistering): Port device team_slave_1 removed [ 553.149573][ T35] team0 (unregistering): Port device team_slave_0 removed [ 553.303705][T12296] overlayfs: failed to resolve '/øÿÿÿ·': -2 [ 553.821863][T12297] serio: Serial port ttynull [ 553.874242][T12304] netlink: 'syz.2.1185': attribute type 3 has an invalid length. [ 553.905416][T12304] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1185'. [ 553.980783][T12309] program syz.0.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.077930][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 554.151595][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 554.160935][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 554.170196][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 554.183405][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 554.192492][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 555.810601][T12331] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 556.160163][ T46] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 556.302269][ T5142] Bluetooth: hci3: command tx timeout [ 556.321128][ T46] usb 2-1: device descriptor read/64, error -71 [ 556.540613][T12329] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1190'. [ 556.549731][T12329] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 556.571427][ T46] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 556.864854][T12313] chnl_net:caif_netlink_parms(): no params data found [ 557.021002][ T46] usb 2-1: device descriptor read/64, error -71 [ 557.130691][ T46] usb usb2-port1: attempt power cycle [ 557.261023][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.282199][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.290137][T12313] bridge_slave_0: entered allmulticast mode [ 557.298067][T12313] bridge_slave_0: entered promiscuous mode [ 557.306669][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.314429][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.321871][T12313] bridge_slave_1: entered allmulticast mode [ 557.330385][T12313] bridge_slave_1: entered promiscuous mode [ 557.502579][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.592031][ T46] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 557.630565][ T46] usb 2-1: device descriptor read/8, error -71 [ 557.640868][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.872290][T12313] team0: Port device team_slave_0 added [ 557.880443][ T46] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 557.903712][T12313] team0: Port device team_slave_1 added [ 557.943734][ T46] usb 2-1: device descriptor read/8, error -71 [ 557.968927][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.978437][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.004478][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.011380][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.035525][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.042594][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.067668][T12355] netlink: 'syz.3.1197': attribute type 9 has an invalid length. [ 558.068491][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.083246][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.090387][T12355] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1197'. [ 558.109912][ T46] usb usb2-port1: unable to enumerate USB device [ 558.193598][T12313] hsr_slave_0: entered promiscuous mode [ 558.220669][T12313] hsr_slave_1: entered promiscuous mode [ 558.381829][ T5142] Bluetooth: hci3: command tx timeout [ 559.218409][T12364] overlayfs: failed to resolve './file0': -2 [ 559.387062][T12368] syz.0.1195: attempt to access beyond end of device [ 559.387062][T12368] nbd0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 559.619737][T12370] trusted_key: encrypted_key: insufficient parameters specified [ 559.768528][T12374] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1203'. [ 559.797402][T12374] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 559.972068][T12377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'. [ 560.075261][ T3489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.178150][T12313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 560.248687][ T3489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.341712][T12313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 560.376543][T12313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 560.436544][ T3489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.460310][ T5142] Bluetooth: hci3: command tx timeout [ 560.585341][ T5840] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 560.655109][ T3489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.757671][T12313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 560.771150][ T5840] usb 4-1: Invalid ep0 maxpacket: 16 [ 560.910924][ T5840] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 560.989562][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 561.000198][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 561.010731][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 561.020168][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 561.028462][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 561.036148][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 561.100356][ T5840] usb 4-1: Invalid ep0 maxpacket: 16 [ 561.117194][ T3489] bridge_slave_1: left allmulticast mode [ 561.129030][ T5840] usb usb4-port1: attempt power cycle [ 561.134707][ T3489] bridge_slave_1: left promiscuous mode [ 561.140904][ T3489] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.151655][ T3489] bridge_slave_0: left allmulticast mode [ 561.157361][ T3489] bridge_slave_0: left promiscuous mode [ 561.163577][ T3489] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.176135][ T3489] tipc: Resetting bearer [ 561.180792][ T3445] [ 561.184101][ T3489] ------------[ cut here ]------------ [ 561.184114][ T3489] DEBUG_LOCKS_WARN_ON(1) [ 561.184222][ T3489] WARNING: CPU: 1 PID: 3489 at kernel/locking/lockdep.c:232 __lock_acquire+0x58c/0x2050 [ 561.189582][ T3445] ============================= [ 561.193812][ T3489] Modules linked in: [ 561.193828][ T3489] CPU: 1 UID: 0 PID: 3489 Comm: kworker/u8:8 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 561.193851][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 561.193866][ T3489] Workqueue: netns cleanup_net [ 561.193891][ T3489] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 561.193924][ T3489] Code: 00 00 83 3d c5 ad ab 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 7f 7c e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 561.193942][ T3489] RSP: 0018:ffffc9000bf3f3f0 EFLAGS: 00010046 [ 561.193962][ T3489] RAX: 8f341b02ae099000 RBX: 0000000000000d3c RCX: ffff888031808000 [ 561.204104][ T3445] WARNING: suspicious RCU usage [ 561.208503][ T3489] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.212792][ T3445] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Not tainted [ 561.223218][ T3489] RBP: 0000000000000014 R08: ffffffff8155e222 R09: 1ffffffff1d02658 [ 561.223239][ T3489] R10: dffffc0000000000 R11: fffffbfff1d02659 R12: ffff888031808000 [ 561.223258][ T3489] R13: 0000000000000d3c R14: 1ffff11006301174 R15: ffff888031808ba0 [ 561.233362][ T3445] ----------------------------- [ 561.238063][ T3489] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 561.243615][ T3445] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 561.263178][ T3489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.263203][ T3489] CR2: 0000001b3021fffc CR3: 000000006385c000 CR4: 00000000003526f0 [ 561.263223][ T3489] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 561.263237][ T3489] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 561.263253][ T3489] Call Trace: [ 561.263263][ T3489] [ 561.263274][ T3489] ? __warn+0x168/0x4e0 [ 561.263300][ T3489] ? __lock_acquire+0x58c/0x2050 [ 561.269396][ T3445] [ 561.269396][ T3445] other info that might help us debug this: [ 561.269396][ T3445] [ 561.277360][ T3489] ? report_bug+0x2b3/0x500 [ 561.277387][ T3489] ? __lock_acquire+0x58c/0x2050 [ 561.277422][ T3489] ? handle_bug+0x60/0x90 [ 561.277451][ T3489] ? exc_invalid_op+0x1a/0x50 [ 561.277481][ T3489] ? asm_exc_invalid_op+0x1a/0x20 [ 561.277509][ T3489] ? __warn_printk+0x292/0x360 [ 561.277535][ T3489] ? __lock_acquire+0x58c/0x2050 [ 561.277577][ T3489] lock_acquire+0x1ed/0x550 [ 561.277609][ T3489] ? down+0x39/0xc0 [ 561.277636][ T3489] ? ib_device_get_by_netdev+0x85/0x5e0 [ 561.277670][ T3489] ? __pfx_lock_acquire+0x10/0x10 [ 561.277712][ T3489] _raw_spin_lock_irqsave+0xd5/0x120 [ 561.277736][ T3489] ? down+0x39/0xc0 [ 561.277760][ T3489] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 561.277787][ T3489] down+0x39/0xc0 [ 561.277813][ T3489] __dev_close_many+0x107/0x300 [ 561.277836][ T3489] ? __pfx___dev_close_many+0x10/0x10 [ 561.277858][ T3489] ? mark_lock+0x9a/0x360 [ 561.277880][ T3489] dev_close_many+0x24e/0x4c0 [ 561.282922][ T3445] [ 561.282922][ T3445] rcu_scheduler_active = 2, debug_locks = 1 [ 561.290696][ T3489] ? __pfx_dev_close_many+0x10/0x10 [ 561.290742][ T3489] unregister_netdevice_many_notify+0x530/0x1da0 [ 561.290782][ T3489] ? net_generic+0x1f/0x240 [ 561.297858][ T3445] 7 locks held by kworker/u8:6/3445: [ 561.305809][ T3489] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 561.305861][ T3489] ? unregister_netdevice_queue+0x26b/0x370 [ 561.314218][ T3445] #0: [ 561.321789][ T3489] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 561.321826][ T3489] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 561.321858][ T3489] cleanup_net+0x75d/0xcc0 [ 561.321883][ T3489] ? __pfx_cleanup_net+0x10/0x10 [ 561.321910][ T3489] ? process_scheduled_works+0x976/0x1850 [ 561.321938][ T3489] process_scheduled_works+0xa63/0x1850 [ 561.321975][ T3489] ? __pfx_process_scheduled_works+0x10/0x10 [ 561.322006][ T3489] ? assign_work+0x364/0x3d0 [ 561.322034][ T3489] worker_thread+0x870/0xd30 [ 561.322065][ T3489] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 561.322090][ T3489] ? __kthread_parkme+0x169/0x1d0 [ 561.322120][ T3489] ? __pfx_worker_thread+0x10/0x10 [ 561.322149][ T3489] kthread+0x2f0/0x390 [ 561.322180][ T3489] ? __pfx_worker_thread+0x10/0x10 [ 561.322237][ T3489] ? __pfx_kthread+0x10/0x10 [ 561.322258][ T3489] ret_from_fork+0x4b/0x80 [ 561.327098][ T3445] ffff888060c9d148 [ 561.336012][ T3489] ? __pfx_kthread+0x10/0x10 [ 561.336036][ T3489] ret_from_fork_asm+0x1a/0x30 [ 561.336073][ T3489] [ 561.336085][ T3489] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 561.336099][ T3489] CPU: 1 UID: 0 PID: 3489 Comm: kworker/u8:8 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 561.336123][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 561.336140][ T3489] Workqueue: netns cleanup_net [ 561.336170][ T3489] Call Trace: [ 561.336180][ T3489] [ 561.336198][ T3489] dump_stack_lvl+0x241/0x360 [ 561.336232][ T3489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.336262][ T3489] ? __pfx__printk+0x10/0x10 [ 561.336288][ T3489] ? _printk+0xd5/0x120 [ 561.336315][ T3489] ? __init_begin+0x41000/0x41000 [ 561.336346][ T3489] ? vscnprintf+0x5d/0x90 [ 561.336381][ T3489] panic+0x349/0x880 [ 561.336407][ T3489] ? __warn+0x177/0x4e0 [ 561.336444][ T3489] ? __pfx_panic+0x10/0x10 [ 561.336467][ T3489] ? show_trace_log_lvl+0x3b2/0x410 [ 561.336494][ T3489] ? ret_from_fork_asm+0x1a/0x30 [ 561.336527][ T3489] __warn+0x34b/0x4e0 [ 561.336549][ T3489] ? __lock_acquire+0x58c/0x2050 [ 561.336582][ T3489] report_bug+0x2b3/0x500 [ 561.336605][ T3489] ? __lock_acquire+0x58c/0x2050 [ 561.336639][ T3489] handle_bug+0x60/0x90 [ 561.336667][ T3489] exc_invalid_op+0x1a/0x50 [ 561.336696][ T3489] asm_exc_invalid_op+0x1a/0x20 [ 561.336721][ T3489] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 561.336754][ T3489] Code: 00 00 83 3d c5 ad ab 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 7f 7c e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 561.336792][ T3489] RSP: 0018:ffffc9000bf3f3f0 EFLAGS: 00010046 [ 561.336813][ T3489] RAX: 8f341b02ae099000 RBX: 0000000000000d3c RCX: ffff888031808000 [ 561.336831][ T3489] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.336848][ T3489] RBP: 0000000000000014 R08: ffffffff8155e222 R09: 1ffffffff1d02658 [ 561.336865][ T3489] R10: dffffc0000000000 R11: fffffbfff1d02659 R12: ffff888031808000 [ 561.336884][ T3489] R13: 0000000000000d3c R14: 1ffff11006301174 R15: ffff888031808ba0 [ 561.336906][ T3489] ? __warn_printk+0x292/0x360 [ 561.336944][ T3489] lock_acquire+0x1ed/0x550 [ 561.336976][ T3489] ? down+0x39/0xc0 [ 561.337005][ T3489] ? ib_device_get_by_netdev+0x85/0x5e0 [ 561.337038][ T3489] ? __pfx_lock_acquire+0x10/0x10 [ 561.337082][ T3489] _raw_spin_lock_irqsave+0xd5/0x120 [ 561.337106][ T3489] ? down+0x39/0xc0 [ 561.337133][ T3489] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 561.337162][ T3489] down+0x39/0xc0 [ 561.337198][ T3489] __dev_close_many+0x107/0x300 [ 561.337223][ T3489] ? __pfx___dev_close_many+0x10/0x10 [ 561.337249][ T3489] ? mark_lock+0x9a/0x360 [ 561.337272][ T3489] dev_close_many+0x24e/0x4c0 [ 561.337298][ T3489] ? __pfx_dev_close_many+0x10/0x10 [ 561.337326][ T3489] unregister_netdevice_many_notify+0x530/0x1da0 [ 561.337367][ T3489] ? net_generic+0x1f/0x240 [ 561.337392][ T3489] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 561.337428][ T3489] ? unregister_netdevice_queue+0x26b/0x370 [ 561.337460][ T3489] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 561.337497][ T3489] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 561.337534][ T3489] cleanup_net+0x75d/0xcc0 [ 561.337563][ T3489] ? __pfx_cleanup_net+0x10/0x10 [ 561.337595][ T3489] ? process_scheduled_works+0x976/0x1850 [ 561.337629][ T3489] process_scheduled_works+0xa63/0x1850 [ 561.337674][ T3489] ? __pfx_process_scheduled_works+0x10/0x10 [ 561.337710][ T3489] ? assign_work+0x364/0x3d0 [ 561.337742][ T3489] worker_thread+0x870/0xd30 [ 561.337778][ T3489] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 561.337804][ T3489] ? __kthread_parkme+0x169/0x1d0 [ 561.337838][ T3489] ? __pfx_worker_thread+0x10/0x10 [ 561.337882][ T3489] kthread+0x2f0/0x390 [ 561.337902][ T3489] ? __pfx_worker_thread+0x10/0x10 [ 561.337931][ T3489] ? __pfx_kthread+0x10/0x10 [ 561.337952][ T3489] ret_from_fork+0x4b/0x80 [ 561.337982][ T3489] ? __pfx_kthread+0x10/0x10 [ 561.338003][ T3489] ret_from_fork_asm+0x1a/0x30 [ 561.338039][ T3489] [ 561.345211][ T3489] Kernel Offset: disabled