last executing test programs: 10.820745882s ago: executing program 0 (id=2533): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffff7f000000000000000085000000170000001801000020756c2500000000002020207b1af8ff00000000bfa900000000000007010000f8ffffffb702000008000000b7030000000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff290000003b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 9.20404999s ago: executing program 1 (id=2545): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) r8 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r8, r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000100)=0x3, 0x4) splice(r1, 0x0, r6, 0x0, 0x25a5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x3c}}, 0x0) 9.163587757s ago: executing program 0 (id=2546): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)="cdf505552d00000000", 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {0x0}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 8.845604677s ago: executing program 0 (id=2548): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x20, 0x0, 0x0) 7.727591594s ago: executing program 1 (id=2553): socket$inet6(0xa, 0x806, 0x0) r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000580)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000002c0), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 7.325211802s ago: executing program 1 (id=2555): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7ffffffff000}}, 0x20, 0x0, 0x0) 6.453936588s ago: executing program 3 (id=2557): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x3, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_OPENAT={0x12, 0x44, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0\x00'}) io_uring_enter(r1, 0x5e40, 0x0, 0x0, 0x0, 0x0) 6.140286024s ago: executing program 3 (id=2560): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)="cdf505552d00000000", 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {0x0}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 6.044266738s ago: executing program 3 (id=2561): socket$qrtr(0x2a, 0x2, 0x0) syz_usbip_server_init(0x2) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000282303, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r0, 0x5000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfecc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x40000000}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) 5.312767709s ago: executing program 0 (id=2564): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003200)=@newtfilter={0xf40, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @filter_kind_options=@f_basic={{0xa}, {0xf08, 0x2, [@TCA_BASIC_EMATCHES={0x2a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x150, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0xfffb, 0x0, 0x2}, "d17e0a07ec13"}}, @TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x17}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x3ff, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xd}, {0x9, 0x8, 0x21, 0x5, 0x6, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x3ff}, {0xcdd, 0x3, 0x0, "e19f2d"}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x4800, 0x0, 0x7}, "5d7958754833311aa0fe15ef43873661eb8cd148da908e455af3c935a420349649f4cb04222227ee5c7ad50aa9850bec352587c2fb0c2ae9e562fee9ed28a1bdb8b2e7ebad8d2b840511787159a4fd31980083fa9d7dedebc5ad12944dae13a031086d4066dccb2e18f6"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x80, 0x7, 0x8001}, {{}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x90, 0x3, 0x9}, {0x7, 0x1, 0x10000, 0x20f}}}]}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb26d, 0x1, 0x1cb1}, {0x3, 0x7fffffff, 0x6, 0x3, 0x4, 0x1}}}, @TCF_EM_CONTAINER={0xe8, 0x2, 0x0, 0x0, {{0x70, 0x0, 0x8000}, "391cbbc93ffab43803d39a018755e8ea55d1a2921bf7aebcb3e36f8c4973865e10ba0598a89d8f88fec3e7b07cb7bcc44048d5fc8fb7193e7a93be501387bd19776902f11229e920baee530df41dd9049413273f290564133c5fb7dc62e6211601ca9ba4fbe4c97aa2342e07188328606809a631fdb8a1350b45305873e8afc859cc50a47a50f87f43df3dd2e343852359c0ef9ce2e66b8e35e63c573c1dacd0d9fd2e5dd94849e836324138e31d6d091ae44b62406e2b53f6420ab856164182063c3114d9c536a589367e0b5b08221cb2dbb0ced5245463495554"}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x1, 0x0, 0xfff8}, "47dcd5f078afe9a7427fe2ebf21489fd73889cf7149e5e7e83f4294c22f459674d8f27b4477012bfe5a2506892bf8912ce71e01f63199e52fa11e0b97379c2f79d15"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_BASIC_ACT={0x2e4, 0x3, [@m_ctinfo={0x134, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x401}]}, {0xf5, 0x6, "27b1a64c80d956bfc97761d697380620557a75fef12f85f9f35d40a64b98e771ed64ae38a2b596983787a77192b0ace14ff23dda6374e1008e83f6422a5011df6c8c3465a242d54634b6528359ec32075578a784daff936498f46c8b5b9444277700898f586549f9e82d5b64f0c7110f56521bc774416a294d04bd304963341aa4dd908ed34808072c142cc0cf2bc3bbed803beaecbc641eeeb869a5f86ad7a2f136ba80d2d66aba90322c8d3722a839db2007e52d0cfebbe434242db474255ed867ed79f7118526788d8f368981a0d40f72ac0d4fa010cad2a142643ce527957a62229216f15f071aee3c4ff1476f19ec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x38, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x6, 0x6, 'MT'}, {0xc}, {0xc}}}, @m_xt={0x5c, 0xa, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x2b, 0x6, "78ecd23b54a36d39489a154fd40a627c05acd63f531676a57be8fb4b20c832091493e5c17961d1"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x118, 0x18, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x6f, 0x6, {0x4, 'filter\x00', 0xf, 0x74, "77841639409746732458f33340707284c891a0d165c197eee2b01858ec16ac63b9435330c855726c1f244d815af6ab61e8a0fb47b48cae7e9d6a6ed3d25397c460c2aefeff"}}]}, {0x6d, 0x6, "1e7d9edae938c835ba5459023d12a6f42d68f495cf38ceed3e275c61213cea9285ec750713f557e4f81b64c7bc274a5e749bbcc14dacf8d2c92d826b72db4adfcbf847f79ec6483ce07a8ed7ced60db8d0cbfadbb8acfc97ac57682bf530b3546b4a8cd60536ffef49"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_BASIC_POLICE={0x494, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x10000, 0x6a, 0x8, {0x6, 0x0, 0x3, 0xa28, 0x4, 0x8}, {0xa, 0x0, 0xc, 0x100, 0x4, 0x1}, 0x6e44, 0x1, 0xc6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x67, 0x3, 0x3, {0x3, 0x2, 0x4, 0x7fff, 0x9, 0x4}, {0x1, 0x0, 0x2, 0x0, 0x8000, 0x8001}, 0x9, 0x4, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6e2e906d, 0x2, 0x9, 0x0, 0x3, 0x3, 0x1000, 0xd0, 0x7ff, 0x8, 0x120000, 0x8, 0x6, 0x3, 0x4323, 0x8, 0x80000001, 0x7, 0x6e28, 0xfffffffa, 0x1, 0xba8, 0xfffffffd, 0x3, 0x1, 0x4, 0x558, 0x9, 0x6, 0x9, 0x0, 0x8, 0x6, 0xfffffff9, 0x0, 0x200000, 0x0, 0xfffffffa, 0xffff, 0xe, 0xfffffc1a, 0x7, 0x5, 0x1, 0xb, 0xc, 0x7f0, 0x5, 0x3, 0x74b, 0x7, 0x4, 0x4, 0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9, 0x4, 0x0, 0xe, 0x0, 0x7, 0x4, 0x6, 0x81, 0x8, 0x3, 0x63b3, 0x69d, 0x800, 0x7f, 0x80000001, 0x85, 0x9, 0x1ff, 0xf, 0xc2b, 0x3, 0x8, 0x9, 0x2, 0x7ee0, 0xb, 0x81, 0x2, 0x0, 0x2, 0x401, 0x4, 0xffffff52, 0x81, 0x9, 0xe8a8, 0x8, 0x0, 0x7fffffff, 0x4, 0xb0, 0x3, 0x7, 0x200, 0xfffffff1, 0x8000, 0x5, 0x9, 0x7, 0xdb, 0x4, 0xfffffd1b, 0x8000, 0x3, 0x1, 0x10001, 0x30, 0x800, 0x2, 0x2, 0x40, 0x4, 0x3, 0x800, 0x2, 0x3, 0x6a, 0x0, 0xbd, 0x6, 0xffffb060, 0x4, 0x3, 0x40, 0x9, 0x100, 0x4, 0x8d, 0x7fffffff, 0x0, 0xc, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x4, 0x3, 0x37, 0x9, 0x80000001, 0x4eb, 0x7, 0x3, 0x4, 0x0, 0x1, 0x8, 0x7fff, 0x5, 0x6, 0x8, 0x0, 0x7fff, 0xffff0001, 0xe, 0x9, 0x9, 0xb, 0x6, 0x4e30, 0xc000000, 0x7f, 0x8, 0x11e, 0x2, 0xb074, 0x8, 0x1, 0x9, 0x100, 0x7ff, 0x21, 0xfffffff8, 0xff, 0x78f8, 0x0, 0x1ff, 0x101, 0x0, 0xc, 0x4, 0x0, 0x45, 0x6, 0x101, 0x5, 0x5, 0x2, 0x8, 0x7, 0x0, 0x3, 0x2251, 0x400, 0xffff8000, 0x3, 0x0, 0x4, 0x1, 0xaa, 0x0, 0xb, 0x2, 0x7fffffff, 0xcc, 0x1a, 0xfff, 0x6, 0x5, 0x10, 0x0, 0x5, 0x7, 0x8, 0xfffffffd, 0x94, 0x8000, 0x0, 0x5, 0x81, 0x1, 0x5, 0xc7, 0x6, 0x3, 0xfffffffb, 0x2, 0x846, 0x8, 0x1, 0xffff, 0x8001, 0x2, 0x7, 0x10001, 0x8001, 0x1000, 0x7000, 0xef, 0x0, 0x2, 0x3, 0x100, 0xa53, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x77}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xc}}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}]}, @TCA_BASIC_POLICE={0x4a8, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6c6}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x1, 0x8, 0x2, 0x4, 0x200, 0x9, 0x7, 0x8000, 0xffffffff, 0xde, 0xf, 0x7, 0x7, 0x0, 0x1, 0xb, 0x79e90d77, 0x0, 0x4, 0x15, 0x6, 0x56, 0xdd1, 0x4, 0x7, 0x7f, 0x0, 0x9, 0x1, 0x7fffffff, 0x0, 0x5, 0x5, 0x10, 0x10001, 0x2e64, 0x7fff, 0xcd, 0x1400000, 0xd, 0x770000, 0x2, 0xe, 0x2, 0x0, 0x9, 0x9aff, 0x2, 0x7, 0xb, 0xb, 0xfffeffff, 0x7, 0x3ff, 0x4, 0x95, 0x7fffffff, 0x3ff, 0x1, 0x0, 0x6, 0x48, 0xc, 0xfffffff8, 0xca, 0x8, 0x9, 0x6c000000, 0x9, 0xfffff927, 0x8, 0xdc, 0x6, 0x0, 0xfffffffc, 0x4, 0x2, 0x4, 0x1, 0x2, 0x8f7, 0x9, 0xfffffffd, 0x3, 0x6, 0x9, 0x1bb1, 0xfff, 0x9, 0x46b, 0x423, 0x3, 0xd97, 0xfff, 0x6, 0x1b41, 0x1, 0x127, 0xfffffffc, 0x9, 0x7, 0x6, 0xfffffffb, 0x101, 0x4, 0x9, 0xffffffff, 0x80000000, 0x5, 0x784, 0x1, 0x6, 0x6, 0x9, 0xd, 0x4, 0x9, 0xfffffff3, 0x9, 0x0, 0x7, 0x6, 0x100, 0x9, 0x3, 0xa80000, 0x1, 0x7f, 0x9, 0xffffffff, 0xfffffff7, 0x1, 0x80000000, 0xa, 0x5d4f, 0x4, 0x4, 0x7, 0x20000000, 0x3, 0x9, 0x400, 0x2, 0x2, 0xb077, 0x0, 0x5, 0xd2d5, 0x5ac, 0x80000001, 0x2, 0x2, 0x2, 0xfff, 0x9, 0x9, 0x8000, 0xad, 0x800, 0x2, 0xc, 0x0, 0x3, 0x0, 0x101, 0x40, 0x5, 0xffff0000, 0x1, 0x7ff, 0x7fff, 0x1, 0x5, 0x3, 0x80000000, 0x5, 0x7, 0x6, 0x6, 0x1, 0x8001, 0xffffffff, 0x2, 0x100, 0x5, 0x95, 0x79c3, 0x80, 0x8, 0x4, 0x9, 0x4, 0x11, 0x6, 0x4b, 0x9, 0x1000, 0x401, 0x3, 0xd9, 0x2, 0x0, 0xe, 0x100, 0xa6aa, 0x5, 0xe77, 0x1ff, 0x1, 0x6, 0x2, 0x2, 0x4, 0x6, 0x1, 0x4, 0x6, 0x5, 0xffff, 0x800, 0x4, 0x8001, 0x4, 0x6, 0x68c, 0x2, 0x8, 0x2, 0x7, 0x6, 0x3, 0x101, 0x400, 0xa287c16d, 0x15, 0x10001, 0x9, 0x6, 0xfffffffa, 0x1, 0x1, 0x226, 0x9, 0xa, 0x1, 0x0, 0x9, 0xf59, 0x8, 0x4, 0xa41, 0x3ef5, 0x3, 0xa, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x4, 0x9, 0xb9, {0x40, 0x1, 0x7fff, 0x1, 0x7ff, 0x6}, {0x56, 0x1, 0x6, 0x5, 0x2}, 0x1ff, 0xa72}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfaf, 0x0, 0x7, 0x6a, 0x8, {0x9, 0x2, 0x7, 0x7, 0x9, 0x4}, {0x7, 0x2, 0x38, 0x3, 0x2, 0x5}, 0xe05, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0xf40}}, 0x0) 5.169287932s ago: executing program 3 (id=2567): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=@newqdisc={0x58, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mq={0x7}]}, 0x58}}, 0x0) 4.869164484s ago: executing program 3 (id=2571): socket$kcm(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000100000000000000", @ANYBLOB], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x0) 3.655425719s ago: executing program 4 (id=2574): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a320000000005000400020000000900010073"], 0x34}, 0x1, 0x40030000000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1], &(0x7f0000001600)=""/4096, 0x152, 0x1000, 0x1, 0xa}, 0x20) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x54}, {0x25, 0x0, 0x0, 0xffffffff}, {0x6}]}) socket$packet(0x11, 0x2, 0x300) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) move_mount(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', r11, &(0x7f0000000340)='./bus\x00', 0x54) open(&(0x7f0000000200)='./bus\x00', 0x40a000, 0x0) r12 = creat(&(0x7f0000000100)='./bus\x00', 0x0) copy_file_range(r12, &(0x7f0000000280)=0x80000000, r12, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000f40)=ANY=[@ANYRESDEC=r5], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x41000, 0x40, '\x00', 0x0, 0x2a}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073007a300000000064000000060a010400000000000000000100000008000b40000000003c0000feffff01800c0001006269747769736500280002800800034000000008080002400000001404000580080001400000000d08000480040001000900010073"], 0xd8}}, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) 3.47515049s ago: executing program 5 (id=2575): ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x84, 0x24, 0xfffffffffffffffe, &(0x7f0000000000)=0x4) 3.373017529s ago: executing program 1 (id=2576): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=r2, @ANYBLOB="0580040000000000300012800b00010067656e6576650000200002"], 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 3.297581607s ago: executing program 2 (id=2577): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.199642362s ago: executing program 5 (id=2578): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a40)="0036d551863e1902129da79f", 0xc}], 0x1}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672dbecde54535371af01e67576ef51", 0x1a}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f642920068473af2e996703149f0c", 0x55}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7e", 0xe}], 0x4}, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.056395243s ago: executing program 2 (id=2579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0xfdef) 2.814012185s ago: executing program 3 (id=2580): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, 0x0) 2.733689329s ago: executing program 0 (id=2581): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffff7f000000000000000085000000170000001801000020756c2500000000002020207b1af8ff00000000bfa900000000000007010000f8ffffffb702000008000000b7030000000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) 2.663109991s ago: executing program 5 (id=2582): r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000580)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000002c0), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 2.661625133s ago: executing program 4 (id=2583): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ffe0f50506000000000000008500000005000000bf0900000000000055090100800004009500000000000000bf91000000000000b7020200000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xffc, &(0x7f0000001e40)=""/4092}, 0x90) 2.633508705s ago: executing program 2 (id=2584): io_uring_setup(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) 2.463362721s ago: executing program 4 (id=2585): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d6818e1233ef0f10f056c458d9d7c50cf0f10efcfa95e103bf8e8432fb9361ccbd10bf9ce9f05b0590", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100c0ff00000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfc, &(0x7f0000000dc0)=""/252}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$eventfd(r5, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 2.450604597s ago: executing program 5 (id=2586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.401333939s ago: executing program 2 (id=2587): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)="cdf505552d00000000", 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001480)=""/169, 0xa9}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x5, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 2.082472856s ago: executing program 1 (id=2588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000040), &(0x7f0000000740)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.482153136s ago: executing program 2 (id=2589): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.2580655s ago: executing program 4 (id=2590): ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x84, 0x24, 0xfffffffffffffffe, &(0x7f0000000000)=0x4) 1.157338415s ago: executing program 5 (id=2591): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 981.008947ms ago: executing program 1 (id=2592): socket$kcm(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000100000000000000", @ANYBLOB], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x0) 922.772119ms ago: executing program 2 (id=2593): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=""/5}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @broadcast}, &(0x7f00000001c0)=0xb) syz_io_uring_setup(0x7750, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000000)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000100)=0xdf, 0x1) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) socket$netlink(0x10, 0x3, 0x0) 887.014755ms ago: executing program 4 (id=2594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@random="d3c22fb73e47", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x26, 0x0, @wg=@data={0x4, 0x0, 0x8, "bf7e9225487b9d58120586c654a1"}}}}}}}, 0x4c) 886.181418ms ago: executing program 5 (id=2595): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) r8 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r8, r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xc8, &(0x7f0000000100)=0x3, 0x4) splice(r1, 0x0, r6, 0x0, 0x25a5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x3c}}, 0x0) 846.631931ms ago: executing program 0 (id=2596): r0 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x30, r2, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050008"], 0x58}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=2597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x0, 0x8000, {0x0}, {0xffffffffffffffff}, 0x0, 0x200}) prlimit64(r0, 0xa, &(0x7f00000001c0)={0x4, 0x7c}, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010700000000004000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000003a80)=""/4090, 0xffa}, {&(0x7f0000000480)=""/201, 0xc9}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/97, 0x61}, {&(0x7f00000025c0)=""/4073, 0xfe9}], 0x2}}], 0x3, 0x0, 0x0) socket(0x0, 0x0, 0x20000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000380), &(0x7f0000000280)=0x0) fchdir(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = io_uring_setup(0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x11, 0x20000000, r8) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x20480, 0x0) kernel console output (not intermixed with test programs): 38][T10873] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 455.740139][T10873] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 455.891432][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.917042][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.941314][ T12] bond0 (unregistering): Released all slaves [ 456.206078][T10886] loop3: detected capacity change from 0 to 8 [ 456.223473][T10606] hsr_slave_0: entered promiscuous mode [ 456.246672][T10606] hsr_slave_1: entered promiscuous mode [ 456.271842][T10606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.285603][T10606] Cannot create hsr debugfs directory [ 456.379478][T10891] loop3: detected capacity change from 0 to 512 [ 456.686094][ T5284] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 456.755311][ T12] hsr_slave_0: left promiscuous mode [ 456.777909][ T12] hsr_slave_1: left promiscuous mode [ 456.791863][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.800822][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.817925][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.831360][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.874736][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 456.878306][ T12] veth1_macvtap: left promiscuous mode [ 456.886355][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 27751, setting to 1024 [ 456.893628][ T12] veth0_macvtap: left promiscuous mode [ 456.903388][ T12] veth1_vlan: left promiscuous mode [ 456.904758][ T5284] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 456.914671][ T12] veth0_vlan: left promiscuous mode [ 456.939592][ T5284] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 456.949050][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.962702][ T5284] usb 4-1: config 0 descriptor?? [ 456.975574][T10891] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 456.990960][ T5284] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 457.011439][ T5284] usb 4-1: Detected SIO [ 457.039949][ T5284] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 457.103863][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.116210][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.127013][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.149738][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.159523][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 457.175027][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.253590][ T5284] usb 4-1: USB disconnect, device number 29 [ 457.283755][ T5284] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 457.308096][ T5284] ftdi_sio 4-1:0.0: device disconnected [ 457.426162][ T5228] Bluetooth: hci4: command tx timeout [ 457.863347][ T12] team0 (unregistering): Port device team_slave_1 removed [ 457.937525][ T12] team0 (unregistering): Port device team_slave_0 removed [ 459.263039][ T5228] Bluetooth: hci5: command tx timeout [ 459.339175][ T29] audit: type=1326 audit(1722522102.446:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 459.681297][ T5228] Bluetooth: hci4: command tx timeout [ 459.934839][ T29] audit: type=1326 audit(1722522102.456:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.010817][ T29] audit: type=1326 audit(1722522102.666:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.033396][ T29] audit: type=1326 audit(1722522102.666:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.056126][ T29] audit: type=1326 audit(1722522102.666:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.078603][ T29] audit: type=1326 audit(1722522102.666:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.101088][ T29] audit: type=1326 audit(1722522102.666:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.124015][ T29] audit: type=1326 audit(1722522102.666:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.152215][ T29] audit: type=1326 audit(1722522102.666:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.194903][T10583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.201917][ T29] audit: type=1326 audit(1722522102.666:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 460.339728][T10881] chnl_net:caif_netlink_parms(): no params data found [ 460.472400][T10583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.487704][T10583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.629859][T10583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 461.494848][ T5228] Bluetooth: hci5: command tx timeout [ 461.735046][ T5228] Bluetooth: hci4: command tx timeout [ 461.768345][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.787180][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.794534][T10881] bridge_slave_0: entered allmulticast mode [ 461.826947][T10881] bridge_slave_0: entered promiscuous mode [ 461.851231][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.885210][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.892808][T10881] bridge_slave_1: entered allmulticast mode [ 461.920698][T10881] bridge_slave_1: entered promiscuous mode [ 462.851913][T10881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.885884][T10881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.031991][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.328882][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.576415][ T5228] Bluetooth: hci5: command tx timeout [ 463.814417][T10895] chnl_net:caif_netlink_parms(): no params data found [ 463.821862][ T5228] Bluetooth: hci4: command tx timeout [ 463.935400][T10881] team0: Port device team_slave_0 added [ 463.965457][T10881] team0: Port device team_slave_1 added [ 464.217339][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.258463][T10881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.265905][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.296407][T10881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.387617][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.415759][T10881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.422820][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.481494][T10881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.553533][T10957] netlink: 'syz.0.1722': attribute type 16 has an invalid length. [ 464.572588][T10606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.732948][T10606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.777772][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.789305][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.802991][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.813950][T10895] bridge_slave_0: entered allmulticast mode [ 464.831751][T10895] bridge_slave_0: entered promiscuous mode [ 465.029540][T10606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 465.070165][T10606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 465.137289][T10895] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.157661][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.165475][T10895] bridge_slave_1: entered allmulticast mode [ 465.392873][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 465.392923][ T29] audit: type=1326 audit(1722522108.526:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7fc00000 [ 465.482015][T10895] bridge_slave_1: entered promiscuous mode [ 465.603898][ T29] audit: type=1326 audit(1722522108.536:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e6c9773b9 code=0x7fc00000 [ 465.677202][ T5228] Bluetooth: hci5: command tx timeout [ 465.748967][T10881] hsr_slave_0: entered promiscuous mode [ 465.765997][ T29] audit: type=1326 audit(1722522108.876:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.3.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7fc00000 [ 465.800849][T10881] hsr_slave_1: entered promiscuous mode [ 465.811224][T10881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.828696][T10881] Cannot create hsr debugfs directory [ 465.988532][T10583] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.196226][T10895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.148654][T10895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.192407][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.199734][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.348546][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.592969][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.600193][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.639004][T10606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.670314][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.742722][T10895] team0: Port device team_slave_0 added [ 467.786644][T10895] team0: Port device team_slave_1 added [ 468.192527][ T29] audit: type=1326 audit(1722522111.326:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 468.282942][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.536299][ T29] audit: type=1326 audit(1722522111.336:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 468.625126][ T29] audit: type=1326 audit(1722522111.656:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 468.730439][T10895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.754045][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.798341][T10895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.936216][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.963912][T10895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.992368][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.025086][T10895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.170629][T10606] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.386475][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.393866][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.413977][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.421452][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.464098][T10895] hsr_slave_0: entered promiscuous mode [ 469.481820][T10895] hsr_slave_1: entered promiscuous mode [ 469.490586][T10895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.499092][T10895] Cannot create hsr debugfs directory [ 469.693301][T11019] batman_adv: batadv0: Removing interface: ipvlan0 [ 469.795889][T11022] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1745'. [ 469.827202][ T12] bridge_slave_0: left allmulticast mode [ 469.832900][ T12] bridge_slave_0: left promiscuous mode [ 469.854978][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.893697][ T12] bridge_slave_1: left allmulticast mode [ 469.905324][ T12] bridge_slave_1: left promiscuous mode [ 469.911171][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.929374][ T12] bridge_slave_0: left allmulticast mode [ 469.935489][ T12] bridge_slave_0: left promiscuous mode [ 469.941287][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.814663][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.827909][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.838840][ T12] bond0 (unregistering): Released all slaves [ 470.962409][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.974190][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.993239][ T12] bond0 (unregistering): Released all slaves [ 471.321420][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.848371][ T29] audit: type=1326 audit(1722522114.986:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7fc00000 [ 472.081639][ T29] audit: type=1326 audit(1722522114.986:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e6c9773b9 code=0x7fc00000 [ 472.258420][ T29] audit: type=1326 audit(1722522115.356:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.3.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7fc00000 [ 472.486564][ T5230] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 472.617803][T10583] veth0_vlan: entered promiscuous mode [ 472.688420][ T5230] usb 1-1: Using ep0 maxpacket: 16 [ 472.702784][ T12] hsr_slave_0: left promiscuous mode [ 472.727893][ T5230] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 472.738213][ T5230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.749743][ T12] hsr_slave_1: left promiscuous mode [ 472.750766][ T5230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.781012][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.781088][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.783246][ T5230] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.783284][ T5230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.783312][ T5230] usb 1-1: Product: syz [ 472.783331][ T5230] usb 1-1: Manufacturer: syz [ 472.783351][ T5230] usb 1-1: SerialNumber: syz [ 472.786181][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.850275][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.874512][ T12] hsr_slave_0: left promiscuous mode [ 472.884133][ T12] hsr_slave_1: left promiscuous mode [ 472.903660][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.911748][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.925336][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.932909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.992180][ T12] veth1_macvtap: left promiscuous mode [ 472.998315][ T12] veth0_macvtap: left promiscuous mode [ 473.004282][ T12] veth1_vlan: left promiscuous mode [ 473.010174][ T12] veth0_vlan: left promiscuous mode [ 473.023003][ T12] veth1_macvtap: left promiscuous mode [ 473.030862][ T12] veth0_macvtap: left promiscuous mode [ 473.037478][ T12] veth1_vlan: left promiscuous mode [ 473.043357][ T12] veth0_vlan: left promiscuous mode [ 473.082307][ T5230] usb 1-1: 0:2 : does not exist [ 473.108681][ T5230] usb 1-1: USB disconnect, device number 13 [ 474.154550][ T12] team0 (unregistering): Port device team_slave_1 removed [ 474.219321][ T12] team0 (unregistering): Port device team_slave_0 removed [ 475.197682][ T12] team0 (unregistering): Port device team_slave_1 removed [ 475.252234][ T12] team0 (unregistering): Port device team_slave_0 removed [ 475.930406][T10583] veth1_vlan: entered promiscuous mode [ 475.980355][T10606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.048095][T10881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.202894][T10881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.312147][T10881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.347549][T10881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.936007][ T29] audit: type=1326 audit(1722522120.056:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 477.071846][T10583] veth0_macvtap: entered promiscuous mode [ 477.284811][ T29] audit: type=1326 audit(1722522120.056:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 477.377527][ T29] audit: type=1326 audit(1722522120.386:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11067 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 477.437696][T10583] veth1_macvtap: entered promiscuous mode [ 477.840470][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.862623][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.875269][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.893787][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.928004][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.945906][T10606] veth0_vlan: entered promiscuous mode [ 478.068551][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.093595][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.108307][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.120136][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.145713][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.170153][T10606] veth1_vlan: entered promiscuous mode [ 478.235048][T10895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.274518][T10583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.286217][T10583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.301634][T10583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.317244][T10583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.398821][T10895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.461616][T10895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.498831][T10895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.719795][T10881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.787937][T10606] veth0_macvtap: entered promiscuous mode [ 478.802481][T10606] veth1_macvtap: entered promiscuous mode [ 478.850140][T11100] net_ratelimit: 12 callbacks suppressed [ 478.850163][T11100] dccp_v4_rcv: dropped packet with invalid checksum [ 478.858106][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.880596][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.933478][T10881] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.999296][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.015268][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.020411][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.029898][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.068967][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.089148][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.100517][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.112047][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.122713][T11106] netlink: 'syz.0.1773': attribute type 11 has an invalid length. [ 479.131879][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.142856][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.157894][T10606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.190570][T11107] netlink: 'syz.0.1773': attribute type 11 has an invalid length. [ 479.223000][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.230323][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.266266][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.280202][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.292949][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.312070][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.322074][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.335961][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.360849][T10606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.445118][T10606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.454449][T10606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.484836][T10606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.501972][T10606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.613909][T11118] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1776'. [ 479.700891][T10895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.863823][T10895] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.972024][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.979654][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.043355][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.050744][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.230663][ T6037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.274771][ T6037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.418685][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.451814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.573967][T10881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.843102][T10881] veth0_vlan: entered promiscuous mode [ 480.916821][T10881] veth1_vlan: entered promiscuous mode [ 481.144161][T10881] veth0_macvtap: entered promiscuous mode [ 481.188036][T10881] veth1_macvtap: entered promiscuous mode [ 481.353781][T10895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.396833][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.456193][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.486183][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.531479][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.565970][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.603548][T11170] loop4: detected capacity change from 0 to 2048 [ 481.604744][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.643193][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.656794][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.658455][T11170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.669558][T10881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.810253][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.874663][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.900179][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.944698][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.975393][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.993763][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.993792][T10881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.993813][T10881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.998907][T10881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.028652][T10881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.028703][T10881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.028737][T10881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.028769][T10881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.067245][T10606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.516628][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.516656][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.767033][ T5599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.808273][ T5599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.860461][T10895] veth0_vlan: entered promiscuous mode [ 482.956821][T10895] veth1_vlan: entered promiscuous mode [ 483.097499][T10895] veth0_macvtap: entered promiscuous mode [ 483.143748][T10895] veth1_macvtap: entered promiscuous mode [ 483.193927][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.205002][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.217499][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.232629][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.253136][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.284991][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 483.332700][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.404435][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.447609][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.473310][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.484010][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.506680][T10895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.557831][T11224] capability: warning: `syz.2.1807' uses 32-bit capabilities (legacy support in use) [ 483.894782][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.157174][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.214456][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.280807][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.340488][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.354683][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.371070][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.404849][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.427868][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.441205][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.487219][T10895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.571117][T10895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.604714][T10895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.613789][T10895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.637282][T10895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.727713][T11245] netlink: 'syz.4.1817': attribute type 4 has an invalid length. [ 484.784424][T11245] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1817'. [ 485.143759][ T5604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.195028][ T5604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.438275][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1823'. [ 485.531449][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.597902][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.879644][T11275] netlink: 'syz.2.1829': attribute type 11 has an invalid length. [ 485.908752][T11275] netlink: 'syz.2.1829': attribute type 11 has an invalid length. [ 485.921957][T11275] debugfs: Directory 'netdev:' with parent 'phy45' already present! [ 485.985497][T11275] netlink: 'syz.2.1829': attribute type 11 has an invalid length. [ 486.274000][T11287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.775596][ T5287] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 486.839589][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1838'. [ 486.975198][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 486.991015][ T5287] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 487.017821][ T5287] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 487.045841][ T5287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.067599][ T5287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.088242][ T5287] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.106904][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.122040][ T5287] usb 5-1: Product: syz [ 487.130492][ T5287] usb 5-1: Manufacturer: syz [ 487.142485][ T5287] usb 5-1: SerialNumber: syz [ 487.383128][ T5287] usb 5-1: 0:2 : does not exist [ 487.432893][ T5287] usb 5-1: USB disconnect, device number 22 [ 488.382954][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 489.500201][T11386] loop4: detected capacity change from 0 to 8192 [ 489.524234][T11386] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 489.567748][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1867'. [ 490.271860][T11386] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 490.281969][T11386] FAT-fs (loop4): Filesystem has been set read-only [ 491.208018][ T5599] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.401234][ T29] audit: type=1326 audit(1722522134.886:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.401355][ T29] audit: type=1326 audit(1722522134.886:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.401577][ T29] audit: type=1326 audit(1722522135.246:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.401677][ T29] audit: type=1326 audit(1722522135.246:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.401901][ T29] audit: type=1326 audit(1722522135.246:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.402000][ T29] audit: type=1326 audit(1722522135.246:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.402267][ T29] audit: type=1326 audit(1722522135.246:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.402363][ T29] audit: type=1326 audit(1722522135.246:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.402578][ T29] audit: type=1326 audit(1722522135.246:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.402671][ T29] audit: type=1326 audit(1722522135.246:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7fc00000 [ 492.718430][ T5599] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.934818][ T5224] Bluetooth: hci3: command 0x0406 tx timeout [ 492.942457][ T5599] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.210466][ T5599] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.666657][ T5599] bridge_slave_1: left allmulticast mode [ 493.676982][ T5599] bridge_slave_1: left promiscuous mode [ 493.712121][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.748181][ T5599] bridge_slave_0: left allmulticast mode [ 493.761892][ T5599] bridge_slave_0: left promiscuous mode [ 493.785355][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.798107][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.826350][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.837908][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.852688][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.873927][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 493.887247][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.168277][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 495.717772][T11482] dccp_close: ABORT with 1 bytes unread [ 495.989416][ T5228] Bluetooth: hci0: command tx timeout [ 496.381559][ T5599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.416844][ T5599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.446090][ T5599] bond0 (unregistering): Released all slaves [ 498.005183][ T5599] hsr_slave_0: left promiscuous mode [ 498.054777][ T5228] Bluetooth: hci0: command tx timeout [ 498.080976][ T5599] hsr_slave_1: left promiscuous mode [ 498.154890][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.162389][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.224025][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.244897][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.344769][ T5599] veth1_macvtap: left promiscuous mode [ 498.353148][ T5599] veth0_macvtap: left promiscuous mode [ 498.363986][ T5599] veth1_vlan: left promiscuous mode [ 498.382563][ T5599] veth0_vlan: left promiscuous mode [ 500.134757][ T5228] Bluetooth: hci0: command tx timeout [ 500.360986][ T5599] team0 (unregistering): Port device team_slave_1 removed [ 500.558833][ T5599] team0 (unregistering): Port device team_slave_0 removed [ 501.101529][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.108016][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.214701][ T5228] Bluetooth: hci0: command tx timeout [ 503.131546][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 503.131568][ T29] audit: type=1326 audit(1722522146.276:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.270623][ T29] audit: type=1326 audit(1722522146.306:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.538394][ T29] audit: type=1326 audit(1722522146.686:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.594743][ T29] audit: type=1326 audit(1722522146.686:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.693165][ T29] audit: type=1326 audit(1722522146.686:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.762771][ T29] audit: type=1326 audit(1722522146.686:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.848428][ T29] audit: type=1326 audit(1722522146.686:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.854322][T11473] chnl_net:caif_netlink_parms(): no params data found [ 503.886971][ T29] audit: type=1326 audit(1722522146.686:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 503.985488][ T29] audit: type=1326 audit(1722522146.686:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 504.031465][ T29] audit: type=1326 audit(1722522146.686:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.5.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 504.401164][T11473] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.401308][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.401488][T11473] bridge_slave_0: entered allmulticast mode [ 504.403222][T11473] bridge_slave_0: entered promiscuous mode [ 504.416010][T11473] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.416146][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.416361][T11473] bridge_slave_1: entered allmulticast mode [ 504.426263][T11473] bridge_slave_1: entered promiscuous mode [ 504.740121][T11473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.795566][T11473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.058199][T11473] team0: Port device team_slave_0 added [ 505.110105][T11473] team0: Port device team_slave_1 added [ 505.271855][T11473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.295771][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.404777][T11473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.825544][T11473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.844023][T11473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.944734][T11473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.397578][T11473] hsr_slave_0: entered promiscuous mode [ 506.450986][T11473] hsr_slave_1: entered promiscuous mode [ 506.486147][T11473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.504277][T11473] Cannot create hsr debugfs directory [ 508.424209][T11678] loop3: detected capacity change from 0 to 2048 [ 508.510525][T11473] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 508.543124][T11473] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.593924][T11473] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.618037][T11678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.676132][T11473] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 508.748468][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 508.748490][ T29] audit: type=1326 audit(1722522151.896:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 508.819541][ T9546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.860834][ T29] audit: type=1326 audit(1722522151.896:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.072860][T11473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.204508][ T29] audit: type=1326 audit(1722522152.316:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.250030][ T29] audit: type=1326 audit(1722522152.316:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.317120][T11473] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.334086][ T29] audit: type=1326 audit(1722522152.316:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.358290][ T29] audit: type=1326 audit(1722522152.316:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.410075][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.417310][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.447128][ T29] audit: type=1326 audit(1722522152.316:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.479435][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.486667][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.511179][ T29] audit: type=1326 audit(1722522152.316:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.624780][ T29] audit: type=1326 audit(1722522152.316:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 509.703437][ T29] audit: type=1326 audit(1722522152.316:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.5.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d7d773b9 code=0x7fc00000 [ 510.058581][ T5230] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 510.254969][ T5230] usb 4-1: Using ep0 maxpacket: 32 [ 510.267954][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.339096][ T5230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.369822][ T5230] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 510.410463][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.440416][ T5230] usb 4-1: config 0 descriptor?? [ 510.467817][ T5230] hub 4-1:0.0: USB hub found [ 510.728998][ T5230] hub 4-1:0.0: 1 port detected [ 511.192965][T11473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.343607][ T5230] hub 4-1:0.0: activate --> -90 [ 511.762051][ T5230] usb 4-1: Failed to suspend device, error -71 [ 511.796699][ T5281] usb 4-1: USB disconnect, device number 30 [ 512.417824][T11473] veth0_vlan: entered promiscuous mode [ 512.517567][T11473] veth1_vlan: entered promiscuous mode [ 512.663574][T11473] veth0_macvtap: entered promiscuous mode [ 512.728649][T11473] veth1_macvtap: entered promiscuous mode [ 512.833118][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.851175][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.885803][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.922873][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.956926][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.975789][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.007774][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.048438][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.083952][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.131457][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.162016][T11473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.220299][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.265146][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.265182][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.265204][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.265224][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.265243][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.265263][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.265281][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.265299][T11473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.265317][T11473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.274557][T11473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.326831][T11473] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.548067][T11473] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.584818][T11473] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.631048][T11473] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.927090][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.948751][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.236774][ T5599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.256561][ T5599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.376664][T11784] wg2: entered promiscuous mode [ 514.404799][T11784] wg2: entered allmulticast mode [ 514.569400][T11786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 514.959562][T11796] tap0: tun_chr_ioctl cmd 1074025673 [ 515.005177][T11798] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 515.051672][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 515.051693][ T29] audit: type=1326 audit(1722522158.196:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11797 comm="syz.2.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x0 [ 516.672309][ T29] audit: type=1326 audit(1722522159.816:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 516.779238][ T29] audit: type=1326 audit(1722522159.816:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 516.857829][ T29] audit: type=1326 audit(1722522159.816:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 516.930739][ T29] audit: type=1326 audit(1722522159.816:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 517.015301][ T5281] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 517.028066][ T29] audit: type=1326 audit(1722522159.816:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 517.180618][ T29] audit: type=1326 audit(1722522159.816:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 517.227306][ T5281] usb 6-1: config 0 has no interfaces? [ 517.232864][ T5281] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 517.254906][ T5281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.266511][ T29] audit: type=1326 audit(1722522159.816:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 517.307331][ T5281] usb 6-1: config 0 descriptor?? [ 517.353824][ T29] audit: type=1326 audit(1722522159.816:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 517.435360][ T29] audit: type=1326 audit(1722522159.816:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz.2.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 517.519276][ T5281] usb 6-1: USB disconnect, device number 22 [ 517.840728][T11858] wg2: entered promiscuous mode [ 517.869634][T11858] wg2: entered allmulticast mode [ 518.357421][T11868] IPv6: Can't replace route, no match found [ 519.434971][ T8] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 519.655406][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 519.676004][ T8] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 519.694844][ T8] usb 6-1: config 0 has no interface number 0 [ 519.707027][ T8] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01cb, bcdDevice= 8.00 [ 519.744760][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.823826][ T8] usb 6-1: config 0 descriptor?? [ 519.850890][ T8] ftdi_sio 6-1:0.109: FTDI USB Serial Device converter detected [ 519.893589][ T8] usb 6-1: Detected FT4232H [ 520.485564][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 520.523219][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 520.551651][ T8] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 520.605108][ T8] usb 6-1: USB disconnect, device number 23 [ 520.648794][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 520.698448][ T8] ftdi_sio 6-1:0.109: device disconnected [ 520.732122][T11902] IPv6: Can't replace route, no match found [ 520.744726][ T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 520.981418][ T47] usb 3-1: config 0 has no interfaces? [ 520.994732][ T47] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 521.029148][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.061121][ T47] usb 3-1: config 0 descriptor?? [ 521.102962][T11910] loop3: detected capacity change from 0 to 256 [ 521.129507][T11910] vfat: Bad value for 'fmask' [ 521.293955][ T47] usb 3-1: USB disconnect, device number 8 [ 521.664795][ T1845] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 521.929185][ T1845] usb 4-1: Using ep0 maxpacket: 32 [ 522.053825][ T1845] usb 4-1: config 0 interface 0 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 522.296422][ T1845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 522.584890][ T1845] usb 4-1: New USB device found, idVendor=12d1, idProduct=89ed, bcdDevice=6e.4f [ 522.634751][ T1845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.681646][ T1845] usb 4-1: Product: syz [ 522.691719][ T1845] usb 4-1: Manufacturer: syz [ 522.700649][ T1845] usb 4-1: SerialNumber: syz [ 522.725996][ T1845] usb 4-1: config 0 descriptor?? [ 522.901047][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 522.921195][T11933] IPv6: Can't replace route, no match found [ 523.000647][ T1845] option 4-1:0.0: GSM modem (1-port) converter detected [ 523.460823][ T9] usb 4-1: USB disconnect, device number 31 [ 523.566278][ T9] option 4-1:0.0: device disconnected [ 524.427198][T11956] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 524.439426][T11935] dccp_close: ABORT with 1 bytes unread [ 524.478604][ T1845] IPVS: starting estimator thread 0... [ 524.628511][T11959] IPVS: using max 16 ests per chain, 38400 per kthread [ 524.776863][T11965] IPv6: Can't replace route, no match found [ 524.945201][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 525.028349][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 525.150307][ T8] usb 3-1: config 0 has no interfaces? [ 525.185875][ T8] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 525.245258][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.274141][ T8] usb 3-1: config 0 descriptor?? [ 525.489641][ T8] usb 3-1: USB disconnect, device number 9 [ 525.799153][T11988] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 526.355233][ T8] IPVS: starting estimator thread 0... [ 526.464751][T12002] IPVS: using max 22 ests per chain, 52800 per kthread [ 526.517786][T12008] IPv6: Can't replace route, no match found [ 526.790474][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 527.544691][ T1845] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 527.610550][T12039] IPv6: Can't replace route, no match found [ 527.788695][ T1845] usb 2-1: config 0 has no interfaces? [ 527.802732][ T1845] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 527.841102][ T1845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.883518][ T1845] usb 2-1: config 0 descriptor?? [ 528.052666][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 528.115210][T12030] kernel profiling enabled (shift: 63) [ 528.120756][T12030] profiling shift: 63 too large [ 528.178084][ T8] usb 2-1: USB disconnect, device number 20 [ 528.904967][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 528.904994][ T29] audit: type=1326 audit(1722522172.046:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.604762][ T29] audit: type=1326 audit(1722522172.046:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.732823][ T29] audit: type=1326 audit(1722522172.396:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.855236][ T29] audit: type=1326 audit(1722522172.396:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.891851][ T29] audit: type=1326 audit(1722522172.396:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.892443][T12081] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2114'. [ 529.925112][ T29] audit: type=1326 audit(1722522172.396:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.925175][ T29] audit: type=1326 audit(1722522172.396:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.925230][ T29] audit: type=1326 audit(1722522172.396:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.925284][ T29] audit: type=1326 audit(1722522172.406:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 529.925340][ T29] audit: type=1326 audit(1722522172.406:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x7fc00000 [ 530.130247][T12085] xt_nfacct: accounting object `syz1' does not exists [ 530.373437][T12088] IPv6: Can't replace route, no match found [ 530.932931][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2120'. [ 531.210289][ T5287] IPVS: starting estimator thread 0... [ 531.304786][T12115] IPVS: using max 16 ests per chain, 38400 per kthread [ 532.195867][T12132] IPv6: Can't replace route, no match found [ 533.121446][ T8] IPVS: starting estimator thread 0... [ 533.235172][T12159] IPVS: using max 16 ests per chain, 38400 per kthread [ 533.526543][T12166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.373716][T12173] IPv6: Can't replace route, no match found [ 534.414851][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 534.414872][ T29] audit: type=1326 audit(1722522177.466:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 535.003747][T12192] loop3: detected capacity change from 0 to 2048 [ 535.115283][T12192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.069582][ T29] audit: type=1326 audit(1722522179.636:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 537.178171][ T9546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.259510][ T29] audit: type=1326 audit(1722522179.646:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 537.318479][T12224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.341543][ T29] audit: type=1326 audit(1722522179.816:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12209 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dd9d773b9 code=0x7fc00000 [ 537.527662][T12230] loop3: detected capacity change from 0 to 2048 [ 537.631885][T12230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.283257][ T9546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.019882][ T29] audit: type=1326 audit(1722522183.156:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.1.2176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2121773b9 code=0x0 [ 540.081833][ T29] audit: type=1326 audit(1722522183.156:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.1.2176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2121773b9 code=0x0 [ 540.143504][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.159175][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.216139][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.239587][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.249989][ T5224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 540.268361][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 540.691154][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.939099][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.945528][T12296] loop3: detected capacity change from 0 to 2048 [ 541.006262][T12296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.129764][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.330958][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.744359][T12279] chnl_net:caif_netlink_parms(): no params data found [ 541.767452][ T11] bridge_slave_1: left allmulticast mode [ 541.780912][ T11] bridge_slave_1: left promiscuous mode [ 541.785982][ T9546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.804941][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.831560][ T11] bridge_slave_0: left allmulticast mode [ 541.846908][ T11] bridge_slave_0: left promiscuous mode [ 541.860136][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.297035][T12326] loop3: detected capacity change from 0 to 64 [ 542.375796][ T5228] Bluetooth: hci6: command tx timeout [ 542.951232][T12334] loop3: detected capacity change from 0 to 256 [ 543.005888][T12338] netlink: 'syz.2.2201': attribute type 11 has an invalid length. [ 543.048947][T12334] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 543.121769][T12342] netlink: 'syz.2.2201': attribute type 11 has an invalid length. [ 544.258299][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.447113][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.457595][ T5228] Bluetooth: hci6: command tx timeout [ 544.797944][ T11] bond0 (unregistering): Released all slaves [ 546.536478][ T5228] Bluetooth: hci6: command tx timeout [ 546.711427][T12361] loop3: detected capacity change from 0 to 64 [ 547.192541][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.221838][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.270736][T12279] bridge_slave_0: entered allmulticast mode [ 547.296896][T12279] bridge_slave_0: entered promiscuous mode [ 547.325717][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.360532][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.374937][T12279] bridge_slave_1: entered allmulticast mode [ 547.398216][T12279] bridge_slave_1: entered promiscuous mode [ 547.477120][ T11] hsr_slave_0: left promiscuous mode [ 547.557273][ T11] hsr_slave_1: left promiscuous mode [ 547.612661][ T11] batman_adv: batadv0: Interface deactivated: dummy0 [ 547.632735][ T11] batman_adv: batadv0: Removing interface: dummy0 [ 547.674261][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.699391][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.753430][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.781053][ T29] audit: type=1326 audit(1722522190.916:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 547.805979][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.866134][ T29] audit: type=1326 audit(1722522190.916:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 547.899134][ T11] veth1_macvtap: left allmulticast mode [ 547.933223][ T11] veth1_macvtap: left promiscuous mode [ 547.941718][ T11] veth0_macvtap: left promiscuous mode [ 547.972957][ T11] veth1_vlan: left promiscuous mode [ 547.978804][ T29] audit: type=1326 audit(1722522190.916:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 548.003199][ T11] veth0_vlan: left promiscuous mode [ 548.041698][ T29] audit: type=1326 audit(1722522190.916:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 548.155503][ T29] audit: type=1326 audit(1722522190.916:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6755773b9 code=0x7ffc0000 [ 548.216532][T12392] netlink: 'syz.2.2218': attribute type 11 has an invalid length. [ 548.245461][ T29] audit: type=1326 audit(1722522190.926:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6755773f3 code=0x7ffc0000 [ 548.365058][ T29] audit: type=1326 audit(1722522190.926:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa675575e9f code=0x7ffc0000 [ 548.424559][T12402] netlink: 'syz.2.2218': attribute type 11 has an invalid length. [ 548.433092][ T29] audit: type=1326 audit(1722522190.926:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa675577447 code=0x7ffc0000 [ 548.524317][ T29] audit: type=1326 audit(1722522190.926:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa675575d50 code=0x7ffc0000 [ 548.566782][ T29] audit: type=1326 audit(1722522190.926:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12380 comm="syz.2.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa67557604a code=0x7ffc0000 [ 548.619635][ T5228] Bluetooth: hci6: command tx timeout [ 548.796215][T12408] xt_bpf: check failed: parse error [ 549.371071][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 549.747044][ T11] team0 (unregistering): Port device team_slave_1 removed [ 549.936530][ T11] team0 (unregistering): Port device team_slave_0 removed [ 550.067733][T12450] xt_bpf: check failed: parse error [ 551.573151][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 552.202316][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.245553][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.467053][T12279] team0: Port device team_slave_0 added [ 552.495721][T12279] team0: Port device team_slave_1 added [ 552.553731][T12492] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 552.710327][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.760936][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.846241][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.877618][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.897056][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.969785][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.996498][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 553.215282][ T11] IPVS: stop unused estimator thread 0... [ 553.311126][T12520] netlink: 'syz.4.2261': attribute type 11 has an invalid length. [ 553.360368][T12279] hsr_slave_0: entered promiscuous mode [ 553.399666][T12279] hsr_slave_1: entered promiscuous mode [ 553.428300][T12279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.458493][T12279] Cannot create hsr debugfs directory [ 553.465343][T12526] netlink: 'syz.4.2261': attribute type 11 has an invalid length. [ 553.550238][ T47] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 553.715219][ T47] usb 4-1: device descriptor read/64, error -71 [ 553.785030][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 553.992417][ T8] usb 3-1: config 0 has no interfaces? [ 554.001058][ T8] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 554.006744][ T47] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 554.032983][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.066574][ T8] usb 3-1: config 0 descriptor?? [ 554.225749][ T47] usb 4-1: device descriptor read/64, error -71 [ 554.276103][T12527] kernel profiling enabled (shift: 0) [ 554.361006][ T47] usb usb4-port1: attempt power cycle [ 554.795485][ T47] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 554.825187][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2274'. [ 554.837895][T12279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.864287][T12279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.882374][ T47] usb 4-1: device descriptor read/8, error -71 [ 554.915629][T12279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.958441][T12279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 555.160621][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2275'. [ 555.186634][ T47] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 555.256914][ T47] usb 4-1: device descriptor read/8, error -71 [ 555.351846][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.395323][ T47] usb usb4-port1: unable to enumerate USB device [ 555.442738][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.471501][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.478745][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.548990][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.556222][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.719006][T12279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.427512][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.573413][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 556.573436][ T29] audit: type=1326 audit(1722522199.716:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.3.2279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x0 [ 556.667884][T12527] syz.2.2266: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 556.715275][T12527] CPU: 0 UID: 0 PID: 12527 Comm: syz.2.2266 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 556.726109][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 556.736176][T12527] Call Trace: [ 556.739456][T12527] [ 556.742382][T12527] dump_stack_lvl+0x241/0x360 [ 556.747074][T12527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.752281][T12527] ? __pfx__printk+0x10/0x10 [ 556.756886][T12527] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 556.763306][T12527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.768952][T12527] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 556.775469][T12527] warn_alloc+0x278/0x410 [ 556.779824][T12527] ? __pfx_warn_alloc+0x10/0x10 [ 556.784696][T12527] ? profile_init+0xb1/0x100 [ 556.789297][T12527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.794939][T12527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.800572][T12527] ? __get_vm_area_node+0x23d/0x270 [ 556.805812][T12527] __vmalloc_node_range_noprof+0x69f/0x1460 [ 556.811861][T12527] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.818203][T12527] ? rcu_is_watching+0x15/0xb0 [ 556.822993][T12527] ? rcu_is_watching+0x15/0xb0 [ 556.827775][T12527] ? profile_init+0xb1/0x100 [ 556.832377][T12527] ? __pfx_sysfs_kf_write+0x10/0x10 [ 556.837589][T12527] vzalloc_noprof+0x79/0x90 [ 556.842110][T12527] ? profile_init+0xb1/0x100 [ 556.846795][T12527] profile_init+0xb1/0x100 [ 556.851223][T12527] profiling_store+0x6c/0xf0 [ 556.855822][T12527] kernfs_fop_write_iter+0x3a3/0x500 [ 556.861119][T12527] vfs_write+0xa74/0xc90 [ 556.865373][T12527] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 556.871185][T12527] ? __pfx_vfs_write+0x10/0x10 [ 556.875953][T12527] ? do_futex+0x33b/0x560 [ 556.880299][T12527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.885933][T12527] ksys_write+0x1a0/0x2c0 [ 556.890264][T12527] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.895896][T12527] ? __pfx_ksys_write+0x10/0x10 [ 556.900748][T12527] ? do_syscall_64+0x100/0x230 [ 556.905516][T12527] ? do_syscall_64+0xb6/0x230 [ 556.910202][T12527] do_syscall_64+0xf3/0x230 [ 556.914724][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.920677][T12527] RIP: 0033:0x7fa6755773b9 [ 556.925089][T12527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.944964][T12527] RSP: 002b:00007fa676331048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 556.953386][T12527] RAX: ffffffffffffffda RBX: 00007fa675705f80 RCX: 00007fa6755773b9 [ 556.961362][T12527] RDX: 0000000000000028 RSI: 0000000020000140 RDI: 0000000000000003 [ 556.969420][T12527] RBP: 00007fa6755e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 556.977495][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.985536][T12527] R13: 000000000000004d R14: 00007fa675705f80 R15: 00007ffd33d31d28 [ 556.993542][T12527] [ 557.035757][T12279] veth0_vlan: entered promiscuous mode [ 557.068195][T12279] veth1_vlan: entered promiscuous mode [ 557.174440][T12527] Mem-Info: [ 557.193764][T12279] veth0_macvtap: entered promiscuous mode [ 557.224264][T12527] active_anon:30114 inactive_anon:0 isolated_anon:0 [ 557.224264][T12527] active_file:8461 inactive_file:49224 isolated_file:0 [ 557.224264][T12527] unevictable:768 dirty:146 writeback:0 [ 557.224264][T12527] slab_reclaimable:10373 slab_unreclaimable:98752 [ 557.224264][T12527] mapped:34152 shmem:27963 pagetables:765 [ 557.224264][T12527] sec_pagetables:0 bounce:0 [ 557.224264][T12527] kernel_misc_reclaimable:0 [ 557.224264][T12527] free:1310623 free_pcp:1789 free_cma:0 [ 557.272721][T12279] veth1_macvtap: entered promiscuous mode [ 557.334102][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.401416][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.459491][T12527] Node 0 active_anon:126956kB inactive_anon:0kB active_file:33844kB inactive_file:196824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127508kB dirty:584kB writeback:0kB shmem:117016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9980kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no [ 557.488646][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.502994][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.513312][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.525951][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.536348][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.547124][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.563733][T12527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 557.601022][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.622711][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.638790][T12527] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.669252][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.691961][T12527] lowmem_reserve[]: 0 2561 2562 0 0 [ 557.698254][T12527] Node 0 DMA32 free:1274176kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:121948kB inactive_anon:0kB active_file:33844kB inactive_file:195504kB unevictable:1536kB writepending:596kB present:3129332kB managed:2651260kB mlocked:0kB bounce:0kB free_pcp:5824kB local_pcp:1076kB free_cma:0kB [ 557.741895][T12527] lowmem_reserve[]: 0 0 1 0 0 [ 557.747181][T12527] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 557.835287][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.856634][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.865644][T12527] lowmem_reserve[]: 0 0 0 0 0 [ 557.871066][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.875940][T12527] Node 1 [ 557.884224][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.895558][T12527] Normal free:3953656kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.931595][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.965046][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.965952][T12527] lowmem_reserve[]: [ 557.985268][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.993674][T12527] 0 0 0 0 0 [ 558.014632][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.027124][T12527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 558.035472][T12279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.062464][T12527] Node 0 DMA32: 67*4kB (UME) 39*8kB (UME) 313*16kB (ME) 258*32kB (UME) 14*64kB (UME) 7*128kB (UME) 5*256kB (UME) 4*512kB (UME) 5*1024kB (UME) 4*2048kB (UM) 306*4096kB (UM) = 1285652kB [ 558.114701][T12527] Node 0 Normal: 1*4kB [ 558.114762][T12279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.116826][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.126154][T12527] (M) [ 558.178342][T12279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.187507][T12527] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 558.225369][T12279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.234184][T12279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.234767][T12527] Node 1 Normal: 6*4kB (UM) 4*8kB (UM) 10*16kB (UM) 11*32kB (UM) 3*64kB (U) 4*128kB (U) 7*256kB (UM) 4*512kB (UM) 2*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3953656kB [ 558.278673][T12279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.315201][T12527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.344798][T12527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.354162][T12527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.424794][T12527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.444736][T12527] 68687 total pagecache pages [ 558.449484][T12527] 0 pages in swap cache [ 558.453658][T12527] Free swap = 124984kB [ 558.494713][T12527] Total swap = 124996kB [ 558.499027][T12527] 2097051 pages RAM [ 558.502846][T12527] 0 pages HighMem/MovableOnly [ 558.561442][T12527] 402770 pages reserved [ 558.580524][T12527] 0 pages cma reserved [ 558.674302][ T6037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.704704][ T6037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.830306][ T5617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.872312][ T5617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.890919][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 559.499075][ T5224] Bluetooth: hci1: command 0x0406 tx timeout [ 559.646644][ T47] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 559.785155][ T29] audit: type=1326 audit(1722522202.856:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 560.014782][ T47] usb 2-1: device descriptor read/64, error -71 [ 560.102536][ T29] audit: type=1326 audit(1722522202.856:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 560.249972][ T29] audit: type=1326 audit(1722522203.156:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12598 comm="syz.0.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 560.345027][ T47] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 560.482593][T11040] usb 3-1: USB disconnect, device number 10 [ 560.536621][ T47] usb 2-1: device descriptor read/64, error -71 [ 560.656875][ T47] usb usb2-port1: attempt power cycle [ 561.020714][T12604] loop3: detected capacity change from 0 to 32768 [ 561.204710][ T47] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 561.527770][ T47] usb 2-1: device descriptor read/8, error -71 [ 562.075215][ T47] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 562.175941][ T47] usb 2-1: device descriptor read/8, error -71 [ 562.315845][ T47] usb usb2-port1: unable to enumerate USB device [ 562.489347][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2304'. [ 562.545498][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.552154][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.346279][ T29] audit: type=1326 audit(1722522206.476:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 563.687472][ T29] audit: type=1326 audit(1722522206.476:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 563.863725][ T29] audit: type=1326 audit(1722522206.726:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.0.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 564.283467][T12662] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 564.522148][T12671] loop3: detected capacity change from 0 to 64 [ 564.593693][T12671] minix: Unknown parameter '0xffffffffffffffff00000000000000000000000"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 564.593693][T12671] o*e4bL*' [ 564.928628][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2319'. [ 566.626573][T12709] IPv6: Can't replace route, no match found [ 567.232610][T12721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.608233][T12725] loop3: detected capacity change from 0 to 2048 [ 567.667287][T12725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.936567][ T9546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.505670][T12742] IPv6: Can't replace route, no match found [ 569.505560][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 569.732637][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 569.770839][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.802657][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.836766][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 569.878853][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 569.918985][ T8] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 569.950060][ T8] usb 5-1: Manufacturer: syz [ 569.965873][ T8] usb 5-1: config 0 descriptor?? [ 570.014519][T12781] IPv6: Can't replace route, no match found [ 570.415298][ T8] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 570.444453][ T8] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 570.513268][ T8] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 570.629266][T12802] netlink: 'syz.3.2365': attribute type 11 has an invalid length. [ 570.714313][T12806] netlink: 'syz.3.2365': attribute type 11 has an invalid length. [ 571.125309][ T8] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 571.203122][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'. [ 571.266249][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2372'. [ 571.347372][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 571.369662][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 571.394031][ T8] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 571.416440][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.442035][ T8] usb 2-1: Product: syz [ 571.452462][ T8] usb 2-1: Manufacturer: syz [ 571.471240][ T8] usb 2-1: SerialNumber: syz [ 571.518282][ T8] usb 2-1: config 0 descriptor?? [ 571.640646][ T8] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 571.661496][ T8] usb 2-1: Detected FT232R [ 571.862687][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 571.914352][T12840] IPv6: Can't replace route, no match found [ 571.963980][ T5285] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 572.491271][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 572.514769][ T8] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 572.538022][ T8] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 572.587988][ T8] usb 2-1: USB disconnect, device number 25 [ 572.626930][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 572.662150][ T8] ftdi_sio 2-1:0.0: device disconnected [ 572.676294][ T29] audit: type=1326 audit(1722522215.826:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12853 comm="syz.1.2381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2121773b9 code=0x0 [ 573.121292][ T9] usb 5-1: USB disconnect, device number 23 [ 573.731621][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 573.885049][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2388'. [ 574.196272][T12890] IPv6: Can't replace route, no match found [ 575.805279][ T29] audit: type=1326 audit(1722522218.946:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.0.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc796d773b9 code=0x0 [ 575.961264][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 576.272066][T12941] syz.4.2407: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 576.314707][T12941] CPU: 1 UID: 0 PID: 12941 Comm: syz.4.2407 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 576.325550][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 576.335640][T12941] Call Trace: [ 576.336351][T12945] pimreg: entered allmulticast mode [ 576.338916][T12941] [ 576.338932][T12941] dump_stack_lvl+0x241/0x360 [ 576.351774][T12941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.357025][T12941] ? __pfx__printk+0x10/0x10 [ 576.361658][T12941] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 576.368118][T12941] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.373794][T12941] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 576.380347][T12941] warn_alloc+0x278/0x410 [ 576.384723][T12941] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.390388][T12941] ? stack_depot_save_flags+0x29/0x830 [ 576.395883][T12941] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 576.401989][T12941] ? __pfx_warn_alloc+0x10/0x10 [ 576.406884][T12941] ? kasan_save_track+0x3f/0x80 [ 576.411778][T12941] ? __kasan_kmalloc+0x98/0xb0 [ 576.416588][T12941] ? xsk_setsockopt+0x598/0x950 [ 576.421473][T12941] ? do_sock_setsockopt+0x3b1/0x720 [ 576.426724][T12941] ? __sys_setsockopt+0x1ae/0x250 [ 576.431807][T12941] ? __x64_sys_setsockopt+0xb5/0xd0 [ 576.437062][T12941] ? do_syscall_64+0xf3/0x230 [ 576.441801][T12941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.447933][T12941] __vmalloc_node_range_noprof+0x130/0x1460 [ 576.453895][T12941] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 576.460264][T12941] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.465917][T12941] ? __kasan_kmalloc+0x98/0xb0 [ 576.470709][T12941] ? xskq_create+0x54/0x170 [ 576.475245][T12941] vmalloc_user_noprof+0x74/0x80 [ 576.480200][T12941] ? xskq_create+0xb6/0x170 [ 576.484726][T12941] xskq_create+0xb6/0x170 [ 576.489083][T12941] xsk_init_queue+0xa1/0x100 [ 576.493697][T12941] xsk_setsockopt+0x598/0x950 [ 576.498395][T12941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 576.503616][T12941] ? __pfx_lock_acquire+0x10/0x10 [ 576.508678][T12941] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.514324][T12941] ? aa_sock_opt_perm+0x79/0x120 [ 576.519289][T12941] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.524956][T12941] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.530610][T12941] ? security_socket_setsockopt+0x87/0xb0 [ 576.536370][T12941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 576.541583][T12941] do_sock_setsockopt+0x3b1/0x720 [ 576.546648][T12941] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 576.552218][T12941] ? __fget_files+0x29/0x470 [ 576.556839][T12941] ? __fget_files+0x3f6/0x470 [ 576.561554][T12941] __sys_setsockopt+0x1ae/0x250 [ 576.566449][T12941] __x64_sys_setsockopt+0xb5/0xd0 [ 576.571520][T12941] do_syscall_64+0xf3/0x230 [ 576.576055][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.581977][T12941] RIP: 0033:0x7f3e473773b9 [ 576.586408][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.606034][T12941] RSP: 002b:00007f3e481ac048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 576.614485][T12941] RAX: ffffffffffffffda RBX: 00007f3e47505f80 RCX: 00007f3e473773b9 [ 576.622487][T12941] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 576.630485][T12941] RBP: 00007f3e473e48e6 R08: 0000000000000004 R09: 0000000000000000 [ 576.638470][T12941] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.646467][T12941] R13: 000000000000000b R14: 00007f3e47505f80 R15: 00007ffe96109828 [ 576.654475][T12941] [ 576.721300][T12950] syzkaller0: entered allmulticast mode [ 576.728643][T12941] Mem-Info: [ 576.733224][T12941] active_anon:12821 inactive_anon:0 isolated_anon:0 [ 576.733224][T12941] active_file:8461 inactive_file:49234 isolated_file:0 [ 576.733224][T12941] unevictable:768 dirty:150 writeback:0 [ 576.733224][T12941] slab_reclaimable:10379 slab_unreclaimable:100971 [ 576.733224][T12941] mapped:29222 shmem:10644 pagetables:831 [ 576.733224][T12941] sec_pagetables:0 bounce:0 [ 576.733224][T12941] kernel_misc_reclaimable:0 [ 576.733224][T12941] free:1350501 free_pcp:380 free_cma:0 [ 576.768200][T12953] syz.3.2409: attempt to access beyond end of device [ 576.768200][T12953] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 576.792024][T12941] Node 0 active_anon:51984kB inactive_anon:0kB active_file:33844kB inactive_file:196864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117488kB dirty:600kB writeback:0kB shmem:41540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10284kB pagetables:3324kB sec_pagetables:0kB all_unreclaimable? no [ 576.846409][T12941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 576.902509][T12941] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.945202][T12953] syz.3.2409: attempt to access beyond end of device [ 576.945202][T12953] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 577.005354][T12941] lowmem_reserve[]: 0 2561 2562 0 0 [ 577.007472][T12948] syzkaller0: left allmulticast mode [ 577.020697][T12941] Node 0 DMA32 free:1430644kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:53540kB inactive_anon:0kB active_file:33844kB inactive_file:195536kB unevictable:1536kB writepending:600kB present:3129332kB managed:2651260kB mlocked:0kB bounce:0kB free_pcp:1364kB local_pcp:468kB free_cma:0kB [ 577.048234][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.094338][T12953] syz.3.2409: attempt to access beyond end of device [ 577.094338][T12953] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 577.136080][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 577.204716][T12941] lowmem_reserve[]: 0 0 1 0 0 [ 577.220869][T12941] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 577.277143][T12953] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 577.309542][T12953] UDF-fs: Scanning with blocksize 512 failed [ 577.328913][T12941] lowmem_reserve[]: 0 0 0 0 0 [ 577.333685][T12941] Node 1 Normal free:3953660kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.382508][T12953] syz.3.2409: attempt to access beyond end of device [ 577.382508][T12953] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 577.524126][T12941] lowmem_reserve[]: 0 0 0 0 0 [ 577.529990][T12953] syz.3.2409: attempt to access beyond end of device [ 577.529990][T12953] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 577.556095][T12941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 577.574755][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.594781][T12941] Node 0 DMA32: 191*4kB (UE) 195*8kB (UME) 220*16kB (UME) 481*32kB (UME) 424*64kB (UME) 284*128kB (UME) 179*256kB (UME) 78*512kB (UME) 15*1024kB (UME) 1*2048kB (M) 302*4096kB (UM) = 1424884kB [ 577.601696][T12953] syz.3.2409: attempt to access beyond end of device [ 577.601696][T12953] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 577.632805][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 577.679348][T12953] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 577.687448][T12941] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 577.694873][T12953] UDF-fs: Scanning with blocksize 1024 failed [ 577.723135][T12953] syz.3.2409: attempt to access beyond end of device [ 577.723135][T12953] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 577.755570][T12941] Node 1 Normal: 7*4kB (UM) 4*8kB (UM) 10*16kB (UM) 11*32kB (UM) 3*64kB (U) 4*128kB (U) 7*256kB (UM) 4*512kB (UM) 2*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3953660kB [ 577.777061][T12953] syz.3.2409: attempt to access beyond end of device [ 577.777061][T12953] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 577.795792][T12941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.819411][T12941] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.851050][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 577.860971][T12941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.928447][T12941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.984950][T12953] syz.3.2409: attempt to access beyond end of device [ 577.984950][T12953] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 577.986553][T12941] 66722 total pagecache pages [ 578.063080][T12941] 0 pages in swap cache [ 578.070551][T12941] Free swap = 124984kB [ 578.075732][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 578.095077][T12953] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 578.110729][T12941] Total swap = 124996kB [ 578.124502][T12953] UDF-fs: Scanning with blocksize 2048 failed [ 578.134048][T12953] syz.3.2409: attempt to access beyond end of device [ 578.134048][T12953] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 578.162252][T12941] 2097051 pages RAM [ 578.170476][T12941] 0 pages HighMem/MovableOnly [ 578.175674][T12941] 402770 pages reserved [ 578.179851][T12941] 0 pages cma reserved [ 578.202631][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 578.242917][T12953] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 578.278589][T12953] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 578.304782][T12953] UDF-fs: Scanning with blocksize 4096 failed [ 578.330352][T12953] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 578.564002][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 578.982670][T13003] netlink: 'syz.5.2427': attribute type 11 has an invalid length. [ 579.097668][T13003] netlink: 'syz.5.2427': attribute type 11 has an invalid length. [ 579.880276][T13029] fuse: Unknown parameter '' [ 580.078552][ T5226] Bluetooth: hci4: command 0x0406 tx timeout [ 580.085579][ T5226] Bluetooth: hci5: command 0x0406 tx timeout [ 582.913248][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 582.983864][T13044] loop7: detected capacity change from 0 to 16384 [ 583.071016][ T44] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 583.104791][ T5285] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 583.245874][T13050] loop3: detected capacity change from 0 to 2048 [ 583.295164][T13050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.314513][ T5285] usb 6-1: Using ep0 maxpacket: 16 [ 583.336247][ T5285] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.336779][T13059] netlink: 'syz.0.2445': attribute type 11 has an invalid length. [ 583.354414][ T5285] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.372779][ T5285] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 583.394713][ T5285] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.401486][ T5285] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 583.416665][T13063] netlink: 'syz.0.2445': attribute type 11 has an invalid length. [ 583.423228][ T5285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.435945][ T5285] usb 6-1: config 0 descriptor?? [ 583.448607][T13063] debugfs: Directory 'netdev:' with parent 'phy55' already present! [ 583.531017][ T9546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.670723][ T5272] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 583.869713][ T5272] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 583.933910][ T5285] hid-generic 0003:045E:05DA.000E: ignoring exceeding usage max [ 583.982178][ T5272] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 584.022704][ T5285] hid-generic 0003:045E:05DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.5-1/input0 [ 584.035677][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.043701][ T5272] usb 3-1: Product: syz [ 584.840662][ T5272] usb 3-1: Manufacturer: syz [ 584.845784][ T5285] usb 6-1: USB disconnect, device number 24 [ 584.855751][ T5272] usb 3-1: SerialNumber: syz [ 585.080009][ T1845] usb 3-1: USB disconnect, device number 11 [ 585.158359][T13092] netlink: 'syz.5.2456': attribute type 3 has an invalid length. [ 586.375793][ T29] audit: type=1326 audit(1722522229.516:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.0.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 586.375870][ T29] audit: type=1326 audit(1722522229.516:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.0.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 587.004773][ T29] audit: type=1326 audit(1722522229.696:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13093 comm="syz.0.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc796d773b9 code=0x7fc00000 [ 588.429868][T13123] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 589.001999][T13130] xt_hashlimit: overflow, rate too high: 0 [ 595.139378][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 595.331858][ T8] usb 4-1: device descriptor read/64, error -71 [ 595.614707][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 595.794873][ T8] usb 4-1: device descriptor read/64, error -71 [ 595.932317][ T8] usb usb4-port1: attempt power cycle [ 596.327389][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 596.374812][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 596.447387][ T8] usb 4-1: device descriptor read/8, error -71 [ 596.744850][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 596.774124][T13267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2517'. [ 596.830720][ T8] usb 4-1: device descriptor read/8, error -71 [ 596.885408][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 596.966390][ T8] usb usb4-port1: unable to enumerate USB device [ 597.170024][T13277] IPv6: Can't replace route, no match found [ 597.616610][T13290] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 597.623964][T13290] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 597.676540][T13290] vhci_hcd vhci_hcd.0: Device attached [ 597.798067][T13291] vhci_hcd: connection closed [ 597.806025][ T6043] vhci_hcd: stop threads [ 597.865018][ T5272] vhci_hcd: vhci_device speed not set [ 597.874047][ T6043] vhci_hcd: release socket [ 597.902430][ T6043] vhci_hcd: disconnect device [ 597.945230][ T5272] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 597.952974][ T5272] usb 11-1: enqueue for inactive port 0 [ 598.064975][ T5272] vhci_hcd: vhci_device speed not set [ 598.937099][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 599.541974][T13316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2535'. [ 599.769254][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 600.004695][ T47] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 600.234016][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 600.272714][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.293251][ T47] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 600.358309][ T47] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 600.374676][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.405006][ T47] usb 6-1: Product: syz [ 600.415677][ T47] usb 6-1: Manufacturer: syz [ 600.432929][ T47] usb 6-1: SerialNumber: syz [ 600.457186][ T47] usb 6-1: config 0 descriptor?? [ 600.726062][ T8] usb 6-1: USB disconnect, device number 25 [ 600.773741][ T29] audit: type=1326 audit(1722522243.896:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 600.864810][ T29] audit: type=1326 audit(1722522243.916:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 600.960599][ T29] audit: type=1326 audit(1722522243.916:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 601.051109][ T29] audit: type=1326 audit(1722522243.916:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 601.125914][ T29] audit: type=1326 audit(1722522243.916:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 601.194724][ T29] audit: type=1326 audit(1722522243.916:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 601.299418][ T29] audit: type=1326 audit(1722522243.916:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 601.374191][ T29] audit: type=1326 audit(1722522243.926:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 601.470420][ T29] audit: type=1326 audit(1722522243.926:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 601.559771][ T29] audit: type=1326 audit(1722522243.926:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6c9773b9 code=0x7ffc0000 [ 602.334832][ T5285] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 602.565235][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 602.586526][ T5285] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 602.626489][ T5285] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 602.669973][ T5285] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 602.713084][ T5285] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.758818][ T5285] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 602.786718][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.012405][ T5285] usb 5-1: GET_CAPABILITIES returned 0 [ 603.050597][ T5285] usbtmc 5-1:16.0: can't read capabilities [ 603.258157][T13359] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2551'. [ 603.305603][T13359] unsupported nlmsg_type 40 [ 603.530972][ T8] usb 5-1: USB disconnect, device number 24 [ 603.888800][T13380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.119826][T13388] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 604.126412][T13388] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 604.156644][T13388] vhci_hcd vhci_hcd.0: Device attached [ 604.236729][T13389] vhci_hcd: connection closed [ 604.237022][ T5594] vhci_hcd: stop threads [ 604.265169][ T5594] vhci_hcd: release socket [ 604.288939][ T5594] vhci_hcd: disconnect device [ 604.355074][ T5285] vhci_hcd: vhci_device speed not set [ 606.483420][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 606.483441][ T29] audit: type=1326 audit(1722522249.626:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.4.2574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e473773b9 code=0x0 [ 606.950565][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 607.526048][T13451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2576'. [ 607.620232][ T1845] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 607.664242][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 608.135405][ T1845] usb 4-1: Using ep0 maxpacket: 16 [ 608.160459][ T1845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.172251][ T1845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.183589][ T1845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 608.193559][ T1845] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 608.221591][ T1845] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.556325][ T1845] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 608.788067][ T1845] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 608.814690][ T1845] usb 4-1: Manufacturer: syz [ 608.830614][ T1845] usb 4-1: config 0 descriptor?? [ 609.273888][T13474] syz.2.2593: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 609.289027][ T1845] rc_core: IR keymap rc-hauppauge not found [ 609.295401][ T1845] Registered IR keymap rc-empty [ 609.300728][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 609.308034][T13474] CPU: 1 UID: 0 PID: 13474 Comm: syz.2.2593 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 609.318796][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 609.328847][T13474] Call Trace: [ 609.332119][T13474] [ 609.335044][T13474] dump_stack_lvl+0x241/0x360 [ 609.339844][T13474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.345046][T13474] ? __pfx__printk+0x10/0x10 [ 609.349647][T13474] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 609.356060][T13474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.361775][T13474] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 609.368279][T13474] warn_alloc+0x278/0x410 [ 609.372616][T13474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.378271][T13474] ? stack_depot_save_flags+0x29/0x830 [ 609.383752][T13474] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 609.389832][T13474] ? __pfx_warn_alloc+0x10/0x10 [ 609.394704][T13474] ? kasan_save_track+0x3f/0x80 [ 609.399569][T13474] ? __kasan_kmalloc+0x98/0xb0 [ 609.404351][T13474] ? xsk_setsockopt+0x598/0x950 [ 609.409233][T13474] ? do_sock_setsockopt+0x3b1/0x720 [ 609.414455][T13474] ? __sys_setsockopt+0x1ae/0x250 [ 609.419502][T13474] ? __x64_sys_setsockopt+0xb5/0xd0 [ 609.424726][T13474] ? do_syscall_64+0xf3/0x230 [ 609.429418][T13474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.435521][T13474] __vmalloc_node_range_noprof+0x130/0x1460 [ 609.441457][T13474] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 609.447800][T13474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.453438][T13474] ? __kasan_kmalloc+0x98/0xb0 [ 609.458221][T13474] ? xskq_create+0x54/0x170 [ 609.462739][T13474] vmalloc_user_noprof+0x74/0x80 [ 609.467688][T13474] ? xskq_create+0xb6/0x170 [ 609.472201][T13474] xskq_create+0xb6/0x170 [ 609.476547][T13474] xsk_init_queue+0xa1/0x100 [ 609.481149][T13474] xsk_setsockopt+0x598/0x950 [ 609.485836][T13474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 609.491054][T13474] ? __pfx_lock_acquire+0x10/0x10 [ 609.496093][T13474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.501731][T13474] ? aa_sock_opt_perm+0x79/0x120 [ 609.506707][T13474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.512365][T13474] ? srso_alias_return_thunk+0x5/0xfbef5 [ 609.518005][T13474] ? security_socket_setsockopt+0x87/0xb0 [ 609.523745][T13474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 609.528955][T13474] do_sock_setsockopt+0x3b1/0x720 [ 609.534013][T13474] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 609.539601][T13474] ? __fget_files+0x29/0x470 [ 609.544221][T13474] ? __fget_files+0x3f6/0x470 [ 609.548931][T13474] __sys_setsockopt+0x1ae/0x250 [ 609.553816][T13474] __x64_sys_setsockopt+0xb5/0xd0 [ 609.558955][T13474] do_syscall_64+0xf3/0x230 [ 609.563486][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.569408][T13474] RIP: 0033:0x7fa6755773b9 [ 609.573864][T13474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.593828][T13474] RSP: 002b:00007fa676331048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 609.602260][T13474] RAX: ffffffffffffffda RBX: 00007fa675705f80 RCX: 00007fa6755773b9 [ 609.610248][T13474] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 609.618233][T13474] RBP: 00007fa6755e48e6 R08: 0000000000000020 R09: 0000000000000000 [ 609.626304][T13474] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 609.634807][T13474] R13: 000000000000004d R14: 00007fa675705f80 R15: 00007ffd33d31d28 [ 609.642812][T13474] [ 609.681471][T13474] Mem-Info: [ 609.692994][T13474] active_anon:8595 inactive_anon:0 isolated_anon:0 [ 609.692994][T13474] active_file:8557 inactive_file:49248 isolated_file:0 [ 609.692994][T13474] unevictable:768 dirty:138 writeback:0 [ 609.692994][T13474] slab_reclaimable:10373 slab_unreclaimable:100508 [ 609.692994][T13474] mapped:25104 shmem:6383 pagetables:822 [ 609.692994][T13474] sec_pagetables:0 bounce:0 [ 609.692994][T13474] kernel_misc_reclaimable:0 [ 609.692994][T13474] free:1353836 free_pcp:1684 free_cma:0 [ 609.739154][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 609.757315][T13474] Node 0 active_anon:34380kB inactive_anon:0kB active_file:34228kB inactive_file:196920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100816kB dirty:552kB writeback:0kB shmem:23996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10420kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no [ 609.800560][ T1845] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 609.839234][ T1845] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 609.860413][T13474] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 609.916141][T13474] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.973739][T13482] netlink: 'syz.0.2596': attribute type 11 has an invalid length. [ 610.001065][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.003206][T13482] netlink: 'syz.0.2596': attribute type 11 has an invalid length. [ 610.036334][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.058191][T13474] lowmem_reserve[]: 0 2561 2562 0 0 [ 610.063889][T13474] Node 0 DMA32 free:1445808kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:34436kB inactive_anon:0kB active_file:34228kB inactive_file:195592kB unevictable:1536kB writepending:552kB present:3129332kB managed:2651260kB mlocked:0kB bounce:0kB free_pcp:6804kB local_pcp:4136kB free_cma:0kB [ 610.095241][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.114450][ T47] jump_label: Fatal kernel bug, unexpected op at fl6_sock_lookup+0x12/0xd0 [ffffffff8a6026c2] (eb 14 e8 a7 3f != 66 90 0f 1f 00)) size:2 type:1 [ 610.137428][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.155619][T13474] lowmem_reserve[]: 0 0 1 0 0 [ 610.163787][ T47] ------------[ cut here ]------------ [ 610.169756][ T47] kernel BUG at arch/x86/kernel/jump_label.c:73! [ 610.186066][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.193902][ T47] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 610.194745][T13482] debugfs: Directory 'netdev:' with parent 'phy55' already present! [ 610.201034][ T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.11.0-rc1-syzkaller-00063-g21b136cc63d2 #0 [ 610.201077][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 610.201094][ T47] Workqueue: events jump_label_update_timeout [ 610.201138][ T47] RIP: 0010:__jump_label_patch+0x463/0x490 [ 610.201176][ T47] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 70 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 6f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 610.201198][ T47] RSP: 0018:ffffc90000b77920 EFLAGS: 00010292 [ 610.201219][ T47] RAX: 000000000000008d RBX: 0000000000000085 RCX: 893e0f523f765300 [ 610.201237][ T47] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 610.201253][ T47] RBP: ffffc90000b77a48 R08: ffffffff8173dfac R09: fffffbfff1cf9f80 [ 610.201273][ T47] R10: dffffc0000000000 R11: fffffbfff1cf9f80 R12: 0000000000000001 [ 610.209527][T13474] Node 0 [ 610.219913][ T47] R13: ffffffff8c056d81 R14: ffffffff931088c0 R15: ffffffff8c056d81 [ 610.219945][ T47] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 610.219967][ T47] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.219986][ T47] CR2: 000000110c4803ed CR3: 000000006ff12000 CR4: 0000000000350ef0 [ 610.220007][ T47] Call Trace: [ 610.220019][ T47] [ 610.220031][ T47] ? __die_body+0x88/0xe0 [ 610.344081][ T47] ? die+0xcf/0x110 [ 610.347901][ T47] ? do_trap+0x15a/0x3a0 [ 610.352141][ T47] ? __jump_label_patch+0x463/0x490 [ 610.357339][ T47] ? do_error_trap+0x1dc/0x2c0 [ 610.362190][ T47] ? __jump_label_patch+0x463/0x490 [ 610.367418][ T47] ? __jump_label_patch+0x463/0x490 [ 610.372625][ T47] ? __pfx_do_error_trap+0x10/0x10 [ 610.377756][ T47] ? report_bug+0x3e8/0x500 [ 610.382696][ T47] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.388522][ T47] ? handle_invalid_op+0x34/0x40 [ 610.393464][ T47] ? __jump_label_patch+0x463/0x490 [ 610.398688][ T47] ? exc_invalid_op+0x38/0x50 [ 610.403366][ T47] ? asm_exc_invalid_op+0x1a/0x20 [ 610.408397][ T47] ? __wake_up_klogd+0xcc/0x110 [ 610.413245][ T47] ? __jump_label_patch+0x463/0x490 [ 610.418473][ T47] ? fl6_sock_lookup+0x12/0xd0 [ 610.423235][ T47] ? __pfx___jump_label_patch+0x10/0x10 [ 610.428788][ T47] ? fl6_sock_lookup+0x12/0xd0 [ 610.433545][ T47] ? fl6_sock_lookup+0x21/0xd0 [ 610.438306][ T47] ? fl6_sock_lookup+0x14/0xd0 [ 610.443091][ T47] ? __static_key_slow_dec_cpuslocked+0x21c/0x410 [ 610.449525][ T47] ? __pfx___mutex_lock+0x10/0x10 [ 610.454647][ T47] arch_jump_label_transform_queue+0x68/0x100 [ 610.460734][ T47] __jump_label_update+0x177/0x3a0 [ 610.465857][ T47] __static_key_slow_dec_cpuslocked+0x250/0x410 [ 610.472107][ T47] ? __pfx___static_key_slow_dec_cpuslocked+0x10/0x10 [ 610.478885][ T47] ? process_scheduled_works+0x945/0x1830 [ 610.484611][ T47] jump_label_update_timeout+0x1e/0x30 [ 610.490108][ T47] process_scheduled_works+0xa2e/0x1830 [ 610.495684][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 610.501697][ T47] ? assign_work+0x364/0x3d0 [ 610.506297][ T47] worker_thread+0x86d/0xd40 [ 610.510895][ T47] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 610.516792][ T47] ? __kthread_parkme+0x169/0x1d0 [ 610.521855][ T47] ? __pfx_worker_thread+0x10/0x10 [ 610.527002][ T47] kthread+0x2f2/0x390 [ 610.531067][ T47] ? __pfx_worker_thread+0x10/0x10 [ 610.536187][ T47] ? __pfx_kthread+0x10/0x10 [ 610.540772][ T47] ret_from_fork+0x4d/0x80 [ 610.545192][ T47] ? __pfx_kthread+0x10/0x10 [ 610.549779][ T47] ret_from_fork_asm+0x1a/0x30 [ 610.554586][ T47] [ 610.557602][ T47] Modules linked in: [ 610.574847][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.662265][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.686908][T13474] Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 610.795145][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 610.797549][T13474] lowmem_reserve[]: 0 0 0 0 0 [ 610.809631][T13474] Node 1 Normal free:3953660kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.839172][ T47] ---[ end trace 0000000000000000 ]--- [ 610.851662][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 618.274708][ T1845] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 618.306309][ T1845] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 618.314483][ T1845] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 618.334631][ T47] RIP: 0010:__jump_label_patch+0x463/0x490 [ 618.350864][T13474] lowmem_reserve[]: 0 0 0 0 0 [ 618.388077][T13474] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 618.400973][ T1845] usb 4-1: USB disconnect, device number 40 [ 618.402531][ T47] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 70 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 6f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 618.432870][T13474] Node 0 DMA32: 748*4kB (UME) 312*8kB (UME) 292*16kB (UME) 768*32kB (UME) 405*64kB (UME) 277*128kB (UME) 179*256kB (UM) 71*512kB (UM) 14*1024kB (UM) 2*2048kB (ME) 303*4096kB (UM) = 1437808kB [ 618.458408][T13474] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 618.471479][T13474] Node 1 Normal: 7*4kB (UM) 4*8kB (UM) 10*16kB (UM) 11*32kB (UM) 3*64kB (U) 4*128kB (U) 7*256kB (UM) 4*512kB (UM) 2*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3953660kB [ 618.490621][T13474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 618.500897][T13474] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 618.514242][T13474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 618.526921][T13474] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 618.536785][T13474] 64166 total pagecache pages [ 618.541763][T13474] 0 pages in swap cache [ 618.565965][ T47] RSP: 0018:ffffc90000b77920 EFLAGS: 00010292 [ 618.570038][T13474] Free swap = 124972kB [ 618.572090][ T47] RAX: 000000000000008d RBX: 0000000000000085 RCX: 893e0f523f765300 [ 618.584558][ T47] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 618.588965][T13474] Total swap = 124996kB [ 618.593623][ T47] RBP: ffffc90000b77a48 R08: ffffffff8173dfac R09: fffffbfff1cf9f80 [ 618.593648][ T47] R10: dffffc0000000000 R11: fffffbfff1cf9f80 R12: 0000000000000001 [ 618.611582][T13474] 2097051 pages RAM [ 618.624686][T13474] 0 pages HighMem/MovableOnly [ 618.624900][ T47] R13: ffffffff8c056d81 R14: ffffffff931088c0 R15: ffffffff8c056d81 [ 618.629500][T13474] 402770 pages reserved [ 618.643751][T13474] 0 pages cma reserved [ 618.653469][ T47] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 618.677443][ T47] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.684809][ T47] CR2: 000055559499d5c8 CR3: 000000004ef76000 CR4: 0000000000350ef0 [ 618.693333][ T47] Kernel panic - not syncing: Fatal exception [ 618.699735][ T47] Kernel Offset: disabled [ 618.704055][ T47] Rebooting in 86400 seconds..