last executing test programs: 11m9.358805397s ago: executing program 3 (id=261): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/16]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) r3 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x10001, 0x400, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x689}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x20, 0x70bd28, 0x25dfdbfc, {{{@in=@loopback, @in=@empty, 0x4e24, 0xff01, 0x4e24, 0x0, 0x2, 0x0, 0xc0, 0x2e, r4, r5}, {@in6=@local, 0x4d6, 0xff}, @in6=@private2, {0xffffffffffffffff, 0xffffffffffffff00, 0xa, 0x7fffffff, 0x7fffffff, 0x1ff, 0xfffffffffffffff8, 0xfffffffffffffff8}, {0x5, 0x5, 0x4}, {0xfffffff9, 0x6}, 0x70bd2d, 0x3505, 0xa, 0x3, 0xf, 0x8}, 0x4, 0x400}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x100}}, 0x4008044) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 11m7.432177042s ago: executing program 3 (id=268): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYRES32], 0x90, 0x90}}], 0x1, 0x0) 11m7.096331135s ago: executing program 3 (id=269): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x10, @remote, 0x4e21, 0x1, 'wrr\x00', 0x70, 0x14, 0x3c}, 0x2c) semget$private(0x0, 0x0, 0x8f2b1d7eb5d4e559) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x4c, 0x49, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x8}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x4c}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c1a008a69f6c6", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$cgroup_int(r2, &(0x7f0000000140)=0x4, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20) 11m6.656725299s ago: executing program 3 (id=273): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x23c, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x228, 0x1, [@m_skbmod={0xc0, 0x1f, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x8}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000, 0x10001, 0x20000000, 0x1, 0x7f}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x164, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x135, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x23c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$pvfs2(&(0x7f00000005c0), &(0x7f0000000780)='./file0\x00', &(0x7f0000000880), 0x8800, &(0x7f0000000b80)={[{'skbedit\x00'}], [{@euid_eq={'euid', 0x3d, r0}}, {@fowner_gt={'fowner>', r1}}, {@fsname={'fsname', 0x3d, '&*/^&'}}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000008100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000fb850000001700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/vlan0\x00') getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000cc0)={0x0, 0x7d, "d4e4119a3973b52366cbb71dac004876fb6793d4fc72fea8b9226557d599ed060977356dfb9b4a34f83f1d0b78f87fcf85937db2b96a2850b9ceb97683c9ac05c9eb171588d698983364dab0db667e0dded1c26fa3a3890711933039d66173728210d9e9872a662ad93b8b7b769e42f70f869b2313b145a988182d0326"}, &(0x7f0000000940)=0x85) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000c00)={0x8, 0x20f, 0x1, 0xfffffff6, r6}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) setpgid(0x0, r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11m5.54570119s ago: executing program 3 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) listen(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000004e00)={0x3484, 0x2f, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@generic="7f7d8b70b7c9c971ac3e6766d0ef04ffffb9f95aa6b93f1b242f65834a9529fbfee27af77fe14ddffd4b27d47649f97382796ed571858ecd506273847aa3c355da128db2254000ab7754455177a5db2a1d8fab7a7dc5627aada90ed793e666aab63627c364e2c69d8fc811438f3329d1f8dc44740b4e017b607afc55168df93de59d817ce5d68578e64c05adae7ee8331bfcb16768750f7f01e2e962fecfd6087010f4f3fe863ed106803961476d3102591663614ec5a67d52fac519c6dee67f006bd1f8e5376d27ce5f15ec960a736b786c678354bfb4a01abf0ed2109d", @nested={0x2ed8, 0x148, 0x0, 0x1, [@nested={0x1760, 0x106, 0x0, 0x1, [@nested={0x9c, 0xef, 0x0, 0x1, [@typed={0x97, 0xe0, 0x0, 0x0, @binary="b770c193caf0f9ceb5bf31c502bf0d4728bb9eb18d3a04ba13fd3cfe02c834dcb93f5cb1937e2f6e6246a1838f23a03f743e0ae338232035691ef5e9dc2f550dd7c22a227c5d2a91771e6b1bc25a9b8477f64245e7a66652bde1b5ab35761de2975e5ff8917d0bd729b2d3f8b46885f33fe30e43a8224cdd4a61ead3e106c06d23a3423a73e340e54ea10a8384dd413c131411"}]}, @typed={0xee, 0x31, 0x0, 0x0, @binary="82f68571dae126e45726694ec9e4f42627c091c18ac6faa77cbd63d8ab5bc869d34c5b30dfb681c03343192542b6f0c40c3330d5bc3a53fb2e9ef07a26f7f1fcda06b3a451d64ab85d88137dc03b3063f403585e7e6f1c1a6db5683dd7bc196913a6193ba30348b09282817b709de62f18bd1eb7e8c3d2be2f170e0a7f1a3609343b6f9c0aaf5d41bee90bcf0e4fc744227c029b4167ef3f04d814931b80a75e1b0ce0ea3d1769285911fdaedb52d040a8f0ef952b8af0347a16dd1f8ecbfa86e274f22b82a50eb5a0065222b3b5fbe3618bfe7d232630be9277bb3a1d104e7ae319f8edc259cd988864"}, @generic="28da75bd8b585e593744bf3054b1f6517611c9d15c5af5b09df2bae2742a6685ae9f754161028418e8d03061b509a7c4f983f154fcfff0b24fa8acb3dfc4f321518a480efca2c014152e0403287851f7e2cbe820ddb6e2a83059917cc71e2e1f0d73441c2f5f25825f0f9537103bb067c446059e085874427b97fcba569d503742023da4b03497520b71694650fef52fdf20b7dc0ebca6703a68be368a4a8c0abb111c93783126fe9ec899d1eba874337136fd128a3c2322c9f2bc33a2afad8a6d09ad1054c03f3bbb1182be42a543ca0e5eaf215a2e49", @typed={0x8, 0x142, 0x0, 0x0, @pid=r4}, @nested={0xee, 0x16, 0x0, 0x1, [@typed={0xc, 0x4f, 0x0, 0x0, @u64=0xc07}, @generic="9f8922a56026c0a0bb098a69a0f9e0d84eb2f9ddaf3a01763b585ca333f37e7d91d01392355119db05a7725cd7514839156b090b28b43fa55e2bf4a144e4dc27de06b01f724ceeed53a83306a02b5392817f0150294215987a8b67267d594067c37ab591f414ab5e7009b01692e51efe56447ca8c95e5f1b0561d72755078f6402fff000df70a7161e0624849d321c5b31f4ca962496acfd40c201620ff5731762b7d40e2ae3e42e7b4766116eb66e6ac3ea8386b145590c1c0b6836c9957c82a65690d7312f93f0bb18c030864450149d71d1be3d8d", @typed={0x4, 0x16}, @nested={0x4, 0xa0}]}, @nested={0x10dc, 0xfa, 0x0, 0x1, [@generic="1307f0f34ea8119ad146c5b4507b9137750540c7e334a20e021371fbb27a5935246bc8822c0fbbcec8cd70c23bd1965e75248b46701ae45705cfd6e809fd5b55756f69d4fe81c762d14ff4d80f0d9a31a635f4768f14b6f18b9a4e2ad10e7c5d", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x6}, @generic="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", @nested={0x4, 0xfc}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x1000}, @typed={0x5f, 0x85, 0x0, 0x0, @binary="efc5ff3c65935d9355093adc315be5dc8053530788de84ed8439de11841f726ab45b82cbd923e4e9bcda7a420287c12fe0fe62047d1614ae7765720743d9d1cc336c3d9c2aa4030a4f8991f631ac11faa0d0513a8d381158b15849"}]}, @generic="b2411d51f33104a6c438e17500cc01efda24390a8287f275d38a11b6b42235cf9a5941821a6177b3defc43e4b56fb14f5d75f19733629de0a07915f51eb97e08990f56f65ea49805e920596209207212e6aac080f217f7e2f3da873091ddd7ed46547653b2428243a09610b85289de5ab2ee44d6cfbdb7b9f9444a9103885fa700a935589a95a9d7eba2ec6df183fac5a2f7399c73325c70651fcf2ca41945e724cce20d9cabf56ce425d45ab0e255fea34d6fb7b52ac26caf0f0da73f3bcb9bedf5ab9c3e1c35057ca3117f26c927e91cc57946ef2d80f3abfbf4c84895b2c27e", @nested={0x242, 0x96, 0x0, 0x1, [@nested={0x4, 0x1c}, @generic="5822d0ddcaf38fdc65ad434fed265e441e3de07bfb0eb3f39a59164c6f65fe9d316b49f470e300cd12f69b4c054f42fd944682142c271c166d7c1d87fd3f5cb07feeda02c4", @nested={0x4, 0x1a}, @generic="97cfd75c5e37ad4149b7e4c7433cbe4831aa781fea9d2d245c2cabda5535d20158a4ea9291905c4d292334451215fef84094e2425e7d1ac397cc637a73859c09a72eec4f0cb2c9d8d03fbfb33060d969aa4b31312dc9b9747c82cba5310796", @generic="fab53956a17b557ef7741eb17cb6788f60bc4b57dceb0498b36eb24606db46ce26c4bd661ef79dd134e6f3b782fd6f3de03ba71a900b32b531426e8dca991b162af9bc481f1a574bf97e022685da07b3ccdbce1b65c49eb9ba84c5ab75d766a9787d619e8c55d40c99c8f879c0ab551ef39caf74d3594ff7262e7e2fcd4e7187f8af457869a38fdf200e3101841e3ed02b2765f60d14b8aa5056504f40148ffcd76bae1d9268d2db0c89cd5cca4112d9ed2850903c530582985ac70f3ead2355e482a2718fa2f8e73d618e786ba29bb1e56cadf2", @nested={0x4, 0x21}, @typed={0x8, 0x107, 0x0, 0x0, @fd=r2}, @generic="b14acec2f19822bc50d2ec50550cb12444c09c685609fc360edf84e45d4a4e687bd9e51beb8eafc6a78fd76866d3368b090f95e548e245713ba5addbf0037f5f520ff5e240bda2d776b248a066767caeda77007152855de788d3b2bde8f93895683d8bfe7d1f542fe47c847d55238390f8ded173aec662c4017611c55c5514bc7dd491d2781d19eec2a0aac71a983a8cdcf5c7044bebef7714e28fcd71390643745acd76b3f28195cea3a48d8549", @nested={0x4, 0x9e}]}]}, @nested={0x203, 0x101, 0x0, 0x1, [@nested={0x14, 0xc3, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @uid}, @nested={0x4, 0x1c}, @nested={0x4, 0xf8}]}, @nested={0x108, 0xce, 0x0, 0x1, [@generic="0b93de26a7a80bb66ec258f7b13b86321d6780a2e2076cb9b7c3aef8a1ac8f87ea938dd54e20d389839919ea9ba0b848801614a9643fab6150f403f3f77529fcde6a1e21f6fd3def1cf09e26193f84a6acfc5ba290d8cb5481c09fbdd7cd41aa267ccf5d907738387d5880e1b948e3db922dd2e16dd64a665c28715b8bb3b8a7c29ef6600244f86ef6f9dd40900e45f9d9e6339ba8f913bc618c341decfc8ae6ee9986ead046ab69ff5403830864823d60dc5cba0ad67721a18ac31f73618ec820ad06c7eb35795249dd2dd9", @nested={0x1c, 0x97, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @str='[$-\x00'}, @typed={0x8, 0x83, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x126, 0x0, 0x0, @uid}]}, @typed={0x14, 0xd7, 0x0, 0x0, @ipv6=@private0}, @nested={0x8, 0xc4, 0x0, 0x1, [@nested={0x4, 0xb1}]}]}, @generic="002bca980fd208a7f0855f75ed4193", @generic="343fd255d2d23ad50acaacbbc6965ec7889643c3", @typed={0x8, 0xc9, 0x0, 0x0, @pid=r4}, @nested={0x41, 0x1f, 0x0, 0x1, [@nested={0x4, 0x4d}, @generic="8d85d822aba7717f5aec4e7dda99f6b6fd9453ae25a5af5d9484cedaa27bacb2fef47b2616ac49b3b04fff6d46b95c92c4a2e36fd9c2a678f3"]}, @typed={0x72, 0x7c, 0x0, 0x0, @binary="d5ee54f5aeba8dfdb71f28a46bbd4358ea92f4e953e9edd52ff0f2c01f57b4e91601aba651d53f2ab0b83e8737018cca96532daed6113b1e5a542f07380ea45cf5e63941e3931d94e02df382958e784dd56e7e896510dd5de63e3b4fb9c139592c34562f77c2fcef09b58478f250"}]}, @nested={0xe5, 0xa4, 0x0, 0x1, [@generic="c6ea92f58a16fae0687e20a2dcffc424a842e7e106cd7b29e53c66b2299123745d0980a5a92aafc4fb950b4f2364b749d6cf77fa5ecf1f10831ecf922f590b3af3389677243c9ff2799e85abd11ae1508e46f2a8d0be6c57b03c28b5ffe1482b816aedfcdf4fe343188e608a94ae845493d12ab5f1e58ccb8174c2f5057de911b74715b8a0e5363173a49c9d165548d83e3ef5fda667f289fc3f5949ca9806d48947c4daa0e18f2622d45c8b10305840c5fe07e02544a61212e500d042506305e65cafd98b2b2a8290dc08dfa9d0fe3606f7891a41bb5404853425cb5299d3623f"]}, @typed={0x4, 0x104}, @typed={0x8, 0xd6, 0x0, 0x0, @fd=r2}, @nested={0x1466, 0x111, 0x0, 0x1, [@nested={0x1109, 0x9, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @str='[$-\x00'}, @typed={0xd, 0x102, 0x0, 0x0, @str='/dev/dsp\x00'}, @typed={0x4, 0xd0}, @generic="9c14dfba310052e54e2022e318c4e3a5c936036c02bf13c669df6e4599ecc2790d9c65584ffde1530439bb761d9a46f70693fb24500f34a077a662408e0195022429d0ac3221763800ef49be98e14b23428c7fb23cee9c78bdab83e6dc48a87b840bd3d5d350073747058a78af56df938a5f6ea5a9a3b3b22926ab5e508c06ecab017c8b1eca778df56d0cf54c7fc9fb4952bca55cc9360fdd2b4dd2ea9370557d4c5e5945adbf7a7ff0", @generic="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", @generic="bb7c7866491897be7cf9bb6322ecf4b34bb1e70e6a32c5ce8b571034c42440462f53a145a12ffec6a3c1747fbafac77fc4db2bd472f346d65ce24099720448"]}, @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x13f, 0x0, 0x0, @pid=r0}, @generic="419b23900486c409fb89376427592db76631d1985dd04180207aaf0cbbc42551ac2d454c529f4273cbce079c5c1311", @nested={0x50, 0x73, 0x0, 0x1, [@nested={0x4, 0x135}, @typed={0x2d, 0x25, 0x0, 0x0, @binary="977537faacbe3f9ec86e01413268a20e65e185a967ee81a95e6ca417218702d608578868edbf6a6760"}, @nested={0x4, 0x126}, @typed={0xc, 0xbe, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x54, 0x0, 0x0, @fd=r3}]}, @nested={0x7b, 0x4b, 0x0, 0x1, [@generic="3d04c04e21d7711f8e8ac4de4ae78a6e3da7b301aacaa9c0579670f0", @typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0xa6, 0x0, 0x0, @u64=0x4}, @generic="817f18c0b8cc25f3ffa360845103153a9f4cc47398601f47a8eaa456fb412fa9744a3936c672c258df40aae2f2ba79c1409b739a6889c7109484885da730021490d52cc6018970"]}, @generic="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", @generic="bcf30046620e37668fdf14cfe73bf5be2423e1ac7ae319f6a8289ffe9a7b6543911b4d3fcc3950ac8b995c84aa14e5c61299d8f9a8afc676501088b793ae500530dcabcf9a8342df092fa80704caa67fa07248308621f2bf2310e2188eb2f3c8787245bad4bd0bde576b9275169343fea0c1f26de88f8cd3fa7089eb5cfb4199007b690afdb6b4e2aefa1c36c51d52e8c77a60b61b1f61e5a17679f993a668e976655516799e2054c6a28a1dcde6bf1af38ac265c860ad79576ab22002bc95e9b6580907b66c1a62413ae7e20abf9455b188307bec383681854911fa1eb0895036c3eda6170694959e", @generic="180d17a1552f874b73c5c5d66cfc47c722b7326b9de710c0eabd3383faa1eac62b91b5dce5493a81c67acef033b5d3147347bf46c1395d80f93f57b156c86f48e83fd16084c1c5c2890570171e4df13bc555f6d8818b5b18951c4a2eff18211d3c1c0bf73532"]}, @nested={0x14, 0x5b, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @uid}, @typed={0x8, 0x63, 0x0, 0x0, @pid=r0}]}]}, @nested={0x60, 0x12b, 0x0, 0x1, [@generic="8711128a8234c650d3e25515c5799d27f3e5618dd08ead0177f100fa1f0e383868545202c62d03bce903a1f0b2c627c93232fac460b83fd0e863654d675c36a7d48e6d35752f4d63407096f7ef25119d5349d5fa6789a3c8f3f0a423"]}, @typed={0x8, 0x3a, 0x0, 0x0, @fd=r1}, @nested={0x35f, 0xc9, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @u32=0x9}, @generic="5d16df0cfe9d42aed9c8e3781dbdbc05414851192030a620584c4ff4c96560a7364a0a95b3607744982fbf66c5ced1f2d984367a8548e69ab11ed6cddc1ce2d2867905ee717b1f77bb334c3c920fd09fd49134db26d6d647d9cc4839cf69609780fa26e5e256c130eb8843289913baa88aa4ca8af836094d13bbd4ed18b57958cc15c8287977f82cefdcfefb46e90fc7bdcffcbf90de", @generic="5bb5e90ff00e72df25163af779f20408fe3e0b1b3fcbda5d2650b7af868271ba015e58ee0ff43d8f29e9", @nested={0x178, 0x4, 0x0, 0x1, [@typed={0xc, 0xaf, 0x0, 0x0, @u64=0x8}, @generic="4d57b38faa4477ce308a7ade87255b862bbbdaa9ebe70aca6e3b362a580ee0f2170b7966bddd310c67c49c9cc816ca266e2068fe2298816a1b5fdca5f84377c373c9d2f8140208d281278ebf2c2c7335d6108f7bf64adf35", @nested={0x4, 0x1d}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0x90f}, @generic="c6d90dab4bf0b5b61de9f4b584e9640550478db4d2bdb1c74c0b6af9d3a7f6a038d50840450af5b1501ad7ef9c9161d8d25c8f56ed273f282d1c7dc67a2f1dd068344a4b41e8fe211563a751d9467cc05b57561e01c7e1f4042d3284dbacd80cc0b01df3bf29a70504535ae51b7466746e17be3e8ddad86c86fa6495543cc440e2003c6a054b41e2890d7705b910a69095b57b7652ea6dcba78b66eb0ecfb81a37a8be1950aa4fdc79287ccda356dcca2b938f8f26555bf14cc875d89c789bd707efc19dbcc061acb28a306f877f50ce769601af6508afa33e2e8241482b0c2f9f39be465bf11b36b4ea81cdc27dfc264b007441", @typed={0x8, 0x130, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x68, 0x0, 0x0, @uid}]}, @typed={0x4, 0x13c}, @generic="c47b847bf936b5880d725e3ef5b42f15cff216b0a34c9439fac66cb0e038d41edd76c425f8ebab801e22804b2abcefd61928adc34bc65e1e0c1ed472207a59a79889b49f3c0ea06da0f0627f29e86f8a54560251e47f26547153370a29f2c8fa39010bd1c1cc1ba2606ef9b681a4285a9b692564449a906ee94ddbd45a03821c40a061ff63fc9936cf01aecbd91fd11eb81085dcc41c7ebbf027a2f2037909f7663fc3cfd35c30c23b752ab8a72cef4f06189859e7b6fcb3ccc2099355fbc0ea02369b071ebfb5f008f9a754342bf38c4cf8362e10993d698b0d4f37a7b10d2493", @generic="61510246a9d905266129465218c6941ed8ef968b7491930a5adee7c4d48e5748af07f9bd57d4e29d7b39a62880ca72d4b1dde024dc26"]}, @nested={0xed, 0xc8, 0x0, 0x1, [@generic="7fe0b8000817ccdb444a32ec69bf14957d", @typed={0x8, 0xe3, 0x0, 0x0, @fd}, @typed={0xc, 0xbe, 0x0, 0x0, @u64=0x803}, @generic="fb27bdc1029ccb3d82df9c46eaca69becf652090a0b993fc42f80e80c37b51db64e0b2f51c69939e0df71de5cd", @generic="69583051237060374ae63187ce564de11aee4ff586a6f623b53b6090c9b9cae5112d45e34e1eb2cd79b997b56d0406878c36ceaa404f5ee8561ea7e51fabe32984150c79c7397bc855cf2a614adaf5c974e809827d77cb57fd7b8604dd80ea", @nested={0x38, 0x145, 0x0, 0x1, [@typed={0xc, 0xb3, 0x0, 0x0, @u64=0xfffffffffffffff2}, @typed={0x8, 0xa2, 0x0, 0x0, @uid}, @nested={0x4, 0xc0}, @nested={0x4, 0xa2}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x8b, 0x0, 0x0, @u64=0x7fffffffffffffff}, @nested={0x4, 0x1b}]}]}]}, 0x3484}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 11m3.859180847s ago: executing program 3 (id=280): recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000180)={0xa, 0x4e23, 0xccd, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc5a6}, 0x1c) syz_emit_vhci(0x0, 0xe) getpid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000bb601c2f8a6f8711337dcf262892e82b92015932857f7a7ac6a5e3536226a4e81955abad1091fd82e04c47f5ec7823d9cbb6842018e3ee9187ce95461b50c929dabb4210fc8e5e8220c40ae30a2bab7835537983bf00000000bcbe705b1e3efda29924437ef9d24deac87f95d2888f68b31ec0e5173eac5623adc287fa13b0b5d75e191dbb4927ca43f977b39275ae58ac3f81685752413bf9e353a0dd7876b2af73c94f2ebf23cd87f413cad16e"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = fanotify_init(0x8, 0x80000) open$dir(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x61, 0x40001013, r7, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d33000008000b0005000000"], 0x3c}}, 0x0) iopl(0x3) fanotify_mark(0xffffffffffffffff, 0x2, 0x5000003a, 0xffffffffffffffff, 0x0) 11m2.763611453s ago: executing program 32 (id=280): recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000180)={0xa, 0x4e23, 0xccd, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc5a6}, 0x1c) syz_emit_vhci(0x0, 0xe) getpid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000bb601c2f8a6f8711337dcf262892e82b92015932857f7a7ac6a5e3536226a4e81955abad1091fd82e04c47f5ec7823d9cbb6842018e3ee9187ce95461b50c929dabb4210fc8e5e8220c40ae30a2bab7835537983bf00000000bcbe705b1e3efda29924437ef9d24deac87f95d2888f68b31ec0e5173eac5623adc287fa13b0b5d75e191dbb4927ca43f977b39275ae58ac3f81685752413bf9e353a0dd7876b2af73c94f2ebf23cd87f413cad16e"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x10000, @value}, 0x28) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = fanotify_init(0x8, 0x80000) open$dir(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x61, 0x40001013, r7, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d33000008000b0005000000"], 0x3c}}, 0x0) iopl(0x3) fanotify_mark(0xffffffffffffffff, 0x2, 0x5000003a, 0xffffffffffffffff, 0x0) 6m38.210205214s ago: executing program 5 (id=1126): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc00}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x8, 0x8}}]}, 0x30}}, 0x0) 6m37.634669498s ago: executing program 5 (id=1129): syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @local, @val={@val={0x88a8, 0x4, 0x0, 0x43}, {0x8100, 0x1, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @rand_addr=0x640100ff, @empty, @multicast2}}}}, 0x0) pipe(0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000c543, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) r2 = getpid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) process_vm_readv(r2, &(0x7f0000000080)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYBLOB="2e36f4285a8527596b6a420dba0b7559c22adc1d1a349303276fbb4b32e45146f2cf7e12669c72a1951cafc96b9ce9d3b5d243e4db7855ab99c9d439291d3134c2b3418a831909acca4e7f3f6a8cbec142c17e48cba6ab1bbb14d49bfb1fa5791121c37b548f19e73a514624964ff99c53e69378a733297e9e6b03956c9fa7be13809bfc83f8cbd4ec658ba32736ac0e99e7c010e4ef4ddb5dc8cf1f5a64dd3160b84a00fe569e8535dbca30a979e0fe5c509a446040bb25dd9df097662b02f502b173b3b0cdfb4e7d0a", @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0x143, {0x0}}, 0x10) 6m36.957381689s ago: executing program 5 (id=1132): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 6m36.706422205s ago: executing program 5 (id=1136): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = io_uring_setup(0x3454, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000040)=""/43, 0x2b}], 0x2) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6m35.294245227s ago: executing program 5 (id=1143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000480)="da4c2d5a91a513f44a38ddfefd048083939d", 0x12, 0x4004085, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000026c0)=""/4103, 0x1007}], 0x1, 0x0, 0x0, 0x8d}}], 0x1, 0x41, 0x0) 6m34.301083191s ago: executing program 5 (id=1149): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x8000000000000001) 6m33.852461008s ago: executing program 33 (id=1149): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x8000000000000001) 2m49.65306833s ago: executing program 4 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400010200050000611092000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x17) 2m24.486823866s ago: executing program 4 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400010200050000611092000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x17) 1m48.478250961s ago: executing program 4 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400010200050000611092000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x17) 1m19.134556106s ago: executing program 4 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400010200050000611092000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x17) 43.903615423s ago: executing program 4 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400010200050000611092000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x17) 15.902725549s ago: executing program 0 (id=2810): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 15.806478057s ago: executing program 6 (id=2811): syz_emit_ethernet(0xe2, &(0x7f0000000640)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x5}, {0x1, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "f519fd", 0xa0, 0x87, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@srh={0x6, 0x8, 0x4, 0x4, 0x4, 0x0, 0x0, [@local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, @routing={0x6, 0xa, 0x1, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 15.559858862s ago: executing program 6 (id=2812): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x40408e0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x6, &(0x7f00000000c0)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) 14.434364277s ago: executing program 6 (id=2813): capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f0000001280)=""/4105, &(0x7f00000000c0)=0x1009) clock_gettime(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x2000000000000}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x11}}], 0x2, 0x60, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r7, 0x0, 0xb) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef) splice(r6, 0x0, r9, 0x0, 0x80, 0x7) 13.984707741s ago: executing program 6 (id=2814): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x800, 0x3, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="14005080050002000000000020000700000000000a0006"], 0x3c}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) 13.515538568s ago: executing program 4 (id=2364): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400010200050000611092000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x17) 12.346602668s ago: executing program 0 (id=2818): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @hyper, 0x0, 0x1, 0x5e, 0x0, 0x0, 0x3}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x8000001, 0xfffffffffffffff9}) 12.346205605s ago: executing program 1 (id=2819): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x10000000}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000002100)) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0x9, 0x101, 0x1, {0x54be875c, 0xffffff6d, 0x302, 0xd002}}) 12.344368235s ago: executing program 6 (id=2821): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSERGETLSR(r3, 0x89f0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x8, @rand_addr=0x64010101, 0x4e20, 0x2, 'lblcr\x00', 0xd, 0x8, 0x17}, 0x2c) setsockopt$sock_attach_bpf(r2, 0x1, 0x48, &(0x7f0000000040), 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82200008}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x1b, 0x88, 0x4000069}, 0x2c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703c7d00000008085000000040000009533d32acc2c285b4d66f19aeb241099e5b6f455819886d582450c87252c96c05f87d362c258ec49a04d3253"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r9, 0x0, 0x40000}, 0x18) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) 12.147304825s ago: executing program 0 (id=2822): syz_emit_ethernet(0xe2, &(0x7f0000000640)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x5}, {0x1, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "f519fd", 0xa0, 0x87, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@srh={0x6, 0x8, 0x4, 0x4, 0x4, 0x0, 0x0, [@local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, @routing={0x6, 0xa, 0x1, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) pipe(0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0xfe33) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12.094260807s ago: executing program 1 (id=2824): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x0, 0xe0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 11.910052852s ago: executing program 0 (id=2826): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x7, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xe594}}, './file1\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r2, r3, 0x0, 0x1, &(0x7f00000004c0)='\x00'}, 0x30) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008380)=ANY=[@ANYBLOB="28000000120001000000000000800000100000000c0000000000000000000000080035"], 0x28}], 0x1, 0x0, 0x0, 0x8001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80, @link='syz0\x00'}}}, [""]}, 0x68}}, 0x4810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x2000}, 0x18) mknodat$loop(r8, &(0x7f00000002c0)='./file0\x00', 0x6004, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009050a00000000000009050313000000000003270103"], 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000801020000000000000000bd0000080504030011000000050003003a0000000600024088fb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x30}, 0x40) 11.903512334s ago: executing program 1 (id=2827): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 11.481580304s ago: executing program 1 (id=2828): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb6) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0x2, 0x4}, 0x6) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc512", 0x68}], 0x1}], 0x1, 0x0) 10.017685678s ago: executing program 1 (id=2829): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 8.768288571s ago: executing program 2 (id=2831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000080)=0xb9f2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x5, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000140)={0x6, 0x9, 0x23fe}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12fbffff1cdcdb08ca0700135b3101020301090212000100000000090400000003000000"], 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000100)=0xb, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x1) 5.261955209s ago: executing program 2 (id=2832): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$isdn(0x22, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x3, 0x400000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0xc0045003, &(0x7f0000001100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESHEX], 0x0) 5.13434445s ago: executing program 1 (id=2833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x81, 0x2, {{0x0, 0x0, 0x0, 0x3, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x3b6}]}, {0xfffffffffffffce8}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x20044884) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$smackfs_change_rule(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='( } rlAtb '], 0xf) ioctl$SIOCAX25ADDUID(r3, 0x891e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x81, 0x2, {{0x0, 0x0, 0x0, 0x3, 0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x3b6}]}, {0xfffffffffffffce8}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040800}, 0x20044884) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) write$smackfs_change_rule(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='( } rlAtb '], 0xf) (async) ioctl$SIOCAX25ADDUID(r3, 0x891e, 0x0) (async) 2.951404717s ago: executing program 0 (id=2834): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r6, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) 1.787049014s ago: executing program 2 (id=2835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_setup(0x30d5, &(0x7f00000001c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)='#', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140)=0x8, 0x4) sendto$inet(r3, &(0x7f0000000300)="09dd4ab81b57f8b43862ba435ab94316677907885ba23e191b373ac74c7afe93044c14cf90335674ac5f9002c2d9152392b20fbfe4c6c66709130143a670b3338734030c3922f3a8334df19c622adb6c66f74608cc4087a56131c8c646e7fa2b35dfd1e20a3476227f265a28cc0adf97032438bd378a0ba10eb0db3ff08ad44a", 0x80, 0x11, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000600000000180000001800000002000000000000000000000900000000000000000000000d0a0000000000"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) sendmmsg$inet(r0, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)='(', 0x1}, {&(0x7f0000001480)="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", 0xb81}], 0x2}}], 0x2, 0x4008440) 1.531749354s ago: executing program 2 (id=2836): syz_emit_ethernet(0xe2, &(0x7f0000000640)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x5}, {0x1, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "f519fd", 0xa0, 0x87, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@srh={0x6, 0x8, 0x4, 0x4, 0x4, 0x0, 0x0, [@local, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, @routing={0x6, 0xa, 0x1, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) pipe(0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0xfe33) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.419260024s ago: executing program 0 (id=2837): r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000005c0)={'caif0\x00', &(0x7f0000000780)=@ethtool_regs={0x4, 0x4, 0x0, "5cf29e65a464cbf1f53dcbb0c839dccb680c6b23fa6cf3a5a24f0f7083689e0c55883b7345bfed5aee9878d388f52a86662991a6db61834664b6c0538a43ad93c4a87c6f193be9a0eeae8d5f06b3b847be0f1f44c3f2c74406a5bdf8ca1779e9a348f31f3790fce702153144e0ecae904ec29366d99056610f12c790cec60f408cf88f2b1a13849efd66cecfab68cc4e18f9ddd8fa0d632d3b76025bf5a44de25b30b33574dfebe129f3256b68a6ecba866dedf51cee377b22c23216e0ed901b6d38ea0361177c812acc2169a9"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a20000000000a03000000000000000000070000020900010073797a3000000000340000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000000800038004000080140000001000010000000000000000000084000a"], 0x7c}}, 0x0) shutdown(r5, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xd3, 0x1, 0x1, {0x22, 0x6c0}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x71, 0x40, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="001008220000c8fd3419c73a2d67"], 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000005ec0)) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000300)='./file0\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x85, &(0x7f0000005f40), 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="000000ddffffffffb6181100faec140462298bdefd91d4747f0050b80258f441ee22c7ebb56639e11967dd88dff34856898594207f5dec54ecc54d0eb7f3c6e5494f961a865486a5c679725b071cc2ae2211c90e866e9baa640cb00227c3a5fe0a862089a357945636b670c44fabfb0ca33fb18feb378befffd6f55b677ae3d77bd0677ba0353dc7a53efff74123fe0117f3d3d0b737d090b4d9a1cc224ac0675fdf17a05927d160635d839bdf47e2f588be698c7aaffe7044578075519ca2c73a26118848464317eaafffa606335d1efe03e9aa0632a48b903b34fec290b742ec501cfa70cbd0b5e4865ca0db532faa6a9d", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xfffffffffffffd3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}, @in6={0xa, 0x4e23, 0xe9, @dev={0xfe, 0x80, '\x00', 0xb}, 0xa}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x66}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0xfffff1ed, @loopback, 0x263}, @in6={0xa, 0x4e21, 0x5, @private2, 0x7}], 0xdc) 1.15019143s ago: executing program 2 (id=2838): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/288]}, 0x198) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 894.570389ms ago: executing program 2 (id=2839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000180)="366e421a7006dcb10e7b", 0xa}], 0x1, 0x7f, 0x5, 0x8) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000480)={&(0x7f0000000440)={&(0x7f0000000400)="9a3ff82624245dbb", 0x8, 0x0, 0x5, 0x6}}, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x321600, 0xb1) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e22, 0x7, @private0, 0x1}}}, 0x3a) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r4, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x2, 0x1a1}, 0x87674a396ee1bb89) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540), 0xb00c14d96c4125e6, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x6}, 0x8) dup(r5) read(r1, &(0x7f00000001c0)=""/93, 0x5d) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) timer_create(0x1, &(0x7f0000000300)={0x0, 0x29, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000340)=0x0) timer_settime(r7, 0x0, &(0x7f0000000380)={{}, {0x0, 0x989680}}, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000500)=0xac, 0x4) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x2c}}, 0x800) syz_open_dev$MSR(&(0x7f0000000580), 0x8, 0x0) 0s ago: executing program 6 (id=2840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e) unshare(0x24020400) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x4, 0x6, 0x9, 0x8, 0x2, 0x1, 0x6, 0x6, 0xdcb, 0x12, 0x81, 0x1, 0x8, 0x2, 0x0, 0x1]}) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) kernel console output (not intermixed with test programs): netlink: 20 bytes leftover after parsing attributes in process `syz.2.2348'. [ 650.306351][ T1019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.876942][T12440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.778590][ T1019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.546494][ T1019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.616924][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2365'. [ 652.724316][ T1019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.108763][T13188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 653.129111][ T1019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.852693][ T9431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 654.863743][ T9431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 654.873892][ T9431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.882519][ T9431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 654.890362][ T9431] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 654.902418][ T9431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 655.083487][T13203] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2371'. [ 655.146697][ T1019] bridge_slave_1: left allmulticast mode [ 655.162531][ T1019] bridge_slave_1: left promiscuous mode [ 655.180073][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.208993][ T1019] bridge_slave_0: left allmulticast mode [ 655.222153][ T1019] bridge_slave_0: left promiscuous mode [ 655.234288][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.137260][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.148874][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.161220][ T1019] bond0 (unregistering): Released all slaves [ 656.175243][ T1019] bond1 (unregistering): (slave batadv1): Releasing active interface [ 656.184279][ T1019] batadv1: left promiscuous mode [ 656.192207][ T1019] bond1 (unregistering): Released all slaves [ 656.205521][ T1019] bond2 (unregistering): Released all slaves [ 656.224011][T13207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2373'. [ 656.325084][ T1019] tipc: Left network mode [ 656.542685][ T1019] hsr_slave_0: left promiscuous mode [ 656.549042][ T1019] hsr_slave_1: left promiscuous mode [ 656.555106][ T1019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.563621][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.571918][ T1019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.580545][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.605485][ T1019] veth1_macvtap: left promiscuous mode [ 656.614263][ T1019] veth0_macvtap: left promiscuous mode [ 656.620065][ T1019] veth1_vlan: left promiscuous mode [ 656.625533][ T1019] veth0_vlan: left promiscuous mode [ 656.965084][ T5134] Bluetooth: hci4: command tx timeout [ 657.322832][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 657.387239][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 658.128502][T13197] chnl_net:caif_netlink_parms(): no params data found [ 658.240674][T13215] program syz.1.2375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.061414][ T5134] Bluetooth: hci4: command tx timeout [ 659.752181][T13197] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.773845][T13197] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.787510][T13197] bridge_slave_0: entered allmulticast mode [ 659.794797][T13197] bridge_slave_0: entered promiscuous mode [ 659.839081][T13197] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.853727][T13197] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.862525][T13197] bridge_slave_1: entered allmulticast mode [ 659.874036][T13197] bridge_slave_1: entered promiscuous mode [ 659.961651][T13197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.989811][T13197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.073066][T13197] team0: Port device team_slave_0 added [ 660.089853][T13197] team0: Port device team_slave_1 added [ 660.125947][T13197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.133029][T13197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.159261][T13197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.173498][T13197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.180695][T13197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.207957][T13197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.273799][T13197] hsr_slave_0: entered promiscuous mode [ 660.281171][T13197] hsr_slave_1: entered promiscuous mode [ 660.287670][T13197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.295266][T13197] Cannot create hsr debugfs directory [ 660.698160][T13197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 660.709470][T13197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 660.722190][T13197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 660.732409][T13197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 660.826241][T13197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.847049][T13197] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.870463][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.877637][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.891043][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.898247][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.093475][T13197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.116807][ T5134] Bluetooth: hci4: command tx timeout [ 661.322674][T13197] veth0_vlan: entered promiscuous mode [ 661.342344][T13197] veth1_vlan: entered promiscuous mode [ 661.374920][T13197] veth0_macvtap: entered promiscuous mode [ 661.385431][T13197] veth1_macvtap: entered promiscuous mode [ 661.403616][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.414874][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.425487][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.445663][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.456729][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.467306][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.477302][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.487919][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.499133][T13197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.513536][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.533639][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.545457][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.556267][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.566379][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.576945][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.586834][T13197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.597721][T13197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.608862][T13197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.619530][T13197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.629018][T13197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.638036][T13197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.646951][T13197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.749406][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.765903][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.791278][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.799787][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.959760][ T8698] IPVS: starting estimator thread 0... [ 663.018239][T13260] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 663.024830][T13260] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 663.032773][T13260] vhci_hcd vhci_hcd.0: Device attached [ 663.125981][T13262] IPVS: using max 20 ests per chain, 48000 per kthread [ 663.360268][T13263] vhci_hcd: connection closed [ 663.452179][ T1019] vhci_hcd: stop threads [ 663.473078][ T1019] vhci_hcd: release socket [ 663.482117][ T1019] vhci_hcd: disconnect device [ 663.535885][ T8698] vhci_hcd: vhci_device speed not set [ 663.594107][T13270] overlayfs: failed to clone upperpath [ 664.525244][T13283] overlayfs: failed to clone upperpath [ 664.580399][T12440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.626097][T13301] overlayfs: failed to clone upperpath [ 665.796685][T13308] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2403'. [ 667.081040][ T5878] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 667.204590][ T5906] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 667.228573][ T9431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 667.251899][ T9431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 667.274495][ T9431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 667.286064][ T9431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 667.295957][ T9431] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 667.303389][ T9431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 667.306425][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 667.330958][T13324] overlayfs: failed to clone upperpath [ 667.350237][ T5878] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.383062][ T5878] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 667.407807][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 667.433961][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 667.434532][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 667.453307][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.465510][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.475415][ T5906] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 667.487220][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.508660][ T5878] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 667.510341][ T5906] usb 2-1: config 0 descriptor?? [ 667.541458][ T5878] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 667.551033][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.567109][T12440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.572714][ T5878] usb 7-1: Product: syz [ 667.584704][ T5878] usb 7-1: Manufacturer: syz [ 667.593066][ T5878] usb 7-1: SerialNumber: syz [ 667.609712][ T5878] usb 7-1: config 0 descriptor?? [ 667.634875][ T5878] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22 [ 667.667451][T12440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.800780][T12440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.857568][T13306] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2401'. [ 667.906599][T13319] chnl_net:caif_netlink_parms(): no params data found [ 667.980813][ T5906] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0 [ 668.080634][ T5906] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found [ 668.100316][ T5906] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found [ 668.243805][ T5906] usb 7-1: USB disconnect, device number 5 [ 668.243954][ C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 668.319833][T13319] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.333097][T13319] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.340492][T13319] bridge_slave_0: entered allmulticast mode [ 668.360806][T13319] bridge_slave_0: entered promiscuous mode [ 668.394075][T13319] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.410023][T13319] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.417365][T13319] bridge_slave_1: entered allmulticast mode [ 668.440874][T13319] bridge_slave_1: entered promiscuous mode [ 668.529112][T12440] bridge_slave_1: left allmulticast mode [ 668.540743][T12440] bridge_slave_1: left promiscuous mode [ 668.555898][T12440] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.568924][T12440] bridge_slave_0: left allmulticast mode [ 668.574815][T12440] bridge_slave_0: left promiscuous mode [ 668.581070][T12440] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.701056][ T5134] Bluetooth: hci4: command tx timeout [ 669.757366][ T5877] usb 2-1: USB disconnect, device number 53 [ 670.920161][T12440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.932944][T12440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.948221][T12440] bond0 (unregistering): Released all slaves [ 670.971132][T13319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.881884][ T5134] Bluetooth: hci4: command tx timeout [ 672.450367][T13319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.679743][T13319] team0: Port device team_slave_0 added [ 672.727011][T13319] team0: Port device team_slave_1 added [ 673.133476][ T5878] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 673.206142][T13319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.219582][T13319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.385934][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.387522][T13319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.466754][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.473433][T13319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.485588][T13319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.548361][ T5878] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 673.597488][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.606366][T13319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.133242][ T5134] Bluetooth: hci4: command tx timeout [ 674.180842][ T5878] usb 2-1: config 0 descriptor?? [ 674.189853][T13396] overlayfs: failed to clone upperpath [ 674.352171][T12440] hsr_slave_0: left promiscuous mode [ 674.400223][T12440] hsr_slave_1: left promiscuous mode [ 674.406930][T12440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.417159][T12440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.428742][T12440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.436225][T12440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.573825][T12440] veth1_macvtap: left promiscuous mode [ 674.582142][T12440] veth0_macvtap: left promiscuous mode [ 674.588097][T12440] veth1_vlan: left promiscuous mode [ 674.594052][T12440] veth0_vlan: left promiscuous mode [ 674.635031][ T5878] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 674.661733][ T5878] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 674.854049][ T5878] arvo 0003:1E7D:30D4.000C: couldn't init struct arvo_device [ 674.872473][ T5878] arvo 0003:1E7D:30D4.000C: couldn't install keyboard [ 674.917202][ T5878] arvo 0003:1E7D:30D4.000C: probe with driver arvo failed with error -71 [ 674.950277][ T5878] usb 2-1: USB disconnect, device number 54 [ 676.201150][T13429] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2438'. [ 676.318478][ T5134] Bluetooth: hci4: command tx timeout [ 676.590964][T13438] overlayfs: failed to resolve './file1': -2 [ 676.651036][T12440] team0 (unregistering): Port device team_slave_1 removed [ 676.961881][T12440] team0 (unregistering): Port device team_slave_0 removed [ 679.139093][T13453] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 679.264958][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2447'. [ 679.536762][T13457] overlayfs: failed to clone upperpath [ 679.877793][T13454] batadv5: entered allmulticast mode [ 680.072081][T13319] hsr_slave_0: entered promiscuous mode [ 680.083247][T13319] hsr_slave_1: entered promiscuous mode [ 680.104283][T13319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.112041][T13319] Cannot create hsr debugfs directory [ 680.162623][T13470] overlayfs: failed to resolve './file1': -2 [ 680.691062][T13485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.988225][T13319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 681.281314][T13319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 681.564249][T13319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 681.717504][T13319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 682.153070][T13319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.250609][T13319] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.273487][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.280656][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.319027][T13508] overlayfs: failed to resolve './file1': -2 [ 682.324988][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.332438][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.433098][T13512] netlink: 'syz.0.2468': attribute type 1 has an invalid length. [ 682.451201][T13319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.489625][T13319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.524676][T13515] batadv3: entered allmulticast mode [ 682.572158][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2468'. [ 682.581535][ T5917] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 682.770471][ T5917] usb 7-1: Using ep0 maxpacket: 16 [ 682.807111][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 682.832351][ T5917] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 682.865690][ T5917] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 682.885880][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.908571][ T5917] usb 7-1: Product: syz [ 682.912828][ T5917] usb 7-1: Manufacturer: syz [ 682.944503][ T5917] usb 7-1: SerialNumber: syz [ 682.975066][ T5917] usb 7-1: config 0 descriptor?? [ 682.990059][T13506] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 683.003833][ T5917] hub 7-1:0.0: bad descriptor, ignoring hub [ 683.016937][ T5917] hub 7-1:0.0: probe with driver hub failed with error -5 [ 683.036622][T13319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.047224][ T5917] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input23 [ 683.224874][ T29] audit: type=1326 audit(1738406745.548:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13536 comm="syz.2.2475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f664438cda9 code=0x0 [ 683.264111][ T5917] usb 7-1: USB disconnect, device number 6 [ 683.264152][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 683.430222][T13319] veth0_vlan: entered promiscuous mode [ 683.444875][T13319] veth1_vlan: entered promiscuous mode [ 683.488424][T13319] veth0_macvtap: entered promiscuous mode [ 683.499492][T13319] veth1_macvtap: entered promiscuous mode [ 683.521744][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.533087][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.543191][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.553923][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.563968][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.588651][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.604696][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.627319][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.651326][T13319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.687385][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.735265][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.759232][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.779369][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.810507][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.848626][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.876622][T13319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.901299][T13319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.931493][T13319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.949963][T13319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.969924][T13319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.325730][T13319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.334515][T13319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.206585][T13553] overlayfs: failed to resolve './file1': -2 [ 685.492278][T12440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.500180][T12440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.567001][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.580762][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.587138][ T8318] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 685.829758][ T8318] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 685.881495][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2485'. [ 685.891152][ T8318] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 685.909255][T13572] netlink: 'syz.6.2485': attribute type 2 has an invalid length. [ 685.917843][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2485'. [ 685.954281][ T8318] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 686.393080][ T8318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.406503][ T8318] usb 2-1: Product: 鋊籡଺屓㻸໓襜忸의렱ၗ祷揉ᣱ藎鶹瑈濹啞㻬嫸◭إ涁⢗ᢍ躄茘ᠡ꓿⣙주믩㓒६楙飻籙좢⑔ዕ廣缠ꦷ劜툔ࡷ鐞ꦰ讛銝ꁅ䤮哭ᱳ繆ª저ﻉ蔽懻띾켪⢃赎婲渱퉏朎闪뿥㱒ꃰꚣ礣◘㔒佰偄㎇㝏㯁殑č葌補鄔챸 [ 686.437255][ T8318] usb 2-1: Manufacturer: ࠊ [ 686.441938][ T8318] usb 2-1: SerialNumber: ◙㌣鳨ᔥꦫžⷈ₟乭Ǡ猼Ꙥ㑴蕵ᓘ繬ጨ’❝ಕ餄䣎㞕鴂ᢸ傏ƫ濘᝷요滏霌惷৆Ⱐⱻ櫆葦풅ᡚ캳쟐⛀㯌타᯦ꉼ઩₴Ꟶᨰ咺있㙕狑㝰详떫紐㩕탼멅錅䀚賲弩㷔칐٠倣쑧៤锶癁Šㆠ濢뚘ࣕ磨訙믜⽸탳屢쿅끋Ꜧ혔䪑糄ꇭ碾ᘸ∋⑭㞏֚̺嘞︁ꠀ˝鍔υ [ 686.888265][ T8318] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 686.934836][ T8318] cdc_ncm 2-1:1.0: bind() failure [ 687.945380][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.949078][ T8318] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 687.981542][ T8318] cdc_ncm 2-1:1.1: bind() failure [ 687.987810][T13582] program syz.6.2488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.217836][ T8318] usb 2-1: USB disconnect, device number 55 [ 689.044897][T13593] overlayfs: failed to resolve './file0': -2 [ 690.397888][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 690.532537][T13448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.570702][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 690.579226][ T9] usb 7-1: config 0 has no interface number 0 [ 690.612211][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 690.621428][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.653331][ T9] usb 7-1: config 0 descriptor?? [ 690.700344][ T9] usb 7-1: selecting invalid altsetting 1 [ 690.714579][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 690.726771][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 690.781974][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 690.825277][T13448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.829116][ T9] DVB: Unable to find symbol cx22700_attach() [ 690.886597][T13613] bridge0: port 3(erspan0) entered disabled state [ 690.893322][T13613] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.900651][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.993243][ T9] DVB: Unable to find symbol tda10046_attach() [ 691.018784][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 691.442315][T13613] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2496'. [ 691.826301][T13448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.874147][ T5917] usb 7-1: USB disconnect, device number 7 [ 692.033097][T13628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.047069][T13628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.056617][T13628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.064748][T13628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.074565][T13628] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 692.105518][T13628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.377562][T13448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.116415][T13448] bridge_slave_1: left allmulticast mode [ 693.122209][T13448] bridge_slave_1: left promiscuous mode [ 693.128335][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.183462][T13448] bridge_slave_0: left allmulticast mode [ 693.209720][T13448] bridge_slave_0: left promiscuous mode [ 693.228857][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.744131][ T5877] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 694.397912][T13628] Bluetooth: hci4: command tx timeout [ 694.975136][ T5877] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 694.992767][ T5877] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.006221][ T5877] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 695.022483][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.038042][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 695.050061][T13668] program syz.6.2510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.059618][ T5877] usb 2-1: SerialNumber: syz [ 695.513547][ T5877] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 695.520055][ T5877] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 695.533614][ T5877] usb 2-1: USB disconnect, device number 56 [ 695.980119][T13448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.004397][T13448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.028417][T13448] bond0 (unregistering): Released all slaves [ 696.289977][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'. [ 696.362839][T13627] chnl_net:caif_netlink_parms(): no params data found [ 696.491588][ T5877] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 696.609284][T13628] Bluetooth: hci4: command tx timeout [ 696.681738][ T5877] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 696.719242][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.795997][ T5877] usb 2-1: config 0 descriptor?? [ 696.819637][ T5877] usb 2-1: can't set config #0, error -71 [ 696.840977][ T5877] usb 2-1: USB disconnect, device number 57 [ 697.069299][T13627] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.086737][T13627] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.102440][T13627] bridge_slave_0: entered allmulticast mode [ 697.117762][T13627] bridge_slave_0: entered promiscuous mode [ 697.152473][T13627] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.186533][T13627] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.218886][T13627] bridge_slave_1: entered allmulticast mode [ 697.228000][T13627] bridge_slave_1: entered promiscuous mode [ 698.833901][T13628] Bluetooth: hci4: command tx timeout [ 698.873436][T13627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.048140][T13448] hsr_slave_0: left promiscuous mode [ 699.126167][T13448] hsr_slave_1: left promiscuous mode [ 699.167511][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.191372][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.230230][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.382342][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.494118][T13448] veth1_macvtap: left promiscuous mode [ 700.639571][T13448] veth0_macvtap: left promiscuous mode [ 700.732598][T13448] veth1_vlan: left promiscuous mode [ 700.771375][T13448] veth0_vlan: left promiscuous mode [ 701.035029][T13628] Bluetooth: hci4: command tx timeout [ 703.900212][ T8318] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 704.081981][ T8318] usb 2-1: device descriptor read/64, error -71 [ 704.360233][ T8318] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 704.520373][ T8318] usb 2-1: device descriptor read/64, error -71 [ 705.459945][ T8318] usb usb2-port1: attempt power cycle [ 705.711532][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2536'. [ 705.721277][T13768] netlink: 'syz.2.2536': attribute type 2 has an invalid length. [ 705.729125][T13769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2537'. [ 705.759959][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2536'. [ 705.899458][ T8318] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 705.927003][ T8318] usb 2-1: device descriptor read/8, error -71 [ 706.034088][T13448] team0 (unregistering): Port device team_slave_1 removed [ 706.123000][T13448] team0 (unregistering): Port device team_slave_0 removed [ 706.210610][ T8318] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 706.232137][ T8318] usb 2-1: device descriptor read/8, error -71 [ 706.350376][ T8318] usb usb2-port1: unable to enumerate USB device [ 706.857352][T13627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.941608][T13767] batadv2: entered allmulticast mode [ 706.979132][ T5906] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 707.121271][T13627] team0: Port device team_slave_0 added [ 707.152972][ T5906] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 707.171986][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.207459][ T5906] usb 2-1: config 0 descriptor?? [ 707.234178][T13627] team0: Port device team_slave_1 added [ 707.358245][T13627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.375578][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.429329][T13627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.447117][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.459869][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.503207][T13627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.510262][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.574146][T13627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.339574][ T5906] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 708.348725][ T5906] elan 0003:04F3:0755.000D: item fetching failed at offset 3/5 [ 708.387878][ T5906] elan 0003:04F3:0755.000D: Hid Parse failed [ 708.408858][ T5906] elan 0003:04F3:0755.000D: probe with driver elan failed with error -22 [ 708.447129][T13627] hsr_slave_0: entered promiscuous mode [ 708.453640][T13627] hsr_slave_1: entered promiscuous mode [ 708.460948][T13627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.468726][T13627] Cannot create hsr debugfs directory [ 708.505608][T13793] netlink: 'syz.6.2545': attribute type 16 has an invalid length. [ 708.514585][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2545'. [ 708.796854][T13628] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 708.805552][T13628] Bluetooth: hci0: connection err: -111 [ 710.450970][ T5917] usb 2-1: USB disconnect, device number 62 [ 710.791645][T13627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 710.849646][T13627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 710.886137][T13627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 710.952299][T13627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 711.285694][T13627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.364002][T13627] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.400666][T12440] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.407921][T12440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.493898][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.501205][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.628635][T13824] netlink: 'syz.0.2557': attribute type 16 has an invalid length. [ 711.644951][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'. [ 714.805693][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 714.814634][T13832] netlink: 'syz.1.2560': attribute type 2 has an invalid length. [ 714.822465][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 714.980429][T13627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.768430][T13627] veth0_vlan: entered promiscuous mode [ 715.781339][T13627] veth1_vlan: entered promiscuous mode [ 715.787604][T13864] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 715.849210][T13627] veth0_macvtap: entered promiscuous mode [ 715.859581][T13627] veth1_macvtap: entered promiscuous mode [ 715.893396][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.906496][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.916626][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.930905][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.945859][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.957353][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.967392][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.978341][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.989941][T13627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.021319][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.045239][T13872] netlink: 'syz.6.2570': attribute type 16 has an invalid length. [ 716.052996][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.053300][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2570'. [ 716.072579][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.083408][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.093578][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.104372][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.114729][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.126481][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.138448][T13627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.171713][T13627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.199604][T13627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.218880][T13627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.238369][T13627] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.006540][T13883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2573'. [ 719.477792][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.518648][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.604241][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.626003][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.660842][T13898] FAULT_INJECTION: forcing a failure. [ 719.660842][T13898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.722514][T13898] CPU: 1 UID: 0 PID: 13898 Comm: syz.6.2578 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 719.722547][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 719.722561][T13898] Call Trace: [ 719.722568][T13898] [ 719.722578][T13898] dump_stack_lvl+0x241/0x360 [ 719.722621][T13898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.722656][T13898] ? __pfx__printk+0x10/0x10 [ 719.722689][T13898] ? __pfx_lock_release+0x10/0x10 [ 719.722726][T13898] should_fail_ex+0x40a/0x550 [ 719.722755][T13898] _copy_from_iter+0x1e9/0x1c20 [ 719.722787][T13898] ? __virt_addr_valid+0x183/0x530 [ 719.722829][T13898] ? __alloc_skb+0x28f/0x440 [ 719.722858][T13898] ? __pfx__copy_from_iter+0x10/0x10 [ 719.722900][T13898] ? __virt_addr_valid+0x183/0x530 [ 719.722930][T13898] ? __virt_addr_valid+0x183/0x530 [ 719.722957][T13898] ? __virt_addr_valid+0x45f/0x530 [ 719.722987][T13898] ? __phys_addr_symbol+0x2f/0x70 [ 719.723016][T13898] ? __check_object_size+0x47a/0x730 [ 719.723045][T13898] netlink_sendmsg+0x73d/0xcb0 [ 719.723091][T13898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.723136][T13898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.723167][T13898] __sock_sendmsg+0x221/0x270 [ 719.723196][T13898] ____sys_sendmsg+0x52a/0x7e0 [ 719.723238][T13898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.723269][T13898] ? __fget_files+0x2a/0x410 [ 719.723300][T13898] ? __fget_files+0x2a/0x410 [ 719.723337][T13898] __sys_sendmsg+0x269/0x350 [ 719.723375][T13898] ? __pfx___sys_sendmsg+0x10/0x10 [ 719.723422][T13898] ? do_sys_openat2+0x17a/0x1d0 [ 719.723478][T13898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 719.723508][T13898] ? do_syscall_64+0x100/0x230 [ 719.723539][T13898] ? do_syscall_64+0xb6/0x230 [ 719.723569][T13898] do_syscall_64+0xf3/0x230 [ 719.723602][T13898] ? clear_bhb_loop+0x35/0x90 [ 719.723636][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.723665][T13898] RIP: 0033:0x7f67fd58cda9 [ 719.723684][T13898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.723702][T13898] RSP: 002b:00007f67fd3f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.723725][T13898] RAX: ffffffffffffffda RBX: 00007f67fd7a5fa0 RCX: 00007f67fd58cda9 [ 719.723740][T13898] RDX: 0000000064000004 RSI: 0000000020000280 RDI: 0000000000000003 [ 719.723754][T13898] RBP: 00007f67fd3f9090 R08: 0000000000000000 R09: 0000000000000000 [ 719.723767][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.723779][T13898] R13: 0000000000000000 R14: 00007f67fd7a5fa0 R15: 00007ffd03eef6a8 [ 719.723811][T13898] [ 720.130484][T13906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2581'. [ 721.079894][T13912] FAULT_INJECTION: forcing a failure. [ 721.079894][T13912] name failslab, interval 1, probability 0, space 0, times 0 [ 721.093385][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.1.2580 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 721.093415][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 721.093428][T13912] Call Trace: [ 721.093435][T13912] [ 721.093444][T13912] dump_stack_lvl+0x241/0x360 [ 721.093486][T13912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.093522][T13912] ? __pfx__printk+0x10/0x10 [ 721.093556][T13912] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 721.093588][T13912] ? __pfx___might_resched+0x10/0x10 [ 721.093618][T13912] should_fail_ex+0x40a/0x550 [ 721.093646][T13912] should_failslab+0xac/0x100 [ 721.093683][T13912] ? __get_vm_area_node+0x132/0x2d0 [ 721.093713][T13912] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 721.093749][T13912] __get_vm_area_node+0x132/0x2d0 [ 721.093785][T13912] __vmalloc_node_range_noprof+0x344/0x1380 [ 721.093820][T13912] ? do_replace+0x298/0x5b0 [ 721.093870][T13912] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 721.093911][T13912] ? __might_fault+0xaa/0x120 [ 721.093946][T13912] ? do_replace+0x298/0x5b0 [ 721.093964][T13912] __vmalloc_noprof+0x79/0x90 [ 721.093996][T13912] ? do_replace+0x298/0x5b0 [ 721.094017][T13912] do_replace+0x298/0x5b0 [ 721.094036][T13912] ? mark_lock+0x9a/0x360 [ 721.094064][T13912] ? __pfx_lock_release+0x10/0x10 [ 721.094095][T13912] ? __pfx_do_replace+0x10/0x10 [ 721.094129][T13912] ? bpf_lsm_capable+0x9/0x10 [ 721.094152][T13912] ? security_capable+0x7e/0x2d0 [ 721.094193][T13912] do_ebt_set_ctl+0x2d5/0x17d0 [ 721.094224][T13912] ? __pfx_lock_acquire+0x10/0x10 [ 721.094252][T13912] ? bpf_trace_run2+0x1fc/0x540 [ 721.094273][T13912] ? __pfx_lock_release+0x10/0x10 [ 721.094301][T13912] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 721.094334][T13912] ? bpf_trace_run2+0x1fc/0x540 [ 721.094370][T13912] ? nf_setsockopt+0x240/0x2c0 [ 721.094402][T13912] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 721.094425][T13912] ? __pfx_lock_release+0x10/0x10 [ 721.094453][T13912] ? rcu_is_watching+0x15/0xb0 [ 721.094487][T13912] ? trace_contention_end+0x3c/0x120 [ 721.094521][T13912] ? __mutex_lock+0x397/0x1010 [ 721.094550][T13912] ? do_ip_setsockopt+0x1f5f/0x3cd0 [ 721.094577][T13912] ? __mutex_unlock_slowpath+0x227/0x800 [ 721.094615][T13912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.094661][T13912] nf_setsockopt+0x295/0x2c0 [ 721.094711][T13912] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 721.094739][T13912] do_sock_setsockopt+0x3af/0x720 [ 721.094778][T13912] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 721.094816][T13912] ? __fget_files+0x395/0x410 [ 721.094842][T13912] ? __fget_files+0x2a/0x410 [ 721.094879][T13912] __x64_sys_setsockopt+0x1ee/0x280 [ 721.094918][T13912] do_syscall_64+0xf3/0x230 [ 721.094947][T13912] ? clear_bhb_loop+0x35/0x90 [ 721.094981][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.095010][T13912] RIP: 0033:0x7feebd98cda9 [ 721.095029][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.095047][T13912] RSP: 002b:00007feebb7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.095070][T13912] RAX: ffffffffffffffda RBX: 00007feebdba6160 RCX: 00007feebd98cda9 [ 721.095085][T13912] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 000000000000000b [ 721.095098][T13912] RBP: 00007feebb7d5090 R08: 0000000000000230 R09: 0000000000000000 [ 721.095111][T13912] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.095124][T13912] R13: 0000000000000000 R14: 00007feebdba6160 R15: 00007ffe97c65978 [ 721.095155][T13912] [ 721.095438][T13912] syz.1.2580: vmalloc error: size 256, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 721.484274][T13912] CPU: 0 UID: 0 PID: 13912 Comm: syz.1.2580 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 721.484305][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 721.484317][T13912] Call Trace: [ 721.484325][T13912] [ 721.484334][T13912] dump_stack_lvl+0x241/0x360 [ 721.484375][T13912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.484410][T13912] ? __pfx__printk+0x10/0x10 [ 721.484445][T13912] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 721.484481][T13912] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 721.484519][T13912] warn_alloc+0x278/0x410 [ 721.484558][T13912] ? __pfx_warn_alloc+0x10/0x10 [ 721.484587][T13912] ? __kasan_kmalloc+0x23/0xb0 [ 721.484610][T13912] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 721.484660][T13912] ? __get_vm_area_node+0x280/0x2d0 [ 721.484698][T13912] __vmalloc_node_range_noprof+0x369/0x1380 [ 721.484760][T13912] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 721.484799][T13912] ? __might_fault+0xaa/0x120 [ 721.484832][T13912] ? do_replace+0x298/0x5b0 [ 721.484851][T13912] __vmalloc_noprof+0x79/0x90 [ 721.484882][T13912] ? do_replace+0x298/0x5b0 [ 721.484902][T13912] do_replace+0x298/0x5b0 [ 721.484921][T13912] ? mark_lock+0x9a/0x360 [ 721.484948][T13912] ? __pfx_lock_release+0x10/0x10 [ 721.484979][T13912] ? __pfx_do_replace+0x10/0x10 [ 721.485012][T13912] ? bpf_lsm_capable+0x9/0x10 [ 721.485034][T13912] ? security_capable+0x7e/0x2d0 [ 721.485072][T13912] do_ebt_set_ctl+0x2d5/0x17d0 [ 721.485096][T13912] ? __pfx_lock_acquire+0x10/0x10 [ 721.485119][T13912] ? bpf_trace_run2+0x1fc/0x540 [ 721.485137][T13912] ? __pfx_lock_release+0x10/0x10 [ 721.485159][T13912] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 721.485186][T13912] ? bpf_trace_run2+0x1fc/0x540 [ 721.485215][T13912] ? nf_setsockopt+0x240/0x2c0 [ 721.485241][T13912] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 721.485260][T13912] ? __pfx_lock_release+0x10/0x10 [ 721.485284][T13912] ? rcu_is_watching+0x15/0xb0 [ 721.485311][T13912] ? trace_contention_end+0x3c/0x120 [ 721.485344][T13912] ? __mutex_lock+0x397/0x1010 [ 721.485368][T13912] ? do_ip_setsockopt+0x1f5f/0x3cd0 [ 721.485391][T13912] ? __mutex_unlock_slowpath+0x227/0x800 [ 721.485422][T13912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.485460][T13912] nf_setsockopt+0x295/0x2c0 [ 721.485492][T13912] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 721.485514][T13912] do_sock_setsockopt+0x3af/0x720 [ 721.485574][T13912] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 721.485605][T13912] ? __fget_files+0x395/0x410 [ 721.485636][T13912] ? __fget_files+0x2a/0x410 [ 721.485665][T13912] __x64_sys_setsockopt+0x1ee/0x280 [ 721.485698][T13912] do_syscall_64+0xf3/0x230 [ 721.485721][T13912] ? clear_bhb_loop+0x35/0x90 [ 721.485750][T13912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.485774][T13912] RIP: 0033:0x7feebd98cda9 [ 721.485791][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.485807][T13912] RSP: 002b:00007feebb7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.485827][T13912] RAX: ffffffffffffffda RBX: 00007feebdba6160 RCX: 00007feebd98cda9 [ 721.485840][T13912] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 000000000000000b [ 721.485850][T13912] RBP: 00007feebb7d5090 R08: 0000000000000230 R09: 0000000000000000 [ 721.485862][T13912] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.485872][T13912] R13: 0000000000000000 R14: 00007feebdba6160 R15: 00007ffe97c65978 [ 721.485898][T13912] [ 721.485919][T13912] Mem-Info: [ 721.881047][T13912] active_anon:3229 inactive_anon:7238 isolated_anon:0 [ 721.881047][T13912] active_file:17424 inactive_file:39059 isolated_file:0 [ 721.881047][T13912] unevictable:767 dirty:201 writeback:0 [ 721.881047][T13912] slab_reclaimable:10695 slab_unreclaimable:102893 [ 721.881047][T13912] mapped:32412 shmem:7191 pagetables:1051 [ 721.881047][T13912] sec_pagetables:0 bounce:0 [ 721.881047][T13912] kernel_misc_reclaimable:0 [ 721.881047][T13912] free:1309540 free_pcp:480 free_cma:0 [ 721.926712][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.937180][T13912] Node 0 active_anon:12916kB inactive_anon:28952kB active_file:69560kB inactive_file:156236kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:129608kB dirty:804kB writeback:0kB shmem:27228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11208kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no [ 721.970032][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.976559][T13912] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 722.007193][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.013575][T13912] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.041071][T13912] lowmem_reserve[]: 0 2493 2494 0 0 [ 722.046749][T13912] Node 0 DMA32 free:1312580kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:12912kB inactive_anon:28920kB active_file:68768kB inactive_file:156184kB unevictable:1532kB writepending:804kB present:3129332kB managed:2553684kB mlocked:0kB bounce:0kB free_pcp:1928kB local_pcp:528kB free_cma:0kB [ 722.077724][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.083976][T13912] lowmem_reserve[]: 0 0 0 0 0 [ 722.088978][T13912] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.115833][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.123174][T13912] lowmem_reserve[]: 0 0 0 0 0 [ 722.128066][T13912] Node 1 Normal free:3910220kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.156863][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.163171][T13912] lowmem_reserve[]: 0 0 0 0 0 [ 722.167979][T13912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 722.180794][T13912] Node 0 DMA32: 439*4kB (UME) 617*8kB (UME) 516*16kB (UME) 470*32kB (UME) 234*64kB (UME) 89*128kB (UME) 95*256kB (UME) 92*512kB (UME) 51*1024kB (UME) 9*2048kB (UM) 272*4096kB (UM) = 1312548kB [ 722.200066][T13912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 722.211740][T13912] Node 1 Normal: 217*4kB (UME) 61*8kB (UME) 46*16kB (UME) 191*32kB (UME) 101*64kB (UME) 32*128kB (UME) 17*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3910220kB [ 722.230643][T13912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.240297][T13912] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 722.249771][T13912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.259506][T13912] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 722.268896][T13912] 63674 total pagecache pages [ 722.273642][T13912] 0 pages in swap cache [ 722.277893][T13912] Free swap = 124616kB [ 722.282064][T13912] Total swap = 124996kB [ 722.286236][T13912] 2097051 pages RAM [ 722.290152][T13912] 0 pages HighMem/MovableOnly [ 722.294880][T13912] 426778 pages reserved [ 722.299093][T13912] 0 pages cma reserved [ 724.940991][T13931] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2590'. [ 725.287442][T13448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.377543][ T5878] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 725.446754][T13448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.570249][ T5878] usb 7-1: Using ep0 maxpacket: 32 [ 725.577350][T13448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.604781][ T5878] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 725.613209][ T5878] usb 7-1: config 0 has no interface number 0 [ 725.639642][ T5878] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 725.667407][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.675472][ T5878] usb 7-1: Product: syz [ 725.693631][ T5878] usb 7-1: Manufacturer: syz [ 725.699731][ T5878] usb 7-1: SerialNumber: syz [ 725.707211][T13448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.718436][ T5878] usb 7-1: config 0 descriptor?? [ 725.729121][ T5878] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 725.740554][ T5878] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 725.859223][T13448] bridge_slave_1: left allmulticast mode [ 725.871686][T13448] bridge_slave_1: left promiscuous mode [ 725.877569][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.955158][T13448] bridge_slave_0: left allmulticast mode [ 725.960961][T13448] bridge_slave_0: left promiscuous mode [ 725.998593][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.320476][ T5878] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 726.344386][ T5878] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 726.752563][T13628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 726.768222][T13628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 726.778100][T13628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 726.788048][T13628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 726.809065][T13628] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 726.820247][T13628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 727.111882][T13948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'. [ 727.218267][T13448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.231910][T13448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.242597][T13448] bond0 (unregistering): Released all slaves [ 728.337993][ T8318] usb 7-1: USB disconnect, device number 8 [ 729.026323][T13448] hsr_slave_0: left promiscuous mode [ 729.118401][T13448] hsr_slave_1: left promiscuous mode [ 729.222914][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.312049][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.362675][ T5134] Bluetooth: hci4: command tx timeout [ 729.378230][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.442631][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.784103][T13448] veth1_macvtap: left promiscuous mode [ 729.789722][T13448] veth0_macvtap: left promiscuous mode [ 729.795439][T13448] veth1_vlan: left promiscuous mode [ 729.800773][T13448] veth0_vlan: left promiscuous mode [ 732.131072][ T5134] Bluetooth: hci4: command tx timeout [ 733.074891][ T5917] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 733.245846][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 733.268103][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.289923][ T5917] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 733.299057][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 733.324151][ T5917] usb 7-1: SerialNumber: syz [ 733.386292][ T5917] usb 7-1: config 0 descriptor?? [ 733.398508][ T5917] usb 7-1: Found UVC 0.00 device (05ac:8501) [ 733.405534][ T5917] usb 7-1: No valid video chain found. [ 733.615647][ T5917] usb 7-1: USB disconnect, device number 9 [ 734.322482][T13628] Bluetooth: hci4: command tx timeout [ 735.260720][T14006] xt_SECMARK: invalid mode: 0 [ 735.785136][T13448] team0 (unregistering): Port device team_slave_1 removed [ 735.936649][T14012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2614'. [ 735.970041][T13448] team0 (unregistering): Port device team_slave_0 removed [ 736.528072][T13628] Bluetooth: hci4: command tx timeout [ 738.084782][T14021] FAULT_INJECTION: forcing a failure. [ 738.084782][T14021] name failslab, interval 1, probability 0, space 0, times 0 [ 738.097952][T14021] CPU: 1 UID: 0 PID: 14021 Comm: syz.1.2617 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 738.097989][T14021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 738.098003][T14021] Call Trace: [ 738.098011][T14021] [ 738.098021][T14021] dump_stack_lvl+0x241/0x360 [ 738.098064][T14021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.098098][T14021] ? __pfx__printk+0x10/0x10 [ 738.098132][T14021] ? fs_reclaim_acquire+0x93/0x130 [ 738.098167][T14021] ? __pfx___might_resched+0x10/0x10 [ 738.098194][T14021] should_fail_ex+0x40a/0x550 [ 738.098223][T14021] should_failslab+0xac/0x100 [ 738.098250][T14021] __kmalloc_noprof+0xdd/0x4c0 [ 738.098276][T14021] ? kstrtouint_from_user+0x128/0x190 [ 738.098302][T14021] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 738.098342][T14021] tomoyo_realpath_from_path+0xcf/0x5e0 [ 738.098389][T14021] tomoyo_path_number_perm+0x236/0x860 [ 738.098416][T14021] ? __lock_acquire+0x1397/0x2100 [ 738.098446][T14021] ? tomoyo_path_number_perm+0x206/0x860 [ 738.098477][T14021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 738.098548][T14021] ? __fget_files+0x2a/0x410 [ 738.098579][T14021] ? __fget_files+0x2a/0x410 [ 738.098612][T14021] security_file_ioctl+0xc6/0x2a0 [ 738.098644][T14021] __se_sys_ioctl+0x46/0x170 [ 738.098680][T14021] do_syscall_64+0xf3/0x230 [ 738.098708][T14021] ? clear_bhb_loop+0x35/0x90 [ 738.098742][T14021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.098771][T14021] RIP: 0033:0x7feebd98cda9 [ 738.098790][T14021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.098807][T14021] RSP: 002b:00007feebe700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.098829][T14021] RAX: ffffffffffffffda RBX: 00007feebdba5fa0 RCX: 00007feebd98cda9 [ 738.098844][T14021] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 738.098857][T14021] RBP: 00007feebe700090 R08: 0000000000000000 R09: 0000000000000000 [ 738.098870][T14021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.098882][T14021] R13: 0000000000000000 R14: 00007feebdba5fa0 R15: 00007ffe97c65978 [ 738.098914][T14021] [ 738.098976][T14021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 739.214523][T14030] netlink: 'syz.6.2618': attribute type 5 has an invalid length. [ 740.199828][T13945] chnl_net:caif_netlink_parms(): no params data found [ 740.289148][T14030] : entered promiscuous mode [ 740.478884][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 740.487959][T14034] netlink: 'syz.0.2620': attribute type 2 has an invalid length. [ 740.495787][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2620'. [ 741.011795][T13945] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.045425][T13945] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.084947][T13945] bridge_slave_0: entered allmulticast mode [ 741.114438][T13945] bridge_slave_0: entered promiscuous mode [ 741.138052][T13945] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.166008][T13945] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.189607][T13945] bridge_slave_1: entered allmulticast mode [ 741.210026][T13945] bridge_slave_1: entered promiscuous mode [ 741.412995][T14052] trusted_key: syz.2.2624 sent an empty control message without MSG_MORE. [ 741.502871][T13945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.535009][T13945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.684196][T13945] team0: Port device team_slave_0 added [ 741.722786][T13945] team0: Port device team_slave_1 added [ 741.921228][T13945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.947587][T13945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.030406][T13945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.310380][T13945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.362770][T13945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.525404][T13945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.577304][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 743.727596][T13945] hsr_slave_0: entered promiscuous mode [ 743.766845][T13945] hsr_slave_1: entered promiscuous mode [ 743.799493][T13945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.807145][T13945] Cannot create hsr debugfs directory [ 746.116193][T14094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.416947][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2643'. [ 747.470653][T13945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 747.510673][T13945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 747.562856][T14111] batadv2: entered allmulticast mode [ 747.584179][T14113] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2643'. [ 747.604310][T13945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 747.634803][T13945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 747.686887][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2645'. [ 747.980333][T13945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.061660][T13945] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.130569][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.137825][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.190121][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.197371][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.740343][T13945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.817657][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 751.826713][T14157] netlink: 'syz.6.2653': attribute type 2 has an invalid length. [ 751.834485][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2653'. [ 751.981283][T14169] bond4: entered promiscuous mode [ 751.986610][T14169] bond4: entered allmulticast mode [ 752.007008][T14169] batadv6: entered allmulticast mode [ 752.015315][T14169] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 752.029344][T14169] batadv6: entered promiscuous mode [ 752.035818][T14169] bond4: (slave batadv6): Enslaving as an active interface with an up link [ 752.049440][T14169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2656'. [ 752.059590][T14169] bond4: left promiscuous mode [ 752.064517][T14169] batadv6: left promiscuous mode [ 752.071344][T14169] bond4: left allmulticast mode [ 752.077018][T14169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 752.398868][T13945] veth0_vlan: entered promiscuous mode [ 752.425257][T13945] veth1_vlan: entered promiscuous mode [ 752.482497][T13945] veth0_macvtap: entered promiscuous mode [ 752.502267][T13945] veth1_macvtap: entered promiscuous mode [ 752.556656][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.585749][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.606856][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.627990][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.648865][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.670654][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.691580][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.736891][ T1161] Bluetooth: hci5: Frame reassembly failed (-84) [ 752.748383][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.771188][T13945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.795213][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.807133][ T5906] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 752.815098][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.826172][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.838456][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.848880][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.873820][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.883739][T13945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.911243][T13945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.935735][T13945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.960117][T13945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.969234][T13945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.978223][T13945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.987662][T13945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.999321][ T5906] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 753.044895][ T5906] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 753.286421][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.324680][ T5906] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.554710][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.776648][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.825330][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.879971][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.899591][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.232942][ T5906] usb 7-1: Product: syz [ 754.237770][ T5906] usb 7-1: Manufacturer: syz [ 754.244314][ T5906] usb 7-1: SerialNumber: syz [ 754.918050][ T5134] Bluetooth: hci5: command 0x1003 tx timeout [ 754.925291][T13628] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 755.834380][T13448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.384411][T13448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.410225][ T5906] cdc_ncm 7-1:1.0: bind() failure [ 756.419827][ T5906] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 756.455274][ T5906] cdc_ncm 7-1:1.1: bind() failure [ 756.487756][ T5906] usb 7-1: USB disconnect, device number 10 [ 756.708023][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 756.724381][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 756.733867][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 756.757088][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 756.766950][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 756.774548][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.823020][T13448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.913667][T13448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.203308][ T5134] Bluetooth: hci0: command tx timeout [ 759.213829][T13448] bridge_slave_1: left allmulticast mode [ 759.219837][T13448] bridge_slave_1: left promiscuous mode [ 759.245574][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.270639][T13448] bridge_slave_0: left allmulticast mode [ 759.292162][T13448] bridge_slave_0: left promiscuous mode [ 759.297933][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.417514][T13628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 759.432135][T13628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 759.442303][T13628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 759.462365][T13628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 759.472606][T13628] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 759.481014][T13628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 760.560897][T13448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.586500][T13448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.607825][T13448] bond0 (unregistering): Released all slaves [ 760.666323][T14200] chnl_net:caif_netlink_parms(): no params data found [ 761.415650][ T5134] Bluetooth: hci0: command tx timeout [ 761.447372][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.464677][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.480920][T14200] bridge_slave_0: entered allmulticast mode [ 761.493905][T14200] bridge_slave_0: entered promiscuous mode [ 762.059527][ T5134] Bluetooth: hci4: command tx timeout [ 762.747546][T13448] hsr_slave_0: left promiscuous mode [ 762.763448][T13448] hsr_slave_1: left promiscuous mode [ 762.775814][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.784118][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.800503][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.812299][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.967158][T13448] veth1_macvtap: left promiscuous mode [ 762.973026][T13448] veth0_macvtap: left promiscuous mode [ 762.994010][T13448] veth1_vlan: left promiscuous mode [ 763.017401][T13448] veth0_vlan: left promiscuous mode [ 763.652315][ T5134] Bluetooth: hci0: command tx timeout [ 764.237985][ T5134] Bluetooth: hci4: command tx timeout [ 764.752681][T13448] team0 (unregistering): Port device team_slave_1 removed [ 764.817133][T13448] team0 (unregistering): Port device team_slave_0 removed [ 765.574993][T14227] chnl_net:caif_netlink_parms(): no params data found [ 765.597262][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.617230][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.624534][T14200] bridge_slave_1: entered allmulticast mode [ 765.643477][T14200] bridge_slave_1: entered promiscuous mode [ 765.787439][T14200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.889280][ T5134] Bluetooth: hci0: command tx timeout [ 766.054334][T14200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.243180][T14200] team0: Port device team_slave_0 added [ 766.323505][T14200] team0: Port device team_slave_1 added [ 766.461693][ T5134] Bluetooth: hci4: command tx timeout [ 766.467597][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.475945][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.490842][T14227] bridge_slave_0: entered allmulticast mode [ 766.511435][T14227] bridge_slave_0: entered promiscuous mode [ 766.528832][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.558007][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.570102][T14227] bridge_slave_1: entered allmulticast mode [ 766.591085][T14227] bridge_slave_1: entered promiscuous mode [ 766.625781][T14200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.640077][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.710499][T14200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.795268][T14200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.813331][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.865867][T14200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.906335][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.946849][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.032338][T14200] hsr_slave_0: entered promiscuous mode [ 767.052931][T14200] hsr_slave_1: entered promiscuous mode [ 767.086641][T14200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 767.102977][T14200] Cannot create hsr debugfs directory [ 767.131599][T14227] team0: Port device team_slave_0 added [ 767.213949][T14227] team0: Port device team_slave_1 added [ 767.322133][T13448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.393417][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.400475][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.466733][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.557528][T13448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.591931][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.599370][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.627681][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.689132][T13448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.997102][ T5134] Bluetooth: hci4: command tx timeout [ 769.030424][T13448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.427474][T14227] hsr_slave_0: entered promiscuous mode [ 769.445172][T14227] hsr_slave_1: entered promiscuous mode [ 769.462555][T14227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.483538][T14227] Cannot create hsr debugfs directory [ 770.777849][T14321] overlayfs: disabling nfs_export due to verity=on [ 770.802560][T14321] overlayfs: missing 'lowerdir' [ 771.096413][T13448] bridge_slave_1: left allmulticast mode [ 771.103557][T13448] bridge_slave_1: left promiscuous mode [ 771.120262][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.192870][T13448] bridge_slave_0: left allmulticast mode [ 771.198789][T13448] bridge_slave_0: left promiscuous mode [ 771.204557][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.274677][T14332] FAULT_INJECTION: forcing a failure. [ 771.274677][T14332] name failslab, interval 1, probability 0, space 0, times 0 [ 771.293981][T14332] CPU: 1 UID: 0 PID: 14332 Comm: syz.1.2698 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 771.294013][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 771.294027][T14332] Call Trace: [ 771.294034][T14332] [ 771.294044][T14332] dump_stack_lvl+0x241/0x360 [ 771.294086][T14332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.294120][T14332] ? __pfx__printk+0x10/0x10 [ 771.294154][T14332] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 771.294186][T14332] ? __pfx___might_resched+0x10/0x10 [ 771.294214][T14332] should_fail_ex+0x40a/0x550 [ 771.294241][T14332] should_failslab+0xac/0x100 [ 771.294268][T14332] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 771.294297][T14332] ? generic_parse_monolithic+0x26c/0x400 [ 771.294324][T14332] ? smack_sb_eat_lsm_opts+0x5ee/0x6a0 [ 771.294351][T14332] kmemdup_nul+0x30/0xa0 [ 771.294393][T14332] generic_parse_monolithic+0x26c/0x400 [ 771.294426][T14332] ? __pfx_generic_parse_monolithic+0x10/0x10 [ 771.294473][T14332] do_new_mount+0x28f/0xb40 [ 771.294505][T14332] ? __pfx_do_new_mount+0x10/0x10 [ 771.294541][T14332] __se_sys_mount+0x2d6/0x3c0 [ 771.294573][T14332] ? __pfx___se_sys_mount+0x10/0x10 [ 771.294600][T14332] ? do_syscall_64+0x100/0x230 [ 771.294632][T14332] ? __x64_sys_mount+0x20/0xc0 [ 771.294660][T14332] do_syscall_64+0xf3/0x230 [ 771.294688][T14332] ? clear_bhb_loop+0x35/0x90 [ 771.294720][T14332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.294749][T14332] RIP: 0033:0x7feebd98cda9 [ 771.294767][T14332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.294784][T14332] RSP: 002b:00007feebe700038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 771.294807][T14332] RAX: ffffffffffffffda RBX: 00007feebdba5fa0 RCX: 00007feebd98cda9 [ 771.294822][T14332] RDX: 0000000020002100 RSI: 00000000200020c0 RDI: 0000000000000000 [ 771.294835][T14332] RBP: 00007feebe700090 R08: 0000000020002140 R09: 0000000000000000 [ 771.294848][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.294860][T14332] R13: 0000000000000000 R14: 00007feebdba5fa0 R15: 00007ffe97c65978 [ 771.294891][T14332] [ 771.520499][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.304235][T14343] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2701'. [ 772.463182][T14343] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 772.475158][T14343] overlayfs: missing 'lowerdir' [ 772.971145][T13448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.982174][T13448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.994928][T13448] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 773.010455][T13448] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 773.024397][T13448] bond0 (unregistering): Released all slaves [ 773.047940][T13448] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 773.056812][T13448] batadv1: left promiscuous mode [ 773.064260][T13448] bond1 (unregistering): Released all slaves [ 773.077792][T13448] bond2 (unregistering): Released all slaves [ 773.107812][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2700'. [ 773.955971][ T5825] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 774.098459][T13448] hsr_slave_0: left promiscuous mode [ 774.202720][T13448] hsr_slave_1: left promiscuous mode [ 774.208828][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.228623][T13448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.245857][T13448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.332886][T14366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'. [ 775.145583][T13448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.196015][ T5825] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 775.206314][ T5825] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 775.237557][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.255709][T13448] veth1_macvtap: left promiscuous mode [ 775.268654][T14370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.271149][T13448] veth0_macvtap: left promiscuous mode [ 775.285983][ T5825] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.302849][T13448] veth1_vlan: left promiscuous mode [ 775.313448][T13448] veth0_vlan: left promiscuous mode [ 775.588029][ T5825] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 777.695719][ T5834] usb 7-1: USB disconnect, device number 11 [ 777.892829][T14373] syz.0.2711 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 780.123944][T13448] team0 (unregistering): Port device team_slave_1 removed [ 780.252895][T13448] team0 (unregistering): Port device team_slave_0 removed [ 782.249022][T14375] syzkaller1: entered promiscuous mode [ 782.273065][T14375] syzkaller1: entered allmulticast mode [ 782.387513][T14399] netlink: zone id is out of range [ 782.404016][T14399] netlink: zone id is out of range [ 782.409242][T14399] netlink: zone id is out of range [ 782.441780][T14399] netlink: zone id is out of range [ 782.448559][T14399] netlink: zone id is out of range [ 782.455723][T14399] netlink: zone id is out of range [ 782.462145][T14399] netlink: zone id is out of range [ 782.475816][T14399] netlink: zone id is out of range [ 782.483317][T14399] netlink: zone id is out of range [ 782.490501][T14399] netlink: zone id is out of range [ 782.935864][ T5878] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 783.278408][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.386436][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.406228][ T5878] usb 7-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 783.445399][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.520192][ T5878] usb 7-1: config 0 descriptor?? [ 783.578135][T14227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 783.603994][T14227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 783.639027][T14227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 783.708449][T14227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 784.365660][ T5878] wacom 0003:056A:0031.000E: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.6-1/input0 [ 784.424296][T14200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.485362][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.519422][T14200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.539795][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.548220][T14200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 784.549885][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.586411][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.586802][T14200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 784.615122][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.646723][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.670276][ T5878] usb 7-1: USB disconnect, device number 12 [ 784.810192][T14227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.804446][T14227] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.867926][T14200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.908906][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.916114][ T7562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.977552][T14200] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.010613][ T7562] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.018135][ T7562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.034060][T14423] Bluetooth: MGMT ver 1.23 [ 786.064771][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.072055][ T7562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.163877][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.171158][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.401821][T14227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.581620][T14227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.679774][T14200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.807062][T14200] veth0_vlan: entered promiscuous mode [ 786.813779][T14445] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 786.820345][T14445] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 786.828644][T14445] vhci_hcd vhci_hcd.0: Device attached [ 786.857176][T14200] veth1_vlan: entered promiscuous mode [ 786.979763][T14227] veth0_vlan: entered promiscuous mode [ 787.006373][T14227] veth1_vlan: entered promiscuous mode [ 787.018607][T14200] veth0_macvtap: entered promiscuous mode [ 787.030356][ T8698] vhci_hcd: vhci_device speed not set [ 787.049204][T14200] veth1_macvtap: entered promiscuous mode [ 787.098579][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.105591][ T8698] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 787.125462][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.146651][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.179869][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.200705][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.235124][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.246915][T14200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.267135][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.281048][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.292780][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.303647][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.314109][T14200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.325455][T14200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.337543][T14200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.370579][T14200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.380150][T14200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.389414][T14200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.399977][T14200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.412229][T14227] veth0_macvtap: entered promiscuous mode [ 787.443831][T14227] veth1_macvtap: entered promiscuous mode [ 787.495757][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.495785][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.495799][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.495816][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.495833][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.495850][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.495866][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.495882][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.496953][T14227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.506687][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.506712][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.506723][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.506737][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.506750][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.506764][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.506778][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.506791][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.508050][T14227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.548037][T14227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.548108][T14227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.548140][T14227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.548170][T14227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.833752][T14448] vhci_hcd: connection reset by peer [ 787.846335][ T1334] vhci_hcd: stop threads [ 787.850946][ T1334] vhci_hcd: release socket [ 787.855765][ T1334] vhci_hcd: disconnect device [ 787.903124][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.932243][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.948234][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.971166][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.057358][T12441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.080011][T12441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.104482][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.145138][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.551115][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.993796][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.163898][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.181229][T13628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 791.199150][T13628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 791.213539][T13628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 791.232709][T13628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 791.243053][T13628] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 791.250461][T13628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 791.372826][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.807444][T14495] chnl_net:caif_netlink_parms(): no params data found [ 791.933625][ T51] bridge_slave_1: left allmulticast mode [ 791.948637][ T51] bridge_slave_1: left promiscuous mode [ 791.954645][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.024333][ T51] bridge_slave_0: left allmulticast mode [ 792.044780][ T51] bridge_slave_0: left promiscuous mode [ 792.050699][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.141788][ T5134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 792.155650][ T5134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 792.164113][ T5134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 792.182685][ T5134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 792.194228][ T5134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 792.205852][ T5134] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 792.621834][ T8698] vhci_hcd: vhci_device speed not set [ 793.507744][ T5134] Bluetooth: hci1: command tx timeout [ 793.966452][T14539] netlink: 1264 bytes leftover after parsing attributes in process `syz.6.2755'. [ 793.976425][T14539] net_ratelimit: 57 callbacks suppressed [ 793.976462][T14539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.429792][ T5134] Bluetooth: hci4: command tx timeout [ 795.078668][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.206951][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.281181][ T51] bond0 (unregistering): Released all slaves [ 795.716016][T14495] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.723454][ T5134] Bluetooth: hci1: command tx timeout [ 795.731826][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.739496][T14495] bridge_slave_0: entered allmulticast mode [ 795.758232][T14495] bridge_slave_0: entered promiscuous mode [ 795.767005][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.774643][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.781986][T14495] bridge_slave_1: entered allmulticast mode [ 795.789904][T14495] bridge_slave_1: entered promiscuous mode [ 795.982335][T14495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.007140][T14495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.047177][ T51] hsr_slave_0: left promiscuous mode [ 796.053525][ T51] hsr_slave_1: left promiscuous mode [ 796.059658][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.074852][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.095363][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.107770][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.184108][ T51] veth1_macvtap: left promiscuous mode [ 796.190988][ T51] veth0_macvtap: left promiscuous mode [ 796.203714][ T51] veth1_vlan: left promiscuous mode [ 796.216268][ T51] veth0_vlan: left promiscuous mode [ 796.349653][T14548] syz.6.2757 (14548): drop_caches: 2 [ 796.665391][ T5134] Bluetooth: hci4: command tx timeout [ 797.934889][ T5134] Bluetooth: hci1: command tx timeout [ 798.875589][ T5134] Bluetooth: hci4: command tx timeout [ 799.535952][ T51] team0 (unregistering): Port device team_slave_1 removed [ 800.220692][ T51] team0 (unregistering): Port device team_slave_0 removed [ 800.233295][ T5134] Bluetooth: hci1: command tx timeout [ 801.103913][ T5134] Bluetooth: hci4: command tx timeout [ 801.911177][ T8698] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 802.059405][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2772'. [ 802.084911][ T8698] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 802.093448][T14612] netlink: 'syz.2.2772': attribute type 2 has an invalid length. [ 802.110348][ T8698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 802.113735][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 802.121790][ T8698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 802.144212][ T8698] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 802.209534][ T8698] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 802.226675][ T8698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.236019][ T8698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 802.244438][ T8698] usb 2-1: SerialNumber: syz [ 802.333045][T14606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 802.343630][T14606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 802.919884][T14495] team0: Port device team_slave_0 added [ 802.961635][T14618] bond2: entered promiscuous mode [ 802.970316][T14618] bond2: entered allmulticast mode [ 803.003426][T14620] batadv2: entered allmulticast mode [ 803.011824][T14620] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 803.029321][T14620] batadv2: entered promiscuous mode [ 803.040471][T14620] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 803.084148][T14495] team0: Port device team_slave_1 added [ 803.090701][T14618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2773'. [ 803.441502][T14495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.448865][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.547518][T14495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.672868][T14623] 9pnet_fd: Insufficient options for proto=fd [ 803.712602][T14495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.867986][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.905896][T14495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.228010][T14516] chnl_net:caif_netlink_parms(): no params data found [ 804.249923][T14495] hsr_slave_0: entered promiscuous mode [ 804.416467][T14495] hsr_slave_1: entered promiscuous mode [ 804.429436][T14495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 804.439254][T14495] Cannot create hsr debugfs directory [ 805.104497][ T8698] usb 2-1: USB disconnect, device number 63 [ 805.315169][T14516] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.344960][T14516] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.369797][T14516] bridge_slave_0: entered allmulticast mode [ 805.392490][T14516] bridge_slave_0: entered promiscuous mode [ 805.415507][T14516] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.442866][T14516] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.470214][T14516] bridge_slave_1: entered allmulticast mode [ 805.499892][T14516] bridge_slave_1: entered promiscuous mode [ 805.699205][T14642] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 805.713701][T14516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.752380][T14516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.917669][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 805.930691][T14648] netlink: 'syz.2.2779': attribute type 2 has an invalid length. [ 805.940145][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2779'. [ 806.413017][ T5825] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 806.618958][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 806.901277][ T5825] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 806.911014][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.919272][ T5825] usb 7-1: Product: syz [ 806.923507][ T5825] usb 7-1: Manufacturer: syz [ 806.936247][ T5825] usb 7-1: SerialNumber: syz [ 806.954523][ T5825] usb 7-1: config 0 descriptor?? [ 806.972106][ T5825] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 806.986893][T14495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.015031][T14495] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.232493][T14516] team0: Port device team_slave_0 added [ 807.418645][ T5825] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 807.469078][T14516] team0: Port device team_slave_1 added [ 808.055708][T14495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.069382][T14495] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.119719][T14516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.137136][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.219096][T14516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.263400][T14495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.283200][T14495] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.314800][T14516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.330148][T14516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.385104][T14516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.465172][T14495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.488413][T14495] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.602695][T14516] hsr_slave_0: entered promiscuous mode [ 808.618642][T14516] hsr_slave_1: entered promiscuous mode [ 808.634124][T14516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.646692][T14516] Cannot create hsr debugfs directory [ 808.869894][T14495] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 808.897198][T14495] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 808.933763][T14495] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 808.988823][T14495] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 809.078697][ T5878] usb 7-1: USB disconnect, device number 13 [ 809.332142][T14495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.459864][T14495] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.284718][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.291967][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.512944][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.520129][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.604222][T14685] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 811.844663][T14516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 811.904879][T14516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 811.945330][T14516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 811.953573][T14692] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 811.960146][T14692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 811.988347][T14516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 812.032828][T14692] vhci_hcd vhci_hcd.0: Device attached [ 812.287827][T14693] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 812.316852][ T5878] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 812.340526][ T12] vhci_hcd: stop threads [ 812.369397][ T12] vhci_hcd: release socket [ 812.413256][ T12] vhci_hcd: disconnect device [ 812.739736][T14495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.871115][T14495] veth0_vlan: entered promiscuous mode [ 812.919862][T14495] veth1_vlan: entered promiscuous mode [ 813.583512][T14516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.647788][T14706] XFS (nullb0): Invalid superblock magic number [ 813.714036][T14516] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.778868][T14495] veth0_macvtap: entered promiscuous mode [ 813.788434][T14495] veth1_macvtap: entered promiscuous mode [ 813.961824][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.969020][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.093858][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.101205][T13448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.200220][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.236738][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.285150][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.310518][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 814.311952][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.332168][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.343092][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.373063][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.394704][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.416961][T14495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.460789][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.504194][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.555406][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.566320][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.590737][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.612123][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.633592][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.653730][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.666380][T14731] FAULT_INJECTION: forcing a failure. [ 814.666380][T14731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.681235][T14495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.688778][T14731] CPU: 1 UID: 0 PID: 14731 Comm: syz.2.2799 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 814.688807][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 814.688820][T14731] Call Trace: [ 814.688828][T14731] [ 814.688837][T14731] dump_stack_lvl+0x241/0x360 [ 814.688882][T14731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.688917][T14731] ? __pfx__printk+0x10/0x10 [ 814.688952][T14731] ? __pfx_lock_release+0x10/0x10 [ 814.688989][T14731] should_fail_ex+0x40a/0x550 [ 814.689017][T14731] _copy_from_user+0x2d/0xb0 [ 814.689039][T14731] memdup_user+0x64/0xc0 [ 814.689071][T14731] snd_pcm_hw_refine_user+0x1e/0xe0 [ 814.689108][T14731] snd_pcm_common_ioctl+0x84e/0x9c0 [ 814.689144][T14731] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 814.689181][T14731] ? __fget_files+0x2a/0x410 [ 814.689215][T14731] snd_pcm_ioctl+0x87/0xb0 [ 814.689239][T14731] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 814.689267][T14731] __se_sys_ioctl+0xf5/0x170 [ 814.689303][T14731] do_syscall_64+0xf3/0x230 [ 814.689331][T14731] ? clear_bhb_loop+0x35/0x90 [ 814.689363][T14731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.689391][T14731] RIP: 0033:0x7f65d8f8cda9 [ 814.689409][T14731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.689427][T14731] RSP: 002b:00007f65d9de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.689450][T14731] RAX: ffffffffffffffda RBX: 00007f65d91a5fa0 RCX: 00007f65d8f8cda9 [ 814.689466][T14731] RDX: 0000000020000600 RSI: 00000000c2604110 RDI: 0000000000000003 [ 814.689480][T14731] RBP: 00007f65d9de7090 R08: 0000000000000000 R09: 0000000000000000 [ 814.689494][T14731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.689506][T14731] R13: 0000000000000000 R14: 00007f65d91a5fa0 R15: 00007ffc8db021d8 [ 814.689546][T14731] [ 814.908721][T14495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.917884][T14495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.926855][T14495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.962054][T14495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.003666][T14729] netlink: 'syz.1.2798': attribute type 12 has an invalid length. [ 815.015330][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2798'. [ 815.295098][T14737] trusted_key: encrypted_key: insufficient parameters specified [ 815.352562][T12441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.368724][T12441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.433343][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.474575][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.663663][T14516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.904785][T14751] netlink: 'syz.2.2804': attribute type 2 has an invalid length. [ 815.920469][T14751] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2804'. [ 817.334203][T14516] veth0_vlan: entered promiscuous mode [ 817.385443][T14516] veth1_vlan: entered promiscuous mode [ 817.451016][T14516] veth0_macvtap: entered promiscuous mode [ 817.471675][T14516] veth1_macvtap: entered promiscuous mode [ 817.521331][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.541513][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.569966][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.594735][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.620422][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.637758][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.647984][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.659521][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.669604][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.680293][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.699688][T14516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.724337][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.735385][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.747312][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.780104][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.819057][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.849740][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.894416][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.936615][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.949289][ T5878] vhci_hcd: vhci_device speed not set [ 817.967804][T14516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.996630][T14516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.020605][T14516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.931980][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.985957][T14516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.994758][T14516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.027342][T14516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.036284][T14516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.359643][T13448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.367625][T13448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.445840][T13448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.461003][T13448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.077227][T14800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.115433][ T7562] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.216101][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2814'. [ 820.355181][ T7562] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.476929][ T7562] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.579057][ T7562] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.702971][ T7562] bridge_slave_1: left allmulticast mode [ 820.709923][ T7562] bridge_slave_1: left promiscuous mode [ 820.715661][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.725353][ T7562] bridge_slave_0: left allmulticast mode [ 820.731276][ T7562] bridge_slave_0: left promiscuous mode [ 820.737035][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.400706][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 821.582548][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 821.610813][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 821.625425][ T9] usb 7-1: config 0 has no interface number 0 [ 821.657233][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 821.698429][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 821.723666][T14821] program syz.0.2826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.725828][T13628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 821.743161][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.754353][T13628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 821.760526][ T9] usb 7-1: Product: syz [ 821.766650][T13628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 821.794458][T13628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 821.798748][ T9] usb 7-1: Manufacturer: syz [ 821.807116][T13628] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 821.819099][T13628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 821.832044][ T9] usb 7-1: SerialNumber: syz [ 821.907013][ T9] usb 7-1: config 0 descriptor?? [ 821.917697][ T9] smsc75xx v1.0.0 [ 821.999487][ T7562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.067030][ T7562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.364461][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 823.411667][ T7562] bond0 (unregistering): Released all slaves [ 823.489330][ T5834] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 823.509374][ T5834] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 823.538790][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.549001][ T5834] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 823.795026][ T5834] usb 1-1: config 0 has no interface number 0 [ 823.801595][ T5834] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 823.811697][ T5834] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 823.823290][ T5834] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.833571][ T5834] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 823.855410][ T62] IPVS: starting estimator thread 0... [ 823.855892][ T5834] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 823.870847][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.928062][ T5834] usb 1-1: config 0 descriptor?? [ 823.950360][ T5834] gspca_main: spca561-2.14.0 probing abcd:cdee [ 824.019984][T13628] Bluetooth: hci4: command tx timeout [ 824.030763][T14841] IPVS: using max 23 ests per chain, 55200 per kthread [ 824.235516][T14821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2826'. [ 824.531578][ T5834] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 824.614349][ T5834] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.722133][ T5834] usb 1-1: MIDIStreaming interface descriptor not found [ 826.232980][ T7562] hsr_slave_0: left promiscuous mode [ 826.243560][T13628] Bluetooth: hci4: command tx timeout [ 827.323297][ T62] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 827.454179][ T7562] hsr_slave_1: left promiscuous mode [ 827.460260][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.515902][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.540135][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.562164][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.590482][ T62] usb 3-1: device descriptor read/64, error -71 [ 827.673942][ T7562] veth1_macvtap: left promiscuous mode [ 827.694693][ T7562] veth0_macvtap: left promiscuous mode [ 827.712881][ T7562] veth1_vlan: left promiscuous mode [ 827.731877][ T7562] veth0_vlan: left promiscuous mode [ 827.847158][ T62] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 828.150126][ T62] usb 3-1: device descriptor read/64, error -71 [ 828.275991][ T62] usb usb3-port1: attempt power cycle [ 828.523927][T13628] Bluetooth: hci4: command tx timeout [ 828.652455][T14860] Bluetooth: MGMT ver 1.23 [ 829.562792][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 829.589587][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 829.906158][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 829.932770][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -110 [ 829.975964][ T62] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 830.029183][ T62] usb 3-1: device descriptor read/8, error -71 [ 830.327282][ T62] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 830.360218][ T62] usb 3-1: device descriptor read/8, error -71 [ 830.443452][ T8698] usb 1-1: USB disconnect, device number 3 [ 830.477356][ T62] usb usb3-port1: unable to enumerate USB device [ 830.701611][ T5134] Bluetooth: hci4: command tx timeout [ 831.739836][T14873] cifs: Bad value for 'port' [ 832.171078][ T7562] team0 (unregistering): Port device team_slave_1 removed [ 832.338095][ T7562] team0 (unregistering): Port device team_slave_0 removed [ 832.431431][T14881] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 832.914690][ T5134] Bluetooth: hci4: command 0x0405 tx timeout [ 833.085198][T14862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2833'. [ 833.098199][T14862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2833'. [ 833.111520][T14862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2833'. [ 833.160333][T14858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 833.176030][ T5834] usb 7-1: USB disconnect, device number 14 [ 833.191615][T14858] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 833.261114][T14858] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 833.296803][T14858] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 833.309121][T14826] chnl_net:caif_netlink_parms(): no params data found [ 833.352434][T14858] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 833.386339][T14858] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 833.408693][T14858] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 833.460305][T14858] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 833.478182][T14858] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 833.484665][T14858] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 833.661786][T14858] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 833.743710][T14826] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.751329][ T5134] ================================================================== [ 833.759732][ T5134] BUG: KASAN: slab-use-after-free in l2cap_disconn_ind+0x79/0xc0 [ 833.767485][ T5134] Read of size 1 at addr ffff88803185eab0 by task kworker/u9:1/5134 [ 833.775837][ T5134] [ 833.778183][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: kworker/u9:1 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 833.778209][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 833.778224][ T5134] Workqueue: hci4 hci_conn_timeout [ 833.778262][ T5134] Call Trace: [ 833.778271][ T5134] [ 833.778281][ T5134] dump_stack_lvl+0x241/0x360 [ 833.778319][ T5134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.778353][ T5134] ? __pfx__printk+0x10/0x10 [ 833.778383][ T5134] ? _printk+0xd5/0x120 [ 833.778414][ T5134] ? __virt_addr_valid+0x183/0x530 [ 833.778444][ T5134] ? __virt_addr_valid+0x183/0x530 [ 833.778474][ T5134] print_report+0x169/0x550 [ 833.778499][ T5134] ? __virt_addr_valid+0x183/0x530 [ 833.778527][ T5134] ? __virt_addr_valid+0x183/0x530 [ 833.778556][ T5134] ? __virt_addr_valid+0x45f/0x530 [ 833.778584][ T5134] ? __phys_addr+0xba/0x170 [ 833.778613][ T5134] ? l2cap_disconn_ind+0x79/0xc0 [ 833.778635][ T5134] kasan_report+0x143/0x180 [ 833.778660][ T5134] ? l2cap_disconn_ind+0x79/0xc0 [ 833.778683][ T5134] ? process_scheduled_works+0x976/0x1840 [ 833.778707][ T5134] l2cap_disconn_ind+0x79/0xc0 [ 833.778728][ T5134] hci_conn_timeout+0xd9/0x290 [ 833.778760][ T5134] process_scheduled_works+0xa66/0x1840 [ 833.778799][ T5134] ? __pfx_process_scheduled_works+0x10/0x10 [ 833.778827][ T5134] ? assign_work+0x364/0x3d0 [ 833.778851][ T5134] worker_thread+0x870/0xd30 [ 833.778879][ T5134] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 833.778912][ T5134] ? __kthread_parkme+0x169/0x1d0 [ 833.778939][ T5134] ? __pfx_worker_thread+0x10/0x10 [ 833.778962][ T5134] kthread+0x7a9/0x920 [ 833.778988][ T5134] ? __pfx_kthread+0x10/0x10 [ 833.779016][ T5134] ? __pfx_worker_thread+0x10/0x10 [ 833.779039][ T5134] ? __pfx_kthread+0x10/0x10 [ 833.779065][ T5134] ? __pfx_kthread+0x10/0x10 [ 833.779094][ T5134] ? __pfx_kthread+0x10/0x10 [ 833.779120][ T5134] ? _raw_spin_unlock_irq+0x23/0x50 [ 833.779142][ T5134] ? lockdep_hardirqs_on+0x99/0x150 [ 833.779168][ T5134] ? __pfx_kthread+0x10/0x10 [ 833.779195][ T5134] ret_from_fork+0x4b/0x80 [ 833.779221][ T5134] ? __pfx_kthread+0x10/0x10 [ 833.779248][ T5134] ret_from_fork_asm+0x1a/0x30 [ 833.779279][ T5134] [ 833.779287][ T5134] [ 833.992440][ T5134] Allocated by task 14858: [ 833.996876][ T5134] kasan_save_track+0x3f/0x80 [ 834.001581][ T5134] __kasan_kmalloc+0x98/0xb0 [ 834.006284][ T5134] __kmalloc_cache_noprof+0x243/0x390 [ 834.011684][ T5134] l2cap_conn_add+0xa9/0x8e0 [ 834.016295][ T5134] l2cap_chan_connect+0x623/0xeb0 [ 834.021457][ T5134] lowpan_control_write+0x568/0x850 [ 834.026683][ T5134] full_proxy_write+0x17b/0x250 [ 834.031561][ T5134] vfs_write+0x29f/0xd10 [ 834.035836][ T5134] ksys_write+0x18f/0x2b0 [ 834.040202][ T5134] do_syscall_64+0xf3/0x230 [ 834.044734][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.050666][ T5134] [ 834.053001][ T5134] Freed by task 14858: [ 834.057113][ T5134] kasan_save_track+0x3f/0x80 [ 834.061815][ T5134] kasan_save_free_info+0x40/0x50 [ 834.066872][ T5134] __kasan_slab_free+0x59/0x70 [ 834.071754][ T5134] kfree+0x196/0x430 [ 834.075779][ T5134] l2cap_connect_cfm+0xcc/0x1090 [ 834.080755][ T5134] hci_conn_failed+0x287/0x400 [ 834.085549][ T5134] hci_abort_conn_sync+0x56c/0x11f0 [ 834.090769][ T5134] hci_disconnect_all_sync+0x264/0x460 [ 834.096250][ T5134] hci_suspend_sync+0x41a/0xca0 [ 834.101124][ T5134] hci_suspend_dev+0x203/0x3e0 [ 834.105907][ T5134] hci_suspend_notifier+0xf2/0x2b0 [ 834.111037][ T5134] notifier_call_chain+0x1a5/0x3f0 [ 834.116174][ T5134] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 834.122619][ T5134] pm_notifier_call_chain_robust+0x2c/0x60 [ 834.128452][ T5134] snapshot_open+0x19b/0x280 [ 834.133074][ T5134] misc_open+0x2cc/0x340 [ 834.137348][ T5134] chrdev_open+0x521/0x600 [ 834.141785][ T5134] do_dentry_open+0xdec/0x1960 [ 834.146574][ T5134] vfs_open+0x3b/0x370 [ 834.150666][ T5134] path_openat+0x2c81/0x3590 [ 834.155300][ T5134] do_filp_open+0x27f/0x4e0 [ 834.159834][ T5134] do_sys_openat2+0x13e/0x1d0 [ 834.164540][ T5134] __x64_sys_openat+0x247/0x2a0 [ 834.169419][ T5134] do_syscall_64+0xf3/0x230 [ 834.173947][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.179872][ T5134] [ 834.182209][ T5134] The buggy address belongs to the object at ffff88803185e800 [ 834.182209][ T5134] which belongs to the cache kmalloc-1k of size 1024 [ 834.196282][ T5134] The buggy address is located 688 bytes inside of [ 834.196282][ T5134] freed 1024-byte region [ffff88803185e800, ffff88803185ec00) [ 834.210292][ T5134] [ 834.212638][ T5134] The buggy address belongs to the physical page: [ 834.219074][ T5134] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31858 [ 834.227873][ T5134] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 834.236406][ T5134] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 834.244501][ T5134] page_type: f5(slab) [ 834.248493][ T5134] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 834.257096][ T5134] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 834.265785][ T5134] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001 [ 834.274468][ T5134] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 834.283150][ T5134] head: 00fff00000000003 ffffea0000c61601 ffffffffffffffff 0000000000000000 [ 834.291827][ T5134] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 834.300495][ T5134] page dumped because: kasan: bad access detected [ 834.306923][ T5134] page_owner tracks the page as allocated [ 834.312638][ T5134] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 72, tgid 72 (kworker/u8:4), ts 124235169171, free_ts 124149744428 [ 834.331783][ T5134] post_alloc_hook+0x1f4/0x240 [ 834.336564][ T5134] get_page_from_freelist+0x3651/0x37a0 [ 834.342115][ T5134] __alloc_frozen_pages_noprof+0x292/0x710 [ 834.347946][ T5134] alloc_pages_mpol+0x311/0x660 [ 834.352809][ T5134] allocate_slab+0x8f/0x3a0 [ 834.357404][ T5134] ___slab_alloc+0xc27/0x14a0 [ 834.362095][ T5134] __slab_alloc+0x58/0xa0 [ 834.366458][ T5134] __kmalloc_noprof+0x2e6/0x4c0 [ 834.371317][ T5134] ieee802_11_parse_elems_full+0xd9/0x2750 [ 834.377136][ T5134] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 834.383213][ T5134] ieee80211_iface_work+0x8dc/0xf90 [ 834.388424][ T5134] cfg80211_wiphy_work+0x2f0/0x490 [ 834.393578][ T5134] process_scheduled_works+0xa66/0x1840 [ 834.399150][ T5134] worker_thread+0x870/0xd30 [ 834.403758][ T5134] kthread+0x7a9/0x920 [ 834.407841][ T5134] ret_from_fork+0x4b/0x80 [ 834.412268][ T5134] page last free pid 5822 tgid 5822 stack trace: [ 834.418593][ T5134] free_frozen_pages+0xe04/0x10e0 [ 834.423631][ T5134] __put_partials+0x160/0x1c0 [ 834.428319][ T5134] put_cpu_partial+0x17c/0x250 [ 834.433085][ T5134] __slab_free+0x290/0x380 [ 834.437503][ T5134] qlist_free_all+0x9a/0x140 [ 834.442093][ T5134] kasan_quarantine_reduce+0x14f/0x170 [ 834.447559][ T5134] __kasan_slab_alloc+0x23/0x80 [ 834.452413][ T5134] __kmalloc_noprof+0x236/0x4c0 [ 834.457273][ T5134] xt_replace_table+0x91/0x780 [ 834.462041][ T5134] __do_replace+0x1ae/0xa50 [ 834.466550][ T5134] do_ip6t_set_ctl+0xf11/0x1270 [ 834.471414][ T5134] nf_setsockopt+0x295/0x2c0 [ 834.476019][ T5134] do_sock_setsockopt+0x3af/0x720 [ 834.481054][ T5134] __x64_sys_setsockopt+0x1ee/0x280 [ 834.486265][ T5134] do_syscall_64+0xf3/0x230 [ 834.490777][ T5134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.496685][ T5134] [ 834.499008][ T5134] Memory state around the buggy address: [ 834.504638][ T5134] ffff88803185e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.512703][ T5134] ffff88803185ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.520770][ T5134] >ffff88803185ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.528830][ T5134] ^ [ 834.534500][ T5134] ffff88803185eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.542578][ T5134] ffff88803185eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 834.550643][ T5134] ================================================================== [ 834.786854][ T5134] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 834.794120][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: kworker/u9:1 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 834.804652][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 834.814742][ T5134] Workqueue: hci4 hci_conn_timeout [ 834.819912][ T5134] Call Trace: [ 834.823217][ T5134] [ 834.826173][ T5134] dump_stack_lvl+0x241/0x360 [ 834.830891][ T5134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.836113][ T5134] ? __pfx__printk+0x10/0x10 [ 834.840719][ T5134] ? preempt_schedule+0xe1/0xf0 [ 834.845581][ T5134] ? vscnprintf+0x5d/0x90 [ 834.849924][ T5134] panic+0x349/0x880 [ 834.853833][ T5134] ? check_panic_on_warn+0x21/0xb0 [ 834.858957][ T5134] ? __pfx_panic+0x10/0x10 [ 834.863392][ T5134] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 834.869381][ T5134] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 834.875722][ T5134] ? print_report+0x502/0x550 [ 834.880415][ T5134] check_panic_on_warn+0x86/0xb0 [ 834.885365][ T5134] ? l2cap_disconn_ind+0x79/0xc0 [ 834.890310][ T5134] end_report+0x77/0x160 [ 834.894566][ T5134] kasan_report+0x154/0x180 [ 834.899103][ T5134] ? l2cap_disconn_ind+0x79/0xc0 [ 834.904052][ T5134] ? process_scheduled_works+0x976/0x1840 [ 834.909784][ T5134] l2cap_disconn_ind+0x79/0xc0 [ 834.914560][ T5134] hci_conn_timeout+0xd9/0x290 [ 834.919341][ T5134] process_scheduled_works+0xa66/0x1840 [ 834.924909][ T5134] ? __pfx_process_scheduled_works+0x10/0x10 [ 834.930914][ T5134] ? assign_work+0x364/0x3d0 [ 834.935526][ T5134] worker_thread+0x870/0xd30 [ 834.940132][ T5134] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 834.946038][ T5134] ? __kthread_parkme+0x169/0x1d0 [ 834.951081][ T5134] ? __pfx_worker_thread+0x10/0x10 [ 834.956206][ T5134] kthread+0x7a9/0x920 [ 834.960294][ T5134] ? __pfx_kthread+0x10/0x10 [ 834.964984][ T5134] ? __pfx_worker_thread+0x10/0x10 [ 834.970105][ T5134] ? __pfx_kthread+0x10/0x10 [ 834.974709][ T5134] ? __pfx_kthread+0x10/0x10 [ 834.979313][ T5134] ? __pfx_kthread+0x10/0x10 [ 834.983917][ T5134] ? _raw_spin_unlock_irq+0x23/0x50 [ 834.989125][ T5134] ? lockdep_hardirqs_on+0x99/0x150 [ 834.994334][ T5134] ? __pfx_kthread+0x10/0x10 [ 834.998941][ T5134] ret_from_fork+0x4b/0x80 [ 835.003382][ T5134] ? __pfx_kthread+0x10/0x10 [ 835.007992][ T5134] ret_from_fork_asm+0x1a/0x30 [ 835.012780][ T5134] [ 835.016123][ T5134] Kernel Offset: disabled [ 835.020455][ T5134] Rebooting in 86400 seconds..