last executing test programs: 6.27520041s ago: executing program 1 (id=2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b3b, 0xa2e6, 0x10, &(0x7f0000000240)={[0xffffffff]}, 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2}) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000c00)="89", 0xf4240}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000505000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x50}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000000140), 0x253, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xad, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="0f18cdff5b7e159f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x21, 0x34, @random="ecb92671af6f031eea6e290a433d8e76d1a3904da00bc82f488fe9c934"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4801) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dada81728a358e086d0400099a66015a80e1df95fe7e5574ad02030109021200010000000009040000000c220f0077061faf691099e9bfea032152b87c3d0eb180bbeff8d6021f432fb5d5366cea1c3cd8105f2cb963aa670ad22caff3c852965206ff0de822b904db576564039ba0204424bbd52c01b1fc0f7fe5663e10a2fe295aa49e33742df43807b88279a1437ed92e7ecf9fd3e53026d113794b96bf0bd127e056ffe5e1c3a1452fd66b24a1f446f52e0ed72f68ae1d23406055e8c3e366ebc7d67d000000000000000000006d04c3e74dd3a592"], 0x0) 6.2103269s ago: executing program 3 (id=4): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x2, 0x0) (fail_nth: 1) 5.85211678s ago: executing program 3 (id=6): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x2, 0x0) 5.679090711s ago: executing program 3 (id=7): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xb, 0x0, 0x0, 0x7fff0020}]}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000f5bb7829e5ffffff00000000000000bba12208f2e6356d359a78ac68b58ce1a8676e3faec94ca76e80ba2f65186fc27aa15ce5717803d8d77996a81203b44b5f12666fade66a37dc3f63216314fbab718b69292267146a2162ee7e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00beb00480000213a245095dbf10005100000000000000000000ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000900)={'lo\x00', @random='\x00\x00\x00 \x00'}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x7fff, 0x8}, 0x100, './file0\x00'}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xffffffffffffffe4, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT=r1, @ANYRESHEX=r5, @ANYRES8=r4, @ANYRES32=r9, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="0800020008000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r10, 0x3, 0xffffffffffffffff, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000d5000000000014000300626f6e645f736c6176655f300000000008000a"], 0x3c}}, 0x0) r11 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x82000, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x80, 0x20, 0x8, 0x677, {{0x15, 0x4, 0x2, 0x14, 0x54, 0x68, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @empty, {[@end, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x4}, {@multicast2, 0x4}]}, @noop, @ssrr={0x89, 0x17, 0x7d, [@dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101, @multicast1]}]}}}}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000b02da62ccc0000003900009c1a43cbc71426ebbab8002891649467ad43add90cb5f7bb3337c219788438f7612e6bf46b0800cf00fb4b81747bcf709942342c7de04d3aac18f873ff95769f64adaa8332dd08af7604000000cdb5cd4d1c988c6a4fffc8bf1621169be753d4ac3fc7589e98572366ed03d984b6c70cc78b24fb6cb4d95410faf9aa81c113ef6f6642c46b434ca6f7388e50819d512e95eb09c8e9fa58aae7e1b1ae", @ANYRES32=r14, @ANYBLOB="24005a8020000480050004000000000014000500"/36], 0x40}}, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f00000002c0)=@xdp={0x2c, 0x1, r12, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="298ad475342c2deca1278f41677ee0bb12252bd4434b", 0x16}], 0x1}, 0x40000) 5.522997832s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$usbmon(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x13, 0xffffffffffffffff, 0x8) r3 = dup(r2) shutdown(0xffffffffffffffff, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000900)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[]) 5.330436712s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$usbmon(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x13, 0xffffffffffffffff, 0x8) r3 = dup(r2) shutdown(0xffffffffffffffff, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000900)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[]) (fail_nth: 1) 5.163971455s ago: executing program 3 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) munlockall() read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)=0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0x23, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000fedbdf2501000000000000000b4100088b17efe05893fb89b00000001800001000756470003ad5741c0d92e85d9c902d000000000002000000000000006900"/98], 0x68}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x32c, 0xfe, 0x7f, 0x0, 0x0, @local}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) 5.093831408s ago: executing program 0 (id=9): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$sequencer(0xffffffffffffffff, &(0x7f0000003640)=ANY=[@ANYBLOB="f804beb044d12c9330efd960d21546f78f149e99b53dd1b437174cbb"], 0x10) r0 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x9) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f00000005c0)=""/39, 0x27}], 0x8}, 0x8}], 0x1, 0x0, 0x0) 4.740421166s ago: executing program 4 (id=5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r3, 0x7d243a6ea807936d, 0x0, 0xfffffffe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) (async, rerun: 64) r5 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x1, 0x0, @private1}}}, 0x108) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r5) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000025c0)={'syztnl2\x00', r1, 0x7, 0x20, 0xa5f2, 0x8, {{0x14, 0x4, 0x1, 0x9, 0x50, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x17, 0x31, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @empty]}, @ssrr={0x89, 0x23, 0xce, [@broadcast, @remote, @multicast1, @local, @empty, @multicast1, @broadcast, @loopback]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x1, 0x3, {@in6_addr=@local, 0x800}}}]}, 0x38}}, 0x0) (async) recvmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000002480)=[{&(0x7f0000000140)=""/132, 0x84}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000001380)=""/144, 0x90}], 0x5, &(0x7f0000002500)=""/139, 0x8b}, 0x2000) 4.656146488s ago: executing program 2 (id=10): write$sequencer(0xffffffffffffffff, &(0x7f0000003640)=ANY=[@ANYBLOB="f804beb044d12c9330efb57dd1b437174cbb449661eff8d0d07a358e"], 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4.465762836s ago: executing program 2 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f00000001c0), 0xfec8) recvmmsg(r6, &(0x7f0000008700)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)}, {0x0}, {0x0}, {&(0x7f0000000340)}], 0x4, 0x0, 0x0, 0x8010}, 0x4000081) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r8, 0x701, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 3.77815571s ago: executing program 0 (id=12): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x8000000000000001, &(0x7f0000000340)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000009c0)={0x6, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0xffff, @broadcast}}}, 0x108) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xa, 0x148, 0x190, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'syz_tun\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x10001, 0x0, 0x8, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x360) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtaction={0x110, 0x30, 0x2, 0x70bd2d, 0x0, {}, [{0xfc, 0x1, [@m_ct={0xf8, 0x14, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x9}]}, {0xb5, 0x6, "e931eefd93cc2275b6ece0c7c04f214fc6190b6bb4aded465c8659551cc44325590cdd79d93a6c4482cb8472b9ddf217987d863b77a3c3ba91684a2eadeedfad20f9950d281f567f51ae2357fc9fada46bba61da5f26a64c5599b29656c6c732506fa22e802c4947e85ca2ecc653742d5c397e1d9dddd3d4acf14686de9152674f810c8597ccbf3ddab553313e10155a16c0bf003022548f64b2534727af981a5e6479550290347182bdadc841df1edd00"}, {0xc, 0x7, {0x1, 0x31011db4ef6d8fc0}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3.723894031s ago: executing program 4 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009e377852c37ff823053b71b4252aa9fca6a012ec5ada9586658c3c0789eb1e9cf22a91b9faf398cfc49b204f3022abd67c904b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, &(0x7f0000000100)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x145, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_clone3(&(0x7f0000000a40)={0x4048000, 0x0, &(0x7f00000001c0), 0x0, {0x34}, &(0x7f0000000740)=""/9, 0x9, &(0x7f0000000780)=""/253, 0x0}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x29, 0x29, 0x5, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x49, 0x1}, @datasec={0xc, 0x0, 0x0, 0xf, 0x1, [], "02"}, @fwd={0x4}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f00000005c0)=""/157, 0x49, 0x9d, 0x1, 0x3, 0x0, @void, @value}, 0x20) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 3.450950636s ago: executing program 2 (id=14): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) (fail_nth: 1) 2.680756202s ago: executing program 4 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000001c0), 0xfec8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)=0x7ffffffd) 1.64736982s ago: executing program 4 (id=16): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) timerfd_create(0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) connect(r2, &(0x7f0000000200)=@nl=@unspec, 0x80) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@delchain={0x98, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff2}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_MARK={0x10, 0xa, {0xfffffffe}}, @TCA_U32_FLAGS={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa3}]}}]}, 0x98}}, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{&(0x7f0000000300)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1, &(0x7f0000000400)=""/114, 0x72}, 0xc3}, {{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/122, 0x7a}, {&(0x7f0000000680)=""/196, 0xc4}, {&(0x7f00000008c0)=""/138, 0x8a}, {&(0x7f0000000980)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/240, 0xf0}, {&(0x7f0000000cc0)=""/4088, 0xff8}], 0x7}, 0x81}, {{&(0x7f0000000a40)=@vsock, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000001cc0)=""/122, 0x7a}, {&(0x7f0000001d40)=""/157, 0x9d}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f0000001e00)=""/192, 0xc0}], 0x4}, 0x2}], 0x4, 0x10140, &(0x7f0000003700)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1}, 0x60) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001fc0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="20000000000000002300000035fe5ed71ba7065e81630fd12461e5630ef50617050c3b1e3477c549f2e5af31cd7ddeae26443b305258575edde3720b242b9cb6fbf643", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r4 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x400000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902940003010000000904000000010100000a24010000000201020c24020000000000000009000c24020000000000000000000d2407000000004336d88b1a560904010000010200000904010101010200000905010900000000000725010000000009040200000103"], 0x0) bind$alg(r0, &(0x7f0000002040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(khazad-generic)\x00'}, 0x58) 1.471638094s ago: executing program 1 (id=17): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) timerfd_create(0x3, 0x0) clock_gettime(0x0, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) connect(r2, &(0x7f0000000200)=@nl=@unspec, 0x80) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@delchain={0x54, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff2}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa3}]}}]}, 0x54}}, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{&(0x7f0000000300)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1, &(0x7f0000000400)=""/114, 0x72}, 0xc3}, {{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/175, 0xaf}, {&(0x7f0000000600)=""/122, 0x7a}, {&(0x7f0000000680)=""/196, 0xc4}, {&(0x7f00000008c0)=""/138, 0x8a}, {&(0x7f0000000980)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/240, 0xf0}, {&(0x7f0000000cc0)=""/4088, 0xff8}], 0x7}, 0x81}, {{&(0x7f0000000a40)=@vsock, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000001cc0)=""/122, 0x7a}, {&(0x7f0000001d40)=""/157, 0x9d}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f0000001e00)=""/192, 0xc0}], 0x4}, 0x2}], 0x4, 0x10140, &(0x7f0000003700)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1}, 0x60) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001fc0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="20000000000000002300000035fe5ed71ba7065e81630fd12461e5630ef50617050c3b1e3477c549f2e5af31cd7ddeae26443b305258575edde3720b242b9cb6fbf643", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r4 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x400000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902940003010000000904000000010100000a24010000000201020c24020000000000000009000c24020000000000000000000d2407000000004336d88b1a560904010000010200000904010101010200000905010900000000000725010000000009040200000103"], 0x0) bind$alg(r0, &(0x7f0000002040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(khazad-generic)\x00'}, 0x58) 823.453636ms ago: executing program 0 (id=18): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x30, 0x0, &(0x7f0000000000)=[@request_death, @clear_death, @request_death], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x84e, 0x0) 632.512243ms ago: executing program 0 (id=19): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000b60000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x7}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x156, @time={0x48}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "edd0961fcbe3a714699b769277aa362003e40900661e12bcca7f88cd6d07f3648c21a4b612af05000000a25b96f8fffffffffffffffe700a13056afd600927"}, 0x60) 0s ago: executing program 0 (id=20): r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x101000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x64ab, 0x4) sendmmsg$inet(r1, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r1, &(0x7f0000003000)='\t', 0x1) recvmmsg(r1, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001400)={{{@in=@multicast2, @in=@empty, 0x4e24, 0x3ff, 0x4e24, 0x7f, 0x2, 0x80, 0xa0, 0xff}, {0x8, 0xffffffff, 0x0, 0x9, 0x7, 0x7, 0x4, 0xffffffffd37cf544}, {0x6, 0x7, 0x5, 0x5}, 0x7, 0x6e6bb3, 0x0, 0x1, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x33}, 0x8, @in6=@loopback, 0x3506, 0x1, 0x0, 0xc, 0x3ff, 0x7, 0x8}}, 0xe8) splice(r3, 0x0, r9, 0x0, 0x88, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) syz_open_procfs$pagemap(r10, &(0x7f0000000140)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 66.091210][ T5206] cgroup: Unknown subsys name 'net' [ 66.199815][ T5206] cgroup: Unknown subsys name 'cpuset' [ 66.208769][ T5206] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.780731][ T5206] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.191807][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.222322][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.234775][ T5228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.237181][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.242684][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.251690][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.257152][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.266648][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.272652][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.285943][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.293941][ T5228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.301901][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.302999][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.309750][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.324623][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.327067][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.333358][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.341380][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.346844][ T5228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.353435][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.360451][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.368244][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.374254][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.385919][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.389006][ T5228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.395095][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.402300][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.424295][ T5220] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.432009][ T5220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.439630][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.824150][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 70.890261][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 70.967210][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 71.029641][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 71.108838][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 71.122095][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.130395][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.138030][ T5217] bridge_slave_0: entered allmulticast mode [ 71.145154][ T5217] bridge_slave_0: entered promiscuous mode [ 71.193005][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.200501][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.208404][ T5217] bridge_slave_1: entered allmulticast mode [ 71.215279][ T5217] bridge_slave_1: entered promiscuous mode [ 71.262857][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.273785][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.281310][ T5218] bridge_slave_0: entered allmulticast mode [ 71.292143][ T5218] bridge_slave_0: entered promiscuous mode [ 71.302661][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.309973][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.317805][ T5223] bridge_slave_0: entered allmulticast mode [ 71.324588][ T5223] bridge_slave_0: entered promiscuous mode [ 71.346857][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.354115][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.362206][ T5218] bridge_slave_1: entered allmulticast mode [ 71.369144][ T5218] bridge_slave_1: entered promiscuous mode [ 71.382755][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.390057][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.398148][ T5223] bridge_slave_1: entered allmulticast mode [ 71.405144][ T5223] bridge_slave_1: entered promiscuous mode [ 71.419103][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.472314][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.491964][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.504450][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.539781][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.547704][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.554907][ T5216] bridge_slave_0: entered allmulticast mode [ 71.561964][ T5216] bridge_slave_0: entered promiscuous mode [ 71.594418][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.602394][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.609733][ T5224] bridge_slave_0: entered allmulticast mode [ 71.616915][ T5224] bridge_slave_0: entered promiscuous mode [ 71.627410][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.629960][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.644381][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.645809][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.669836][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.677188][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.684471][ T5216] bridge_slave_1: entered allmulticast mode [ 71.692065][ T5216] bridge_slave_1: entered promiscuous mode [ 71.712796][ T5217] team0: Port device team_slave_0 added [ 71.721163][ T5218] team0: Port device team_slave_0 added [ 71.727661][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.734777][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.742198][ T5224] bridge_slave_1: entered allmulticast mode [ 71.749013][ T5224] bridge_slave_1: entered promiscuous mode [ 71.774814][ T5217] team0: Port device team_slave_1 added [ 71.782471][ T5218] team0: Port device team_slave_1 added [ 71.807114][ T5223] team0: Port device team_slave_0 added [ 71.814924][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.860955][ T5223] team0: Port device team_slave_1 added [ 71.868773][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.890706][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.897848][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.924543][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.937756][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.944723][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.971316][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.984690][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.997304][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.036351][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.043344][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.069841][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.083114][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.090855][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.117198][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.149595][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.156838][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.182910][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.196850][ T5216] team0: Port device team_slave_0 added [ 72.229483][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.238502][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.265130][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.285205][ T5216] team0: Port device team_slave_1 added [ 72.319307][ T5224] team0: Port device team_slave_0 added [ 72.355938][ T5218] hsr_slave_0: entered promiscuous mode [ 72.362506][ T5218] hsr_slave_1: entered promiscuous mode [ 72.372457][ T5217] hsr_slave_0: entered promiscuous mode [ 72.379889][ T5217] hsr_slave_1: entered promiscuous mode [ 72.387026][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.394772][ T5217] Cannot create hsr debugfs directory [ 72.402598][ T5224] team0: Port device team_slave_1 added [ 72.422488][ T5223] hsr_slave_0: entered promiscuous mode [ 72.427095][ T5226] Bluetooth: hci1: command tx timeout [ 72.428985][ T5235] Bluetooth: hci4: command tx timeout [ 72.440183][ T5223] hsr_slave_1: entered promiscuous mode [ 72.446466][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.454043][ T5223] Cannot create hsr debugfs directory [ 72.460488][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.467534][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.493545][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.505847][ T5235] Bluetooth: hci2: command tx timeout [ 72.505891][ T5226] Bluetooth: hci3: command tx timeout [ 72.511570][ T5235] Bluetooth: hci0: command tx timeout [ 72.523233][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.530299][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.556303][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.625193][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.632770][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.660632][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.701846][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.712740][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.738871][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.820545][ T5224] hsr_slave_0: entered promiscuous mode [ 72.828288][ T5224] hsr_slave_1: entered promiscuous mode [ 72.834515][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.842631][ T5224] Cannot create hsr debugfs directory [ 72.856076][ T5216] hsr_slave_0: entered promiscuous mode [ 72.862455][ T5216] hsr_slave_1: entered promiscuous mode [ 72.868890][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.876575][ T5216] Cannot create hsr debugfs directory [ 73.180117][ T5217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.196603][ T5217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.208855][ T5217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.219200][ T5217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.278059][ T5218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.289332][ T5218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.305199][ T5218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.330566][ T5218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.397019][ T5223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.409564][ T5223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.420094][ T5223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.439249][ T5223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.485221][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.506374][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.542523][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.578791][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.607632][ T5216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.640948][ T5216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.654926][ T5216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.665009][ T5216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.695430][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.757583][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.816065][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.823380][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.869099][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.894997][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.905231][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.912380][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.933290][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.965349][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.991458][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.013407][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.020592][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.038806][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.058286][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.065420][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.079715][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.086952][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.129289][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.136455][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.147233][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.154343][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.210804][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.227965][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.235101][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.340639][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.420550][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.445013][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.452231][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.494072][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.501276][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.516751][ T5235] Bluetooth: hci4: command tx timeout [ 74.522220][ T5235] Bluetooth: hci1: command tx timeout [ 74.586055][ T5235] Bluetooth: hci3: command tx timeout [ 74.592150][ T5235] Bluetooth: hci2: command tx timeout [ 74.598075][ T5228] Bluetooth: hci0: command tx timeout [ 74.748752][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.787168][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.871111][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.917085][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.954604][ T5223] veth0_vlan: entered promiscuous mode [ 74.997132][ T5223] veth1_vlan: entered promiscuous mode [ 75.033587][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.080519][ T5217] veth0_vlan: entered promiscuous mode [ 75.143827][ T5217] veth1_vlan: entered promiscuous mode [ 75.183178][ T5223] veth0_macvtap: entered promiscuous mode [ 75.214218][ T5223] veth1_macvtap: entered promiscuous mode [ 75.238120][ T5224] veth0_vlan: entered promiscuous mode [ 75.259844][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.284765][ T5224] veth1_vlan: entered promiscuous mode [ 75.294802][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.315327][ T5216] veth0_vlan: entered promiscuous mode [ 75.338700][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.348138][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.357327][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.367043][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.383948][ T5217] veth0_macvtap: entered promiscuous mode [ 75.394542][ T5216] veth1_vlan: entered promiscuous mode [ 75.423608][ T5217] veth1_macvtap: entered promiscuous mode [ 75.457738][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.470275][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.483060][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.493451][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.504467][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.515390][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.553011][ T5217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.562257][ T5217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.571504][ T5217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.580539][ T5217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.600575][ T5218] veth0_vlan: entered promiscuous mode [ 75.624222][ T5224] veth0_macvtap: entered promiscuous mode [ 75.649313][ T5218] veth1_vlan: entered promiscuous mode [ 75.673310][ T5216] veth0_macvtap: entered promiscuous mode [ 75.683778][ T5224] veth1_macvtap: entered promiscuous mode [ 75.710208][ T5216] veth1_macvtap: entered promiscuous mode [ 75.722914][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.740251][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.774923][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.785567][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.797972][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.809488][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.820730][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.850253][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.862362][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.877526][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.888495][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.898456][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.908940][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.921272][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.945924][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.958542][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.969004][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.979543][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.990466][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.999971][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.011180][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.021912][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.035483][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.045439][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.056319][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.069471][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.080407][ T5216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089549][ T5216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.098576][ T5216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.108345][ T5216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.123882][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.135359][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.141440][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.153508][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.162911][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.171732][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.195618][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.224821][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.284512][ T5218] veth0_macvtap: entered promiscuous mode [ 76.301018][ T5223] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.301104][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.326766][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.337628][ T5218] veth1_macvtap: entered promiscuous mode [ 76.439597][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.465533][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.476008][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.485272][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.586338][ T5228] Bluetooth: hci4: command tx timeout [ 76.592052][ T5235] Bluetooth: hci1: command tx timeout [ 76.611828][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.623072][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.624176][ T5303] FAULT_INJECTION: forcing a failure. [ 76.624176][ T5303] name failslab, interval 1, probability 0, space 0, times 1 [ 76.633186][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.647614][ T5303] CPU: 0 UID: 0 PID: 5303 Comm: syz.3.4 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 76.656297][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.666198][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 76.666224][ T5303] Call Trace: [ 76.666234][ T5303] [ 76.666244][ T5303] dump_stack_lvl+0x241/0x360 [ 76.676084][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.686096][ T5303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.686135][ T5303] ? __pfx__printk+0x10/0x10 [ 76.689424][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.692443][ T5303] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 76.697150][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.707594][ T5303] ? __pfx___might_resched+0x10/0x10 [ 76.707633][ T5303] should_fail_ex+0x3b0/0x4e0 [ 76.707669][ T5303] ? getname_flags+0xb7/0x540 [ 76.707703][ T5303] should_failslab+0xac/0x100 [ 76.707737][ T5303] ? getname_flags+0xb7/0x540 [ 76.707770][ T5303] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 76.707798][ T5303] getname_flags+0xb7/0x540 [ 76.707835][ T5303] __se_sys_statx+0x1a2/0x2b0 [ 76.707861][ T5303] ? __pfx___se_sys_statx+0x10/0x10 [ 76.707905][ T5303] ? __secure_computing+0x125/0x370 [ 76.707945][ T5303] ? __x64_sys_statx+0x20/0xc0 [ 76.707971][ T5303] do_syscall_64+0xf3/0x230 [ 76.708003][ T5303] ? clear_bhb_loop+0x35/0x90 [ 76.708033][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.713232][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.717813][ T5303] RIP: 0033:0x7f8b4697def9 [ 76.717842][ T5303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.729999][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.733195][ T5303] RSP: 002b:00007f8b47712038 EFLAGS: 00000246 [ 76.746329][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.748884][ T5303] ORIG_RAX: 000000000000014c [ 76.753558][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.758223][ T5303] RAX: ffffffffffffffda RBX: 00007f8b46b35f80 RCX: 00007f8b4697def9 [ 76.758243][ T5303] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 76.758258][ T5303] RBP: 00007f8b47712090 R08: 0000000000000000 R09: 0000000000000000 [ 76.758272][ T5303] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 76.758286][ T5303] R13: 0000000000000000 R14: 00007f8b46b35f80 R15: 00007ffd768aac18 [ 76.758316][ T5303] [ 76.762218][ T5235] Bluetooth: hci3: command tx timeout [ 76.773370][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.778307][ T5235] Bluetooth: hci2: command tx timeout [ 76.782840][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.788128][ T5235] Bluetooth: hci0: command tx timeout [ 76.793323][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.994895][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.006051][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.018254][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.032027][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.074516][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.083826][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.112000][ T5218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.135806][ T5218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.144754][ T5218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.172563][ T5218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.213418][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.222105][ T5311] bond0: entered promiscuous mode [ 77.242520][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.246977][ T5311] bond_slave_0: entered promiscuous mode [ 77.256079][ T5311] bond_slave_1: entered promiscuous mode [ 77.317663][ T46] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 77.362120][ T5311] bond0: (slave bond_slave_0): Releasing backup interface [ 77.377314][ T5313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.383988][ T5311] bond_slave_0: left promiscuous mode [ 77.426672][ T5310] bond0: left promiscuous mode [ 77.434183][ T5310] bond_slave_1: left promiscuous mode [ 77.495944][ T46] usb 2-1: device descriptor read/64, error -71 [ 77.645393][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.663619][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.684387][ T5319] FAULT_INJECTION: forcing a failure. [ 77.684387][ T5319] name failslab, interval 1, probability 0, space 0, times 0 [ 77.702508][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.2.3 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 77.712656][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.722757][ T5319] Call Trace: [ 77.726076][ T5319] [ 77.729052][ T5319] dump_stack_lvl+0x241/0x360 [ 77.733785][ T5319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.739035][ T5319] ? __pfx__printk+0x10/0x10 [ 77.743774][ T5319] ? fs_reclaim_acquire+0x93/0x140 [ 77.748943][ T5319] ? __pfx___might_resched+0x10/0x10 [ 77.754290][ T5319] should_fail_ex+0x3b0/0x4e0 [ 77.759023][ T5319] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 77.764897][ T5319] should_failslab+0xac/0x100 [ 77.769606][ T5319] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 77.775352][ T5319] __kmalloc_noprof+0xd8/0x400 [ 77.780143][ T5319] tomoyo_realpath_from_path+0xcf/0x5e0 [ 77.785728][ T5319] tomoyo_path_number_perm+0x23a/0x880 [ 77.791208][ T5319] ? tomoyo_path_number_perm+0x208/0x880 [ 77.797034][ T5319] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 77.803054][ T5319] ? __fget_files+0x29/0x470 [ 77.807666][ T5319] ? __fget_files+0x3f3/0x470 [ 77.812370][ T5319] security_file_ioctl+0xc6/0x2a0 [ 77.817417][ T5319] __se_sys_ioctl+0x47/0x170 [ 77.822086][ T5319] do_syscall_64+0xf3/0x230 [ 77.826607][ T5319] ? clear_bhb_loop+0x35/0x90 [ 77.831303][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.837213][ T5319] RIP: 0033:0x7f1eb9d7def9 [ 77.841640][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.861273][ T5319] RSP: 002b:00007f1ebaad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.869714][ T5319] RAX: ffffffffffffffda RBX: 00007f1eb9f35f80 RCX: 00007f1eb9d7def9 [ 77.877806][ T5319] RDX: 0000000020000040 RSI: 00000000c008ae88 RDI: 0000000000000006 [ 77.885878][ T5319] RBP: 00007f1ebaad3090 R08: 0000000000000000 R09: 0000000000000000 [ 77.893878][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.902047][ T5319] R13: 0000000000000000 R14: 00007f1eb9f35f80 R15: 00007ffded8fdc38 [ 77.910050][ T5319] [ 77.913692][ T46] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 77.927608][ T5319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.961753][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.972088][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.066815][ T46] usb 2-1: device descriptor read/64, error -71 [ 78.160573][ T5327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.187944][ T46] usb usb2-port1: attempt power cycle [ 78.230474][ T5328] Zero length message leads to an empty skb [ 78.546839][ T46] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 78.567195][ T46] usb 2-1: device descriptor read/8, error -71 [ 78.718259][ T5228] Bluetooth: hci1: command tx timeout [ 78.718314][ T5228] Bluetooth: hci4: command tx timeout [ 78.815873][ T46] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 78.830961][ T5235] Bluetooth: hci0: command tx timeout [ 78.831015][ T5235] Bluetooth: hci2: command tx timeout [ 78.831051][ T5235] Bluetooth: hci3: command tx timeout [ 78.838620][ T46] usb 2-1: device descriptor read/8, error -71 [ 78.936280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.995204][ T46] usb usb2-port1: unable to enumerate USB device [ 79.176607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.106386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.166695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.406120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 80.610555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.176067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.185100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.193879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.202419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.205781][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.290178][ T5353] vivid-004: disconnect [ 81.454790][ T5357] vivid-003: disconnect [ 81.476455][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 81.577014][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.834509][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.929168][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.965864][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 82.002053][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.016567][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.026073][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.068123][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 82.100620][ T46] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.127998][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.155956][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.187731][ T936] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 82.203903][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.269452][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 82.285546][ T8] usbtmc 3-1:16.0: can't read capabilities [ 82.309417][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.325827][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.333935][ T46] usb 5-1: Product: syz [ 82.363922][ T46] usb 5-1: Manufacturer: syz [ 82.368002][ T936] usb 2-1: Using ep0 maxpacket: 32 [ 82.381893][ T936] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.385745][ T46] usb 5-1: SerialNumber: syz [ 82.391737][ T936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.434473][ T936] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.478055][ T5348] FAULT_INJECTION: forcing a failure. [ 82.478055][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 82.498901][ T936] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.509323][ T5348] CPU: 0 UID: 0 PID: 5348 Comm: syz.2.14 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 82.519536][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 82.529643][ T5348] Call Trace: [ 82.532963][ T5348] [ 82.535930][ T5348] dump_stack_lvl+0x241/0x360 [ 82.540664][ T5348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.545921][ T5348] ? __pfx__printk+0x10/0x10 [ 82.550601][ T5348] ? fs_reclaim_acquire+0x93/0x140 [ 82.555772][ T5348] ? __pfx___might_resched+0x10/0x10 [ 82.561196][ T5348] should_fail_ex+0x3b0/0x4e0 [ 82.565936][ T5348] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 82.571713][ T5348] should_failslab+0xac/0x100 [ 82.576447][ T5348] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 82.582211][ T5348] __kmalloc_noprof+0xd8/0x400 [ 82.587021][ T5348] tomoyo_realpath_from_path+0xcf/0x5e0 [ 82.592635][ T5348] tomoyo_path_number_perm+0x23a/0x880 [ 82.598154][ T5348] ? tomoyo_path_number_perm+0x208/0x880 [ 82.603824][ T5348] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 82.609887][ T5348] ? __fget_files+0x29/0x470 [ 82.614522][ T5348] ? __fget_files+0x3f3/0x470 [ 82.619258][ T5348] security_file_ioctl+0xc6/0x2a0 [ 82.624325][ T5348] __se_sys_ioctl+0x47/0x170 [ 82.628975][ T5348] do_syscall_64+0xf3/0x230 [ 82.633520][ T5348] ? clear_bhb_loop+0x35/0x90 [ 82.638236][ T5348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.644251][ T5348] RIP: 0033:0x7f1eb9d7def9 [ 82.648696][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.668342][ T5348] RSP: 002b:00007f1ebaad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.676827][ T5348] RAX: ffffffffffffffda RBX: 00007f1eb9f35f80 RCX: 00007f1eb9d7def9 [ 82.684834][ T5348] RDX: 0000000020000040 RSI: 0000000040015b0b RDI: 0000000000000004 [ 82.693179][ T5348] RBP: 00007f1ebaad3090 R08: 0000000000000000 R09: 0000000000000000 [ 82.701178][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.709172][ T5348] R13: 0000000000000000 R14: 00007f1eb9f35f80 R15: 00007ffded8fdc38 [ 82.717278][ T5348] [ 82.726171][ T5348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.766169][ T8] usb 3-1: USB disconnect, device number 2 [ 82.881092][ T936] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.890400][ T936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.898901][ T936] usb 2-1: Product: syz [ 82.905558][ T936] usb 2-1: Manufacturer: syz [ 82.910509][ T936] usb 2-1: SerialNumber: syz [ 82.957853][ T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.967880][ T5352] vivid-004: reconnect [ 82.978200][ T46] usb 5-1: MIDIStreaming interface descriptor not found [ 82.987086][ T5368] ================================================================== [ 82.995399][ T5368] BUG: KASAN: slab-use-after-free in smk_access+0xae/0x4e0 [ 83.002635][ T5368] Read of size 8 at addr ffff88805bb0fe80 by task syz.0.20/5368 [ 83.010279][ T5368] [ 83.012611][ T5368] CPU: 1 UID: 0 PID: 5368 Comm: syz.0.20 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 83.022770][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.032861][ T5368] Call Trace: [ 83.036156][ T5368] [ 83.039098][ T5368] dump_stack_lvl+0x241/0x360 [ 83.043843][ T5368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.049055][ T5368] ? __pfx__printk+0x10/0x10 [ 83.053656][ T5368] ? _printk+0xd5/0x120 [ 83.057853][ T5368] ? __virt_addr_valid+0x183/0x530 [ 83.062975][ T5368] ? __virt_addr_valid+0x183/0x530 [ 83.068098][ T5368] print_report+0x169/0x550 [ 83.072621][ T5368] ? __virt_addr_valid+0x183/0x530 [ 83.077756][ T5368] ? __virt_addr_valid+0x183/0x530 [ 83.082965][ T5368] ? __virt_addr_valid+0x45f/0x530 [ 83.088091][ T5368] ? __phys_addr+0xba/0x170 [ 83.092597][ T5368] ? smk_access+0xae/0x4e0 [ 83.097030][ T5368] kasan_report+0x143/0x180 [ 83.101552][ T5368] ? smk_access+0xae/0x4e0 [ 83.106073][ T5368] smk_access+0xae/0x4e0 [ 83.110333][ T5368] smack_watch_key+0x2f4/0x3a0 [ 83.115118][ T5368] ? __pfx_smack_watch_key+0x10/0x10 [ 83.120508][ T5368] ? __kasan_kmalloc+0x98/0xb0 [ 83.125286][ T5368] security_watch_key+0x86/0x250 [ 83.130233][ T5368] keyctl_watch_key+0x2b7/0x480 [ 83.135099][ T5368] __se_sys_keyctl+0x106/0xa50 [ 83.139875][ T5368] ? do_futex+0x33b/0x560 [ 83.144209][ T5368] ? __pfx___se_sys_keyctl+0x10/0x10 [ 83.149511][ T5368] ? __pfx_do_futex+0x10/0x10 [ 83.154205][ T5368] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.160201][ T5368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.166549][ T5368] ? do_syscall_64+0x100/0x230 [ 83.171336][ T5368] ? __x64_sys_keyctl+0x20/0xc0 [ 83.176220][ T5368] do_syscall_64+0xf3/0x230 [ 83.180834][ T5368] ? clear_bhb_loop+0x35/0x90 [ 83.185534][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.191434][ T5368] RIP: 0033:0x7f6fff57def9 [ 83.195885][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.215592][ T5368] RSP: 002b:00007f700029a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 83.224036][ T5368] RAX: ffffffffffffffda RBX: 00007f6fff736058 RCX: 00007f6fff57def9 [ 83.232124][ T5368] RDX: 000000000000000c RSI: 000000002528b274 RDI: 0000000000000020 [ 83.240118][ T5368] RBP: 00007f6fff5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 83.248102][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.256088][ T5368] R13: 0000000000000000 R14: 00007f6fff736058 R15: 00007ffdfa5358a8 [ 83.264078][ T5368] [ 83.267107][ T5368] [ 83.269431][ T5368] Allocated by task 5368: [ 83.273778][ T5368] kasan_save_track+0x3f/0x80 [ 83.278487][ T5368] __kasan_kmalloc+0x98/0xb0 [ 83.283090][ T5368] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 83.289612][ T5368] memdup_user+0x2b/0xc0 [ 83.293872][ T5368] strndup_user+0x68/0xc0 [ 83.298208][ T5368] __se_sys_add_key+0x1b0/0x490 [ 83.303072][ T5368] do_syscall_64+0xf3/0x230 [ 83.307596][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.313503][ T5368] [ 83.315833][ T5368] Freed by task 5368: [ 83.319817][ T5368] kasan_save_track+0x3f/0x80 [ 83.324505][ T5368] kasan_save_free_info+0x40/0x50 [ 83.329538][ T5368] __kasan_slab_free+0x59/0x70 [ 83.334330][ T5368] kfree+0x1a0/0x440 [ 83.338231][ T5368] __se_sys_add_key+0x3be/0x490 [ 83.343102][ T5368] do_syscall_64+0xf3/0x230 [ 83.347720][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.353643][ T5368] [ 83.355982][ T5368] The buggy address belongs to the object at ffff88805bb0fe80 [ 83.355982][ T5368] which belongs to the cache kmalloc-8 of size 8 [ 83.369801][ T5368] The buggy address is located 0 bytes inside of [ 83.369801][ T5368] freed 8-byte region [ffff88805bb0fe80, ffff88805bb0fe88) [ 83.383576][ T5368] [ 83.385909][ T5368] The buggy address belongs to the physical page: [ 83.392879][ T5368] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bb0f [ 83.401647][ T5368] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 83.408773][ T5368] page_type: f5(slab) [ 83.412766][ T5368] raw: 00fff00000000000 ffff88801ac41500 dead000000000122 0000000000000000 [ 83.421383][ T5368] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 83.430087][ T5368] page dumped because: kasan: bad access detected [ 83.436535][ T5368] page_owner tracks the page as allocated [ 83.442279][ T5368] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5218, tgid 5218 (syz-executor), ts 81115255785, free_ts 81115166253 [ 83.461663][ T5368] post_alloc_hook+0x1f3/0x230 [ 83.466448][ T5368] get_page_from_freelist+0x3039/0x3180 [ 83.472012][ T5368] __alloc_pages_noprof+0x256/0x6c0 [ 83.477233][ T5368] alloc_pages_mpol_noprof+0x3e8/0x680 [ 83.482729][ T5368] alloc_slab_page+0x6a/0x120 [ 83.487428][ T5368] allocate_slab+0x5a/0x2f0 [ 83.491952][ T5368] ___slab_alloc+0xcd1/0x14b0 [ 83.496638][ T5368] __slab_alloc+0x58/0xa0 [ 83.500972][ T5368] __kmalloc_node_noprof+0x286/0x440 [ 83.506269][ T5368] __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 83.512178][ T5368] vzalloc_noprof+0x79/0x90 [ 83.516806][ T5368] alloc_counters+0xd7/0x740 [ 83.521402][ T5368] do_ip6t_get_ctl+0xecc/0x1820 [ 83.526255][ T5368] nf_getsockopt+0x299/0x2c0 [ 83.530855][ T5368] ipv6_getsockopt+0x23e/0x360 [ 83.535715][ T5368] tcp_getsockopt+0x163/0x1c0 [ 83.540401][ T5368] page last free pid 5218 tgid 5218 stack trace: [ 83.546738][ T5368] free_unref_page+0xcd0/0xf00 [ 83.551513][ T5368] vfree+0x186/0x2e0 [ 83.555425][ T5368] do_ip6t_get_ctl+0x11eb/0x1820 [ 83.560383][ T5368] nf_getsockopt+0x299/0x2c0 [ 83.564981][ T5368] ipv6_getsockopt+0x23e/0x360 [ 83.569760][ T5368] tcp_getsockopt+0x163/0x1c0 [ 83.574446][ T5368] do_sock_getsockopt+0x3c4/0x7e0 [ 83.579490][ T5368] __sys_getsockopt+0x26b/0x330 [ 83.584377][ T5368] __x64_sys_getsockopt+0xb5/0xd0 [ 83.589419][ T5368] do_syscall_64+0xf3/0x230 [ 83.593941][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.599865][ T5368] [ 83.602192][ T5368] Memory state around the buggy address: [ 83.607824][ T5368] ffff88805bb0fd80: 06 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 83.615910][ T5368] ffff88805bb0fe00: 05 fc fc fc 00 fc fc fc 05 fc fc fc 00 fc fc fc [ 83.623972][ T5368] >ffff88805bb0fe80: fa fc fc fc 05 fc fc fc 00 fc fc fc fc fc fc fc [ 83.632042][ T5368] ^ [ 83.636113][ T5368] ffff88805bb0ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.644172][ T5368] ffff88805bb0ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.652229][ T5368] ================================================================== [ 83.682893][ T5368] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.690156][ T5368] CPU: 0 UID: 0 PID: 5368 Comm: syz.0.20 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 83.700338][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 83.710412][ T5368] Call Trace: [ 83.713700][ T5368] [ 83.716638][ T5368] dump_stack_lvl+0x241/0x360 [ 83.721334][ T5368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.726661][ T5368] ? __pfx__printk+0x10/0x10 [ 83.731264][ T5368] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.737621][ T5368] ? vscnprintf+0x5d/0x90 [ 83.742011][ T5368] panic+0x349/0x880 [ 83.745918][ T5368] ? check_panic_on_warn+0x21/0xb0 [ 83.751046][ T5368] ? __pfx_panic+0x10/0x10 [ 83.755478][ T5368] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 83.761552][ T5368] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.767935][ T5368] check_panic_on_warn+0x86/0xb0 [ 83.772881][ T5368] ? smk_access+0xae/0x4e0 [ 83.777316][ T5368] end_report+0x77/0x160 [ 83.781574][ T5368] kasan_report+0x154/0x180 [ 83.786103][ T5368] ? smk_access+0xae/0x4e0 [ 83.790558][ T5368] smk_access+0xae/0x4e0 [ 83.794830][ T5368] smack_watch_key+0x2f4/0x3a0 [ 83.799625][ T5368] ? __pfx_smack_watch_key+0x10/0x10 [ 83.804928][ T5368] ? __kasan_kmalloc+0x98/0xb0 [ 83.809709][ T5368] security_watch_key+0x86/0x250 [ 83.814656][ T5368] keyctl_watch_key+0x2b7/0x480 [ 83.819520][ T5368] __se_sys_keyctl+0x106/0xa50 [ 83.824297][ T5368] ? do_futex+0x33b/0x560 [ 83.828632][ T5368] ? __pfx___se_sys_keyctl+0x10/0x10 [ 83.833932][ T5368] ? __pfx_do_futex+0x10/0x10 [ 83.838627][ T5368] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 83.844624][ T5368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.850965][ T5368] ? do_syscall_64+0x100/0x230 [ 83.855747][ T5368] ? __x64_sys_keyctl+0x20/0xc0 [ 83.860704][ T5368] do_syscall_64+0xf3/0x230 [ 83.865485][ T5368] ? clear_bhb_loop+0x35/0x90 [ 83.870171][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.876072][ T5368] RIP: 0033:0x7f6fff57def9 [ 83.880492][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.900315][ T5368] RSP: 002b:00007f700029a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 83.908777][ T5368] RAX: ffffffffffffffda RBX: 00007f6fff736058 RCX: 00007f6fff57def9 [ 83.916763][ T5368] RDX: 000000000000000c RSI: 000000002528b274 RDI: 0000000000000020 [ 83.924747][ T5368] RBP: 00007f6fff5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 83.932813][ T5368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.940791][ T5368] R13: 0000000000000000 R14: 00007f6fff736058 R15: 00007ffdfa5358a8 [ 83.948789][ T5368] [ 83.952084][ T5368] Kernel Offset: disabled [ 83.956425][ T5368] Rebooting in 86400 seconds..