last executing test programs: 4.210958935s ago: executing program 0 (id=228): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a77828403a092626b40d000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.583007708s ago: executing program 3 (id=235): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe9, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3.338870618s ago: executing program 3 (id=237): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) 2.97731736s ago: executing program 3 (id=241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0xbc0, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x23, 0x95, 0x3a, 0x8, 0x1bc7, 0x1207, 0x2233, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbae, 0x2, 0x20, 0x92, 0x40, 0x7f, [{{0x9, 0x4, 0x4d, 0x40, 0xc, 0xa5, 0xfa, 0x26, 0x9e, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "0e99"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5dd5, 0x2, 0x81}, [@obex={0x5}, @mdlm={0x15, 0x24, 0x12, 0x4d35}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x8, 0x2, 0x1}]}], [{{0x9, 0x5, 0xd, 0x4, 0x200, 0x40, 0x7d, 0x1f, [@generic={0xe, 0x24, "2006701111d062a981f3bfa2"}, @generic={0xb5, 0x9, "e64f00b3ca0c28e566d09e3b0d1522c1333f222f8e5fb275af51dfd593dd1a461b74edfb618bb102c2c43a1ce4ec2a0fbbc2cca6009c6dae6c8d0d158826bc2838296063c924874b65e7be368a259379a5fb8c678934a0a1e4d4fae02397533bb82daa4e73d08a96f5cdb5d3569bc6ad8d10bfb66308d9859f6e773b98887d97179c748700c9197056524c7f00d66e66b0f5e90b3ded8018d408e2845afb2bdb7d1d2f8e12684e8415a11f7c14b908f75aa722"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7c, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc6, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x6, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x56, 0x6, 0x1f, [@generic={0xd1, 0xd, "716614785f29ea9897fcaab240d09400f95b8fabdb8f1edf0b12c8086aae12ac9c068ed46293264a7abef59f3393ea4ba7fcc8962901ec2f7b48cf6e500aacd558364458cafbbb737cbc816fd6ca14dcb5b91803e0aa8b3af1a4bbebd00b4ab5043df85fb4eb0e418ffa3452c5ed81a55cb486291e338178952f80d705eec3f97d5fe1aadd3999f143862ffb74e9b531aa332510f39a2541bb97b7688af68d0f2e244859f3dc9d6d15b5b8452e1ed51184bae7d79308c7bfa467cf9c579ea87bfa64ca6fcf1353853e5d6edba0c83d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x0, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x4f, 0x6, [@generic={0x7f, 0x30, "29dec15f4a179c3401cd46072a9a3d725f12b6dfb437260365c1da6a8d2ef476fca9bf8dd146e6d9598b04923af70a494206a2d166e083e12fa4f4abcf3a933964001e00c11734b0cd6a4ab67838947f55a522cc5a950fa694cab262fd14615130f3a953def18a1d3e42bc9196bb52cbd303ff4f2219d2216fdb9dcc70"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x3, 0x1, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x72, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xd5, 0x8, 0x3, [@generic={0x37, 0x6, "2e0ae1adbc76145206118fb7b1edab298dc9c0da115f4f739a39e4aa7e0ad9c328aa64a33c5431450b5affa7d298e78a5a63bdbad1"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x1, 0x40, 0x81, [@generic={0x16, 0x21, "e0f63fc39573b4658be53186e37a845f80df8a65"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xc9, 0xf7, 0x5, [@generic={0x1c, 0x1, "9f38621e6a22e8ac8ba06b0d18b89d4b38b787a7ae3c4ab9c593"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x9, 0x4, 0x9, [@generic={0x102, 0x2, "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"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x2, 0x4, [@generic={0xf, 0x6, "9cab973e0cd63797de3ba50061"}, @generic={0x4c, 0x23, "0c5643084eb23871007146acb54626f7149445dc4e32cabd6bc8eecc6377b610a69be1b963a59edca7de4cc08db41e7998fad0798bd443806ad8eb048ad4232210d72c50401a4c888999"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x8, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x6}]}}]}}, {{0x9, 0x4, 0x5, 0x20, 0xb, 0x66, 0x30, 0x9c, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "187ee9b75330"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xffffff49, 0x7fff, 0x5, 0x40}, {0x6, 0x24, 0x1a, 0x8, 0x38}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x94, 0x81, 0x81, [@generic={0xa0, 0x31, "ef221049d04039f0fcbd9fb8cfb4359898b5240d0649ac4d62704a19c6359067e6b98c8578ec289bfcf23b137adba0dc174a39a98564f2bc20436000bdbac70e8e7cd3b75db760b2c957af1e2208c5edb1b9f521adfaa0aa80daded9463a82f41bb63053568222a035336a8f20f04c480e3f7d22d848cc071f3bf353d555e2a8523c62fd69f5dc88edc158164293ecc0e6e61bac623cd7437866d0ea599b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x9, 0x4, [@generic={0xe2, 0x8, "0e7ac1df4787193b05682197ccf0411088c7dfa2126889c9817ddd667591801cdbe713f53348281c87bca73a22ab1c4489fb0f6bad42c4b37646a63823a0fe533e41c207aa298e34d34661b0351ce422e3f671be4a5ab186cfb6f12b79c3516c84cbc26826f779b035e2a869cd5eac066d4f2a90c7799710d53109868998cf8616aa98e6e540c470c9f4b8229ca5bd1cf738a55e5679c5026d080d5ffdd15a79c65ff765ab68d3f1b53ec5b72c0b10f8eebd0a8293ca0d93c93b17edce34becdf3265a000bd7f7c26502efb57e2719d64d803d40ecd18d17ed5f1a1198318e1b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xfa, 0x9, 0xff, [@generic={0x97, 0x7, "9cf5500decc67ceb49280b67d7b5f340302647683ed1fba8895f37fd2dfa82ff5f03cc4bbf556736fa3f1813439a165b4c062453f0443b2905fcdd2c5cbc9f033d49d3560fd7abb134d1e2c61b655fabb20a2a1f5bdc5c464f4e78827e2ed836b3d3cb8b97a6ef1165cfd51548e673be79649c6939d7e7296a75829a8dd3255762bf2332243390ba706a4300c131cd23bc4233f994"}, @generic={0xc8, 0xc, "2e97b3b6ff2aa8c52fb206f3117b83056bf51421542589df7d619c78dea7498ffb7ff2a98fbb772a67a9d59be53e6003866fcab4e3a862ef7239ee2764c953f59da3313fe1440e3934a0f77ccd2f4faf4d3faeaad024afa195069c186adbbfe24d14038189afca895b6ed81804c1ea80e7547b03bb314360c11c5f939b646d6441abcfc81ee79f7f8065e8686f4652a990365a43d76a9c3619f1e90922f408c437d0e135ed9082bc43776bad542088af9e1fbed9afec3b0317c6d6bfaf93c20ea27e9bb11a2b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x3, 0x7, [@generic={0xc7, 0x6, "8ce4f32bb36685ee47cf97d8cda8655b56c531e3f9b22c4aabeabf02f703a4e32fb1debc23177dd99248e01d826cf0552188801f8abed4e4aafce5a54903fc8f563e2a6709c709381109928fc8da984201c3372feb467d2545444adf93a89ccbfe943055e65f0a27aa6e63a59e47eea40c0a8e19bddcc594fa17213164e995dcdbada5fe8ad5755e53ad5aa8cdbda09c98be1a3ccc3f5fc1f558df17e006aae7c288dbf2ac13d9a55935cec3bc2838f937b00f815ec3fde697b89086a414a0b968503d400f"}, @generic={0xf0, 0x3, "95e7cb0048136eed1ab22f935e9bbbb429bcd90280020fffca166a7701e3afc1f8836a93e8f4a6cd05155c1618e617a5837c7087685f214b056026655fec5a966a89fc1bc70ef9279093e1abe7d3d522a1fe7533027666b5db7947af0b96710c2223ffbf8bf72e0b9c9afb086b7f93f04ef888fc1199e6ee60d41cca1dba5e0ae56d35673e6794dd8c62960b3660f44feb0dbc75917da8992f473e5613680722c6a230c599d5506101a8f856412119a4c9f0b3d3bf10822b3960ca00f02c42858a72755a3d491edd321f045ad29f03378835cb044194b5220a9f6347642293fa8968995afb7602577566ce42fc67"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x13e43f4e801cf167, 0x73, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x8001}, @generic={0x2e, 0x15, "ef0f20b289785269443f0d255d3541214826ed463f9233bc4d47194280cba5ac840fdc028cf9d93615499d87"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x3f, 0x6, 0x20, [@generic={0x45, 0xa, "15bdf91a5a691afb637ba965a20f2e9db5466482a775775bc67af22916155f0bc7a9d1e1a355f968deda3a41365fa486951f113b54de9b41ff1d0ac6e59576468119c9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x18, 0x20, 0x75, 0xda, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xe860}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x92, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x340}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x3, 0x8, [@generic={0x26, 0x37, "f1e218779c7e679a500ee73d833fd12a35089c0e70a52e26afa9bf56fd439138459b29b1"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xb0, 0x6, 0x6, [@generic={0xed, 0x11, "df4ba362c5909a76eab17b78dbca9f208ef22f1ddd1d354ff38b99c1efdce0418784cea9da1684a1c20c636847849604cdf7b1ec69555210d358099eea463fd5bd82943761200d7202fa0ff0cc3747ca57da1ee84eb1b1a8c688eaf8bdacd4149100efd030558b63f6633a167b7fd44285cd1f5c73ad5b45f4a36c14bba14e7273e17891bb3d2a8b22477c19314f2805e4c5370b4725fcdd3753c81c6c72301c7a857965b2ce047cdbdf85a9e70298b6b063f618ecf8c7f16dfa2f01e2a32a82821b90a96c1b9214b707f468d613df5433c72430f2d3f68f0d8391b793456c1beb5cf301f4c5f90c7a5709"}]}}]}}]}}]}}, &(0x7f0000001880)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x2, 0x6, 0x7, 0x40}, 0xa3, &(0x7f0000001780)=ANY=[@ANYBLOB="050fa3000383100ae6249272ecb276ee2263af5180cab760b8ba033f791c5bfe7078837ffb1fad1193a93a81af8f41ecf76eff4b984ed897f57df8346b0c8e7c6fdc349d1e7377f2dc8994576e73a9775928814f210fb3b6f06e02db6fb719af3227a35ae67f9f62d40b389cfbde26078a5074a2a422dfe397d4db08ef9d76d1ff9bae88866b2f5714100a20c23e1300000f99003000ff0000c0000007100200570100"], 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_ep_write(r0, 0x6, 0x3c, &(0x7f00000018c0)="23a851e17829be9f5481f3683dc84cbab3774e4ac80466d0a826e8de3e98cbd767b1eac8328ea15b3ef0fa38b3fbf1c9380a881f6a554bf7618a3905") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000019c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x50}}, 0x0) r9 = dup2(r3, r3) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000009940)=ANY=[], 0x290}, {&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x8bc}, {0x0, 0x184}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r10) 2.730638313s ago: executing program 4 (id=243): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x7, 0x2018, 0x0, @link_id}, 0x20) 2.527023035s ago: executing program 4 (id=245): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2.442295381s ago: executing program 4 (id=248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000200000000000000010000000c00020000000000000000000c000780", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9, 0x6}, @timestamp, @timestamp, @mss={0x2, 0xa74b}, @sack_perm, @sack_perm], 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x2, 0xc, 0x59, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x40, 0x9, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r15, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24008045}, 0x4000) 2.21465615s ago: executing program 2 (id=249): bind$alg(0xffffffffffffffff, &(0x7f0000003c40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x34, 0x0, 0x4000}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x1c8, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1ab, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_b, @random="d19130a581b8", {0x4, 0x2}}, 0xfffffffffdb3172d, @random, 0x8000, @val={0x0, 0xf, @random="cbffc8d4453763458f492c66878e90"}, @val={0x1, 0x5, [{0x18, 0x1}, {0x60}, {0x7a}, {0x2, 0x1}, {0xc, 0x1}]}, @void, @void, @val={0x6, 0x2, 0xe}, @val={0x5, 0xac, {0xff, 0x9d, 0x5, "6ac4444aa2d699d7dc2c5d8fc354573eddbd2d6b45795295646f46ed4bc660808ad1452b5568e23471e92b27108399542eda047601dbeb826f6def1ea9e4b27644c4f216d989825c21038f8c06e26747deee92e8435b84fe62369bf9a5032110c4682a37745f39f9c7e295ec1308c305d7ae920ab40871c0de63477c4f7e081e3ff497082a177b8ad2a32e7e46c6172b255e25647e8f209176858d8dde5a446c75d30f07b9dce459d8"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x6, 0x49}}, @void, [{0xdd, 0x34, "817002e641fa9faed18839d762e8e0a3b14293965681582f6fb936ba7509b69d34da107add5b1cbde5d44242aa62bb929c3fb2d8"}, {0xdd, 0x6d, "8318f99db13817306d5dec1908472fabc9748561a0f501fd92b6b3a0e935504e8307ef01f5570d61a0b2e31076ca9e15f4095837fc33f5c6bce9f22f0d7319c6c352bcf6f23dd17ebd6b70cfdc6c48b19c3a94b7b97f6c4ead2a149449ef3f94c546d45aa842b6bf2bd93e890b"}]}}]}, 0x1c8}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008000000000000000000000000100000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) 2.106602715s ago: executing program 0 (id=250): syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x15, 0x4}, {0xc2, 0x9357}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x401, 0x1}}, @l2cap_info_req={{0xa, 0x77, 0x2}, {0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x46, 0x2}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x0, 0x19}, {0x80, 0x6, 0x7ff, [@l2cap_conf_mtu={0x1, 0x2, 0x1167}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x10, 0x5, 0xc000, 0x99}}, @l2cap_conf_mtu={0x1, 0x2, 0x3a}]}}]}}, 0x4a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f54503"]) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000000cae4a00c57a9f8c4bcaeddc23f000000008848000803000000000000000f0000000000000003001d000000000000007e42037bb6570b6a66b028c6e96d648317310b82bf54f6ba458849486e014a64a99ecde5ec2d5403a53c218e000000000000ab4ca3de91c79487f8185bb7aadfed1dae791c03c985fcf75ff7400ace39e5d6e699eb5a46147ad770bd27799ebd7cd1f143bb1e197ec1d1eaca5d06baef206f304d05e3a1877274387f01eca3cbe780ce0a1d4c"], 0x0) pipe2(&(0x7f0000000000), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 1.590099635s ago: executing program 4 (id=251): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f0000000180)) 1.434382464s ago: executing program 1 (id=252): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}, 0x1, 0x4c00000000000000}, 0x0) 1.386757651s ago: executing program 2 (id=253): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="2085fbf258e8629e7804dcaa83e163cab84944ac7ab76749842a16036ce0e0878be2315141c29a9d4fee13e7f8a642b0ac26de5d54b5abd30ef81ebb43efae8cb5684e7a2123c1186e9cecc4aaaa7c22b617ed8d0e69de96fdac7f625b7b562a01f4e452034e54ed8b0db9d7103979ceba9ed608c6da425e086f2f7908fca1439685e2e182a3e67d5a30b905c1f424ad2de4ce15172d537ed80bc687b5d31948127730b60688aeed2d50ecf942708671a24f052c6b052177f7dce95b32bf4875773eeda5d405c99524", 0xc9}], 0x1, &(0x7f0000000980)=ANY=[], 0x1e8}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000bc0)="91a71d4633c75a36c60c39d58d2d06d654ca0d5e21efc0981d35124cd4a9036e715b7913c6588a8123b700db3eb7b32e3ffdcd86e24f2c1e92dad72078f37159a35b69a178e2ca8f21ecbc7157ad72d014eb0e2d18b28d64182835fde723cb2c18bb4072fbd5ec0fefaa6eed321197dcc475da8a93129938c999eea854b1a86b95da23cb7b6ac906bf052f4c18f132303c78ba036436c7a6526863b80cfd5d0b118d4e338070d6ec8624c14d9ad9f076f8deadb0a4312c4015c816ac38c585d3dafcc4b7", 0xc4}, {&(0x7f0000000cc0)="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", 0x2f4}], 0x2}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.336550561s ago: executing program 4 (id=254): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000a00), 0x8) 1.197224354s ago: executing program 2 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.007141846s ago: executing program 4 (id=256): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) signalfd4(r3, &(0x7f0000000000), 0x8, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000380)="9a9ad4e2d29d2555fca60a69e355ea8ca41d0de13467f2ccc61f484a5f894b56decae99d5bc0f2c0b675ad4423191f6ab6a0a6c1c0575fd052eb4110eec5eb346a99e0b22173405733deffeb0d777f59581cf2ae682c173d769d504555e0c6689e04846b5b98c1a632a436c38a2b244f471eb9fc55bb7e2af5fbe0c8b8421eec20288da5155ec2ac36462b5c9421ed0d2f8c428ecc4e310b429288e111da09fcadaea200828196ba7ec56504559d212c703d9ad8351f9fee9b119549fe1a23150f004db9d83d1499b8d6cd899c1ca6a2b8d198604029cc3f5b8faacb48fab51a3b8b646e7448aec55d72b38faf875978bfe3018d446910", 0xf7}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="018b0dd08438148d122b008de6db076734ce700f215fdc5a68b2baea61e9e53a5568af95135ae31033ef05a22713e24dc244e51700d3620e46e4e76a077b126f205af5e535ecf33afd08e511789fba157ab6ad1dbc2f8a2b1c3a920b5a214a0ad1504c1cf67b388619e35f3c3c6ad374251a7493f18e41df75efd3c9e7c37eded080ace8f572480b0a68897b3cf9570285a585f31300d444a312a413ef2fbc9253a12c9dcd2403218123cd20cfd3e0f34aa5dbedccc6c704b3b143bc62f20960745d93a82c94d596872934b8c14381d9cf8e4a9f533683063a8bbb33d8b522e92a", 0xe1}, {&(0x7f0000001580)="b743e193f5cfae4b944ea4a8eeed4ae87c07de1aa1b742baa4c3ae5f7fbbc255d877d20f8178d96f36ed70818ed6911e7a227fd97351dd48f712cb37e2d4b42c79a90bba1ae67a82d0828dc7e42909c4ce2ff62e25f821178c59e5cccedb926ba402c7d64db37d13296e50d319cef6a7ff31e9fc25af99b119e0f570d3fe31de9f79484c222c70fea59084fadc242c102e54f061581a5683b2f59f24d5b584bb9f16899dd150c18cbb04ed663689e2389e25ec0f44f22f", 0xb7}, {&(0x7f0000001680)="ceeeca6b95efee9b7e15aaa45fde430dc36bb35a53d124e5cb1209edf478247b1c8311e8928050ee8abe3b321d7fafd08904b99cbb1b353f880d3ea4ba4cb6c42ae18760964d0d672b96098d8737900777716d1feec5e7f4256c3772d4eda3748d7cca3249269a4a68a4e6018ab31f66d142d25bd964116124851c93c3726bbf846985d14747ac2a4d6a9f4f56a247802443737bff9b50525e279f7be014befb27263d7f8d204829", 0xa8}, {&(0x7f0000000180)}], 0x6, 0xb) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, 0x0) 916.715935ms ago: executing program 2 (id=257): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain={'key_or_keyring:', r2}) 843.147166ms ago: executing program 1 (id=258): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b03d25a806f8c6394f90424fc602f1a04", 0x17}], 0x1}, 0x0) 735.442612ms ago: executing program 1 (id=259): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 731.205969ms ago: executing program 0 (id=260): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000180)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 673.833553ms ago: executing program 2 (id=261): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000200000000000000010000000c00020000000000000000000c000780", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9, 0x6}, @timestamp, @timestamp, @mss={0x2, 0xa74b}, @sack_perm, @sack_perm], 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x2c, r7, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x2, 0xc, 0x59, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x40, 0x9, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r15, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24008045}, 0x4000) 618.064802ms ago: executing program 0 (id=262): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 533.082918ms ago: executing program 1 (id=263): bind$alg(0xffffffffffffffff, &(0x7f0000003c40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x34, 0x0, 0x4000}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x1c8, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1ab, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_b, @random="d19130a581b8", {0x4, 0x2}}, 0xfffffffffdb3172d, @random, 0x8000, @val={0x0, 0xf, @random="cbffc8d4453763458f492c66878e90"}, @val={0x1, 0x5, [{0x18, 0x1}, {0x60}, {0x7a}, {0x2, 0x1}, {0xc, 0x1}]}, @void, @void, @val={0x6, 0x2, 0xe}, @val={0x5, 0xac, {0xff, 0x9d, 0x5, "6ac4444aa2d699d7dc2c5d8fc354573eddbd2d6b45795295646f46ed4bc660808ad1452b5568e23471e92b27108399542eda047601dbeb826f6def1ea9e4b27644c4f216d989825c21038f8c06e26747deee92e8435b84fe62369bf9a5032110c4682a37745f39f9c7e295ec1308c305d7ae920ab40871c0de63477c4f7e081e3ff497082a177b8ad2a32e7e46c6172b255e25647e8f209176858d8dde5a446c75d30f07b9dce459d8"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x6, 0x49}}, @void, [{0xdd, 0x34, "817002e641fa9faed18839d762e8e0a3b14293965681582f6fb936ba7509b69d34da107add5b1cbde5d44242aa62bb929c3fb2d8"}, {0xdd, 0x6d, "8318f99db13817306d5dec1908472fabc9748561a0f501fd92b6b3a0e935504e8307ef01f5570d61a0b2e31076ca9e15f4095837fc33f5c6bce9f22f0d7319c6c352bcf6f23dd17ebd6b70cfdc6c48b19c3a94b7b97f6c4ead2a149449ef3f94c546d45aa842b6bf2bd93e890b"}]}}]}, 0x1c8}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008000000000000000000000000100000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) 522.687354ms ago: executing program 3 (id=264): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="ff", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001f40)="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", 0x3ba}], 0x1}, 0x0) shutdown(r0, 0x1) 350.859801ms ago: executing program 2 (id=265): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 350.520017ms ago: executing program 0 (id=266): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 316.604706ms ago: executing program 3 (id=267): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) 191.777852ms ago: executing program 0 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 110.700183ms ago: executing program 1 (id=269): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b03d25a806f8c6394f90424fc602f1a04", 0x17}], 0x1}, 0x0) 4.414483ms ago: executing program 1 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 0s ago: executing program 3 (id=271): syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x45}, @l2cap_cid_signaling={{0x41}, [@l2cap_disconn_req={{0x6, 0x9, 0x4}, {0x0, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x15, 0x4}, {0xc2, 0x9357}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x401, 0x1}}, @l2cap_info_req={{0xa, 0x77, 0x2}, {0x5}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x46, 0x2}, {0x3}}, @l2cap_conf_rsp={{0x5, 0x0, 0x19}, {0x80, 0x6, 0x7ff, [@l2cap_conf_mtu={0x1, 0x2, 0x1167}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x10, 0x5, 0xc000, 0x99}}, @l2cap_conf_mtu={0x1, 0x2, 0x3a}]}}]}}, 0x4a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000c60381dc6c17fbb970c1aec762bc25e76efad02d3dc177ebac46e7f3cbb2f05fc45966b903378233a4e4873bfc51fbd9ecfa5e81b375b700ce5b1ed3e41578372c9c37fefb6c3b59797d944e1af368429d9c6fe9c3144f159d864cdb42d2e39fd2531835938daa4a6c8d370ffbb0d1868e90453c6c184ec3fab174fd36d6be9336e95c670283ae325ad6958201fd8088aed6aa4d2f9adca64fe7b66e5ec32b4d2162371e3a82a3beea", @ANYRES32, @ANYBLOB="100000000000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f54503"]) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000000cae4a00c57a9f8c4bcaeddc23f000000008848000803000000000000000f0000000000000003001d000000000000007e42037bb6570b6a66b028c6e96d648317310b82bf54f6ba458849486e014a64a99ecde5ec2d5403a53c218e000000000000ab4ca3de91c79487f8185bb7aadfed1dae791c03c985fcf75ff7400ace39e5d6e699eb5a46147ad770bd27799ebd7cd1f143bb1e197ec1d1eaca5d06baef206f304d05e3a1877274387f01eca3cbe780ce0a1d4c"], 0x0) pipe2(&(0x7f0000000000), 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 53.668823][ T5090] cgroup: Unknown subsys name 'net' [ 53.805784][ T5090] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.263867][ T5090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.764931][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.778777][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.789561][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.797771][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.805546][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.810317][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.814377][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.821245][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.828615][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.834933][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.842829][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.858234][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.866035][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.866726][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.873495][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.881643][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.887459][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.895780][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.902187][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.909112][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.917238][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.922726][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.932007][ T4502] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.937233][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.943660][ T4502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.959198][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.960154][ T4502] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.967360][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.974820][ T4502] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.992363][ T4502] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.538887][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 59.649799][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 59.692324][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 59.709327][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 59.749336][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.756812][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.764420][ T5100] bridge_slave_0: entered allmulticast mode [ 59.774001][ T5100] bridge_slave_0: entered promiscuous mode [ 59.815154][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 59.824825][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.832620][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.840557][ T5100] bridge_slave_1: entered allmulticast mode [ 59.847888][ T5100] bridge_slave_1: entered promiscuous mode [ 59.918632][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.951798][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.036274][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.043601][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.051320][ T5105] bridge_slave_0: entered allmulticast mode [ 60.058766][ T5105] bridge_slave_0: entered promiscuous mode [ 60.100811][ T5100] team0: Port device team_slave_0 added [ 60.107211][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.114359][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.121919][ T5105] bridge_slave_1: entered allmulticast mode [ 60.129973][ T5105] bridge_slave_1: entered promiscuous mode [ 60.164398][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.171701][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.179265][ T5104] bridge_slave_0: entered allmulticast mode [ 60.186000][ T5104] bridge_slave_0: entered promiscuous mode [ 60.195866][ T5100] team0: Port device team_slave_1 added [ 60.222835][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.230257][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.237691][ T5109] bridge_slave_0: entered allmulticast mode [ 60.245180][ T5109] bridge_slave_0: entered promiscuous mode [ 60.252468][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.259967][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.267314][ T5101] bridge_slave_0: entered allmulticast mode [ 60.274096][ T5101] bridge_slave_0: entered promiscuous mode [ 60.282575][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.293014][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.300270][ T5104] bridge_slave_1: entered allmulticast mode [ 60.307266][ T5104] bridge_slave_1: entered promiscuous mode [ 60.343578][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.350874][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.358935][ T5109] bridge_slave_1: entered allmulticast mode [ 60.365651][ T5109] bridge_slave_1: entered promiscuous mode [ 60.373241][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.380725][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.388336][ T5101] bridge_slave_1: entered allmulticast mode [ 60.395082][ T5101] bridge_slave_1: entered promiscuous mode [ 60.441212][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.448486][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.475451][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.489186][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.497874][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.523873][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.537608][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.550067][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.572779][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.585533][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.598926][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.647815][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.689763][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.722747][ T5104] team0: Port device team_slave_0 added [ 60.733332][ T5105] team0: Port device team_slave_0 added [ 60.742020][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.766115][ T5101] team0: Port device team_slave_0 added [ 60.774005][ T5104] team0: Port device team_slave_1 added [ 60.795722][ T5105] team0: Port device team_slave_1 added [ 60.818184][ T5101] team0: Port device team_slave_1 added [ 60.857830][ T5109] team0: Port device team_slave_0 added [ 60.891005][ T5100] hsr_slave_0: entered promiscuous mode [ 60.898432][ T5100] hsr_slave_1: entered promiscuous mode [ 60.917703][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.924797][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.951228][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.964572][ T5109] team0: Port device team_slave_1 added [ 60.992236][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.999518][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.025931][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.039203][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.046198][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.073036][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.073068][ T5111] Bluetooth: hci3: command tx timeout [ 61.084304][ T4502] Bluetooth: hci4: command tx timeout [ 61.084611][ T4502] Bluetooth: hci2: command tx timeout [ 61.090229][ T5111] Bluetooth: hci0: command tx timeout [ 61.095663][ T5107] Bluetooth: hci1: command tx timeout [ 61.122230][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.129267][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.155530][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.182387][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.189513][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.215784][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.228843][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.235881][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.262070][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.307283][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.314395][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.341434][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.360404][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.367421][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.393456][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.470966][ T5105] hsr_slave_0: entered promiscuous mode [ 61.478085][ T5105] hsr_slave_1: entered promiscuous mode [ 61.484414][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.492927][ T5105] Cannot create hsr debugfs directory [ 61.537341][ T5101] hsr_slave_0: entered promiscuous mode [ 61.543616][ T5101] hsr_slave_1: entered promiscuous mode [ 61.550727][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.558820][ T5101] Cannot create hsr debugfs directory [ 61.584961][ T5104] hsr_slave_0: entered promiscuous mode [ 61.591687][ T5104] hsr_slave_1: entered promiscuous mode [ 61.598180][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.605733][ T5104] Cannot create hsr debugfs directory [ 61.637182][ T5109] hsr_slave_0: entered promiscuous mode [ 61.643871][ T5109] hsr_slave_1: entered promiscuous mode [ 61.651117][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.658847][ T5109] Cannot create hsr debugfs directory [ 62.008101][ T5100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.021380][ T5100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.067294][ T5100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.081987][ T5100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.199378][ T5105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.218823][ T5105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.231533][ T5105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.241349][ T5105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.309576][ T5101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.337938][ T5101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.350519][ T5101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.369421][ T5101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.396261][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.491556][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.501174][ T5104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.514114][ T5104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.524664][ T5104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.552611][ T5104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.565691][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.573116][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.613854][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.621104][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.741664][ T5109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.755440][ T5109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.772469][ T5109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.782164][ T5109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.817062][ T5100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.863227][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.911491][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.962352][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.995834][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.045051][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.052432][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.064277][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.071680][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.106503][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.113635][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.147477][ T5107] Bluetooth: hci1: command tx timeout [ 63.147548][ T5121] Bluetooth: hci0: command tx timeout [ 63.153069][ T5107] Bluetooth: hci3: command tx timeout [ 63.158736][ T5121] Bluetooth: hci4: command tx timeout [ 63.170340][ T4502] Bluetooth: hci2: command tx timeout [ 63.185757][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.200278][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.207655][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.229687][ T5105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.270531][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.306023][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.384673][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.403830][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.433488][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.440751][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.483175][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.490414][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.504420][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.511579][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.541861][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.549120][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.698944][ T5100] veth0_vlan: entered promiscuous mode [ 63.729688][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.784490][ T5100] veth1_vlan: entered promiscuous mode [ 63.915220][ T5100] veth0_macvtap: entered promiscuous mode [ 63.953187][ T5100] veth1_macvtap: entered promiscuous mode [ 64.019214][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.074988][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.142456][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.160532][ T5100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.173670][ T5100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.184325][ T5100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.193453][ T5100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.281803][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.313402][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.383438][ T5109] veth0_vlan: entered promiscuous mode [ 64.413846][ T5105] veth0_vlan: entered promiscuous mode [ 64.481991][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.493622][ T5105] veth1_vlan: entered promiscuous mode [ 64.495318][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.536169][ T5109] veth1_vlan: entered promiscuous mode [ 64.549377][ T5101] veth0_vlan: entered promiscuous mode [ 64.564532][ T5104] veth0_vlan: entered promiscuous mode [ 64.595749][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.598055][ T5104] veth1_vlan: entered promiscuous mode [ 64.619794][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.650939][ T5105] veth0_macvtap: entered promiscuous mode [ 64.681796][ T5105] veth1_macvtap: entered promiscuous mode [ 64.700336][ T5101] veth1_vlan: entered promiscuous mode [ 64.753528][ T5109] veth0_macvtap: entered promiscuous mode [ 64.764460][ T5104] veth0_macvtap: entered promiscuous mode [ 64.774107][ T5109] veth1_macvtap: entered promiscuous mode [ 64.854744][ T5104] veth1_macvtap: entered promiscuous mode [ 64.873560][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.883216][ T5189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 64.884884][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.907529][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.935091][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.947649][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.958752][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.970288][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.992597][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.012864][ T5101] veth0_macvtap: entered promiscuous mode [ 65.022379][ T5191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.029304][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.044752][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.058320][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.070036][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.083694][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.094307][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.105520][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.119196][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.141263][ T5105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.155200][ T5105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.168585][ T5105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.193180][ T5105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.211493][ T5101] veth1_macvtap: entered promiscuous mode [ 65.217160][ T5121] Bluetooth: hci4: command tx timeout [ 65.222681][ T5121] Bluetooth: hci2: command tx timeout [ 65.229365][ T4502] Bluetooth: hci3: command tx timeout [ 65.229386][ T5118] Bluetooth: hci0: command tx timeout [ 65.234794][ T4502] Bluetooth: hci1: command tx timeout [ 65.249074][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.259734][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.271272][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.282254][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.292450][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.310198][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.321615][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.345623][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.364261][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.390582][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.399387][ T5196] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 65.422452][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.434839][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.451141][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.464073][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.479921][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.495731][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.520032][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.535701][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.554106][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.568374][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578398][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.589146][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.601183][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.610131][ T5109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.620638][ T5109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.629490][ T5109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639974][ T5109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.664128][ T5104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.676629][ T5104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.685517][ T5104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.694674][ T5104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.706364][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.717679][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.729218][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.740368][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.750282][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.760865][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.770713][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.781315][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.793291][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.806389][ T5101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.815239][ T5101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.824153][ T5101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.832991][ T5101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.072170][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.099558][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.144924][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.163114][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.172734][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.192105][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.303527][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.320885][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.332626][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.341759][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.385480][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.415483][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.500450][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.524432][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.690217][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.721264][ T5214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.730246][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.776222][ T5214] vlan2: entered promiscuous mode [ 67.337165][ T4502] Bluetooth: hci1: command tx timeout [ 67.342636][ T4502] Bluetooth: hci2: command tx timeout [ 67.344097][ T5121] Bluetooth: hci0: command tx timeout [ 67.349660][ T4502] Bluetooth: hci3: command tx timeout [ 67.354594][ T5121] Bluetooth: hci4: command tx timeout [ 67.506244][ T5239] loop4: detected capacity change from 0 to 8 [ 68.387881][ T5250] syz.2.24 (5250) used greatest stack depth: 18768 bytes left [ 68.541978][ T5267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 68.878833][ T5282] loop0: detected capacity change from 0 to 1024 [ 68.909534][ T5282] EXT4-fs: Ignoring removed oldalloc option [ 68.949703][ T5282] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 68.970267][ T5289] Â: renamed from pim6reg1 [ 69.000581][ T5282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.151488][ T29] audit: type=1804 audit(1721173885.870:2): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.35" name="/newroot/5/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 69.247453][ T5295] syz.1.40[5295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.247602][ T5295] syz.1.40[5295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.311071][ T5104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.370794][ T5326] loop4: detected capacity change from 0 to 1024 [ 70.427574][ T5326] EXT4-fs: Ignoring removed oldalloc option [ 70.452537][ T5326] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 70.896816][ T5331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 71.127005][ T5326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.262650][ T5331] bond0: (slave bond_slave_1): Releasing backup interface [ 71.311382][ T5339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.55'. [ 71.333577][ T29] audit: type=1804 audit(1721173888.050:3): pid=5326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.53" name="/newroot/10/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 71.429732][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.701950][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.712129][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.905774][ T5358] netlink: 'syz.3.60': attribute type 3 has an invalid length. [ 71.958635][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f1c5000: rx timeout, send abort [ 71.969194][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807f1c5000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.496023][ T5348] loop1: detected capacity change from 0 to 40427 [ 72.568891][ T5348] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.682377][ T5348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.580361][ T5101] syz-executor: attempt to access beyond end of device [ 73.580361][ T5101] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.597941][ T5101] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 74.056209][ T5355] netlink: 830 bytes leftover after parsing attributes in process `syz.3.60'. [ 74.076632][ T5375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.66'. [ 74.163706][ T5375] bond0: (slave bond_slave_1): Releasing backup interface [ 74.320597][ T5386] netlink: 830 bytes leftover after parsing attributes in process `syz.3.67'. [ 74.399201][ T5380] netlink: 'syz.3.67': attribute type 3 has an invalid length. [ 75.430026][ T5394] delete_channel: no stack [ 75.696760][ T5408] netlink: 830 bytes leftover after parsing attributes in process `syz.3.77'. [ 75.755882][ T5408] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 76.103877][ T5419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 76.126910][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880759c7000: rx timeout, send abort [ 76.136611][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880759c7000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 76.193932][ T5419] vlan2: entered promiscuous mode [ 76.604903][ T5431] netlink: 104 bytes leftover after parsing attributes in process `syz.2.83'. [ 76.631539][ T5399] loop4: detected capacity change from 0 to 40427 [ 76.715385][ T5399] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.844076][ T928] cfg80211: failed to load regulatory.db [ 76.869497][ T5399] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.897290][ T5105] syz-executor: attempt to access beyond end of device [ 77.897290][ T5105] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.946653][ T5105] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 79.207571][ T5438] netlink: 'syz.3.85': attribute type 21 has an invalid length. [ 79.215262][ T5438] netlink: 'syz.3.85': attribute type 20 has an invalid length. [ 79.345356][ T5459] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 79.394114][ T5459] netlink: 197272 bytes leftover after parsing attributes in process `syz.2.90'. [ 79.414950][ T5463] loop0: detected capacity change from 0 to 1024 [ 79.447456][ T5463] EXT4-fs: Ignoring removed oldalloc option [ 79.456912][ T5459] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 79.487177][ T5463] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 79.545398][ T5463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.629161][ T29] audit: type=1804 audit(1721173896.350:4): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.92" name="/newroot/15/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 79.636303][ T5477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 79.720804][ T29] audit: type=1804 audit(1721173896.440:5): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.92" name="/newroot/15/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 79.800217][ T29] audit: type=1804 audit(1721173896.440:6): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.92" name="/newroot/15/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 79.846420][ T5104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.149666][ T5491] netlink: 830 bytes leftover after parsing attributes in process `syz.2.103'. [ 80.203443][ T5491] netlink: 'syz.2.103': attribute type 3 has an invalid length. [ 81.234496][ T5512] loop0: detected capacity change from 0 to 1024 [ 81.255504][ T5512] EXT4-fs: Ignoring removed oldalloc option [ 81.266325][ T5512] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 81.331486][ T5512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.355518][ T29] audit: type=1804 audit(1721173898.070:7): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.111" name="/newroot/19/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 81.402655][ T29] audit: type=1804 audit(1721173898.070:8): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.111" name="/newroot/19/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 81.420855][ T5104] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.425340][ T29] audit: type=1804 audit(1721173898.070:9): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.111" name="/newroot/19/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 82.182718][ T5532] netlink: 'syz.0.115': attribute type 3 has an invalid length. [ 82.512532][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 82.521555][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 82.534166][ T5508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.109'. [ 82.554770][ T5530] netlink: 830 bytes leftover after parsing attributes in process `syz.0.115'. [ 82.753626][ T5536] syzkaller0: entered promiscuous mode [ 82.788700][ T5536] syzkaller0: entered allmulticast mode [ 82.848246][ T5539] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 82.856599][ T52] syzkaller0: tun_net_xmit 48 [ 82.930456][ T5536] syzkaller0: tun_net_xmit 1280 [ 82.966813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.066153][ T5557] loop2: detected capacity change from 0 to 512 [ 83.080260][ T5554] loop3: detected capacity change from 0 to 1024 [ 83.089385][ T5557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.116241][ T5557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.121426][ T5560] netlink: 104 bytes leftover after parsing attributes in process `syz.4.124'. [ 83.128874][ T5554] EXT4-fs: Ignoring removed oldalloc option [ 83.153309][ T5554] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 83.177470][ T5557] EXT4-fs (loop2): can't mount with commit=2, fs mounted w/o journal [ 83.204483][ T5554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.316620][ T29] audit: type=1804 audit(1721173900.020:10): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.122" name="/newroot/33/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 83.337294][ T5557] loop2: detected capacity change from 0 to 512 [ 83.383320][ T5557] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 83.389390][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.706519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 85.782037][ T5591] loop4: detected capacity change from 0 to 1024 [ 85.791470][ T5591] EXT4-fs: Ignoring removed oldalloc option [ 85.799179][ T5591] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 85.860120][ T5593] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 85.887624][ T5591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.908311][ T5597] loop3: detected capacity change from 0 to 512 [ 85.942614][ T5593] team0: Device ipvlan1 failed to register rx_handler [ 85.967023][ T5597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.060274][ T5597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.193646][ T5597] EXT4-fs (loop3): can't mount with commit=2, fs mounted w/o journal [ 86.215640][ T29] audit: type=1804 audit(1721173902.930:11): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.136" name="/newroot/26/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 87.051073][ T5610] loop1: detected capacity change from 0 to 512 [ 87.187487][ T5597] loop3: detected capacity change from 0 to 512 [ 87.231334][ T5597] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 87.307475][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.934809][ T5616] syzkaller0: entered promiscuous mode [ 87.964728][ T5616] syzkaller0: entered allmulticast mode [ 88.276511][ T5627] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 88.294470][ T2808] syzkaller0: tun_net_xmit 48 [ 89.255725][ T5653] loop1: detected capacity change from 0 to 1024 [ 89.283389][ T5653] EXT4-fs: Ignoring removed oldalloc option [ 89.318985][ T5653] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 89.417642][ T5653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.461115][ T29] audit: type=1804 audit(1721173906.180:12): pid=5653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.155" name="/newroot/25/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 89.524651][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.245934][ T5649] netlink: 'syz.3.154': attribute type 10 has an invalid length. [ 90.274653][ T5649] team0: Device ipvlan1 failed to register rx_handler [ 90.310509][ T5658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 90.374731][ C0] eth0: bad gso: type: 1, size: 1408 [ 90.607030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.615772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.625005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 90.634722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.644910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.982951][ T5121] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 90.982985][ T5121] Bluetooth: unknown link type 5 [ 90.996552][ T5121] Bluetooth: hci0: connection err: -111 [ 91.046602][ T5689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.170'. [ 91.104866][ T5691] syzkaller0: entered promiscuous mode [ 91.111011][ T5691] syzkaller0: entered allmulticast mode [ 91.139596][ T2844] syzkaller0: tun_net_xmit 48 [ 91.162742][ T5691] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 91.196186][ T5691] syzkaller0: tun_net_xmit 1280 [ 91.529143][ C0] eth0: bad gso: type: 1, size: 1408 [ 91.817997][ T5121] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 91.818025][ T5121] Bluetooth: unknown link type 5 [ 91.830807][ T5121] Bluetooth: hci4: connection err: -111 [ 91.989050][ T5724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.924186][ T5742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.491140][ C0] eth0: bad gso: type: 1, size: 1408 [ 93.637625][ T5720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 93.772366][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 93.830166][ T5121] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 93.830197][ T5121] Bluetooth: unknown link type 5 [ 93.842905][ T5121] Bluetooth: hci0: connection err: -111 [ 93.895815][ T5760] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.927004][ T5187] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.074178][ T5760] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.137228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.156561][ T5187] usb 5-1: Using ep0 maxpacket: 8 [ 94.184886][ T5187] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.216606][ T5187] usb 5-1: config 179 has no interface number 0 [ 94.244522][ T5187] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 94.296175][ T5187] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 94.299147][ T5155] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.309431][ T5187] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.334765][ T5187] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.360181][ T5187] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.373966][ T5187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.427463][ T5752] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.616738][ T5155] usb 2-1: Using ep0 maxpacket: 8 [ 94.694345][ T5155] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 94.740179][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 97, changing to 10 [ 94.808978][ T5155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 25715, setting to 1024 [ 94.820976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.856221][ T928] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 94.870371][ T5783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'. [ 94.887781][ T5155] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 94.916951][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.995394][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.003753][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 95.025392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.043445][ T5155] usb 2-1: config 0 descriptor?? [ 95.088179][ T5187] usb 5-1: USB disconnect, device number 2 [ 95.098244][ T5768] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.135992][ T5155] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 95.138411][ T5187] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 95.214470][ T5155] usb 2-1: Detected SIO [ 95.239680][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 95.280172][ T5155] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 95.494884][ T5788] syzkaller0: entered promiscuous mode [ 95.528781][ T5788] syzkaller0: entered allmulticast mode [ 95.545658][ T5795] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 95.548081][ T5121] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 95.552223][ T5121] Bluetooth: unknown link type 5 [ 95.564492][ T5121] Bluetooth: hci3: connection err: -111 [ 95.571303][ T2844] syzkaller0: tun_net_xmit 48 [ 96.046776][ T58] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.292803][ T58] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 96.314236][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.345540][ T58] usb 3-1: config 0 descriptor?? [ 96.373595][ T58] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 96.985617][ T58] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 96.998368][ T928] usb 2-1: USB disconnect, device number 2 [ 97.011562][ T58] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 97.042008][ T928] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 97.044990][ T58] usb 3-1: USB disconnect, device number 2 [ 97.087353][ T928] ftdi_sio 2-1:0.0: device disconnected [ 97.632283][ T5829] loop2: detected capacity change from 0 to 1024 [ 97.656072][ T5829] EXT4-fs: Ignoring removed oldalloc option [ 97.669914][ T5829] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 97.745115][ T5829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.815394][ T29] audit: type=1804 audit(1721173914.530:13): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.218" name="/newroot/46/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 97.860903][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.047869][ T5814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.214'. [ 98.619347][ T58] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.663139][ T5861] Zero length message leads to an empty skb [ 98.848750][ T58] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 98.885505][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.934854][ T58] usb 1-1: config 0 descriptor?? [ 98.984745][ T58] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 99.220324][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'. [ 99.442274][ T5879] capability: warning: `syz.4.239' uses deprecated v2 capabilities in a way that may be insecure [ 99.636025][ T58] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 99.669055][ T58] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 99.678915][ T5886] dccp_v6_rcv: dropped packet with invalid checksum [ 99.719496][ T58] usb 1-1: USB disconnect, device number 2 [ 99.733101][ T5882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.937922][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.078315][ T5893] loop1: detected capacity change from 0 to 512 [ 100.146230][ T5893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.160040][ T5893] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.160400][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 100.206183][ T46] usb 4-1: config 32 has an invalid interface number: 77 but max is 1 [ 100.234900][ T46] usb 4-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 100.248274][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 100.273504][ T46] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 100.312676][ T46] usb 4-1: config 32 has an invalid descriptor of length 143, skipping remainder of the config [ 100.376631][ T46] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 100.421254][ T46] usb 4-1: config 32 has no interface number 0 [ 100.446592][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 100.758328][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 100.758408][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 100.758529][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 100.758625][ T46] usb 4-1: config 32 interface 77 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 100.765455][ T46] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 100.765554][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 100.765625][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 100.765719][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 100.765788][ T46] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 100.765858][ T46] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 100.765927][ T46] usb 4-1: config 32 interface 77 has no altsetting 0 [ 100.795894][ T46] usb 4-1: Dual-Role OTG device on HNP port [ 100.814270][ T46] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 100.814343][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.814408][ T46] usb 4-1: Product: syz [ 100.814467][ T46] usb 4-1: Manufacturer: syz [ 100.814525][ T46] usb 4-1: SerialNumber: syz [ 101.162569][ T5101] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.424139][ T46] option 4-1:32.77: GSM modem (1-port) converter detected [ 101.463020][ T46] usb 4-1: USB disconnect, device number 2 [ 101.490778][ T46] option 4-1:32.77: device disconnected [ 101.511028][ T5923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.009543][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 102.594729][ T5956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.609600][ T5952] ================================================================== [ 102.617699][ T5952] BUG: KASAN: slab-use-after-free in handle_mm_fault+0x14f0/0x19a0 [ 102.625603][ T5952] Read of size 8 at addr ffff88802b44a8d8 by task syz.2.265/5952 [ 102.633310][ T5952] [ 102.635632][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.2.265 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 102.645334][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.655376][ T5952] Call Trace: [ 102.658646][ T5952] [ 102.661558][ T5952] dump_stack_lvl+0x241/0x360 [ 102.666227][ T5952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.671426][ T5952] ? __pfx__printk+0x10/0x10 [ 102.676031][ T5952] ? _printk+0xd5/0x120 [ 102.680182][ T5952] ? __virt_addr_valid+0x183/0x530 [ 102.685277][ T5952] ? __virt_addr_valid+0x183/0x530 [ 102.690366][ T5952] print_report+0x169/0x550 [ 102.694851][ T5952] ? __virt_addr_valid+0x183/0x530 [ 102.699940][ T5952] ? __virt_addr_valid+0x183/0x530 [ 102.705040][ T5952] ? __virt_addr_valid+0x45f/0x530 [ 102.710149][ T5952] ? __phys_addr+0xba/0x170 [ 102.714635][ T5952] ? handle_mm_fault+0x14f0/0x19a0 [ 102.719740][ T5952] kasan_report+0x143/0x180 [ 102.724265][ T5952] ? handle_mm_fault+0x14f0/0x19a0 [ 102.729384][ T5952] handle_mm_fault+0x14f0/0x19a0 [ 102.734319][ T5952] ? __pfx_handle_mm_fault+0x10/0x10 [ 102.739613][ T5952] ? __pfx_find_vma+0x10/0x10 [ 102.744279][ T5952] ? vma_is_secretmem+0xd/0x50 [ 102.749035][ T5952] ? check_vma_flags+0x500/0x5a0 [ 102.753971][ T5952] __get_user_pages+0x6ec/0x16a0 [ 102.758902][ T5952] ? __pfx___get_user_pages+0x10/0x10 [ 102.764261][ T5952] populate_vma_page_range+0x264/0x330 [ 102.769721][ T5952] ? __pfx_populate_vma_page_range+0x10/0x10 [ 102.775728][ T5952] __mm_populate+0x27a/0x460 [ 102.780304][ T5952] ? __pfx___mm_populate+0x10/0x10 [ 102.785403][ T5952] do_mlock+0x61e/0x7b0 [ 102.789562][ T5952] ? __pfx_do_mlock+0x10/0x10 [ 102.794224][ T5952] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.800207][ T5952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.806518][ T5952] ? do_syscall_64+0x100/0x230 [ 102.811274][ T5952] __x64_sys_mlock+0x60/0x70 [ 102.815858][ T5952] do_syscall_64+0xf3/0x230 [ 102.820364][ T5952] ? clear_bhb_loop+0x35/0x90 [ 102.825027][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.830912][ T5952] RIP: 0033:0x7fc6b4175a19 [ 102.835313][ T5952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.854906][ T5952] RSP: 002b:00007fc6b4ea3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 102.863299][ T5952] RAX: ffffffffffffffda RBX: 00007fc6b4304038 RCX: 00007fc6b4175a19 [ 102.871257][ T5952] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020000000 [ 102.879212][ T5952] RBP: 00007fc6b41e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 102.887167][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.895119][ T5952] R13: 000000000000006e R14: 00007fc6b4304038 R15: 00007fff7198be28 [ 102.903080][ T5952] [ 102.906095][ T5952] [ 102.908415][ T5952] Allocated by task 5952: [ 102.912721][ T5952] kasan_save_track+0x3f/0x80 [ 102.917383][ T5952] __kasan_slab_alloc+0x66/0x80 [ 102.922220][ T5952] kmem_cache_alloc_noprof+0x135/0x2a0 [ 102.927677][ T5952] vm_area_alloc+0x24/0x1d0 [ 102.932315][ T5952] mmap_region+0xc3d/0x2090 [ 102.936795][ T5952] do_mmap+0x8f9/0x1010 [ 102.940925][ T5952] vm_mmap_pgoff+0x1dd/0x3d0 [ 102.945502][ T5952] ksys_mmap_pgoff+0x4f1/0x720 [ 102.950245][ T5952] do_syscall_64+0xf3/0x230 [ 102.954729][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.960690][ T5952] [ 102.962989][ T5952] Freed by task 5101: [ 102.966945][ T5952] kasan_save_track+0x3f/0x80 [ 102.971599][ T5952] kasan_save_free_info+0x40/0x50 [ 102.976621][ T5952] poison_slab_object+0xe0/0x150 [ 102.981532][ T5952] __kasan_slab_free+0x37/0x60 [ 102.986277][ T5952] kmem_cache_free+0x145/0x350 [ 102.991045][ T5952] rcu_core+0xafd/0x1830 [ 102.995274][ T5952] handle_softirqs+0x2c4/0x970 [ 103.000022][ T5952] __irq_exit_rcu+0xf4/0x1c0 [ 103.004595][ T5952] irq_exit_rcu+0x9/0x30 [ 103.008829][ T5952] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 103.014456][ T5952] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 103.020432][ T5952] [ 103.022735][ T5952] Last potentially related work creation: [ 103.028435][ T5952] kasan_save_stack+0x3f/0x60 [ 103.033115][ T5952] __kasan_record_aux_stack+0xac/0xc0 [ 103.038481][ T5952] call_rcu+0x167/0xa70 [ 103.042621][ T5952] vma_complete+0x98a/0xb60 [ 103.047104][ T5952] vma_merge+0x1d9b/0x2690 [ 103.051503][ T5952] vma_modify+0xb8/0x350 [ 103.055725][ T5952] mlock_fixup+0x29e/0x3f0 [ 103.060133][ T5952] apply_mlockall_flags+0x309/0x3c0 [ 103.065315][ T5952] __do_sys_munlockall+0x8b/0x1e0 [ 103.070327][ T5952] do_syscall_64+0xf3/0x230 [ 103.074819][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.080778][ T5952] [ 103.083077][ T5952] The buggy address belongs to the object at ffff88802b44a8b8 [ 103.083077][ T5952] which belongs to the cache vm_area_struct of size 184 [ 103.097371][ T5952] The buggy address is located 32 bytes inside of [ 103.097371][ T5952] freed 184-byte region [ffff88802b44a8b8, ffff88802b44a970) [ 103.111060][ T5952] [ 103.113361][ T5952] The buggy address belongs to the physical page: [ 103.119761][ T5952] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b44a [ 103.128510][ T5952] memcg:ffff88801eee2b01 [ 103.132752][ T5952] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.140291][ T5952] page_type: 0xfdffffff(slab) [ 103.144951][ T5952] raw: 00fff00000000000 ffff888015eefb40 0000000000000000 dead000000000001 [ 103.153513][ T5952] raw: 0000000000000000 0000000000100010 00000001fdffffff ffff88801eee2b01 [ 103.162072][ T5952] page dumped because: kasan: bad access detected [ 103.168495][ T5952] page_owner tracks the page as allocated [ 103.174188][ T5952] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4768, tgid 4768 (S41dhcpcd), ts 32247251553, free_ts 32212998584 [ 103.193194][ T5952] post_alloc_hook+0x1f3/0x230 [ 103.197946][ T5952] get_page_from_freelist+0x2ccb/0x2d80 [ 103.203471][ T5952] __alloc_pages_noprof+0x256/0x6c0 [ 103.208736][ T5952] alloc_slab_page+0x5f/0x120 [ 103.213390][ T5952] allocate_slab+0x5a/0x2f0 [ 103.217882][ T5952] ___slab_alloc+0xcd1/0x14b0 [ 103.222580][ T5952] __slab_alloc+0x58/0xa0 [ 103.226986][ T5952] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 103.232423][ T5952] vm_area_dup+0x27/0x290 [ 103.236734][ T5952] copy_mm+0xc7b/0x1f30 [ 103.240870][ T5952] copy_process+0x186b/0x3d90 [ 103.245533][ T5952] kernel_clone+0x226/0x8f0 [ 103.250020][ T5952] __x64_sys_clone+0x258/0x2a0 [ 103.254765][ T5952] do_syscall_64+0xf3/0x230 [ 103.259265][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.265136][ T5952] page last free pid 4767 tgid 4767 stack trace: [ 103.271450][ T5952] free_unref_folios+0x103a/0x1b00 [ 103.276542][ T5952] folios_put_refs+0x76e/0x860 [ 103.281283][ T5952] free_pages_and_swap_cache+0x5c8/0x690 [ 103.286895][ T5952] tlb_flush_mmu+0x3a3/0x680 [ 103.291465][ T5952] tlb_finish_mmu+0xd4/0x200 [ 103.296034][ T5952] exit_mmap+0x44f/0xc80 [ 103.300253][ T5952] __mmput+0x115/0x390 [ 103.304299][ T5952] exit_mm+0x220/0x310 [ 103.308351][ T5952] do_exit+0x9b2/0x27f0 [ 103.312484][ T5952] do_group_exit+0x207/0x2c0 [ 103.317071][ T5952] __x64_sys_exit_group+0x3f/0x40 [ 103.322107][ T5952] x64_sys_call+0x26c3/0x26d0 [ 103.326791][ T5952] do_syscall_64+0xf3/0x230 [ 103.331363][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.337322][ T5952] [ 103.339624][ T5952] Memory state around the buggy address: [ 103.345231][ T5952] ffff88802b44a780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 103.353277][ T5952] ffff88802b44a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 103.361332][ T5952] >ffff88802b44a880: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 103.369371][ T5952] ^ [ 103.376293][ T5952] ffff88802b44a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 103.384333][ T5952] ffff88802b44a980: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 103.392369][ T5952] ================================================================== [ 103.510892][ T5952] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.518110][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.2.265 Not tainted 6.10.0-next-20240716-syzkaller #0 [ 103.527834][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.537871][ T5952] Call Trace: [ 103.541131][ T5952] [ 103.544045][ T5952] dump_stack_lvl+0x241/0x360 [ 103.548729][ T5952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.553908][ T5952] ? __pfx__printk+0x10/0x10 [ 103.558480][ T5952] ? preempt_schedule+0xe1/0xf0 [ 103.563316][ T5952] ? vscnprintf+0x5d/0x90 [ 103.567637][ T5952] panic+0x349/0x870 [ 103.571517][ T5952] ? check_panic_on_warn+0x21/0xb0 [ 103.576606][ T5952] ? __pfx_panic+0x10/0x10 [ 103.581002][ T5952] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 103.586961][ T5952] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 103.593282][ T5952] ? print_report+0x502/0x550 [ 103.597956][ T5952] check_panic_on_warn+0x86/0xb0 [ 103.602980][ T5952] ? handle_mm_fault+0x14f0/0x19a0 [ 103.608180][ T5952] end_report+0x77/0x160 [ 103.612411][ T5952] kasan_report+0x154/0x180 [ 103.616905][ T5952] ? handle_mm_fault+0x14f0/0x19a0 [ 103.622019][ T5952] handle_mm_fault+0x14f0/0x19a0 [ 103.626977][ T5952] ? __pfx_handle_mm_fault+0x10/0x10 [ 103.632297][ T5952] ? __pfx_find_vma+0x10/0x10 [ 103.636966][ T5952] ? vma_is_secretmem+0xd/0x50 [ 103.641715][ T5952] ? check_vma_flags+0x500/0x5a0 [ 103.646639][ T5952] __get_user_pages+0x6ec/0x16a0 [ 103.651652][ T5952] ? __pfx___get_user_pages+0x10/0x10 [ 103.657010][ T5952] populate_vma_page_range+0x264/0x330 [ 103.662456][ T5952] ? __pfx_populate_vma_page_range+0x10/0x10 [ 103.668427][ T5952] __mm_populate+0x27a/0x460 [ 103.673013][ T5952] ? __pfx___mm_populate+0x10/0x10 [ 103.678117][ T5952] do_mlock+0x61e/0x7b0 [ 103.682267][ T5952] ? __pfx_do_mlock+0x10/0x10 [ 103.686935][ T5952] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.692993][ T5952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.699308][ T5952] ? do_syscall_64+0x100/0x230 [ 103.704078][ T5952] __x64_sys_mlock+0x60/0x70 [ 103.708815][ T5952] do_syscall_64+0xf3/0x230 [ 103.713322][ T5952] ? clear_bhb_loop+0x35/0x90 [ 103.717993][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.723880][ T5952] RIP: 0033:0x7fc6b4175a19 [ 103.728283][ T5952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.747899][ T5952] RSP: 002b:00007fc6b4ea3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 103.756399][ T5952] RAX: ffffffffffffffda RBX: 00007fc6b4304038 RCX: 00007fc6b4175a19 [ 103.764373][ T5952] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020000000 [ 103.772332][ T5952] RBP: 00007fc6b41e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 103.780290][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.788240][ T5952] R13: 000000000000006e R14: 00007fc6b4304038 R15: 00007fff7198be28 [ 103.796386][ T5952] [ 103.799729][ T5952] Kernel Offset: disabled [ 103.804133][ T5952] Rebooting in 86400 seconds..