last executing test programs: 8.776912487s ago: executing program 2 (id=5743): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) read$alg(r0, &(0x7f0000000000)=""/2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r4, 0x0, 0x1) sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) sendto(r3, &(0x7f00000002c0)="711786b616bdd452cc00000000ce253232e3a7e6", 0xfffffffffffffc82, 0x8000, 0x0, 0x0) tee(r0, r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = dup3(r7, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read$FUSE(r9, &(0x7f00000024c0)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), 0xbde, r6}, 0x38) 7.086125288s ago: executing program 2 (id=5746): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x73, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x5b}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000440)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000480)="94", 0x1}], 0x1}, 0x0) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000000c0)=0x1, 0x8) (rerun: 32) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f0000000000), 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x404c844}, 0x0) (async) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000300)) (async, rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) r7 = socket$inet_sctp(0x2, 0x0, 0x84) (rerun: 64) bind$inet(r7, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000004c0)=ANY=[@ANYBLOB="800000000802110000000802110000005050506b5050000000000000000000006400060403010d0602000071070000000000"], 0x34) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x0, 0x8e}, 0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001700)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 7.001211916s ago: executing program 1 (id=5747): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3}) (async) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x9, 0x389381) read$snddsp(r5, &(0x7f0000000140), 0x0) (async) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000080)={r4}) (async) close(r0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000040)=r6) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x628880, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x0) (async) pread64(r9, &(0x7f0000001100)=""/87, 0x57, 0xb9) (async) unshare(0xa000480) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r8, 0x0, 0x2c, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f0000000140)={0x9, 0x6}) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r12, r2, 0x0) 6.756583718s ago: executing program 2 (id=5749): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc010000000000000000000000000000ac1e0001000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00fc0200"/188], 0x104}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3b, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0xa, 0x0, 0x1, [@generic="4efeecac"]}]}, 0x20}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800080000260000080009"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0xb0, 0xb0, 0xfff, 0x48, @remote, @local, 0x8000, 0x8000, 0xff, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2bc, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffe}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4d}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\xae\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}]}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "627a83052d63e7beb2a780ddd1f22b59012854926fd72bb788dc26f55bbe9c031d85adab72b5152dcd617508c7c6f9b7eb8ff6b76c600878daf8bf9cc61ceac31af7a14e8c5500a1a3a615466ff354650b97137b9751b6c037e8b5f61f16cd5aa2f929252965c9e294154327d17e9c04d00e4e5b022790dbbae3872067d462e4d53567e297865237c30d3aecf3a3b98ea3b1a47e4ce87207d84aca9177501d55c63cc842e7f1be15aceb225c8070f5d2d4ec62a1956a363cca1a79487464f4a87a81063c6ecc36"}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4004890}, 0x40894) 6.371027105s ago: executing program 2 (id=5752): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100, 0x2}, {@multicast1}, {@remote, 0x8}, {@dev, 0x656}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @generic={0x94, 0x3, 'x'}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002180)='net/icmp6\x00') read$char_usb(r7, &(0x7f0000000040)=""/4109, 0x100d) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) syz_clone(0x2120000, &(0x7f0000000000)="490b4eaeac0726f05972906741d8d4648bc204431169", 0x16, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180)="85d98d976de33fc385b38b18a0304ef2e033e3f66d2ceb5bae8db07b5a7b690793ec07ccf2905561a13b513ec29eb3fab916f2889614a66e8c2762640d6e00cd7e935950f9ee8007d92fa94592747c024c7ea6d3470f0a820f0cea9738eb371f85132b687dea380f88ded84fff9685d35d7d") sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x0) 5.907218939s ago: executing program 1 (id=5754): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, r1, 0x9e235000) fadvise64(r0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) io_setup(0x0, &(0x7f00000030c0)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x1010, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x113, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, &(0x7f0000000600)=0x80, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '})-\\'}, {0x20, 'GPL\x00'}, {0x20, '/dev/hwrng\x00'}, {0x20, 'GPL\x00'}], 0xa, "d648fbceef1cb033dfbfc7e129f98f36d344a0292ed9280e83b6848af98e0c8b5e9dcbbe696d06dd625e0b6aab387c3fe46ff8c3bbaa690a5cc3424e396bf169c6ca007a5d824946b799305c9939a847be99049bad635d64d00d9c5f145dee4cf660c46c42fa3cb235f9fdcff150bdfd9c389d0c8678cc99f36e22124ec61af2311690ebb9530b22f15dd5c6a8756e490705b59b7234dfe6327c512fcb487f7f638e0419f84b98adbdfe5676c84bd083c46ead7912d063a2d4b1534747e3493ef52227e52a6f7ea17c34b6686a2b951b04cf209379b7c1"}, 0xfd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x80000, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143400000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000004c0), 0x2, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f00000006c0)={0x0, &(0x7f00000001c0)=""/40, &(0x7f0000000700)="d9a868c6c230d7cd1b83d548fb0e15742e84a06024d036f2b78df8b81384cb00f646aebe36cc0a7f6f2aa1a3194adefcc1853ba4ca2fa8f6f65f52f66f2b006cd57c8152debaff7a513907389414515a82d97a948df0550b06d104a4db4edaa26a2d5ab18ab8e0cc58dfdf828d5c0ba067c447f907d7f131f291bd95e462aa00c174021488cdf018128b1d9ca390148b5379e6ed6e0b4f9d16ad3378cd1c", &(0x7f00000005c0)="6cbda0d79b911cd816a6df", 0x1, r7}, 0x38) 5.615709129s ago: executing program 1 (id=5755): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) read$alg(r0, &(0x7f0000000000)=""/2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r4, 0x0, 0x1) sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) sendto(r3, &(0x7f00000002c0)="711786b616bdd452cc00000000ce253232e3a7e6", 0xfffffffffffffc82, 0x8000, 0x0, 0x0) tee(r0, r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = dup3(r7, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read$FUSE(r9, &(0x7f00000024c0)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), 0xbde, r6}, 0x38) 5.341400991s ago: executing program 2 (id=5756): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x13, 0x7b, 0x72, 0x8, 0x13d8, 0x10, 0xb614, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0xb2, 0x1b}}]}}]}}, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x11af, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.341126972s ago: executing program 0 (id=5757): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x60}, 0x0) 5.222817263s ago: executing program 0 (id=5758): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x32b5997b968176e1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r2, 0x0, 0x6ffe9, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_io_uring_setup(0x1b62, &(0x7f00000000c0)={0x0, 0x0, 0x3600}, &(0x7f0000000000), &(0x7f0000000200)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r4, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000b, 0x0, 0x0) memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 3.665460486s ago: executing program 1 (id=5761): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000980)={0x23b, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x0, {0x0, 0x31000000}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23b) io_setup(0x3, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001000)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x26}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="92eeee4c04d266254cd56dd72983fb15421d055feeef8476a32a7ff5081906007713cf0b96e0ef74cd284086cf34154f3467aa00fea40bdeadd9e2745a0b63c1656373db9314d545642c927f131368b070c15a9793836d9bb3010776fef47e35b04b72495150815b1a2730365980e10ec24e626cd24eda9fba7d2de4af8342ccc1a0db4dd94697aae3428df222c73ce40912cb590c8382fb5f4537b4c936be1154012a83ae5ed221a3b4ba0b25fbe6093445a4881eba22df05a83e11c7f76b4a2af533123b300cc4cd70c232415a81793d544dfff73392b2a42e79a152278e112140af20f2c74735e490976ee2e6dd8e95738150b433476b8f4ef3ba4e4ad247ee5f3f52724edcc2928a1b769e2a1421d489672346d85be4713bea67125ce9d57e70266b690907fb1313cfd3cadd3a168f7b5dfd55b0b41a63dde956c578b7f65920c6d93a4ed05e73d1104490802eecd16d525b639151e003ad9412d94229a3d4e4e72b01b66bf4a5340b68f9411495c3273d2119bce2c24a138ac825a10ae86bbe35097f16606d77b00dc2d7c540e9c120359c70f88e23de4c0d37296f8dfe119b3319799c7c94b8b8bcaf7eca1bcfafad9126856dd55be061998defb033bbba5a17e915caa9cf9abced8458bb4fdeb99c162caf684771ca2dcdc58a073c70a6d4099c12ff1689c30bcaf8d1b76a7c81931ec7ebb8b7bbac32a88cfef5317c6cf316046ac99151ea807886c2b59ac48294fdcd7fe876f8d1c08f2b811e4497cf8cc6735e57a174ae0954c240ed2921b2e24586533c32fcce8d4a279de82a1e73d1a13d7184a6a4122a01e8ac156bd350309572167b0f361d813c20c60aebc1dabfb9572ecab69eb57185bd95d5586bc1d944d61a852c0f1f242a148100418ca89332d4020830afea8b9a5afd3bf03f5016be33ad8af50e47592467cd3b86a64d35fcc9b0453df25071cc204a9120fec06c33c69de7382f96c02fbaa4fd00cb1b22f6e37606c8ef821097f20dd1bff60a1dc7e938f069634cc8a09c089b88107e94eaf07246132bb3581ff08dc6ec4682712d151f95fa76cefac0942f8fc9be7eab17cd26bed95b6f673ecd88e4fe66c1117b35bf8ca997fa2892407e2e00c5b9b5a739fe8cac446994f3d185029881eb1c8cbea6f00946a328aaa6e9cfff4b616102374e9b72178d66fb2c0e7a76c092f4225571b8ef35f205e450337e5d5a33908208c0f33da1c138f8da4bdb2cc04b42e3002f89ae27da9fd8971a7faad6dbe745addf22803f23eef8f4f1bc17d00705908784b723948dd4e15fd2b4314a6017f0f9827ee968df579db5e8fc2858139f91605a022541a0e483a6637435f5e2a897347d08dcdd64a22829fcb893c3f2584310a059c813030dd9bd9318b92ab43f264600985de014598b786248844a31b4315ae8016af278c18f495f1ac5fde2b58ba7b29b2ab32f8baa3f5f4a5f786c0fd19c3afb19b9bc08f42e7dbc9fb9c0d8fa90ff695b4453e7adebfbcd0cb962cfe256a245fe777237597dd9c2733f56f4b89fbdbd79cd516e207b5d544b80df7f28eef005561e4a35f3fa213ff7e3b3a9f98c1f020adab66a8ca606cd42dfee315d02f037ec0f62516379f98f73fb4c11b54257d1fe5d312e62198444a05cb8216d98ea121f4fcc6e1695dc1cda8ba2a843020c2a5b35be8fbc8e753e88817af689067591b506ea1c7864c0d3bd0217cdf6bf2a11a1dab225a2197bbbe0f6cf277eb2b9a918fb018eb6aa2a3e453b56252d4619d108b39e9d67d6f8845709417373d4d1f5a7a43a39c158b4e8eed1802e7ee2a026f3ba6345e1dadb8019856a157c288eeacbc0745f454e3d5f167a9a62f348a203eb9cca54fb02ff3cb2aad788c2328068cca70cf484b58684de8b4e4cc0549cb671b1cf9227e644c508f5b0830ad835b83348c712024f0b2613ca2cf64d4fadc960c58688027bde20a5b8f42fdeb819c899040349ab0ad40793fb95956a5b8f9d7b55a35522e97c92115f18d9cf5b336117a185dbd54ce8848f02bdba59bb335d29acb5c89a241053dc6d7fc4feb4bbfc604e3ba3e0f00cd398bb12fdfe4af9b332763fe3f7c340ec930944fbcd2649d9397b7a8bbcbd992691bcde14d55ed43ae93beaf983a766420e4c41e7adb1fd3c65958780fd3a8b29cfb721316cf553ba5d87fcd8eea955dc400271118fd9e4c568939fe7eb444e1176fc2d0249fa316ac730629c884207d02209d3de7293a16b16efaaa4128f1ab86766e9fdcfc2cbde49e101986ce6fd0ace10407fa7a85606a8e9725fdb870109c3ebab3c2abc745f6c62d37251629a6a9f7fdafe92884ac7831dce7ab780377ed96691efc0dd21750decebb034a6d8e1c0f5cb77eb0ca18d14ed8cfdd2fcacefd16753d1788c19ac2e680fa65732a034046e81e6a949c1897c73e1a9c2bc6407368f1679511db6c5d717b8c849e6be4fb386ed7000ef81e5c294c7a35cf153b4e8e01afa3d24f747366aa9dca541013a824add4badbf70f489b6a9008f5fc341cdb1f584e9b9dc58712425440e727813ab4aadaa37e28608c147a3743caf7c13df58cf68d1baea85a01ab9420067002f074523acb403a34965c9bf1947b3804c0b792e00248b64aa1eb48c127a0a1372c2a8d95dd2a0b77382831ac2f121cfecdc4e3fbe6147cf49c10b2e5439b7081b8e2e002764b9a63f20e0c119c08ec1b0e53ae2cd46358b36634d72c97db6bdea28b1ef54214146ee1d1ae06f66ba2bb76d0f428bcc88c2123fe37fb4e317c1b5e582eb5ea9ad454cf5f67b12f66259b3ff3065cf355612214f02fce425a1dd0ac02bbff4316ae64fc9da6063d21eee514b481b57cc908cfc3b65eaea8cd983651300b9ea5670860ee9bb457e288ec5913c40053607e01c9aa03f7e44259fb29fae4d76f339a4b53da6adc705341b4511cfbe47acf43195b97e002a9b387d9b101c24539c8e1a9323011ba675ff9a8d92ebe55af80a893e8d8450c242c0adf58f994d60dbb222c8c940a634894c0634e32ae3d94652255b15fa7f5b096b46fd0fef4d60ce97460d37dd60f2199988c87e17bc304a2196236e70827d4a5bc85fe4b9b8195460e8a0a1250ef18458986f245012aebe16ed1f8fd01eb24d5663c5f9c8ad8fe934228f6bfcb2425b3be52085a090bf161a1d0db1afc968cc7490ccf933d92ef757801d953f1d7db3645c1fb771521a7fd253e0f33cb58b950aab00ae4717bf07646d1da0eac862bde639c955cd67d132766f1db477f8629cb1c9c2ca00be27ae7fc86a980d82e9400189a7e92fc4c6c710ef6a8c555f7511ecf36af897bc2e489c7617584e46a3878c8b3184f1371e90c18662c98daaf74bb701d410dcc83107b87b7ec8432e5152a284eec2408ed249948f7b3aee65eb43fcc519e02dd88e1129d92d1c5c9ef398b8e85add68beb5318882ccae5297a2f38199b7d0c33a68e54ec5df89372f9cc4fddc146a5de7b93de0c492bf56b2206c8f6c0b31cd2a6f805fce60a212ebe0a36e2550a248076cf130046c50772a067c124300afb3a1b824cfc15d2d9171e2295b3641b23315a6752de2b781e3b1e7fa692247486860a63cc01942fd0e1c25f15035626dbe89a28b8f27805d846a7c46d4a8eeaed8b8c57be0bbbb12abf20b58ff0b7dc1fa658d5d0592eab99b09660ee2de946815eeb9f832f73f3367b5c3482fda44b641b313fad8287353be3831306110f04484aa21740047944b85d32920d97c931151e1fe38e7d4151e08c27276f155249d0fb6810bee4acc22e7b56a205e41d6e89f74858343bf92ac1c87392c1554f97601bc5a444c1ca5cdc9f90ca28e0e2ba2b61d33726f8c5264d9fa725c71f36baeb8bdc36b60a88ed2668b3c6c72c44f3515a771c2a6bae35b216ef44cea6c353fefa8d604373d3c49b16a44a004dbc1186be3ebdabaf230cdb00ebc3ef1ba1afa6a4d69065dce83dc8fd5363f92d847975a171fbd2adfa8121bc16a7b55152f2a1b4d72d7ae1e927c10c7c5b82cf42d8e3e97cedf99ed6d6bdb13bf80e9cc05b09b295de4dd222729d618bdcb6b019505ba306d8c4b12eb7be9f34acef330898bcd00bb7868f6c95d1b21f6186a2a65beab56dd98e41efb0c44e770dbe99c4693cf78907d01526d22a1f1037400993e5462d57e92fb58d721815cc75713c93a6ea4cdbd21f95a17e1f3c00fc5b747d8eaad204d1ccaaee53378c145c3a3621e086ae825ebeded5496932a4c14e160b5ab3c8a0757fadbe27c3851ce38328ca57c0ea4b99b9bd4d640f91506ad3544499dfea5da5e8604ec8ee0545dc539bcac8553d3c9399f9a7b67fd4cd2ba1a062577e2238a4acaf08dda8fb041c5ac9e0a14c2ca977e8c8b81bbfdfc64d8a1a6b87732873ea3dc1a6f09a71743d8fc2da4e02ff6bb9ea1f61afeddbe3d1ab62a7e39c5419f8ac795a40bdabe1226edb24afe65616c2ea58d10f9980fe49a04569d4715708c4b9fe9534dc89867cac058d93e7670d1bd54a030a7fe4f406fe6665e41f95dd5950feb0b082c07ffe552940154431bcdb1893a8c3ed745a5f731577f7b22b8c895496cadd61a24f170d5a88c5d95cf944e635ffa6b06a1e11e4036746fea69210dc0020b5d5806a13e6905fdc462be95f5a2c7fdca32a2712d79087544f19327fc5a2e80f2c832411b022ebb4b5a59e9267a2cd1b587edf6ebd3655e63a3864638c6f2fe55626fa943ad85b4dd34a58febf359c2f465cb1db48afcd320bc348c3e386fe6a329f2494f44d6e5a720088b76e118642073ebb748b4be450fc41bd07690d1c4ca0c99fc2ed5d025e8862f47fc594b7234e011fea5ff354aa515841f970d4ea02bba028b3ab03481b89587473a69316563148d5094bfeee618d545506aabc10b0cbabdcf293beb16f96b5642b3b83714e221e9d36be7e899bc84b1a819c474b6763122149827bae34c7cdd30318b13cac9f7103c5b9b3b6637b37267786c5f6b3f52777ccbbb87ca44e87ae6225f2e25ac4e5b7aa1d7a85a5f9ae150914e79e97f27f9fa85f6b4771a12afb42157720f74b3d7f7f963da18696ba775b4d5605f4976ccb19a4ef26dc94bc87233251a88917fae838aa46231f1683bfd89c6d5d6fa4633034f402f79e2c475cf27120fb0dfb82f9f7e948e74e44dfa67127acda64574d1b1f004614398e38d5470100c38c117de531635fb47070c117912ece62501e422d7aa43094a0d6fad03ab228f0a9d281fdb2ce068abb340d42b2455d93b0d7a58664cc163cf160e91e3f161c6bfe8caf8d88553b924dc3a0ae109485c42efa0340fc11d31e6ff1ef1df4da7d46e4f8516bd19eec402f8bc0828d01adf6092615edbfdb37479dda88430bb189c06698e92e663321ac8c3a1bd10f60d6b3751b44e40cd36d9fc9d7b6892d9cbdab8c0c4ccf02bdd762f99d2db44fe8d05482a98a448cda2ef38ad38fff5d813d0cb66eb58ebf2d1c36257326cd632363177e19720eded90a12793affd319f51c3a0099db8617d58b6736b75ec72295693017812fa4ba1ad4fd9ce3d3721e13e4c822e336bbd855663c4e71e29c51a630e619b31c022009bead97cad9bfc6c6cafdb8acd01d661a7172a0641fbeb3b1a0832338f716f2003c610cbbbcc4a0c3cb9f9aef831a01b0a06739331df0874c22590cc82c626ae5678a2ab0b82063a54bb9023009ed90ff667d6fb843d88ed9c4700285111506d4d6f7d98800443920180427520b2f39aeb9a8c4f23f9efdc7c24a9c1275ebb214e4913331ae371c82e214e583a88b927b5d096814e2481574e8250eae2d96418e6c0c2ab77030cd01158ce3f3ad5ffe4080826eb209f7862387e0f1edd6724a7799b074ad2198e35605bdec63c11c2c596ea01c174ff8f7f193a42c703983d5731cfd0851a290dc99b6507b5500af3ae7cc6b84476b2ebf6429e96f9fbe4050b77c32d0fb0915deb35eca0e149b54ac663cddb41b8aa25c24242aa21bed150179020f9ee7c1122fd4acbe8eb632ff003ae77aa5ec622dec5d9e3fe6e80aa22a57c4e9f562186501880fbe7a7abd5dd5ca99d80aebc8495f3217abd7445d7491d18407445a887e9aa7ca6e528482d3d30d6f823bd6cab28986b3d8dbdcd86ffb4febab09be106ea50a23c0d73b900e40fdb73254e3efbedba257110ee8c4a49d6589ccfb4722e72282bbcd1d600a0f253dce9b97fb3a0d327af71ea309e15d3b35981e6cf70515a91ff3fe89eb1c3ca56c1425ea808e3109ca098ad92147ddef89e92887d2907d95a5ad1fb0793f3c31ace6169a3615f279bcfe490a05999d7959db474f0446c8bffc70e058152e7d6d6ced91b607c86c3941cadcd380137a2da688a608a3fe94a7685e24b48d91f4ea9cd048c6fdbee3a78904c43fae5afd19e528846e795e7041d125c1132d93d2f78084036bd80e7a0b327e2961967cdd6794682192e4ab8f101a3fc048a761c38f0354247b64094c304b3afda759ab74d40f7e7c4de89b7b8655265ec86ef6ea20abb714ee27be97aad7633088f3ae0ae3a877d1e30d145364275b694118d66593f3e2f9853f2fa1b0e702be523e7510d3fc35a813a84f732d5a8f2e70be291b0be4de6d009c8602dd7b5a80010fd6ce5199fd576798c79ac3ebdeef0e81bcea494c93514d6a1aa5e28ddaabcdde1f80caadb910ce1a76d2f39f49d23ca76597ddf9ec4a09590bdcec37dd62ce2e9768e5071d624ee7a0bbb24f0fa740a4ac4fc39c56a4bd58ace6963b1c8a94ee0167780799e8aa698e9b8d6de98029304d85e4d640bcdbc9981de46bca8560d16de49a63c3650e64fded3d6a0c8c3e0ceb294394622c4d1d86f7a34434d1ec35bc733c9112f31c3c763910ecf9b9b3da48abafcb8a1458b01687c924851d36c3111131e595ac87068cc01fba95ddbb364173d58d8082bdab5663857bc322bd9e8d7847280b37440dadca497b455542d502482e438e618eee6ad8f9e1336afb592e246ae79fe82b110b3b0cf13c31bba10e17cc08dc523b4747a34d1afcedd7c3364a5fd3098ea860413d38ae4af81bd7dd34ce8949410c0817b95dfabdfcec1e0490dd661849411e6eb4ecd026674dda6b4cc5092d07f2cd18aa75cbc9d8d898729bd9acc4de874dd6329c335accf3d42a43145e1e241eb06c08587ba6f385b2cdc6efc02d8fb11292580a555c129a8f4edb517805896cc6d1272ef846d00c517718dfdc3a7ac03bb23e600168f95f7e3aa7001cd9d9e0db202dc225a129680ed75280d84fe88db7206858eee5a83ada9608a1c5e8f184958088029de407642813a9083dbf2367693a767dc54c1bda1f520c8bab5c86ab5d59de057478ecaeee59e6579ccfdc5a1a59e12e204ffbc9e2334ec0120c8e0fd9a8b6126021c52559bbf1c043eacf5f5f9aabcaa8844df6be38da4e42dc8ecdd801f2244b5cad2680e8b130f4315ce95b7b4503dd292eab05390085bbc318d5d7113c204760376714a8bcd6c2508490ba67ec9654bac85a8572cbd86cfe024891f3b8c066ef18ab0354e4e0cd7eec4e85936f97925de39aeb5aabb0cc1a26d8ccef8e9fe7c81a3131e833d27eea44610d7283762eaf8784a8914aa52670e7c37d2258797c8c0dd760e5a2be99f574437f66bd9bbba5da69b594bc38d1851bb225c514d41374467998cf206c752ae7567272bdf20f1a12145f51574d6a69fc30fe50ddbab297285186829ead9e9e78b311966acaff3e2cc6f799f9a1d1b1288c70a22305b33d86bedb03752455be93948ca9c860a84ddcfb66dd817f40c6a86ab5b310279ddb31dc84367ff2597a209c6b925b7d6990af8238d91704cf65b04b5424753647381477c93993f82593ee39d1021e3d6c792be8753c64c5b3149bcbe86db5078332929b80dfc2aee1eba66289df3c570b6efaf08848137e2a0e7ae4663ee16a458f3a01af8c2801c9055b354771dc6eb64f15e49c7ebd3d0f86dd1189b7e85f3007881ff7346ae769f4f83599afbe9bd4398fd201a3fa00ccce1434bf87bf3942af3b8d377c747c5661463e447ddf6a20260ec5c87410a871fe97be3799a1a638ef16639b68212377e52a27f32cb0df13abf6968c3d92bb77788f43e33f68907c28963b9e4a2ac1f1ba3edfbcd8fb11fb6b685144e3b54b1d5733291514ac5644bfa2050f1fd5cf2e642e01952c20e563b9a5413e90b21b5ed0157de64997cff6564f8ddc2f30a3c49bbfda9535529576330206bb07f9a604b3a3c7e297248e6f219e7594670ca8a07273eb5694285d8bc13950c46b2e057b70a97e648c0377b3b8958bd9498917af86f7d66fbb42be83742a4f3ab001d3d4e1eb224683a213cefda62a9d59457f8d84278789664e3d1a08521d82c31cd7e56c3d9a395260257afcd48336f694b78fb90c99c81f2f5187264a26e7d33d30867d3a032dc31db7223a6740bdfc569f82c66fa520bb1fc055b063cf04d61d47a46fa8a75a4ba62d6b2183678c3eec3ca0fbbbfeaaa0db143646925bd05a72fc571d7c64a4c1ad1e8631d5012075502a65f4bdb5abc316bb7066c40166666d40292aa52c5272d6e37c9c0b3bd3dd3e50b9c79337145104970e232d3717d5c10254fd28207cb84b05c2fce1ed1a202c5f6498483061baf7cccc4c2d055325e64d6f48ed399e76bbc638bdadbd87445d778f9c1d1500c0096d18533ade54f04e487d6fc24bfae4e189e697fbf378deb83777c32bcc3464b10e9cead62b66f22f089419500ff53e6dd17faca3e2ed5561fec38bdec77975b97b8475ed5cdb5a64bec5faad72d8a97964d0c127f9a31fe4f645e1b28174fa21c406382f03bf6b3956165fe7e95d191a4fc7ddc06af37fbd774caca5424708e77a56eaf3950b764fb8fab5307b7669da1dc361c3c9c844c6c95d9d4bb0e2843bcd449507ad75311dc2290da2e55f4d794f9a86da5f698799d5255352a8590351fa8f733287697688b5c9390b86767ce180cfa45ebb8132a7c2cc93cce4f977da36612b5e36c0df6b39a6a7c16d551e114c7c7e413c2528e514b19d4a8265cf5c2f7fde0eec5e395fbc47a51a036ea8800fc367e106fd95a412e42d3a67815d8a67bce8aea6fb7274bceb1b8b1e5358e320303b607a82639adf7b07f4b6a41d9bf9a2b8fd784e0b6add7f7d0a43537cfd7d341a01c69654621445bdd11d2e1b57fce90b0062a9b4f3b9e831140905171de0c1ac62bc6d04eab6ea3de7615f9b56245829fb533e1047a2e38a36dea4b73e52672b7e3a8b902dcf62075ef88a95bb61341d88bbad05855d4697906983f03b6e07bbd5b5a9cbd0a09888a2d3a06f1ddf000e45df2586df3e44ddfaacf3ff30bd1c12dabec645a329b18527b627418127c761f03f16043efed0390871a696965078462c7eac1109d13e545d6d306bc981b3407fb79282790e3f66c9acf53ca2d8bb7b19e2b98c8a0973dadc2e54734f9e22e0af08ecce9809001c5da72fcc635d64aec5c8d727c1e945235bfcc95b25bf6c5d30b39078b10a285841932d5fe3c4a7407684bcab82ea798c820b036cea15d06ee866b6e4acdf741809dbf20fa54e94d4fe893151ec6b7d13fd486dc625aadba7c7d9ae8c0d7ed04a4ddcafcd7cd5d0fc1ce8b8900f0b3ec251b0546e32b2d844884984f05ee3ca0f7a27a2040a8c226c073bcb820bdb4f09191563a5c431a626bf8520d321e6f070720fecbabee5bcd079494ee30e2bdaea2041b5db6997981fa7e625060e9deee1f0ae10015f54999b3bc883ecdd8c8c2bf9faf5e263daf57ff3a1bfc9d322eee139acbab9bb54188d9fe93f3c67ae61820f12b04737325bfe027359323253428f51429b45f41f3281ac304b8481649cdcf1471efa02d488b2d58698426178810680a10adaa7a22dbd8965dc859d72a762daa762898f53a2b63cc4ce1c57ca9f838ff0b3936cad7dc175e5fc5af7810cbe7f9b297c676227438bf9fbb61ec787082250a150e655e63c225a4d496b7886d4f0e1fa3bb71f8ede646af4137d8e783905b52d41db76dcda0b1eadf714a4a19b1c9842f9f0e39732ceb0e0bf4be40c53021e2c819695ee08d32c8a0b8a1c24e7d1d1ab42ef071fa823a7598695e1b611c8d508e43dd0b3164a337642c560a54dea7b43cb6293622246d8ce093a14142c957deb31406b96cb359d7d806a7bbb91c4da0bc888bb626e5cc5600e6aac8c5c3ef311e104535536acc8c90c6be3d86a3588842c7dbb7122b0b2347a73619da54ea7eda55a7b2aa53181a792239fdcee73c11cc46c5ae2ad652be85583ccd9710fdfe405624adebc98e6515825dba56bb1e473f3219f9e2cca52a48454079d5a55af678cc9cc00ed0c5311cd9f53fad2f4ebbbc70042b316efb2d2fe5383c0c8682e41ddf06e5005532116770de70b0a4409121757bbd5c540b1f34ac688bcbb671ea7f84895c895bbf012cd2ac8f8099b6fd4423c723db5e281b8877a6a5662c4719f1818b0032c80dc476891c4b407c21d334ba706154b5fdf23d5368f701f758c8f4e5784ff795e126ac9e4792d3d31f923bf62e68256506670af776aec3d91b194babe359beba7aba86e3a4596acade4de7b78ac62fd1cc1dec79a5ad5d9184589e3810746aceb349f02070f8d9790448a51804ffb1e56f14b8ac50281069b2e7ac82874e8828694585ff3f55ed883c0171b47ce38e12ff22883ab685af6be4d3a780254114a5d15e735f8f0e49ea174996a51428ed673a4a57346206a7b740fc653793e004c8ccc3860610af6ab6fcaa7d13193149cca113d7e319d6a9b0af79c8eb4d57d5bab3d1cfacbd3473c46809b1f5a6fd9448fb7a62184a1d11a6a4cb0caa812ae50102fdb140ff13f4754bebd5627a79e679784ffb4e70a0db9ccff6f1eb283e02059fdc63879d82a9cb7b8867031eeb7ce2a3ed1b6bdf0cc2f4b5e7aba4550ff6572da620abb9c52ce0f3cf473c1cdedbf8301323e5fe0676f81a6c90c5c3bb2bd20931494384f98b0545c10ec86e3399d85b94dd9262b2c23057b75dabd170b30bbc471b5f6709445e096f6f3839ad33547f6a2c30c80519ddb95a12b7e9cf4d5a9f8fe847783c2907f3279a8338376d1fc81805a97969623369f19e3d58bf7b0581b46c913130ede4c80c432be5bdb65687521cc3d4a7c067b43d01a1c005fad731b695349d7091c8f7eeace1e52f237ae5fc160f2693d9cdbae1d54eb6b5ce5a7a18545757f84c6061613c11d5b399e12e32e3e97c0c99765969cadb487ace198bdfbfd9bf21441c2df06b6ca884920e25d389cc1268381ab6fb0cf160a7473be3d0bfc8fa60a678f2fa0b73c8316e1f72b61ec6511ff173fae450d33c4fa7e9bca79c40303f8298cb4e270027177028c54684b23a86f0e4cd3aa6871765c87aff073225243586e2c292ae8c14f6d5b972c73f910d2ae35f78551a5391f768ae0e054ed18933cff72aa1119c7d19a11a788c098ef5d5cead60925fabf8a3062069b93976a252e2667c0f0aa33c09a5ea1a3960bcba429aa0cb758eca796de6209c0c525b19c230fc6926f27d844f17fafabaf14cba4ddb769b9f6fd123f9d4f4d9585ba51d6f7ef0175087ea76a41c09a5d14cb65effb08c5dc798cf", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2.87684512s ago: executing program 0 (id=5763): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'ip6erspan0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x0, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x38) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000002140)={&(0x7f00000005c0)=""/67, 0x43}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000f36d", @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa000000000000000014000200020000006401010100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000580)={'vxcan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xebb0a4f5485dfcb0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042dbd7000fedbdf251800f60600000300", @ANYRES32=r8, @ANYBLOB="0c009900070000005e0000000a001a00ffffffffffff00000a00060008021100000100000a001a0008021100000000000a001a0008021100000000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4843}, 0x8000) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) 2.545184709s ago: executing program 1 (id=5764): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10, r1, 0x9e235000) fadvise64(r0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) io_setup(0x0, &(0x7f00000030c0)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x1010, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x113, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, &(0x7f0000000600)=0x80, &(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '})-\\'}, {0x20, 'GPL\x00'}, {0x20, '/dev/hwrng\x00'}, {0x20, 'GPL\x00'}], 0xa, "d648fbceef1cb033dfbfc7e129f98f36d344a0292ed9280e83b6848af98e0c8b5e9dcbbe696d06dd625e0b6aab387c3fe46ff8c3bbaa690a5cc3424e396bf169c6ca007a5d824946b799305c9939a847be99049bad635d64d00d9c5f145dee4cf660c46c42fa3cb235f9fdcff150bdfd9c389d0c8678cc99f36e22124ec61af2311690ebb9530b22f15dd5c6a8756e490705b59b7234dfe6327c512fcb487f7f638e0419f84b98adbdfe5676c84bd083c46ead7912d063a2d4b1534747e3493ef52227e52a6f7ea17c34b6686a2b951b04cf209379b7c1"}, 0xfd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x80000, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000004c0), 0x2, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f00000006c0)={0x0, &(0x7f00000001c0)=""/40, &(0x7f0000000700)="d9a868c6c230d7cd1b83d548fb0e15742e84a06024d036f2b78df8b81384cb00f646aebe36cc0a7f6f2aa1a3194adefcc1853ba4ca2fa8f6f65f52f66f2b006cd57c8152debaff7a513907389414515a82d97a948df0550b06d104a4db4edaa26a2d5ab18ab8e0cc58dfdf828d5c0ba067c447f907d7f131f291bd95e462aa00c174021488cdf018128b1d9ca390148b5379e6ed6e0b4f9d16ad3378cd1c", &(0x7f00000005c0)="6cbda0d79b911cd816a6df", 0x1, r7}, 0x38) 2.473650049s ago: executing program 0 (id=5765): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0xf8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xcc, 0x2, [@TCA_U32_SEL={0xb4, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x0, 0x1ff}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x66e}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0xf8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.424309771s ago: executing program 3 (id=5766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2000002, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) (async) sendmmsg(r4, &(0x7f0000000180), 0x400000000000354, 0x0) 2.225217321s ago: executing program 1 (id=5767): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04170a00000000000054679200"], 0xd) read$FUSE(0xffffffffffffffff, &(0x7f000000a300)={0x2020}, 0x204c) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x5df) preadv2(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000012400)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02018000000e00050015030a00ff0109007dd0c6de046923ec0ad89fc2e0bd56d40bf2d553cdd46db5ec2e608d1f08992ec05018cb56dcddfab98508a65b1d31ed1f48b7c4ca97a37f165d02cd6d51fc72c16e1606a19ecc450a3a5529d54c4ec82227542a0ad74ffd4edb25e9140ce14c4c670386bbab7ec58349846bba1ce845cb3194443931e34da1"], 0x17) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000100100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000fd"], 0x48}, 0x2}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r5, &(0x7f00000004c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f0000000000)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_cancel(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 2.225041975s ago: executing program 3 (id=5768): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000140)=@dstopts={0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x9000000, 0x0, 0x0]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x7fffffe]}}]}, 0x60) 1.83348924s ago: executing program 0 (id=5771): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) read$alg(r0, &(0x7f0000000000)=""/2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r4, 0x0, 0x1) sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080)=0x7, 0x4) sendto(r3, &(0x7f00000002c0)="711786b616bdd452cc00000000ce253232e3a7e6", 0xfffffffffffffc82, 0x8000, 0x0, 0x0) tee(r0, r0, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = dup3(r7, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read$FUSE(r9, &(0x7f00000024c0)={0x2020}, 0x2020) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), 0xbde, r6}, 0x38) 1.832228476s ago: executing program 2 (id=5772): r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x2a001, 0x0) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x1011]}) (async) pwritev(r1, &(0x7f00000010c0)=[{&(0x7f0000000080)='0', 0x1}], 0x1, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x3d8, 0x298, 0x0, 0xffffffff, 0x0, 0x0, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x3, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x32}, @icmp_id=0x65, @icmp_id=0x67}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'hsr0\x00', 'wg1\x00', {0xff}, {0xff}, 0xc, 0x3, 0x20}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @gre_key=0x7, @gre_key=0x80}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, 0xffffff00, 0xffffff00, 'erspan0\x00', 'netdevsim0\x00', {}, {}, 0x1d, 0x4, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @icmp_id=0x64, @gre_key=0xabd5}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x15, @multicast1, @broadcast, @port=0x4e21, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) (async) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x7f, 0x4) (async) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000180)) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010003080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) 1.820228807s ago: executing program 3 (id=5773): r0 = io_uring_setup(0x1951, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000006480)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000180)="9be76fc62f190334fde59785724bbd0e878b881cca6df92856a64dfab7a636ba848300d4d524ea1c1c6da5310cd9a63b65fe21f75d60bff6a2b0b71b8868d89b610d75b7b36800b97cc828b5", 0x4c}, {&(0x7f0000000200)="01155b4c34ae936ecf739981e5adbb2cdbb1793179c773c37d6b026d138ece8fe6c78867ad9852be205b133987767aff9ba11b438da1a90ab0fd9c0dc0051bdd186d", 0x42}, {&(0x7f0000000280)="5001201c963745b99fc40cd2e4a41ebc9d355add769882c91858e5ac999b9ad637590df384851781f2de265c2196c1312431b0747fadacd8e50719c428f7b5b543e8746bc74a672a47bce3fe9ac10d1a5b0d8d8adb4f8e15c6ffaa1becf4895eea3593c130b6d876b343faf2f5a56450cf5bd090eeea84842c0a89588f9093c6548a8f9630190e668a12bfa59c63b68d4920c46f378eee35906c8bed29cc6a883390a854d5ca688469c486d7670c172f754a116449c507f524ea36d34942f1fa1f2e8dda60ec9f798203db67aff6514958f59d7ce1e52f0d58621bb9f2893a", 0xdf}, {&(0x7f0000000380)="49ef55405c7e5a5598d19d8d63ff5bea365218ee7096147d9e8b28b186902b68e0cbd6537948cd6dd36c876ae87c1e037ea1e6b40ad8e16d4b45dd86fb522a8fda4523877d8d0500d63e6ca05f5563219d5071a99299beb1f4702b71af6016641a1f2d556bb35c4a24ebafc84336c5b88488fb339648702cce6d859d10b178ab399654bab38458b99ec7533e964433ad491b028815d8b23b751bb26e64f4106016630c909da2d86b7638e4524fb4a3d40575fdb6e47653b532b31a140f22aad5a864f62102", 0xc5}], 0x4}}, {{&(0x7f0000000680)={0xa, 0x4e23, 0xcf1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, &(0x7f00000018c0)=[{&(0x7f00000006c0)="bff69a80dae7cbde2139f28dec1f3a68bba46ec77f6f653242328d4b2d52045d6a4081e70efdd689c5576c9f5253e6a586ace31e1fd9c9d091e62fef5589bbb2c7914cd855173612d3a63d984a46fce3ecea9b601a3cd918", 0x58}, {&(0x7f0000000740)="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", 0x7fc}, {&(0x7f0000001740)="a73c1e46fb081d3116e2d4788359a5282afa6e379f9c35099316d74a0daf74e61a9fb34659867591d08f50f05f57013d52162c2326d0d3ce0d9eb0079d0426e0e295bbbc7b506debc889f42e62c74e7045725457d137c44b8280e76ae5a6f89f33014efd2b1222edc4bffa94d4a5", 0x6e}], 0x3, &(0x7f0000001900)=[@hoplimit_2292={{0x14}}, @dstopts={{0x58, 0x29, 0x37, {0x29, 0x7, '\x00', [@pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0xfff5, [0x0, 0x7f, 0x81, 0x401]}}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x0, 0xa, '\x00', [@generic={0x0, 0x3e, "b51481c32bbed1ba4b3b9d5ab85fcb28ac1dcf275aaba374b9324cc5c0badb92cf18c14370515124f9b1cc7dd9dd88129041b632cb598db6573586d3a2eb"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x0, 0xf, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x2, 0xe, 0x7f, 0x2, [0x7, 0x8, 0x9, 0x2, 0x77c, 0xc, 0x7]}}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x10, {0x0, 0x2, 0x9e, 0x7, [0x10001]}}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x0, [0x100000000000, 0x6]}}]}}}], 0x190}}, {{&(0x7f0000001c40)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}}], 0x3, 0x4010) close_range(r0, 0xffffffffffffffff, 0x0) 1.819765536s ago: executing program 4 (id=5774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x34}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f0000002200)={'syz', 0x2}, &(0x7f0000002240)='vfat\x00', 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007008000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108006db1ef05808d7b02fb2c28dca814f70200ac1e00010c000280050001000000000008000740000000000c0006800800010000000000"], 0x70}}, 0x0) 1.569383413s ago: executing program 3 (id=5775): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x3, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700, r0, &(0x7f0000000200)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645bd8dba2b0c966867d8e1fa16fa7cacb9214070a622a2c57b89075f5ab85c7b5b2c41edc9d2cd5a2c95ed75c2f72425be9c1a2df1b61ac59ba042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eaed7242f19d88173216c", 0x80}, 0x0, 0x0]) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 1.416571994s ago: executing program 4 (id=5777): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x0, 0x210, 0x210, 0x138, 0x138, 0x380, 0x380, 0x98, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x48}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'nicvf0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 1.255392045s ago: executing program 4 (id=5778): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x3, 0x3, {{0xa, 0x4, 0x0, 0x28, 0x28, 0x66, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@loopback}]}, @generic={0x89, 0x7, "852c101253"}]}}}}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x8, 0x8, 0x4, @vifc_lcl_ifindex=r1, @loopback}, 0x10) r2 = fsmount(0xffffffffffffffff, 0x0, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0xb, [@ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @datasec={0xe, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x4, 0x3}, {0x4, 0x5, 0x5}, {0x1, 0x9, 0x1}, {0x5, 0x2, 0x2}], '4'}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1df, [{0x5, 0x5, 0x6}, {0xd, 0x4, 0x2}, {0xb, 0x5, 0x7}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x5f, 0x1e, 0x30, 0x0, 0x0, 0x5f, 0x61]}}, &(0x7f00000001c0)=""/148, 0xab, 0x94, 0x0, 0x6}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xead, '\x00', r1, r3, 0x3, 0x0, 0x5}, 0x48) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000340)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000380)={0x6, 0x0, 0x10001}) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000003c0)={{0x2}, 0x100, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000500)="439d6398078344418868a875b270efbb", 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000540)={@loopback, 0x20, r1}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@fuse_with_parent={0x18, 0x82, {{0x1, 0x400, 0x5}, {0x6bd6, 0x9, 0x3}}}, &(0x7f0000000600), 0x600) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000640)) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x538, 0xd0, 0x298, 0x298, 0x3d8, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, &(0x7f0000000680), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xdf}}}, {{@ipv6={@loopback, @loopback, [0x1ff0001ff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xff, 0xffffffff, 0xffff00], 'bridge_slave_1\x00', 'xfrm0\x00', {0xff}, {}, 0x3b, 0x8, 0x4}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0x0, 0x8, 0x2, 0x3, @loopback, @private1, @local, [0xffffffff, 0x0, 0x0, 0xff], [0xffffff, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xff, 0xff000000], 0x2892, 0x8}}, @common=@dst={{0x48}, {0x5d9, 0x2, 0x1, [0x4, 0x7, 0x8, 0x5, 0x7, 0x0, 0x40, 0x6, 0xa, 0x0, 0x4, 0x2, 0x6, 0x7, 0x6, 0xbe], 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@private2, 0x4, 0x22, 0x9}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"d8ae", 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x3}, @ipv4=@loopback, 0x2a, 0x27, 0x9}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 'bridge_slave_1\x00', 'lo\x00', {}, {}, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0xffffffff, 0x5, 0x1, [0x5, 0x843, 0xb7, 0x9d7c, 0x2, 0x0, 0x10, 0x200, 0x2, 0x9, 0x1, 0x9, 0x9, 0xe, 0x7, 0x5], 0x1}}, @common=@icmp6={{0x28}, {0x0, "d0a1"}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@multicast1, 0x37, 0x8, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x1, 0x8e4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) syz_genetlink_get_family_id$batadv(0x0, r2) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000f80), 0x341080, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000fc0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r5) sync() r6 = syz_open_dev$I2C(&(0x7f0000001080), 0x4, 0x80) sync_file_range(r6, 0x9, 0x80, 0x7) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r7, 0x3, &(0x7f00000010c0)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x30, r8, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffffa, 0x1, 0x10000, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) sync() r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000001580)={{'\x00', 0x2}, {0x200}, 0x8e, 0x0, 0x0, &(0x7f0000001280)='./file0/file0\x00', &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)="b94fa7b5aab362729faa4e56d261af2378d77e2a038aa2fc4c1efba28e6f3de075eaab524fb6b0e37e214ab7370b4051565260c81fcf9536a5f5e45218defdd4a4c73138113aaffb370b277fdf11ac29d9b766393b4f9ae860db5ca532c1e010e7e0a761676f5259eac952e8cc9f72dbbb3b14e2e75820b7a8d061ab5549ce949a9a58af0126122daa7e2ed9033ce4598842c848d6af81", 0x97, 0x1000000, &(0x7f00000013c0)={0x2, 0x109, {0x0, 0xc, 0x2a, "bced6bd961b4ed154167ad547e75e8c8aca0ec94e1e7063aa35beaddc6a7efc829c3f8298f5f325934de", 0xd2, "b61ecf907ce1146ea4275a732864a9c04e70b9925fb3f8ea102ae85ea13664bc4b46a8e3b9a508847e4738720be9636fe7aec707f5ced3480838d15bc2066824dccbf95d00a707e6b5f683b65558cc2a6c59aedf4f813cc97190b1b9e1dd0b0db5a790098dd7eb27f47ca818851fe8a70c4793a6161d7a419d76b2c7794d474c824b10d340b40f7b5e5e76e89c94ea5a1fef1f5cf2da7e8fb526e6ea6d70758189a9bf6d4beeee7176a6b297e08eb98413e173a184f49a4db092f90b2606bae8405b59266c7a60aaf553c32b618fc7fb0249"}, 0x7c, "20c60ae11ec9a8726dc30ba032bfc23503eeb1c93494e380f7c9f0399c1c3ef05e6bd72dc09ced3c3b425d07a2660f82df304b1fba37ac9ba368a484b6012f8b34a18e8d972831e4bf126d1edd3dd325fe0febbfeade730613c06e201919b6d88180b6c09fedbda69c22dbed7acbc268235571fde6fd9de79f44870c"}, 0x191}) 712.612994ms ago: executing program 4 (id=5779): syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000480) r2 = eventfd2(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000780)={0x0, {{0x2, 0x4e22, @multicast2}}, 0x1, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}]}, 0x190) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x0, @remote}, 0x0, {0x2, 0xfffe, @local}}) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x100000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x300, 0x0, 0x2, r2, 0xb}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r2, 0x7}) 624.588388ms ago: executing program 3 (id=5780): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0xe8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xbc, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x0, 0x1ff}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {0x66e}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0xe8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 435.048329ms ago: executing program 3 (id=5781): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x13, 0x7b, 0x72, 0x8, 0x13d8, 0x10, 0xb614, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc5, 0xb2, 0x1b}}]}}]}}, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x11af, 0xdfd2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 369.402369ms ago: executing program 4 (id=5782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000009000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008"], 0x60}}, 0x0) 178.390781ms ago: executing program 4 (id=5783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090100000000000000003f00000008000300", @ANYRES32=r12, @ANYBLOB="18009b0404f58dd355c3"], 0x34}}, 0x0) 0s ago: executing program 0 (id=5784): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}, {0x10, 0x110, 0x1}], 0x20}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0xfad3, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="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", 0x1d8}], 0x1) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000000)={0x9, {0x0, 0x0, 0xd00, 0xffffffea}}) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): atadv_slave_1 [ 1292.053746][T29421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.080975][T29519] fuse: Bad value for 'fd' [ 1292.095803][T29421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.144702][T29421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.156507][T29421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.183135][T29421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.210305][T29524] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5459'. [ 1292.219855][T29421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.233171][T29524] openvswitch: netlink: Key type 29 is not supported [ 1292.241692][T29421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.254957][T29421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.279267][T29421] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.293514][T29421] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.317728][T29421] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.327193][T29421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.446917][T10114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.465639][ T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1292.476335][T10114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.527042][T10114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.536436][T10114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.649023][T20489] usb 3-1: USB disconnect, device number 43 [ 1292.654304][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 1292.680760][ T45] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1292.697386][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.714699][T27899] Bluetooth: hci0: command tx timeout [ 1292.731766][ T45] usb 4-1: config 0 descriptor?? [ 1292.780494][T27899] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1292.802547][T29542] [U] [ 1292.805264][T29542] [U] [ 1292.807935][T29542] [U] [ 1292.810631][T29542] [U] [ 1292.813956][T29542] [U] [ 1292.816660][T29542] [U] [ 1292.819357][T29542] [U] [ 1292.822040][T29542] [U] [ 1292.835025][T29542] [U] [ 1292.837752][T29542] [U] [ 1292.840458][T29542] [U] [ 1292.847330][ T45] usb 4-1: selecting invalid altsetting 1 [ 1292.854816][T29542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5465'. [ 1292.876145][ T45] comedi comedi0: could not switch to alternate setting 1 [ 1292.912184][ T45] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1293.008523][T29541] usb usb8: usbfs: process 29541 (syz.2.5466) did not claim interface 0 before use [ 1293.518983][T29536] [U] [ 1293.558693][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.726308][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.044742][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.292054][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.476722][T13863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1294.493697][T13863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1294.511104][T13863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1294.525085][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1294.539470][T14271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1294.541627][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1294.559084][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1294.563363][T14271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1294.577119][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1294.592125][T27899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1294.606108][T14271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1294.617344][T14271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1294.784277][T14271] Bluetooth: hci0: command tx timeout [ 1294.800518][ T51] bridge_slave_1: left allmulticast mode [ 1294.808235][ T51] bridge_slave_1: left promiscuous mode [ 1294.816305][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.879218][ T51] bridge_slave_0: left allmulticast mode [ 1294.889803][T29567] FAULT_INJECTION: forcing a failure. [ 1294.889803][T29567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.898196][ T51] bridge_slave_0: left promiscuous mode [ 1294.903219][T29567] CPU: 1 PID: 29567 Comm: syz.4.5476 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1294.918666][T29567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1294.925085][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.928718][T29567] Call Trace: [ 1294.928730][T29567] [ 1294.928739][T29567] dump_stack_lvl+0x241/0x360 [ 1294.946643][T29567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.951880][T29567] ? __pfx__printk+0x10/0x10 [ 1294.956501][T29567] ? __pfx_lock_release+0x10/0x10 [ 1294.961555][T29567] should_fail_ex+0x3b0/0x4e0 [ 1294.966261][T29567] _copy_from_user+0x2f/0xe0 [ 1294.970869][T29567] copy_msghdr_from_user+0xae/0x680 [ 1294.976099][T29567] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1294.981942][T29567] __sys_sendmsg+0x23d/0x3a0 [ 1294.986559][T29567] ? __pfx___sys_sendmsg+0x10/0x10 [ 1294.991683][T29567] ? vfs_write+0x7c4/0xc90 [ 1294.996154][T29567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1295.002494][T29567] ? do_syscall_64+0x100/0x230 [ 1295.007293][T29567] ? do_syscall_64+0xb6/0x230 [ 1295.011990][T29567] do_syscall_64+0xf3/0x230 [ 1295.016503][T29567] ? clear_bhb_loop+0x35/0x90 [ 1295.021179][T29567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.027069][T29567] RIP: 0033:0x7fb386775bd9 [ 1295.031475][T29567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.051073][T29567] RSP: 002b:00007fb3861ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1295.059494][T29567] RAX: ffffffffffffffda RBX: 00007fb386903f60 RCX: 00007fb386775bd9 [ 1295.067482][T29567] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 1295.075468][T29567] RBP: 00007fb3861ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1295.083449][T29567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.091410][T29567] R13: 000000000000000b R14: 00007fb386903f60 R15: 00007fb386a2fa78 [ 1295.099385][T29567] [ 1295.208231][T20488] usb 4-1: USB disconnect, device number 49 [ 1295.907681][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.921501][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.933839][ T51] bond0 (unregistering): Released all slaves [ 1295.975286][T29574] netlink: 'syz.4.5478': attribute type 3 has an invalid length. [ 1295.997057][T29574] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.5478'. [ 1296.026766][T29580] FAULT_INJECTION: forcing a failure. [ 1296.026766][T29580] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.054299][T29580] CPU: 1 PID: 29580 Comm: syz.3.5480 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1296.064686][T29580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1296.074768][T29580] Call Trace: [ 1296.078069][T29580] [ 1296.081017][T29580] dump_stack_lvl+0x241/0x360 [ 1296.085773][T29580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.091004][T29580] ? __pfx__printk+0x10/0x10 [ 1296.095637][T29580] should_fail_ex+0x3b0/0x4e0 [ 1296.100963][T29580] ? rtnl_newlink+0xf2/0x20a0 [ 1296.105679][T29580] should_failslab+0x9/0x20 [ 1296.110216][T29580] kmalloc_trace_noprof+0x6c/0x2c0 [ 1296.115368][T29580] ? __pfx_rtnl_newlink+0x10/0x10 [ 1296.120515][T29580] rtnl_newlink+0xf2/0x20a0 [ 1296.125067][T29580] ? __pfx_lock_acquire+0x10/0x10 [ 1296.130203][T29580] ? __mutex_lock+0x99b/0xd70 [ 1296.134907][T29580] ? __pfx_lock_release+0x10/0x10 [ 1296.139952][T29580] ? do_raw_spin_lock+0x14f/0x370 [ 1296.145013][T29580] ? __pfx_rtnl_newlink+0x10/0x10 [ 1296.150071][T29580] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1296.155399][T29580] ? __mutex_lock+0x9a5/0xd70 [ 1296.160108][T29580] ? __mutex_lock+0x527/0xd70 [ 1296.164815][T29580] ? rtnetlink_rcv_msg+0x842/0x1180 [ 1296.170043][T29580] ? __pfx___mutex_lock+0x10/0x10 [ 1296.175108][T29580] ? __pfx_rtnl_newlink+0x10/0x10 [ 1296.180139][T29580] rtnetlink_rcv_msg+0x89b/0x1180 [ 1296.180173][T29580] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1296.190487][T29580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1296.195981][T29580] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1296.201989][T29580] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1296.208356][T29580] ? __local_bh_enable_ip+0x168/0x200 [ 1296.213758][T29580] ? lockdep_hardirqs_on+0x99/0x150 [ 1296.218987][T29580] ? __local_bh_enable_ip+0x168/0x200 [ 1296.224381][T29580] ? dev_hard_start_xmit+0x773/0x7e0 [ 1296.229692][T29580] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1296.234833][T29580] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1296.240590][T29580] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1296.245735][T29580] ? __dev_queue_xmit+0x16c9/0x3d30 [ 1296.250978][T29580] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1296.256133][T29580] ? ref_tracker_free+0x643/0x7e0 [ 1296.261197][T29580] netlink_rcv_skb+0x1e3/0x430 [ 1296.265995][T29580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1296.271483][T29580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1296.276830][T29580] ? netlink_deliver_tap+0x2e/0x1b0 [ 1296.282059][T29580] netlink_unicast+0x7ea/0x980 [ 1296.286859][T29580] ? __pfx_netlink_unicast+0x10/0x10 [ 1296.292166][T29580] ? __virt_addr_valid+0x183/0x530 [ 1296.294640][T29586] program syz.4.5484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1296.297286][T29580] ? __check_object_size+0x49c/0x900 [ 1296.297319][T29580] ? bpf_lsm_netlink_send+0x9/0x10 [ 1296.316919][T29580] netlink_sendmsg+0x8db/0xcb0 [ 1296.321719][T29580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1296.327032][T29580] ? __import_iovec+0x536/0x820 [ 1296.331904][T29580] ? aa_sock_msg_perm+0x91/0x160 [ 1296.336872][T29580] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1296.342176][T29580] ? security_socket_sendmsg+0x87/0xb0 [ 1296.347659][T29580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1296.352964][T29580] __sock_sendmsg+0x221/0x270 [ 1296.357663][T29580] ____sys_sendmsg+0x525/0x7d0 [ 1296.362462][T29580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1296.367801][T29580] __sys_sendmsg+0x2b0/0x3a0 [ 1296.372420][T29580] ? __pfx___sys_sendmsg+0x10/0x10 [ 1296.377543][T29580] ? vfs_write+0x7c4/0xc90 [ 1296.381972][T29580] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1296.388376][T29580] ? do_syscall_64+0x100/0x230 [ 1296.393132][T29580] ? do_syscall_64+0xb6/0x230 [ 1296.397797][T29580] do_syscall_64+0xf3/0x230 [ 1296.402301][T29580] ? clear_bhb_loop+0x35/0x90 [ 1296.406993][T29580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.412882][T29580] RIP: 0033:0x7fea21575bd9 [ 1296.417296][T29580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.436928][T29580] RSP: 002b:00007fea222ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1296.445354][T29580] RAX: ffffffffffffffda RBX: 00007fea21703f60 RCX: 00007fea21575bd9 [ 1296.453316][T29580] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 1296.461292][T29580] RBP: 00007fea222ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.469262][T29580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.477237][T29580] R13: 000000000000000b R14: 00007fea21703f60 R15: 00007fea2182fa78 [ 1296.485209][T29580] [ 1296.488233][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.625703][T14271] Bluetooth: hci3: command tx timeout [ 1296.647923][T14271] Bluetooth: Unknown LE signaling command 0x31 [ 1296.654301][T14271] Bluetooth: Wrong link type (-22) [ 1296.707305][T14271] Bluetooth: hci4: command tx timeout [ 1296.737603][T29597] can: request_module (can-proto-0) failed. [ 1296.808583][T29601] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5487'. [ 1296.874212][T22600] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1296.978588][T29611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5490'. [ 1297.040758][T29561] chnl_net:caif_netlink_parms(): no params data found [ 1297.055257][T22600] usb 5-1: Using ep0 maxpacket: 8 [ 1297.067969][T22600] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1297.082612][T22600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.150965][T22600] usb 5-1: config 0 descriptor?? [ 1297.181221][T22600] usb 5-1: selecting invalid altsetting 1 [ 1297.196790][T22600] comedi comedi0: could not switch to alternate setting 1 [ 1297.211938][ T51] hsr_slave_0: left promiscuous mode [ 1297.213811][T22600] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1297.238369][ T51] hsr_slave_1: left promiscuous mode [ 1297.255272][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1297.274134][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.295296][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.323106][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.436094][ T51] veth1_macvtap: left promiscuous mode [ 1297.441689][ T51] veth0_macvtap: left promiscuous mode [ 1297.466487][ T51] veth1_vlan: left promiscuous mode [ 1297.488327][ T51] veth0_vlan: left promiscuous mode [ 1297.737808][T22600] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1297.917500][T22600] usb 4-1: device descriptor read/64, error -71 [ 1298.184529][T22600] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1298.364296][T22600] usb 4-1: device descriptor read/64, error -71 [ 1298.484726][T22600] usb usb4-port1: attempt power cycle [ 1298.685606][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1298.705098][T14271] Bluetooth: hci3: command tx timeout [ 1298.784665][T14271] Bluetooth: hci4: command tx timeout [ 1298.797003][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1298.894183][T22600] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1298.928660][T22600] usb 4-1: device descriptor read/8, error -71 [ 1299.204231][T22600] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1299.254952][T22600] usb 4-1: device descriptor read/8, error -71 [ 1299.376699][T22600] usb usb4-port1: unable to enumerate USB device [ 1299.655572][T20489] usb 5-1: USB disconnect, device number 50 [ 1299.981252][T29561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.006640][T29561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.030176][T29561] bridge_slave_0: entered allmulticast mode [ 1300.053874][T29561] bridge_slave_0: entered promiscuous mode [ 1300.085256][T29561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.093699][T29561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.130380][T29561] bridge_slave_1: entered allmulticast mode [ 1300.149283][T29561] bridge_slave_1: entered promiscuous mode [ 1300.322297][T29564] chnl_net:caif_netlink_parms(): no params data found [ 1300.383416][T29561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.543288][T29561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.637265][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.643625][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.670653][ T51] IPVS: stop unused estimator thread 0... [ 1300.784444][T14271] Bluetooth: hci3: command tx timeout [ 1300.855178][T29561] team0: Port device team_slave_0 added [ 1300.865022][T14271] Bluetooth: hci4: command tx timeout [ 1300.924129][ T25] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1300.935279][T29561] team0: Port device team_slave_1 added [ 1301.114115][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1301.151966][ T25] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1301.191152][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.252393][ T25] usb 4-1: config 0 descriptor?? [ 1301.288406][ T25] usb 4-1: selecting invalid altsetting 1 [ 1301.302527][T29564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.327582][T29564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.332139][ T25] comedi comedi0: could not switch to alternate setting 1 [ 1301.341268][T29564] bridge_slave_0: entered allmulticast mode [ 1301.352908][T29564] bridge_slave_0: entered promiscuous mode [ 1301.372670][ T25] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1301.394879][T29561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.401865][T29561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.427853][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.443791][T29561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.486389][T29561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.500620][T29561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.526543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.560283][T29561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.600592][T29564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.624281][T29564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.653182][T29564] bridge_slave_1: entered allmulticast mode [ 1301.673405][T29564] bridge_slave_1: entered promiscuous mode [ 1301.782885][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.947413][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.071018][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.071527][T29707] fuse: Bad value for 'fd' [ 1302.100678][T29564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.123474][T29564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.153294][T29561] hsr_slave_0: entered promiscuous mode [ 1302.161368][T29561] hsr_slave_1: entered promiscuous mode [ 1302.169919][T29561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1302.180724][T29561] Cannot create hsr debugfs directory [ 1302.248894][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.539262][T29564] team0: Port device team_slave_0 added [ 1302.577009][T29564] team0: Port device team_slave_1 added [ 1302.751187][T29564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.775678][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.849687][T29564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.864308][T14271] Bluetooth: hci3: command tx timeout [ 1302.879875][T29564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.887474][T29564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.926552][T29564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.944635][T14271] Bluetooth: hci4: command tx timeout [ 1302.984268][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1302.994416][T22600] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1303.166688][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1303.177562][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.196790][T22600] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1303.215818][ T25] usb 2-1: config 0 descriptor?? [ 1303.226985][T22600] usb 5-1: can't read configurations, error -61 [ 1303.250196][ T25] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1303.360933][T29564] hsr_slave_0: entered promiscuous mode [ 1303.386292][T29564] hsr_slave_1: entered promiscuous mode [ 1303.399662][T29564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1303.404174][T22600] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1303.429930][T29564] Cannot create hsr debugfs directory [ 1303.443218][ T51] bridge_slave_1: left allmulticast mode [ 1303.449909][ T51] bridge_slave_1: left promiscuous mode [ 1303.458414][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.485293][ T51] bridge_slave_0: left allmulticast mode [ 1303.492517][ T51] bridge_slave_0: left promiscuous mode [ 1303.499635][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.547085][ T5134] usb 4-1: USB disconnect, device number 54 [ 1303.626067][T22600] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1303.630482][T29723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.634383][T22600] usb 5-1: can't read configurations, error -61 [ 1303.666488][T29723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.671040][T22600] usb usb5-port1: attempt power cycle [ 1303.935450][ T25] gspca_sn9c2028: read1 error -110 [ 1303.952859][T29747] fuse: Bad value for 'fd' [ 1303.954180][ T25] gspca_sn9c2028: read1 error -32 [ 1303.986553][ T25] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32 [ 1304.124285][T22600] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1304.195946][T22600] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1304.219008][T22600] usb 5-1: can't read configurations, error -61 [ 1304.394345][T22600] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1304.480472][T22600] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1304.500310][T22600] usb 5-1: can't read configurations, error -61 [ 1304.514458][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.524217][T22600] usb usb5-port1: unable to enumerate USB device [ 1304.539386][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.552811][ T51] bond0 (unregistering): Released all slaves [ 1305.049663][ T51] hsr_slave_0: left promiscuous mode [ 1305.065610][ T51] hsr_slave_1: left promiscuous mode [ 1305.076938][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.087751][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.109877][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.137678][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.189660][ T51] veth1_macvtap: left promiscuous mode [ 1305.204091][ T51] veth0_macvtap: left promiscuous mode [ 1305.220143][ T51] veth1_vlan: left promiscuous mode [ 1305.230155][ T51] veth0_vlan: left promiscuous mode [ 1305.679134][T22600] usb 2-1: USB disconnect, device number 40 [ 1305.724949][T14271] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1305.849510][T29776] usb usb8: usbfs: process 29776 (syz.1.5528) did not claim interface 0 before use [ 1306.114082][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1306.224582][T22600] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1306.334138][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1306.351505][ T25] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1306.370155][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.390769][ T25] usb 4-1: config 0 descriptor?? [ 1306.396809][T29794] fuse: Bad value for 'fd' [ 1306.442236][T22600] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1306.453919][ T25] usb 4-1: selecting invalid altsetting 1 [ 1306.485011][T22600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.496768][ T25] comedi comedi0: could not switch to alternate setting 1 [ 1306.503919][ T25] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1306.526962][T22600] usb 5-1: config 0 descriptor?? [ 1306.998070][T22600] gs_usb 5-1:0.0: Configuring for 8 interfaces [ 1307.008932][T22600] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1307.036403][T22600] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 1307.240801][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1307.425820][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1308.124080][T15512] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1308.316623][T15512] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 1308.326003][T29801] Cannot find set identified by id 65535 to match [ 1308.339352][T15512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.357112][T15512] usb 2-1: config 0 descriptor?? [ 1308.369482][T15512] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1308.831317][ T25] usb 4-1: USB disconnect, device number 55 [ 1308.880845][T29809] FAULT_INJECTION: forcing a failure. [ 1308.880845][T29809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.896654][T29809] CPU: 1 PID: 29809 Comm: syz.3.5537 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1308.906842][T29809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1308.916919][T29809] Call Trace: [ 1308.920209][T29809] [ 1308.923165][T29809] dump_stack_lvl+0x241/0x360 [ 1308.927855][T29809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1308.933060][T29809] ? __pfx__printk+0x10/0x10 [ 1308.937659][T29809] ? vfs_write+0x7c4/0xc90 [ 1308.942097][T29809] should_fail_ex+0x3b0/0x4e0 [ 1308.946800][T29809] _copy_from_user+0x2f/0xe0 [ 1308.951407][T29809] move_addr_to_kernel+0x82/0x150 [ 1308.956465][T29809] __sys_connect+0xc1/0x310 [ 1308.960985][T29809] ? __pfx___sys_connect+0x10/0x10 [ 1308.966125][T29809] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1308.972460][T29809] ? do_syscall_64+0x100/0x230 [ 1308.977251][T29809] __x64_sys_connect+0x7a/0x90 [ 1308.982022][T29809] do_syscall_64+0xf3/0x230 [ 1308.986649][T29809] ? clear_bhb_loop+0x35/0x90 [ 1308.991346][T29809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.997266][T29809] RIP: 0033:0x7fea21575bd9 [ 1309.001695][T29809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1309.021326][T29809] RSP: 002b:00007fea222ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1309.029742][T29809] RAX: ffffffffffffffda RBX: 00007fea21703f60 RCX: 00007fea21575bd9 [ 1309.037710][T29809] RDX: 000000000000000c RSI: 0000000020000080 RDI: 0000000000000003 [ 1309.045672][T29809] RBP: 00007fea222ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.053635][T29809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.061600][T29809] R13: 000000000000000b R14: 00007fea21703f60 R15: 00007fea2182fa78 [ 1309.069583][T29809] [ 1309.181379][T14271] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1309.401878][T29811] usb usb8: usbfs: process 29811 (syz.3.5538) did not claim interface 0 before use [ 1309.857112][ T45] usb 2-1: USB disconnect, device number 41 [ 1310.007776][T20489] usb 5-1: USB disconnect, device number 55 [ 1310.595102][T20489] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1310.818047][T20489] usb 5-1: Using ep0 maxpacket: 8 [ 1310.835942][T20489] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1310.872338][T20489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.903341][T20489] usb 5-1: config 0 descriptor?? [ 1310.916437][T29853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1311.130920][T29561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1311.167496][T29561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1311.259522][T29561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1311.329933][T29561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1311.364243][ T45] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1311.408982][T29564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1311.482259][T29564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1311.539136][T29564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1311.572240][T29564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1311.582025][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.611657][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.628093][ T45] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1311.645896][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.689934][ T45] usb 2-1: config 0 descriptor?? [ 1311.714249][T15512] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1311.937445][T15512] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1311.958584][T29561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.978252][T15512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.010782][T15512] usb 4-1: config 0 descriptor?? [ 1312.081808][ C0] hrtimer: interrupt took 508486 ns [ 1312.187799][T29561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.346041][ T45] hid-led 0003:1D34:000A.0038: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 1312.356279][T29564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.363162][ T45] hid-led 0003:1D34:000A.0038: Dream Cheeky Webmail Notifier initialized [ 1312.433370][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.440612][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.504930][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.512123][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.602808][T29564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.628715][T15512] gs_usb 4-1:0.0: Configuring for 8 interfaces [ 1312.661370][T15512] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1312.675097][T15512] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1312.752615][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.759900][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.813656][T20489] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1312.843140][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.850294][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.859699][T20489] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1312.874254][T20489] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1312.926828][T20489] usb 5-1: USB disconnect, device number 56 [ 1312.953577][T29561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1312.976171][T29561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1313.230188][T29561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.394761][T29564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.484971][T29561] veth0_vlan: entered promiscuous mode [ 1313.595685][T29873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1313.610180][T29561] veth1_vlan: entered promiscuous mode [ 1313.799463][T29564] veth0_vlan: entered promiscuous mode [ 1313.870173][T29561] veth0_macvtap: entered promiscuous mode [ 1313.888223][T20489] usb 2-1: USB disconnect, device number 42 [ 1313.925529][T29564] veth1_vlan: entered promiscuous mode [ 1314.023934][T29561] veth1_macvtap: entered promiscuous mode [ 1314.129638][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.177010][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.199791][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.223336][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.249995][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.270950][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.295993][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.342498][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.369684][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.394690][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.454481][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.494392][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.510098][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.522247][T29863] Cannot find set identified by id 65535 to match [ 1314.542485][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.593858][T29561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.613643][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.646379][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.720200][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.769548][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.815328][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.827543][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.839422][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.850984][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.863382][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.877401][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.889324][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.900711][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.933548][T29561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.959789][T29561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.975974][T29561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.989592][T29564] veth0_macvtap: entered promiscuous mode [ 1315.009380][T29561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.019572][T29561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.030329][T29561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.062105][T29561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.103660][T29564] veth1_macvtap: entered promiscuous mode [ 1315.330903][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.385721][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.421424][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.459044][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.486100][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.518777][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.542744][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.577611][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.611262][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.646455][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.668979][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.695348][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.717812][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.744144][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.764527][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.785308][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.808283][T20489] usb 4-1: USB disconnect, device number 56 [ 1315.833102][T29564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.879844][T29916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1315.920031][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.954145][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.010220][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.054099][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.077250][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.106316][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.134065][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.154057][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.171689][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.194060][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.203930][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.226359][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.259941][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.284177][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.306300][T29564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.324461][T20489] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1316.329852][T29564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.346264][T29564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.498946][T29564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.510927][T29564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.524690][T20489] usb 4-1: Using ep0 maxpacket: 8 [ 1316.527997][T29564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.538663][T29564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.553621][T20489] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1316.569288][T19801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.588260][T20489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.618055][T20489] usb 4-1: config 0 descriptor?? [ 1316.636692][T19801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.654617][T20489] usb 4-1: selecting invalid altsetting 1 [ 1316.669591][T20489] comedi comedi0: could not switch to alternate setting 1 [ 1316.677176][T20489] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1316.789296][ T2795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.829671][ T2795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.933611][T10121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.974189][T10121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.073578][T19802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.104622][T19802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.117821][T29972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5576'. [ 1317.214193][ T5905] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1317.245634][T29977] [U] [ 1317.248364][T29977] [U] [ 1317.251065][T29977] [U] [ 1317.253772][T29977] [U] [ 1317.258226][T29977] [U] [ 1317.260953][T29977] [U] [ 1317.263660][T29977] [U] [ 1317.266368][T29977] [U] [ 1317.270128][T29977] [U] [ 1317.272833][T29977] [U] [ 1317.275528][T29977] [U] [ 1317.302793][T29979] x_tables: duplicate underflow at hook 3 [ 1317.316808][ T45] IPVS: starting estimator thread 0... [ 1317.326585][T29977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5481'. [ 1317.418021][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.444165][T29981] IPVS: using max 32 ests per chain, 76800 per kthread [ 1317.451761][ T5905] usb 5-1: config 0 has no interfaces? [ 1317.471383][ T5905] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1317.527916][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.583282][ T5905] usb 5-1: config 0 descriptor?? [ 1317.629666][T29987] macvlan2: entered promiscuous mode [ 1317.649525][T29987] macvlan2: entered allmulticast mode [ 1317.664854][T29987] bond_slave_0: entered promiscuous mode [ 1317.671166][T29987] bond_slave_1: entered promiscuous mode [ 1317.694527][T29987] bond0: entered allmulticast mode [ 1317.710054][T29987] bond_slave_0: entered allmulticast mode [ 1317.727077][T29987] bond_slave_1: entered allmulticast mode [ 1317.736683][T29987] bond0: entered promiscuous mode [ 1317.840536][T29987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1317.870073][T29987] team0: Port device macvlan2 added [ 1317.957595][T29973] [U] [ 1318.278406][T29999] FAULT_INJECTION: forcing a failure. [ 1318.278406][T29999] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.307916][T29999] CPU: 1 PID: 29999 Comm: syz.2.5579 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1318.318123][T29999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1318.328449][T29999] Call Trace: [ 1318.331714][T29999] [ 1318.334631][T29999] dump_stack_lvl+0x241/0x360 [ 1318.339305][T29999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1318.344507][T29999] ? __pfx__printk+0x10/0x10 [ 1318.349107][T29999] ? __pfx___might_resched+0x10/0x10 [ 1318.354390][T29999] ? __memcg_slab_post_alloc_hook+0x20f/0x7e0 [ 1318.360448][T29999] should_fail_ex+0x3b0/0x4e0 [ 1318.365118][T29999] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 1318.371174][T29999] should_failslab+0x9/0x20 [ 1318.375665][T29999] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1318.381026][T29999] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 1318.386913][T29999] kvm_mmu_load+0x115/0x26e0 [ 1318.391491][T29999] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1318.397112][T29999] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1318.403075][T29999] ? __pfx_kvm_mmu_load+0x10/0x10 [ 1318.408095][T29999] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1318.414068][T29999] ? __asan_memset+0x23/0x50 [ 1318.418664][T29999] ? vmx_flush_tlb_guest+0x1e5/0x310 [ 1318.423944][T29999] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 1318.429578][T29999] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1318.435551][T29999] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 1318.441091][T29999] vcpu_run+0x6b72/0x87f0 [ 1318.445468][T29999] ? __pfx_vcpu_run+0x10/0x10 [ 1318.450132][T29999] ? __local_bh_enable_ip+0x168/0x200 [ 1318.455494][T29999] ? lockdep_hardirqs_on+0x99/0x150 [ 1318.460706][T29999] ? __pfx_lock_acquire+0x10/0x10 [ 1318.465718][T29999] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 1318.470986][T29999] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1318.476687][T29999] ? xfd_validate_state+0x6e/0x150 [ 1318.481782][T29999] ? rcu_is_watching+0x15/0xb0 [ 1318.486545][T29999] ? rcu_is_watching+0x15/0xb0 [ 1318.491301][T29999] kvm_arch_vcpu_ioctl_run+0xa7e/0x1920 [ 1318.496832][T29999] ? mark_lock+0x9a/0x350 [ 1318.501151][T29999] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920 [ 1318.506858][T29999] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1318.512834][T29999] ? __pfx_lock_acquire+0x10/0x10 [ 1318.517842][T29999] ? get_task_pid+0x23/0x310 [ 1318.522424][T29999] ? __pfx_lock_release+0x10/0x10 [ 1318.527468][T29999] ? kvm_vcpu_ioctl+0x1d9/0xd00 [ 1318.532313][T29999] ? get_task_pid+0x23/0x310 [ 1318.536891][T29999] kvm_vcpu_ioctl+0x7f5/0xd00 [ 1318.541553][T29999] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1318.546742][T29999] ? __fget_files+0x29/0x470 [ 1318.551332][T29999] ? __fget_files+0x3f6/0x470 [ 1318.556005][T29999] ? __fget_files+0x29/0x470 [ 1318.560629][T29999] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1318.565554][T29999] ? security_file_ioctl+0x87/0xb0 [ 1318.570672][T29999] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1318.575856][T29999] __se_sys_ioctl+0xfc/0x170 [ 1318.580433][T29999] do_syscall_64+0xf3/0x230 [ 1318.584923][T29999] ? clear_bhb_loop+0x35/0x90 [ 1318.589591][T29999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.595477][T29999] RIP: 0033:0x7fbf7af75bd9 [ 1318.599896][T29999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1318.619499][T29999] RSP: 002b:00007fbf7bc63048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1318.627928][T29999] RAX: ffffffffffffffda RBX: 00007fbf7b103f60 RCX: 00007fbf7af75bd9 [ 1318.635895][T29999] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1318.643963][T29999] RBP: 00007fbf7bc630a0 R08: 0000000000000000 R09: 0000000000000000 [ 1318.651940][T29999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.659911][T29999] R13: 000000000000000b R14: 00007fbf7b103f60 R15: 00007fbf7b22fa78 [ 1318.667912][T29999] [ 1318.845949][T30005] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536870912 (1073741824 ns) > initial count (16 ns). Using initial count to start timer. [ 1318.980599][T20489] usb 4-1: USB disconnect, device number 57 [ 1319.114638][T30014] fuse: Bad value for 'fd' [ 1319.215728][T30018] netlink: 'syz.2.5581': attribute type 1 has an invalid length. [ 1319.662357][T30037] macvlan3: entered promiscuous mode [ 1319.683814][T30037] macvlan3: entered allmulticast mode [ 1319.702783][T30037] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1319.712152][T30037] team0: Port device macvlan3 added [ 1320.112035][T30046] [U] [ 1320.114755][T30046] [U] [ 1320.117448][T30046] [U] [ 1320.120122][T30046] [U] [ 1320.123288][T30046] [U] [ 1320.126009][T30046] [U] [ 1320.128724][T30046] [U] [ 1320.131428][T30046] [U] [ 1320.164387][T20488] usb 5-1: USB disconnect, device number 57 [ 1320.172808][T30046] [U] [ 1320.175536][T30046] [U] [ 1320.178236][T30046] [U] [ 1320.231951][ T5905] IPVS: starting estimator thread 0... [ 1320.330582][T30050] IPVS: using max 19 ests per chain, 45600 per kthread [ 1320.482589][T30046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5589'. [ 1320.637927][T30072] fuse: Bad value for 'fd' [ 1320.729780][T30057] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 1320.754175][T30075] FAULT_INJECTION: forcing a failure. [ 1320.754175][T30075] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.755974][T30057] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 1320.784868][T20488] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1320.821450][T30075] CPU: 0 PID: 30075 Comm: syz.2.5595 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1320.831643][T30075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1320.841715][T30075] Call Trace: [ 1320.844112][ T5905] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1320.844994][T30075] [ 1320.845007][T30075] dump_stack_lvl+0x241/0x360 [ 1320.845041][T30075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.865353][T30075] ? __pfx__printk+0x10/0x10 [ 1320.869956][T30075] should_fail_ex+0x3b0/0x4e0 [ 1320.874641][T30075] ? __se_sys_mount+0x15a/0x3c0 [ 1320.879499][T30075] should_failslab+0x9/0x20 [ 1320.884015][T30075] kmalloc_trace_noprof+0x6c/0x2c0 [ 1320.889138][T30075] ? memdup_user+0x9f/0xc0 [ 1320.893563][T30075] __se_sys_mount+0x15a/0x3c0 [ 1320.898255][T30075] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1320.904334][T30075] ? __pfx___se_sys_mount+0x10/0x10 [ 1320.909535][T30075] ? do_syscall_64+0x100/0x230 [ 1320.914317][T30075] ? __x64_sys_mount+0x20/0xc0 [ 1320.919101][T30075] do_syscall_64+0xf3/0x230 [ 1320.923619][T30075] ? clear_bhb_loop+0x35/0x90 [ 1320.928299][T30075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.934204][T30075] RIP: 0033:0x7fbf7af75bd9 [ 1320.938617][T30075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.958307][T30075] RSP: 002b:00007fbf7bc63048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1320.966719][T30075] RAX: ffffffffffffffda RBX: 00007fbf7b103f60 RCX: 00007fbf7af75bd9 [ 1320.974704][T30075] RDX: 0000000020000100 RSI: 00000000200042c0 RDI: 0000000000000000 [ 1320.982675][T30075] RBP: 00007fbf7bc630a0 R08: 0000000020000200 R09: 0000000000000000 [ 1320.990652][T30075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.998617][T30075] R13: 000000000000000b R14: 00007fbf7b103f60 R15: 00007fbf7b22fa78 [ 1321.006592][T30075] [ 1321.026590][T30058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.039681][T30043] [U] [ 1321.043038][T30058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.217569][T20488] usb 4-1: Using ep0 maxpacket: 8 [ 1321.244368][T20488] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.279342][T20488] usb 4-1: config 0 has no interface number 0 [ 1321.301151][T20488] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 64 [ 1321.338074][T20488] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1321.374595][T20488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.393772][T30092] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5600'. [ 1321.421101][T30094] FAULT_INJECTION: forcing a failure. [ 1321.421101][T30094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.421401][T20488] usb 4-1: config 0 descriptor?? [ 1321.452465][T20488] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1321.496515][T30094] CPU: 1 PID: 30094 Comm: syz.0.5601 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1321.506728][T30094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1321.516802][T30094] Call Trace: [ 1321.520101][T30094] [ 1321.523051][T30094] dump_stack_lvl+0x241/0x360 [ 1321.527762][T30094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1321.532990][T30094] ? __pfx__printk+0x10/0x10 [ 1321.537617][T30094] ? __pfx_lock_release+0x10/0x10 [ 1321.542667][T30094] should_fail_ex+0x3b0/0x4e0 [ 1321.547365][T30094] _copy_from_iter+0x1f6/0x1960 [ 1321.552396][T30094] ? __virt_addr_valid+0x183/0x530 [ 1321.557538][T30094] ? __pfx_lock_release+0x10/0x10 [ 1321.562616][T30094] ? __alloc_skb+0x28f/0x440 [ 1321.567232][T30094] ? __pfx__copy_from_iter+0x10/0x10 [ 1321.572532][T30094] ? __virt_addr_valid+0x183/0x530 [ 1321.577662][T30094] ? __virt_addr_valid+0x183/0x530 [ 1321.582791][T30094] ? __virt_addr_valid+0x45f/0x530 [ 1321.587905][T30094] ? __check_object_size+0x49c/0x900 [ 1321.593201][T30094] netlink_sendmsg+0x743/0xcb0 [ 1321.597965][T30094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1321.603257][T30094] ? __import_iovec+0x536/0x820 [ 1321.608118][T30094] ? aa_sock_msg_perm+0x91/0x160 [ 1321.613078][T30094] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1321.618364][T30094] ? security_socket_sendmsg+0x87/0xb0 [ 1321.623824][T30094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1321.629106][T30094] __sock_sendmsg+0x221/0x270 [ 1321.633788][T30094] ____sys_sendmsg+0x525/0x7d0 [ 1321.638560][T30094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1321.643861][T30094] __sys_sendmsg+0x2b0/0x3a0 [ 1321.648546][T30094] ? __pfx___sys_sendmsg+0x10/0x10 [ 1321.653683][T30094] ? vfs_write+0x7c4/0xc90 [ 1321.658127][T30094] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1321.664449][T30094] ? do_syscall_64+0x100/0x230 [ 1321.669211][T30094] ? do_syscall_64+0xb6/0x230 [ 1321.673886][T30094] do_syscall_64+0xf3/0x230 [ 1321.678385][T30094] ? clear_bhb_loop+0x35/0x90 [ 1321.683055][T30094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.688946][T30094] RIP: 0033:0x7f380b975bd9 [ 1321.693353][T30094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1321.712958][T30094] RSP: 002b:00007f380c6ae048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1321.721372][T30094] RAX: ffffffffffffffda RBX: 00007f380bb03f60 RCX: 00007f380b975bd9 [ 1321.729337][T30094] RDX: 0000000000000000 RSI: 00000000200018c0 RDI: 0000000000000003 [ 1321.737301][T30094] RBP: 00007f380c6ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1321.745266][T30094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.753227][T30094] R13: 000000000000000b R14: 00007f380bb03f60 R15: 00007f380bc2fa78 [ 1321.761210][T30094] [ 1322.091113][T30111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5605'. [ 1322.128483][T30114] fuse: Bad value for 'fd' [ 1322.236912][T30119] [U] [ 1322.239642][T30119] [U] [ 1322.242343][T30119] [U] [ 1322.245141][T30119] [U] [ 1322.262460][T30119] [U] [ 1322.265206][T30119] [U] [ 1322.267918][T30119] [U] [ 1322.270630][T30119] [U] [ 1322.275128][T30119] [U] [ 1322.277852][T30119] [U] [ 1322.280564][T30119] [U] [ 1322.299450][T22600] IPVS: starting estimator thread 0... [ 1322.341853][T30119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1322.414851][T30125] IPVS: using max 26 ests per chain, 62400 per kthread [ 1322.983281][T30115] [U] [ 1323.352720][ T5905] usb 4-1: USB disconnect, device number 58 [ 1323.694531][T30153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.717224][T30153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.863801][T30171] [U] [ 1323.866510][T30171] [U] [ 1323.869198][T30171] [U] [ 1323.871884][T30171] [U] [ 1323.875437][T30171] [U] [ 1323.878124][T30171] [U] [ 1323.880793][T30171] [U] [ 1323.883457][T30171] [U] [ 1323.908965][T30171] [U] [ 1323.911667][T30171] [U] [ 1323.914346][T30171] [U] [ 1323.963204][T30171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5624'. [ 1324.024147][ T5905] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1324.163696][T30176] dccp_close: ABORT with 1 bytes unread [ 1324.215497][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 1324.231582][ T5905] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1324.261202][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.276791][T30178] netlink: 'syz.2.5626': attribute type 8 has an invalid length. [ 1324.297344][ T5905] usb 2-1: config 0 descriptor?? [ 1324.315577][ T5905] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1324.521586][T30186] FAULT_INJECTION: forcing a failure. [ 1324.521586][T30186] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.572197][T30186] CPU: 1 PID: 30186 Comm: syz.2.5630 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1324.582483][T30186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1324.592548][T30186] Call Trace: [ 1324.595849][T30186] [ 1324.598813][T30186] dump_stack_lvl+0x241/0x360 [ 1324.603519][T30186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1324.608743][T30186] ? __pfx__printk+0x10/0x10 [ 1324.613354][T30186] ? _copy_from_iter+0x26b/0x1960 [ 1324.618393][T30186] should_fail_ex+0x3b0/0x4e0 [ 1324.623075][T30186] ? build_skb+0x52/0x2a0 [ 1324.627404][T30186] should_failslab+0x9/0x20 [ 1324.631915][T30186] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1324.637287][T30186] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1324.643278][T30186] build_skb+0x52/0x2a0 [ 1324.647434][T30186] ? __tun_build_skb+0x25/0x2f0 [ 1324.652293][T30186] __tun_build_skb+0x33/0x2f0 [ 1324.656973][T30186] tun_get_user+0x2084/0x4560 [ 1324.661650][T30186] ? tun_get_user+0x84c/0x4560 [ 1324.666425][T30186] ? __pfx_tun_get_user+0x10/0x10 [ 1324.671462][T30186] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1324.676926][T30186] ? tun_get+0x1e/0x2f0 [ 1324.681110][T30186] ? tun_get+0x1e/0x2f0 [ 1324.685274][T30186] ? tun_get+0x27d/0x2f0 [ 1324.689512][T30186] tun_chr_write_iter+0x113/0x1f0 [ 1324.694535][T30186] vfs_write+0xa72/0xc90 [ 1324.698782][T30186] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1324.704328][T30186] ? __pfx_vfs_write+0x10/0x10 [ 1324.709100][T30186] ksys_write+0x1a0/0x2c0 [ 1324.713426][T30186] ? __pfx_ksys_write+0x10/0x10 [ 1324.718291][T30186] ? do_syscall_64+0x100/0x230 [ 1324.723078][T30186] ? do_syscall_64+0xb6/0x230 [ 1324.727766][T30186] do_syscall_64+0xf3/0x230 [ 1324.732272][T30186] ? clear_bhb_loop+0x35/0x90 [ 1324.736949][T30186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.742848][T30186] RIP: 0033:0x7fbf7af7475f [ 1324.747263][T30186] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1324.766877][T30186] RSP: 002b:00007fbf7bc63010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1324.775303][T30186] RAX: ffffffffffffffda RBX: 00007fbf7b103f60 RCX: 00007fbf7af7475f [ 1324.783270][T30186] RDX: 00000000000000e6 RSI: 0000000020000bc0 RDI: 00000000000000c8 [ 1324.791249][T30186] RBP: 00007fbf7bc630a0 R08: 0000000000000000 R09: 0000000000000000 [ 1324.799233][T30186] R10: 00000000000000e6 R11: 0000000000000293 R12: 0000000000000001 [ 1324.807195][T30186] R13: 000000000000000b R14: 00007fbf7b103f60 R15: 00007fbf7b22fa78 [ 1324.815169][T30186] [ 1324.856510][T30169] [U] [ 1325.046656][T30191] FAULT_INJECTION: forcing a failure. [ 1325.046656][T30191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.080607][T30191] CPU: 0 PID: 30191 Comm: syz.2.5632 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1325.090815][T30191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1325.100899][T30191] Call Trace: [ 1325.104195][T30191] [ 1325.107137][T30191] dump_stack_lvl+0x241/0x360 [ 1325.111841][T30191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1325.117066][T30191] ? __pfx__printk+0x10/0x10 [ 1325.121661][T30191] ? __pfx_lock_release+0x10/0x10 [ 1325.126720][T30191] should_fail_ex+0x3b0/0x4e0 [ 1325.131410][T30191] _copy_from_user+0x2f/0xe0 [ 1325.136013][T30191] copy_msghdr_from_user+0xae/0x680 [ 1325.141210][T30191] ? __pfx___might_resched+0x10/0x10 [ 1325.146492][T30191] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1325.152319][T30191] ? __might_fault+0xaa/0x120 [ 1325.157000][T30191] do_recvmmsg+0x40f/0xae0 [ 1325.161416][T30191] ? __pfx_lock_release+0x10/0x10 [ 1325.166473][T30191] ? __pfx_do_recvmmsg+0x10/0x10 [ 1325.171419][T30191] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1325.177307][T30191] ? ksys_write+0x23e/0x2c0 [ 1325.181819][T30191] ? __pfx_lock_release+0x10/0x10 [ 1325.186861][T30191] ? vfs_write+0x7c4/0xc90 [ 1325.191279][T30191] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1325.196919][T30191] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1325.203332][T30191] __x64_sys_recvmmsg+0x199/0x250 [ 1325.208360][T30191] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1325.213911][T30191] do_syscall_64+0xf3/0x230 [ 1325.218413][T30191] ? clear_bhb_loop+0x35/0x90 [ 1325.223086][T30191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.228982][T30191] RIP: 0033:0x7fbf7af75bd9 [ 1325.233389][T30191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1325.252987][T30191] RSP: 002b:00007fbf7bc63048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1325.261394][T30191] RAX: ffffffffffffffda RBX: 00007fbf7b103f60 RCX: 00007fbf7af75bd9 [ 1325.269357][T30191] RDX: 0400000000000284 RSI: 0000000020000040 RDI: 0000000000000003 [ 1325.277322][T30191] RBP: 00007fbf7bc630a0 R08: 0000000000000000 R09: 0000000000000000 [ 1325.285290][T30191] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1325.293340][T30191] R13: 000000000000000b R14: 00007fbf7b103f60 R15: 00007fbf7b22fa78 [ 1325.301406][T30191] [ 1325.394440][T30201] netlink: 892 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1326.134359][ T5905] gspca_vc032x: reg_w err -110 [ 1326.139297][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.150814][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.159251][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.165397][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.171981][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.178117][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.198412][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.218408][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.223835][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.232274][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.242970][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.256278][T30234] [U] [ 1326.259005][T30234] [U] [ 1326.261720][T30234] [U] [ 1326.264428][T30234] [U] [ 1326.267990][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.273428][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.279247][T30234] [U] [ 1326.281946][T30234] [U] [ 1326.284636][T30234] [U] [ 1326.287337][T30234] [U] [ 1326.290623][T30234] [U] [ 1326.293318][T30234] [U] [ 1326.295990][T30234] [U] [ 1326.300472][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.321404][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.332164][T30234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1326.358942][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.371446][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.385862][ T5905] gspca_vc032x: I2c Bus Busy Wait 00 [ 1326.401411][ T5905] gspca_vc032x: Unknown sensor... [ 1326.422283][ T5905] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1326.432280][T30236] binder: 30235:30236 ioctl c010641d 200002c0 returned -22 [ 1326.471581][T30236] binder: 30235:30236 ioctl c0306201 200003c0 returned -22 [ 1326.760547][T30245] netlink: 892 bytes leftover after parsing attributes in process `syz.4.5649'. [ 1326.885834][T20489] usb 2-1: USB disconnect, device number 43 [ 1326.990960][T30232] [U] [ 1327.309366][T30276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5659'. [ 1327.341172][T30276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5659'. [ 1327.500384][T30282] netlink: 892 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1327.852642][T30291] [U] [ 1327.855361][T30291] [U] [ 1327.858036][T30291] [U] [ 1327.860705][T30291] [U] [ 1327.872768][T30291] [U] [ 1327.875472][T30291] [U] [ 1327.878145][T30291] [U] [ 1327.880819][T30291] [U] [ 1327.895304][T30291] [U] [ 1327.898082][T30291] [U] [ 1327.900746][T30291] [U] [ 1327.920386][T30291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5665'. [ 1327.964286][T20489] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1328.194424][T20489] usb 3-1: Using ep0 maxpacket: 32 [ 1328.210607][T20489] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1328.226740][T20489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.259063][T20489] usb 3-1: config 0 descriptor?? [ 1328.288992][T20489] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1328.334156][ T5134] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1328.487894][T10121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.506255][ T5134] usb 4-1: device descriptor read/64, error -71 [ 1328.647592][T30289] [U] [ 1328.675773][T10121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.815006][ T5134] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1328.873033][T14271] Bluetooth: hci3: command 0x0406 tx timeout [ 1328.914266][T10121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.004442][ T5134] usb 4-1: device descriptor read/64, error -71 [ 1329.033659][T10121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.174706][ T5134] usb usb4-port1: attempt power cycle [ 1329.300380][T14271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1329.327941][T14271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1329.337828][T14271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1329.348316][T14271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1329.358368][T14271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1329.365713][ T25] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 1329.383730][T14271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1329.419977][T10121] bridge_slave_1: left allmulticast mode [ 1329.426312][T10121] bridge_slave_1: left promiscuous mode [ 1329.433030][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.447097][T10121] bridge_slave_0: left allmulticast mode [ 1329.453184][T10121] bridge_slave_0: left promiscuous mode [ 1329.459596][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.566010][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1329.574956][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1329.590168][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1329.601715][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1329.621480][ T25] usb 5-1: string descriptor 0 read error: -22 [ 1329.628266][ T5134] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1329.628425][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1329.669220][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.706857][ T5134] usb 4-1: device descriptor read/8, error -71 [ 1329.753565][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1329.953008][T20489] gspca_vc032x: reg_w err -110 [ 1329.975622][T30310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.976841][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1329.989549][ T5134] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1329.997411][T30310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.015693][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.021286][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.027097][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.032487][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.052526][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.059394][ T5134] usb 4-1: device descriptor read/8, error -71 [ 1330.074801][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.084392][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.089721][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.112942][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.126194][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.131716][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.147666][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.153002][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.171204][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.182786][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.188478][ T5134] usb usb4-port1: unable to enumerate USB device [ 1330.217179][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.222522][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1330.247289][T20489] gspca_vc032x: Unknown sensor... [ 1330.252445][T20489] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1330.685978][ T45] usb 3-1: USB disconnect, device number 44 [ 1330.789153][T10121] bond0 (unregistering): left allmulticast mode [ 1330.824880][T10121] bond_slave_0: left allmulticast mode [ 1330.830413][T10121] bond_slave_1: left allmulticast mode [ 1330.837542][ T5134] usb 5-1: USB disconnect, device number 59 [ 1330.854632][T10121] bond0 (unregistering): left promiscuous mode [ 1330.875180][T10121] bond_slave_0: left promiscuous mode [ 1330.880800][T10121] bond_slave_1: left promiscuous mode [ 1330.935124][T10121] team0: Port device macvlan2 removed [ 1330.961837][T10121] team0: Port device macvlan3 removed [ 1330.972777][T10121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.991284][T10121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.008059][T10121] bond0 (unregistering): Released all slaves [ 1331.173294][ T29] audit: type=1326 audit(1720848776.851:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30337 comm="syz.2.5677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf7af75bd9 code=0x0 [ 1331.424343][T14271] Bluetooth: hci4: command tx timeout [ 1331.497339][T30355] [U] [ 1331.500069][T30355] [U] [ 1331.502734][T30355] [U] [ 1331.505401][T30355] [U] [ 1331.509792][T30355] [U] [ 1331.512496][T30355] [U] [ 1331.515169][T30355] [U] [ 1331.517840][T30355] [U] [ 1331.520985][T30355] [U] [ 1331.523710][T30355] [U] [ 1331.526420][T30355] [U] [ 1331.551763][T22600] IPVS: starting estimator thread 0... [ 1331.577615][T30355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5680'. [ 1331.644153][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1331.654538][T30356] IPVS: using max 19 ests per chain, 45600 per kthread [ 1331.825485][T10121] hsr_slave_0: left promiscuous mode [ 1331.891342][T10121] hsr_slave_1: left promiscuous mode [ 1331.894474][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1331.940919][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1331.961655][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.981456][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1331.997695][T10121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.018877][ T25] usb 2-1: New USB device found, idVendor=3340, idProduct=0f3a, bcdDevice=62.fd [ 1332.046090][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1332.049956][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.084387][T10121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.114427][ T25] usb 2-1: Product: syz [ 1332.147324][ T25] usb 2-1: Manufacturer: syz [ 1332.151997][ T25] usb 2-1: SerialNumber: syz [ 1332.169128][T30351] [U] [ 1332.191121][ T25] usb 2-1: config 0 descriptor?? [ 1332.210799][T10121] veth1_macvtap: left promiscuous mode [ 1332.245047][T10121] veth0_macvtap: left promiscuous mode [ 1332.258256][T10121] veth1_vlan: left promiscuous mode [ 1332.263608][T10121] veth0_vlan: left promiscuous mode [ 1332.443398][T30350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.494913][T30350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.670374][ T5905] usb 2-1: USB disconnect, device number 44 [ 1332.676862][T22600] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1332.684039][T20489] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1332.853686][T13863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1332.868558][T13863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1332.875932][T22600] usb 3-1: device descriptor read/64, error -71 [ 1332.886769][T20489] usb 4-1: Using ep0 maxpacket: 32 [ 1332.905578][T20489] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1332.910862][T13863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1332.922368][T20489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.935653][T13863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1332.955650][T20489] usb 4-1: config 0 descriptor?? [ 1332.969423][T13863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1332.977146][T13863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1332.989076][T20489] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1333.144177][T22600] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1333.324291][T22600] usb 3-1: device descriptor read/64, error -71 [ 1333.454595][T22600] usb usb3-port1: attempt power cycle [ 1333.504649][T13863] Bluetooth: hci4: command tx timeout [ 1333.578459][T10121] team0 (unregistering): Port device team_slave_1 removed [ 1333.643699][T10121] team0 (unregistering): Port device team_slave_0 removed [ 1333.869750][T22600] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1333.913039][T22600] usb 3-1: device descriptor read/8, error -71 [ 1334.207062][T22600] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1334.269883][T22600] usb 3-1: device descriptor read/8, error -71 [ 1334.376610][T30390] tipc: Started in network mode [ 1334.382107][T30390] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1334.393863][T30390] tipc: Enabling of bearer rejected, failed to enable media [ 1334.398362][T22600] usb usb3-port1: unable to enumerate USB device [ 1334.544174][T30315] chnl_net:caif_netlink_parms(): no params data found [ 1334.634421][T20489] gspca_vc032x: reg_w err -110 [ 1334.639241][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.644746][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.659573][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.667229][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.677327][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.689801][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.695813][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.704832][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.710257][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.715695][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.721009][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.727890][T30400] program syz.1.5689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1334.727958][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.742487][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.749078][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.755461][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.760768][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.769152][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1334.780852][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.786266][T20489] gspca_vc032x: I2c Bus Busy Wait 00 [ 1334.791565][T20489] gspca_vc032x: Unknown sensor... [ 1334.796812][T20489] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1335.033693][T13863] Bluetooth: hci0: command tx timeout [ 1335.100100][T30315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.145998][T30315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.212931][T30315] bridge_slave_0: entered allmulticast mode [ 1335.249581][T30315] bridge_slave_0: entered promiscuous mode [ 1335.321334][T30315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.336070][T10121] IPVS: stop unused estimator thread 0... [ 1335.350429][T30315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.385648][T30315] bridge_slave_1: entered allmulticast mode [ 1335.403424][T30315] bridge_slave_1: entered promiscuous mode [ 1335.444568][ T5134] usb 4-1: USB disconnect, device number 63 [ 1335.548615][T30384] chnl_net:caif_netlink_parms(): no params data found [ 1335.584394][T13863] Bluetooth: hci4: command tx timeout [ 1335.596065][T30315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.809000][T10121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.881433][T30315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.034375][ T5134] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1336.141418][T10121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.193338][T30447] FAULT_INJECTION: forcing a failure. [ 1336.193338][T30447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.214672][T30447] CPU: 1 PID: 30447 Comm: syz.3.5698 Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1336.224863][T30447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1336.235021][T30447] Call Trace: [ 1336.238320][T30447] [ 1336.241268][T30447] dump_stack_lvl+0x241/0x360 [ 1336.245974][T30447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1336.251198][T30447] ? __pfx__printk+0x10/0x10 [ 1336.255818][T30447] ? kasan_save_free_info+0x40/0x50 [ 1336.261022][T30447] ? __pfx_lock_release+0x10/0x10 [ 1336.266035][T30447] ? tomoyo_path_number_perm+0x68d/0x880 [ 1336.271655][T30447] ? __se_sys_ioctl+0x47/0x170 [ 1336.274593][ T5134] usb 3-1: Using ep0 maxpacket: 8 [ 1336.276399][T30447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.276435][T30447] should_fail_ex+0x3b0/0x4e0 [ 1336.292311][T30447] _copy_from_user+0x2f/0xe0 [ 1336.296917][T30447] kvm_vm_ioctl+0x33b/0xd30 [ 1336.301427][T30447] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1336.306465][T30447] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1336.312814][T30447] ? tomoyo_path_number_perm+0x208/0x880 [ 1336.318471][T30447] ? __pfx_lock_release+0x10/0x10 [ 1336.323522][T30447] ? kfree+0x149/0x360 [ 1336.327617][T30447] ? tomoyo_path_number_perm+0x71a/0x880 [ 1336.333276][T30447] ? tomoyo_path_number_perm+0x208/0x880 [ 1336.338932][T30447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1336.341768][ T5134] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1336.344975][T30447] ? __fget_files+0x29/0x470 [ 1336.357635][T30447] ? __fget_files+0x3f6/0x470 [ 1336.360059][ T5134] usb 3-1: config 0 has no interface number 0 [ 1336.362308][T30447] ? __fget_files+0x29/0x470 [ 1336.368507][ T5134] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice= 0.b1 [ 1336.372917][T30447] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1336.386871][T30447] ? security_file_ioctl+0x87/0xb0 [ 1336.391992][T30447] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1336.392273][ T5134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.397013][T30447] __se_sys_ioctl+0xfc/0x170 [ 1336.397045][T30447] do_syscall_64+0xf3/0x230 [ 1336.397072][T30447] ? clear_bhb_loop+0x35/0x90 [ 1336.407390][ T5134] usb 3-1: config 0 descriptor?? [ 1336.409670][T30447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.424596][T15512] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1336.429605][T30447] RIP: 0033:0x7fea21575bd9 [ 1336.429631][T30447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.429647][T30447] RSP: 002b:00007fea222ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.469795][T30447] RAX: ffffffffffffffda RBX: 00007fea21703f60 RCX: 00007fea21575bd9 [ 1336.477789][T30447] RDX: 0000000020000600 RSI: 000000004008ae6a RDI: 0000000000000004 [ 1336.485787][T30447] RBP: 00007fea222ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.493748][T30315] team0: Port device team_slave_0 added [ 1336.499290][T30447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.499307][T30447] R13: 000000000000000b R14: 00007fea21703f60 R15: 00007fea2182fa78 [ 1336.499334][T30447] [ 1336.624403][T15512] usb 2-1: Using ep0 maxpacket: 32 [ 1336.634396][T15512] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1336.676122][T15512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.678656][T10121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.721883][T15512] usb 2-1: config 0 descriptor?? [ 1336.735946][T30315] team0: Port device team_slave_1 added [ 1336.759794][T15512] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1336.869324][T10121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.903244][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5699'. [ 1336.974841][T30315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.002464][T30315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.072046][T30315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.104849][T13863] Bluetooth: hci0: command tx timeout [ 1337.122145][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5699'. [ 1337.146034][T30384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.172071][T30384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.187521][T30384] bridge_slave_0: entered allmulticast mode [ 1337.217996][T30384] bridge_slave_0: entered promiscuous mode [ 1337.254742][T30384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.274279][ T5134] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1337.285231][T30384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.300070][T30384] bridge_slave_1: entered allmulticast mode [ 1337.327461][T30384] bridge_slave_1: entered promiscuous mode [ 1337.337003][T30315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.344723][T30315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.383073][T30315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.395371][T30445] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5697'. [ 1337.494150][ T5134] usb 4-1: Using ep0 maxpacket: 32 [ 1337.520902][ T5134] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1337.537972][ T5134] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1337.549065][T30384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.570183][T15512] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1337.606832][T15512] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 1337.617761][ T5134] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 54, changing to 9 [ 1337.640184][T15512] usb 2-1: USB disconnect, device number 45 [ 1337.650905][ T5134] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 24635, setting to 1024 [ 1337.654524][T30315] hsr_slave_0: entered promiscuous mode [ 1337.666891][ T5134] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1337.684364][T13863] Bluetooth: hci4: command tx timeout [ 1337.714989][T30315] hsr_slave_1: entered promiscuous mode [ 1337.716894][ T5134] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1337.727433][T30315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1337.737565][T30315] Cannot create hsr debugfs directory [ 1337.740427][ T5134] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1337.782294][T30384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.807220][ T5134] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1337.834130][ T5134] usb 4-1: Product: syz [ 1337.838548][ T5134] usb 4-1: Manufacturer: syz [ 1337.843211][ T5134] usb 4-1: SerialNumber: syz [ 1337.865073][ T5134] usb 4-1: config 0 descriptor?? [ 1337.891826][ T5134] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1337.919673][ T5134] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1337.947189][T30384] team0: Port device team_slave_0 added [ 1338.005955][T30384] team0: Port device team_slave_1 added [ 1338.298994][T30384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.318946][T30384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.348348][T30384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.441329][T10121] bridge_slave_1: left allmulticast mode [ 1338.459047][T10121] bridge_slave_1: left promiscuous mode [ 1338.467229][ T5134] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1338.480729][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.514635][T10121] bridge_slave_0: left allmulticast mode [ 1338.520939][T10121] bridge_slave_0: left promiscuous mode [ 1338.538217][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.607356][T15512] usb 3-1: USB disconnect, device number 49 [ 1338.664959][ T5134] usb 2-1: Using ep0 maxpacket: 32 [ 1338.672578][ T5134] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1338.693370][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.747784][ T5134] usb 2-1: config 0 descriptor?? [ 1338.771709][ T5134] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1339.185658][T13863] Bluetooth: hci0: command tx timeout [ 1339.542346][T10121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.572353][T10121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.586411][T10121] bond0 (unregistering): Released all slaves [ 1339.610640][T30384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.622437][T30384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.649875][T30384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.907593][T20488] usb 4-1: USB disconnect, device number 64 [ 1339.930315][T20488] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1339.995086][T30477] netlink: 'syz.3.5704': attribute type 3 has an invalid length. [ 1340.003021][T30477] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1340.109094][T30384] hsr_slave_0: entered promiscuous mode [ 1340.143296][T30384] hsr_slave_1: entered promiscuous mode [ 1340.181806][T30384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.201622][T30384] Cannot create hsr debugfs directory [ 1340.477957][ T5134] gspca_vc032x: reg_w err -110 [ 1340.493139][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.508331][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.527951][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.548235][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.564783][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.585846][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.599500][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.605440][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.611679][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.640681][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.662974][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.679852][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.712919][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.734054][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.752547][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.765055][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.781028][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.796288][ T5134] gspca_vc032x: I2c Bus Busy Wait 00 [ 1340.819244][ T5134] gspca_vc032x: Unknown sensor... [ 1340.836034][ T5134] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1340.854877][T30492] tmpfs: Unknown parameter 'néGK.e [ 1340.854877][T30492] æ¯Ð Ù£7¬]X¼µåü#•' [ 1340.984303][T10121] hsr_slave_0: left promiscuous mode [ 1341.023702][T10121] hsr_slave_1: left promiscuous mode [ 1341.063245][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.087877][T10121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.135410][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.156966][T10121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.232778][T22600] usb 2-1: USB disconnect, device number 46 [ 1341.264667][T13863] Bluetooth: hci0: command tx timeout [ 1341.296943][T10121] veth1_macvtap: left promiscuous mode [ 1341.302520][T10121] veth0_macvtap: left promiscuous mode [ 1341.353530][T10121] veth1_vlan: left promiscuous mode [ 1341.372940][T10121] veth0_vlan: left promiscuous mode [ 1341.694986][T22600] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1341.884126][T22600] usb 2-1: Using ep0 maxpacket: 8 [ 1341.919641][T22600] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1341.930088][T22600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.968947][T22600] usb 2-1: config 0 descriptor?? [ 1342.000725][T22600] usb 2-1: selecting invalid altsetting 1 [ 1342.007041][T22600] comedi comedi0: could not switch to alternate setting 1 [ 1342.014496][T22600] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1342.410878][T10121] team0 (unregistering): Port device team_slave_1 removed [ 1342.473469][T10121] team0 (unregistering): Port device team_slave_0 removed [ 1343.907338][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.960910][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.187553][T10121] IPVS: stop unused estimator thread 0... [ 1344.370932][T20488] usb 2-1: USB disconnect, device number 47 [ 1344.548568][T14271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1344.560456][T14271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1344.570549][T14271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1344.581775][T14271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1344.600662][T14271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1344.609958][T14271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1344.610469][T10121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.716318][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1344.756402][T10121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.914090][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1344.923648][ T25] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1344.930711][T10121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.934356][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.000376][ T25] usb 3-1: config 0 descriptor?? [ 1345.021072][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1345.050906][T10121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.242575][T30532] chnl_net:caif_netlink_parms(): no params data found [ 1345.431953][T30384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1345.447041][T30384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1345.466707][T30384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1345.546067][T30384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1345.620986][T30557] fuse: Unknown parameter 'no' [ 1345.802391][T10121] bridge_slave_1: left allmulticast mode [ 1345.809376][T10121] bridge_slave_1: left promiscuous mode [ 1345.816180][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.827437][T10121] bridge_slave_0: left allmulticast mode [ 1345.833109][T10121] bridge_slave_0: left promiscuous mode [ 1345.840003][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.638981][T10121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.667819][T10121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.687829][T10121] bond0 (unregistering): Released all slaves [ 1346.697188][ T25] gspca_vc032x: reg_w err -110 [ 1346.701997][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.716667][T14271] Bluetooth: hci2: command tx timeout [ 1346.736717][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.742065][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.754524][T30532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.761059][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.781599][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.804612][T30532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.830100][T30532] bridge_slave_0: entered allmulticast mode [ 1346.844243][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.858078][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.871382][T30532] bridge_slave_0: entered promiscuous mode [ 1346.879472][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.901551][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.923268][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.928528][T30315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1346.941307][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.967195][T30315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1346.976777][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.982113][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.998104][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1346.999369][T30315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1347.020185][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1347.030259][T30532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.037885][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1347.043210][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1347.054670][T30532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.072237][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1347.079065][T30532] bridge_slave_1: entered allmulticast mode [ 1347.086645][ T25] gspca_vc032x: Unknown sensor... [ 1347.091774][ T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1347.115700][T30532] bridge_slave_1: entered promiscuous mode [ 1347.224018][T30315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1347.282540][T30532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.405301][T30532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.488212][T22600] usb 3-1: USB disconnect, device number 50 [ 1347.539143][T30532] team0: Port device team_slave_0 added [ 1347.579740][T10121] hsr_slave_0: left promiscuous mode [ 1347.592141][T10121] hsr_slave_1: left promiscuous mode [ 1347.619364][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.639842][T10121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.648545][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.664136][T10121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.720167][T10121] veth1_macvtap: left promiscuous mode [ 1347.736803][T10121] veth0_macvtap: left promiscuous mode [ 1347.742654][T10121] veth1_vlan: left promiscuous mode [ 1347.754624][T10121] veth0_vlan: left promiscuous mode [ 1347.989209][T22600] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1348.214144][T22600] usb 3-1: Using ep0 maxpacket: 8 [ 1348.223252][T22600] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1348.233822][T22600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.251526][T22600] usb 3-1: config 0 descriptor?? [ 1348.282548][T22600] usb 3-1: selecting invalid altsetting 1 [ 1348.290696][T22600] comedi comedi0: could not switch to alternate setting 1 [ 1348.314185][T22600] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1348.690014][T10121] team0 (unregistering): Port device team_slave_1 removed [ 1348.768403][T10121] team0 (unregistering): Port device team_slave_0 removed [ 1348.794159][T14271] Bluetooth: hci2: command tx timeout [ 1349.443174][T30532] team0: Port device team_slave_1 added [ 1349.503098][T30622] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.512046][T30622] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.521077][T30622] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.530014][T30622] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.547517][T30622] vxlan0: entered promiscuous mode [ 1349.686748][T30532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.736463][T30532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.801329][T30532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.868004][T30532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.888108][T30532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1349.915931][T30532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.204641][T30652] kvm: kvm [30648]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x2 [ 1350.227077][T30532] hsr_slave_0: entered promiscuous mode [ 1350.265054][T30532] hsr_slave_1: entered promiscuous mode [ 1350.275230][T30532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.283221][T30532] Cannot create hsr debugfs directory [ 1350.441132][T10121] IPVS: stop unused estimator thread 0... [ 1350.631540][T20489] usb 3-1: USB disconnect, device number 51 [ 1350.648746][T30384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.864659][T14271] Bluetooth: hci2: command tx timeout [ 1350.960615][T30315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.003916][T30384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.155264][T30315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.165479][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.172624][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.208653][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.215872][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.356559][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.363790][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.392271][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.399497][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.525485][ T29] audit: type=1326 audit(1720848797.211:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1351.550423][T30384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1351.561635][ T29] audit: type=1326 audit(1720848797.211:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1351.573017][T30384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1351.594232][ T29] audit: type=1326 audit(1720848797.241:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1351.676766][ T29] audit: type=1326 audit(1720848797.241:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1351.685362][T30315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1351.737057][ T29] audit: type=1326 audit(1720848797.241:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1351.794775][ T29] audit: type=1326 audit(1720848797.281:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1351.876397][ T29] audit: type=1326 audit(1720848797.281:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1351.944502][ T29] audit: type=1326 audit(1720848797.281:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7af75bd9 code=0x7ffc0000 [ 1352.026499][ T29] audit: type=1326 audit(1720848797.311:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf7af74610 code=0x7ffc0000 [ 1352.028160][T30384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.106704][ T29] audit: type=1326 audit(1720848797.311:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30679 comm="syz.2.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf7af74610 code=0x7ffc0000 [ 1352.219882][T30315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.394468][T30384] veth0_vlan: entered promiscuous mode [ 1352.467296][T30384] veth1_vlan: entered promiscuous mode [ 1352.592925][T30532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1352.629029][T30532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1352.678716][T30532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1352.711746][T30532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1352.740237][T30315] veth0_vlan: entered promiscuous mode [ 1352.799087][T30315] veth1_vlan: entered promiscuous mode [ 1352.820281][T30384] veth0_macvtap: entered promiscuous mode [ 1352.905526][T30384] veth1_macvtap: entered promiscuous mode [ 1352.945523][T14271] Bluetooth: hci2: command tx timeout [ 1353.027059][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.072028][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.082101][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.099661][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.112394][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.123432][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.133485][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.147206][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.157565][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.168198][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.178651][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.190092][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.201360][T30384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.218051][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.229037][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.241652][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.266730][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.277613][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.291955][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.307144][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.322328][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.343245][T20488] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1353.368077][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.379816][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.389712][T30384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.400155][T30384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.421081][T30384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.457969][T30384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.473623][T30384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.495153][T30384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.512343][T30384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.554049][T20488] usb 2-1: Using ep0 maxpacket: 8 [ 1353.560967][T20488] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1353.596855][T20488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.635592][T20488] usb 2-1: config 0 descriptor?? [ 1353.694353][T20488] usb 2-1: selecting invalid altsetting 1 [ 1353.710991][T20488] comedi comedi0: could not switch to alternate setting 1 [ 1353.759745][T30315] veth0_macvtap: entered promiscuous mode [ 1353.800124][T20488] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1353.829994][T30315] veth1_macvtap: entered promiscuous mode [ 1353.931299][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.963434][T30532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.993469][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.091245][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.110580][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.122661][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.140523][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.153556][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.178617][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.192808][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.204525][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.215272][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.235117][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.256968][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.274719][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.298584][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.310565][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.349360][T30315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.403830][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.419955][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.449283][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.504676][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.523677][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.545307][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.562425][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.588288][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.611346][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.636498][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.655981][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.689715][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.703430][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.714598][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.725245][T30315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.756404][T30315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.796257][T30315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.850289][T30532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.913317][T30315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.943716][T30315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.970729][T30315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.001069][T30315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.081843][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.088997][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.149762][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.156970][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.492530][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.508968][T30532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1355.537155][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.668914][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.712256][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.750709][T30532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.036616][T30532] veth0_vlan: entered promiscuous mode [ 1356.097122][T30532] veth1_vlan: entered promiscuous mode [ 1356.156268][T15512] usb 2-1: USB disconnect, device number 48 [ 1356.221806][T30532] veth0_macvtap: entered promiscuous mode [ 1356.261100][T30532] veth1_macvtap: entered promiscuous mode [ 1356.275248][T30753] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:0 [ 1356.318254][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.328987][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.340905][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.363518][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.374384][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.387937][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.398836][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.410280][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.434212][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.460874][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.494239][T30769] openvswitch: netlink: Flow key attr not present in new flow. [ 1356.502253][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.526243][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.548797][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.569833][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.589599][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.611892][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.640934][T30532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.722474][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.760653][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.784162][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.819165][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.832189][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.842961][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.853199][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.874089][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.898189][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.919121][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.951081][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.972712][T30784] fuse: Unknown parameter '0xffffffffffffffff' [ 1356.982239][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.023273][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.064136][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.105588][T30532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.154445][T30532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.176234][T30532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.319781][T30532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.354078][T30532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.439601][T30532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.477268][T30532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.860555][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.888983][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.971278][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.001574][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.147515][T22600] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1358.236389][ T5135] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1358.257805][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 1358.257823][ T29] audit: type=1326 audit(1720848803.941:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1358.343691][ T29] audit: type=1326 audit(1720848803.941:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1358.404555][T22600] usb 5-1: Using ep0 maxpacket: 8 [ 1358.424276][T22600] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1358.442379][ T29] audit: type=1326 audit(1720848803.941:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1358.472233][T22600] usb 5-1: config 179 has no interface number 0 [ 1358.492047][T22600] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1358.504158][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 1358.510243][T22600] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1358.522211][ T29] audit: type=1326 audit(1720848803.941:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1358.539878][ T5135] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1358.558723][T22600] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1358.588994][T22600] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1358.601890][ T29] audit: type=1326 audit(1720848803.941:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1358.613520][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.666298][T22600] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1358.699937][ T29] audit: type=1326 audit(1720848803.941:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1358.704897][ T5135] usb 3-1: config 0 descriptor?? [ 1358.728677][T22600] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1358.758631][T22600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.779654][ T5135] usb 3-1: selecting invalid altsetting 1 [ 1358.800458][ T29] audit: type=1326 audit(1720848803.941:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1358.801025][T30789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1358.840539][ T5135] comedi comedi0: could not switch to alternate setting 1 [ 1358.863134][ T5135] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1358.902866][ T29] audit: type=1326 audit(1720848803.951:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa46df74610 code=0x7ffc0000 [ 1359.015360][ T29] audit: type=1326 audit(1720848803.951:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa46df74610 code=0x7ffc0000 [ 1359.049607][T13863] Bluetooth: hci1: command 0x0406 tx timeout [ 1359.182067][ T29] audit: type=1326 audit(1720848803.951:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30797 comm="syz.0.5758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46df75bd9 code=0x7ffc0000 [ 1359.337971][T30792] input: syz0 as /devices/virtual/input/input130 [ 1359.391175][T30810] kvm: kvm [30808]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x2 [ 1360.436033][T30826] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1360.925470][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1360.925478][ T5135] usb 5-1: USB disconnect, device number 60 [ 1360.940684][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1361.057595][T20488] usb 3-1: USB disconnect, device number 52 [ 1361.141852][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.184940][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.520103][T30852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5774'. [ 1361.584196][T30852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5774'. [ 1361.599628][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.640793][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.818536][T13863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1361.837062][T13863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1361.850752][T13863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1361.867771][T13863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1361.876573][T13863] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1361.885859][T13863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1361.915437][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.925945][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.077444][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.083798][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.112891][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1362.135255][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.207849][T14271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1362.218203][T14271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1362.227604][T14271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1362.236700][T14271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1362.250706][T14271] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1362.258980][T14271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1362.960861][ T61] bridge_slave_1: left allmulticast mode [ 1363.000743][ T61] bridge_slave_1: left promiscuous mode [ 1363.044224][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.108845][ T61] bridge_slave_0: left allmulticast mode [ 1363.124167][ T5135] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1363.134568][ T61] bridge_slave_0: left promiscuous mode [ 1363.142714][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.341066][T30897] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1363.362138][ T5135] usb 4-1: Using ep0 maxpacket: 8 [ 1363.379883][T30897] [U] J"—E:ÀÆ" [ 1363.387333][ T5135] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 1363.416722][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.442377][T30900] ================================================================== [ 1363.450474][T30900] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1ad1/0x5af0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1363.459090][T30900] Write of size 1280 at addr ffffc90004e27b40 by task vivid-000-vid-c/30900 [ 1363.467773][T30900] [ 1363.470105][T30900] CPU: 1 PID: 30900 Comm: vivid-000-vid-c Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1363.480699][T30900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1363.490781][T30900] Call Trace: [ 1363.491773][ T5135] usb 4-1: config 0 descriptor?? [ 1363.494054][T30900] [ 1363.494066][T30900] dump_stack_lvl+0x241/0x360 [ 1363.494098][T30900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1363.506161][ T5135] usb 4-1: selecting invalid altsetting 1 [ 1363.506608][T30900] ? __pfx__printk+0x10/0x10 [ 1363.522130][T30900] ? _printk+0xd5/0x120 [ 1363.526309][T30900] print_report+0x169/0x550 [ 1363.530827][T30900] ? __virt_addr_valid+0xbd/0x530 [ 1363.531094][ T5135] comedi comedi0: could not switch to alternate setting 1 [ 1363.535938][T30900] ? tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1363.535967][T30900] kasan_report+0x143/0x180 [ 1363.535989][T30900] ? tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1363.536014][T30900] kasan_check_range+0x282/0x290 [ 1363.536033][T30900] ? tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1363.536056][T30900] __asan_memcpy+0x40/0x70 [ 1363.536075][T30900] tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1363.536124][T30900] vivid_thread_vid_cap_tick+0x1c84/0x5bd0 [ 1363.536169][T30900] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1363.536197][T30900] ? timekeeping_get_ns+0x2c0/0x420 [ 1363.536227][T30900] vivid_thread_vid_cap+0x8aa/0xf30 [ 1363.536256][T30900] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1363.607324][T30900] kthread+0x2f0/0x390 [ 1363.611401][T30900] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1363.617116][T30900] ? __pfx_kthread+0x10/0x10 [ 1363.621700][T30900] ret_from_fork+0x4b/0x80 [ 1363.626109][T30900] ? __pfx_kthread+0x10/0x10 [ 1363.630691][T30900] ret_from_fork_asm+0x1a/0x30 [ 1363.635455][T30900] [ 1363.638460][T30900] [ 1363.640772][T30900] The buggy address belongs to the virtual mapping at [ 1363.640772][T30900] [ffffc90004e25000, ffffc90004e29000) created by: [ 1363.640772][T30900] vb2_vmalloc_alloc+0xf2/0x340 [ 1363.658641][T30900] [ 1363.660976][T30900] The buggy address belongs to the physical page: [ 1363.667395][T30900] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x230e1 [ 1363.676152][T30900] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1363.683264][T30900] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1363.691842][T30900] raw: 0000000000000008 0000000000000000 00000001ffffffff 0000000000000000 [ 1363.700410][T30900] page dumped because: kasan: bad access detected [ 1363.706813][T30900] page_owner tracks the page as allocated [ 1363.712515][T30900] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 30897, tgid 30893 (syz.0.5784), ts 1363420348526, free_ts 1363309065138 [ 1363.731172][T30900] post_alloc_hook+0x1f3/0x230 [ 1363.735937][T30900] get_page_from_freelist+0x2e4c/0x2f10 [ 1363.741474][T30900] __alloc_pages_noprof+0x256/0x6c0 [ 1363.746664][T30900] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1363.752114][T30900] __vmalloc_node_range_noprof+0x971/0x1460 [ 1363.757995][T30900] vmalloc_user_noprof+0x74/0x80 [ 1363.762916][T30900] vb2_vmalloc_alloc+0xf2/0x340 [ 1363.767752][T30900] __vb2_queue_alloc+0xa0f/0x16f0 [ 1363.772773][T30900] vb2_core_reqbufs+0xd2e/0x17c0 [ 1363.777700][T30900] __vb2_init_fileio+0x319/0xf90 [ 1363.782624][T30900] vb2_core_poll+0x46c/0x7b0 [ 1363.787212][T30900] vb2_fop_poll+0x170/0x360 [ 1363.791718][T30900] v4l2_poll+0x143/0x2c0 [ 1363.795971][T30900] do_select+0xec6/0x1900 [ 1363.800325][T30900] core_sys_select+0x6f4/0x910 [ 1363.805080][T30900] __se_sys_pselect6+0x319/0x3f0 [ 1363.810011][T30900] page last free pid 30896 tgid 30896 stack trace: [ 1363.816499][T30900] free_unref_folios+0xf23/0x19e0 [ 1363.821539][T30900] folios_put_refs+0x93a/0xa60 [ 1363.826308][T30900] free_pages_and_swap_cache+0x2ea/0x690 [ 1363.831932][T30900] tlb_flush_mmu+0x3a3/0x680 [ 1363.836518][T30900] tlb_finish_mmu+0xd4/0x200 [ 1363.841105][T30900] exit_mmap+0x44f/0xc80 [ 1363.845336][T30900] __mmput+0x115/0x3c0 [ 1363.849391][T30900] exec_mmap+0x680/0x710 [ 1363.853626][T30900] begin_new_exec+0x125f/0x1f50 [ 1363.858464][T30900] load_elf_binary+0x974/0x2620 [ 1363.863385][T30900] bprm_execve+0xaf8/0x17c0 [ 1363.867876][T30900] do_execveat_common+0x553/0x700 [ 1363.872887][T30900] __x64_sys_execve+0x92/0xb0 [ 1363.877552][T30900] do_syscall_64+0xf3/0x230 [ 1363.882044][T30900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.887935][T30900] [ 1363.890251][T30900] Memory state around the buggy address: [ 1363.895874][T30900] ffffc90004e27f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1363.903921][T30900] ffffc90004e27f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1363.912065][T30900] >ffffc90004e28000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.920125][T30900] ^ [ 1363.924191][T30900] ffffc90004e28080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.932251][T30900] ffffc90004e28100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1363.940303][T30900] ================================================================== [ 1364.013998][ T5135] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1364.032217][T13863] Bluetooth: hci1: command tx timeout [ 1364.056314][T30900] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1364.063551][T30900] CPU: 0 PID: 30900 Comm: vivid-000-vid-c Not tainted 6.10.0-rc7-syzkaller-00231-ge091caf99f3a #0 [ 1364.074152][T30900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1364.084210][T30900] Call Trace: [ 1364.087555][T30900] [ 1364.090497][T30900] dump_stack_lvl+0x241/0x360 [ 1364.095201][T30900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1364.100424][T30900] ? __pfx__printk+0x10/0x10 [ 1364.105031][T30900] ? preempt_schedule+0xe1/0xf0 [ 1364.109955][T30900] ? vscnprintf+0x5d/0x90 [ 1364.114304][T30900] panic+0x349/0x860 [ 1364.118220][T30900] ? check_panic_on_warn+0x21/0xb0 [ 1364.123357][T30900] ? __pfx_panic+0x10/0x10 [ 1364.127791][T30900] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1364.133790][T30900] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1364.140135][T30900] ? print_report+0x502/0x550 [ 1364.144832][T30900] check_panic_on_warn+0x86/0xb0 [ 1364.149786][T30900] ? tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1364.155439][T30900] end_report+0x77/0x160 [ 1364.159708][T30900] kasan_report+0x154/0x180 [ 1364.164228][T30900] ? tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1364.169884][T30900] kasan_check_range+0x282/0x290 [ 1364.174828][T30900] ? tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1364.180447][T30900] __asan_memcpy+0x40/0x70 [ 1364.184860][T30900] tpg_fill_plane_buffer+0x1ad1/0x5af0 [ 1364.190346][T30900] vivid_thread_vid_cap_tick+0x1c84/0x5bd0 [ 1364.196244][T30900] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1364.202386][T30900] ? timekeeping_get_ns+0x2c0/0x420 [ 1364.207574][T30900] vivid_thread_vid_cap+0x8aa/0xf30 [ 1364.212763][T30900] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1364.218464][T30900] kthread+0x2f0/0x390 [ 1364.222517][T30900] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1364.228217][T30900] ? __pfx_kthread+0x10/0x10 [ 1364.232787][T30900] ret_from_fork+0x4b/0x80 [ 1364.237187][T30900] ? __pfx_kthread+0x10/0x10 [ 1364.241763][T30900] ret_from_fork_asm+0x1a/0x30 [ 1364.246518][T30900] [ 1364.249769][T30900] Kernel Offset: disabled [ 1364.254082][T30900] Rebooting in 86400 seconds..