last executing test programs: 1m57.104429483s ago: executing program 32 (id=21): r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000efaa6e109713bd0066c5000000010902120001000000000904"], 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = userfaultfd(0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc8) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/88, 0x58}, {0x0}], 0x2, 0x3, 0x7) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r8 = eventfd(0xffffffff) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x0, r8}) pipe(&(0x7f0000000140)) r9 = socket(0x1d, 0x80000, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/image_size', 0x400, 0x80) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x20010, r10, 0x134fa000) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x7fffffff, @mcast2={0xff, 0x5}}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="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", 0x1000) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r11 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r11, 0x40045612, &(0x7f0000000000)=0x1) 1m39.01974136s ago: executing program 0 (id=99): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x401, 0x7fff) 1m37.38268585s ago: executing program 0 (id=109): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 1m37.150801428s ago: executing program 0 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1m37.075483945s ago: executing program 0 (id=115): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='nolazytime'}]}}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001fe"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x241, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002400), 0x1, 0x40010040, 0x0) 1m36.728242165s ago: executing program 0 (id=116): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0xfffffe6d) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) dup3(0xffffffffffffffff, r4, 0x0) io_setup(0x3, &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xf, 0x31303453, 0x7, 0x9, 0x9, 0x3, 0x3, 0x1, 0x8, 0x0, 0x2}}) 1m36.520355636s ago: executing program 0 (id=117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc70a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 1m35.815885781s ago: executing program 33 (id=117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc70a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 1m15.546446478s ago: executing program 6 (id=195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620"], 0x48) r1 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000500)={0x1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m15.302636206s ago: executing program 6 (id=197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, 0x0}) init_module(0x0, 0x5a6, 0x0) 1m15.036236458s ago: executing program 6 (id=198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}, {0x0}], 0x2, 0x15e, 0xb) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1m14.102285771s ago: executing program 6 (id=204): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='nolazytime'}]}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001fe"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x241, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002400), 0x1, 0x40010040, 0x0) 1m13.726171874s ago: executing program 6 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1m13.380327504s ago: executing program 6 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1m12.920041455s ago: executing program 34 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1m0.404703222s ago: executing program 3 (id=263): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4094, 0xffe}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000001300)=""/208, 0xd0}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000000)=""/92, 0x5c}], 0x8}, 0x60012002) 59.452662412s ago: executing program 3 (id=267): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x20000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 58.908440493s ago: executing program 3 (id=269): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @local, 'veth0_to_bond\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) recvmmsg(r0, &(0x7f0000001a40), 0x0, 0x43, &(0x7f0000001c00)={0x0, 0x989680}) 58.78500408s ago: executing program 3 (id=271): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='nolazytime'}]}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001fe"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x241, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002400), 0x1, 0x40010040, 0x0) 58.239574929s ago: executing program 3 (id=273): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x700) (fail_nth: 10) 57.606376743s ago: executing program 3 (id=275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x45c6d381) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r5, r4, 0xff, 0x0) 57.206457679s ago: executing program 35 (id=275): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x45c6d381) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r5, r4, 0xff, 0x0) 57.182131059s ago: executing program 5 (id=279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0x7, 0x4, 0x7fff, 0x2, 0x5b, 0x1, 0x10, 0x6, 0x5, 0x2, 0xa, 0x7, 0x4, 0xf9, 0x7, 0x8, [0x4f8, 0x4]}}) epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) truncate(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) r4 = socket(0x10, 0x803, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x3, 0x6}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 56.605361987s ago: executing program 5 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x302, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0xdb, 0xe9, 0x2d, 0x40, 0x4cb, 0x131, 0xe428, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f0, 0x1, 0x2, 0x0, 0x20, 0xf, [{{0x9, 0x4, 0xaf, 0xd, 0x7, 0x47, 0xae, 0xfd, 0x4, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x3, 0xfb, 0x5, "ce765bdc6c0118"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x7f, 0xee, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x7, 0x9, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0xb3, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0x4, 0x408, 0x8, 0x7, 0x40, [@generic={0xf9, 0x1, "0e5f400fd4963124e3b3c5584a4ccf1777c6086a6f513a0399462ae7fbe1261489cd508f5b22dafec3b2fddd45247869cd1078f9a4f9dcda392710f43237bd64413c89364ad1df90cb1d85242cff25d4484103d0e13191c06ecae4370c1d184cbfb2ff30274dd053471cdf436ce92400dd3ba4f775927aa79d12805962c3ad5bb4bed0edfc239f00c8889a768025ab60b82ca4805b22ca9c437a70871b65edfbada9f1b02306a108bee5333e37f0357cbefc9e77bfd876a7ebc1152cbf8cb974c0ca83da610c78c12d2b62b1bf402eade2a1b9caa0b6130edb8236204f05b16834e7818c658bd567d2215ca0e1f672ac15213d066a3b38"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x5, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4a, 0x252c}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x81, 0x5, [@generic={0x7d, 0x1, "4917971c12b1653b28167b7ffbbab1f9ae713624d6288415883557a960cbc3c3fd0964dcd251ef35e536d5a511acfe50f456aa51ecdb4118a7f7bed3ce08e5f8df0000dae92f2f8880ec5c3a780c8a4a007064d01c131e37f19d6778bef8c7cf6a9d34f4e8beb47ddcba469a74d4ff8fab17d6a678c47cf25f056b"}, @generic={0xa8, 0x21, "c1b597dc181c68ee46afa998f77ac30a9927a428d2dde7913cdaadbe8175ef5f2b31a9373ed6b110aeb1a4ebffae8e66f242ac199f61e12ed5be77d00bd2fc2d11c55dacbc7726ff852835cd362867d7e5dc900d50f5fd57315c28261b67bd2519de43f4301bc7bef751b6a8b121c1bf2988a3cb63d0f6479f3a858677bec2ed244d1147703a1635e26fa6cb48ac95e7ae93d9bacfaa79517f1942e598f48f974baea4791471"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x8, 0x3, 0x5, [@generic={0x48, 0x1, "26d5222a32ff69b27d1da943f0c2561e89b190cf124e5e3f6ebbc0dbd80b3b53c235d22462abf26f34ee37865558f26fc5325b369469ef82a46b6eeb7812d4963f517ae23b5d"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x4, 0x1}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x2, 0xe, 0x3, 0x20, 0xd7}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x5f7aa3c7647fe9ad}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x401}}, {0xbe, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES16]}]}) syz_usb_connect$uac1(0x5, 0x9e, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x18}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0x4, {0x7, 0x25, 0x1, 0x81, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa8, 0x2, 0x2}, @as_header={0x7, 0x24, 0x1, 0x6, 0xb, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xb, 0x2, 0x7f, 0x0, "52db7315"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x1, 0x3, 0xe7, "9c", "c8e418"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x0, 0xf3, {0x7, 0x25, 0x1, 0x80, 0x2}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x8, 0x8, 0x8e, 0x8, 0x6}, 0xf5, &(0x7f0000000a40)={0x5, 0xf, 0xf5, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4a, 0x0, 0x200}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5, 0x8, 0x8, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x81, 0xf00, 0x0, [0x0, 0xff30]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "4de10b18250d5f5f11db3a53bad3050e"}, @generic={0xb3, 0x10, 0x4, "f7b94c7b8f34faf2c79b745ee34f67a794576fce71f3641400a989a6df87c2466b5991d2b9015283acda7fc33273311ab90dbfb9a140c57c2d270a557a79035681c7381db0b29fa0c140e26bcef3abed8a462b66a8e3cdb7f92ba09194a6d6d94570fa9d68104cd78b9fc6e7527e8cf82e6a77c4eabf6f1285eaa92e782fae731a0491ea3053747afc985ca7b9e8d3103be77d804f71f13826a53408ee59f48c0f47a162e21a174ce63d7037b9b0f49f"}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c09}}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x9, 0x80, [@measure_req={0x26, 0x3, {0x3, 0x1, 0x4}}]}]]}, 0x28}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x44, r8, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc0}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x8804) r10 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) ioctl$I2C_PEC(r10, 0x703, 0x60) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1024431}, 0xc, &(0x7f00000019c0)={&(0x7f0000001c80)={0xe50, r8, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x376}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb6}, @NL80211_ATTR_CSA_IES={0x41c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x9, 0x3]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x34, 0x80, [@erp={0x2a, 0x1, {0x1}}, @challenge={0x10, 0x1, 0xef}, @mesh_chsw={0x76, 0x6, {0x9, 0xb5, 0x39, 0xc}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x4, 0x0, {0xb, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x4, 0x37}}, @peer_mgmt={0x75, 0x4, {0x1, 0x5, @void, @void, @void}}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_FTM_RESPONDER={0x3cc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3f, 0x2, "afda0e2690c0f5b75be69c86c56b46e8271715ad2dc97d730f8fbe5314b4dc3074361b532f8e4860595da532e8d6fd7726fdfb2b67373bf49f856d"}, @NL80211_FTM_RESP_ATTR_LCI={0x24, 0x2, "af8a3509e74f9c5094df8023076a6263f421ccb0bf2ac995089d2d5d5d4f2a05"}, @NL80211_FTM_RESP_ATTR_LCI={0x4c, 0x2, "891a5b1c9ea44672fccf515dbd3844a5d4d349b8a349a0f07ce5b2bbaf094c7b032f3aecee0c051ffd25a3e3994d0432b41325da1b6a590d34a10b06487b3a7a07e8109ad870cc6b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x82, 0x3, "e16d97ec845df337e829626e070d30279429c1cc80ab27bf2a54e3321f96738f09f79bf51b8fe9dac9be6bd568ae8c2d3dbbafe3b4e75ee1ee2cfebf6917376125721107e9f15df05df956b28462405994fd6c8b2891b8773da8db59265580d8e37cef9db56de7f1dea9244dad255307ab72b5f20ff9b2f6cf8c45c66c37"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "d6cfe7b01ace87bb2e2294c5527b9d2bfe4df444dbc30a8fe1a589bd3d0ed02a6932b77f13f36bf9f318ddcf7ed7c7fb7b6e5341fd66c8f01616974e98d8616caac91566dcd25d79cdb1d494f4ad97c4cbf7136b9ce466578291c89e7243c63ffa74d941c195cad474387ae32ee875615d08a1b06232"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x102, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "ff8b66fe008d3764ac56a9d447e5da9808b6f5116bbbfafec98601565b336682a0bfbded8c47dda740ba487bfd6aca6a1f7f44e901443c36935068c495d18dfe44fc35b46be6a8198b9a758da78668cdab3ad3ac69d74596ff9f67e6080c57d56c087841cf51e987d6d5c34fe54ff1701a6cc301aeb6d78e332782e29c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x89, 0x3, "5800957c9bc1cb6a7ac3f6b0a3fe5bb8c3f14038fa400abdaa68a7c9745a761a0141c774da4c94965528e377709a3a1edf19c7a2921f24aee1d6cbea49c8a862a8f01802e5f64f6bc5529463f44635eaaa92f17f6f078ef88dccbaeb10277d0abe6b876d144b6b27ab226723d5e6bc6b75d8bebe3afd8ed5faabd4161cedd7d3106712d4f2"}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x96}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x3, 0x8]}]}, @NL80211_ATTR_CSA_IES={0x950, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x12a, 0x80, [@channel_switch={0x25, 0x3, {0x1, 0x0, 0xc7}}, @dsss={0x3, 0x1, 0x7c}, @supported_rates={0x1, 0x8, [{0x48, 0x1}, {0x6c}, {0x18, 0x1}, {0x1, 0x1}, {0x6c}, {0x6, 0x1}, {0x1, 0x1}, {0x1, 0x1}]}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xee, "ffeacf2ad4c6baaa70f22955614839db0873edf2b628cd287501ee85f8c0a7ef9a2b8e1d795c5af92bacc76f5ae9923fc789b8c16a3d3bdd666361130a8126dd23a9c0c9aaeadd50102a99c05843a0d7098117d3b846ca531fc83f77d96b29788c0ff15748418e2a8831766ee4ac251f7459b87267dfb6287d7b3513889f4dd2150d946066b0fbe0c3953207a7318c176c18ae0f815595b57fa000ece850505478f9df10b8206fea737e607e0fb2674e14b4cda9f85a5de8203838f857d3e47991a0e64e475b45b467b419faa632ebcdaf69efba80bcdf5827fd8d146d9fdea4e0484c0ef65fe42aa71279e398cb"}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x0, 0x0, {0x2, 0x8, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x4, 0x10}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xc, 0xff, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0xcf, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x39}, 0x0, 0x6, @broadcast, 0x5, 0x2, 0x3}}, @preq={0x82, 0x2b, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0xc, 0xa, 0x40, @broadcast, 0x1, @value=@broadcast, 0x9, 0x2, 0x1, [{{}, @device_b, 0x2}]}}, @measure_req={0x26, 0x6b, {0x7, 0x80, 0x4, "3eaf6c8b2fea2887f0b13c15c19c3927b16ebe3ee0f8c3c2766f46e46bd260dacffcdc1f86e14333893cd6ad53d41e8ef06cc0643ec7e6f50cd67a22eb2480410c5cc6171b27c9200f6381a6518b52910a07ee04e5755c1ce2a7db60d3541db546707aa64b96d4cf"}}, @mic={0x8c, 0x18, {0x87e, "3d62fe32acae", @long="4531809f4d04f717f4fb2fff2c34daa5"}}]}, @NL80211_ATTR_IE={0x1ab, 0x2a, [@random={0x10, 0xb5, "dbc8e4c4d1b38d1c9b70e9abb8a2b5799e79053f3396f9ca9d1c71f5805c5f1a54422debe3de2c65883d2d25b1089bf0f1ee6c0ef2a3d40c498b2b5b8f569833bab41eadfea2a101512eac8f79da4d96943907bad6732c1be0a979f73e50563590b3d44ce947b93c15366d684fb044326fbc4b9e51370bd80100361b5118ed11a160cf5ab916efcaf764db7085f09b79215201dbbce52c70db593d139af4f61c3e489dee6e7c72cc8cdb9bc2b6cfd580d344b87a04"}, @perr={0x84, 0xee, {0x8, 0xe, [{{}, @device_b, 0xffffe46f, @void, 0x40}, {{}, @broadcast, 0xfffffffe, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x5, @value, 0xf}, {{0x0, 0x1}, @broadcast, 0xd0d, @value=@device_b, 0x1d}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x3}, {{}, @device_a, 0x1, @void, 0xa}, {{0x0, 0x1}, @device_a, 0xf78, @value=@device_b, 0x32}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x3}, {{}, @device_b, 0x20000, @void, 0x25}, {{}, @device_a, 0xfffffe00, @void, 0x1e}, {{0x0, 0x1}, @device_a, 0xc47, @value=@broadcast, 0x42}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_b, 0xd7, @value=@broadcast, 0x11}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x4}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x40, 0x7f, [@ibss={0x6, 0x2, 0x100}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x6, 0x2}}, @challenge={0x10, 0x1, 0x48}, @mesh_chsw={0x76, 0x6, {0xdf, 0x10, 0x33, 0xb71f}}, @ibss={0x6, 0x2, 0x5}, @mesh_chsw={0x76, 0x6, {0x81, 0x1, 0x42, 0x4}}, @random_vendor={0xdd, 0xe, "95130ace5b75c75ecb42a642f9cd"}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x88, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x96, 0x40}}, @tim={0x5, 0x41, {0x9e, 0x5f, 0x8, "bb22186c0ca9d81361f4b5baa72a8e88c542edff87f7563962db3c4623629ebc591ce241a2fe83d7c5e7c7eec055880ec9ca2cf354d87f947d77ebd59361"}}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x5, 0x0, {0x78e4, 0x60, 0x0, 0x2}, 0x1, 0x7, 0x9}}, @ht={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x29f3, 0x7f, 0x0, 0x9, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x9, 0x6}}]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x184, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xa}, @device_a, @device_b, @from_mac=@device_b, {0xd, 0x4}}, 0x0, @default, 0xd4, @void, @void, @void, @void, @val={0x6, 0x2, 0xe3}, @val={0x5, 0x9f, {0x7, 0x1d, 0xda, "1782add66549812f782c7300b1d27d3fea2e9ffdecf06ad9e4a10b915a6b0c58389fa06c82cb0b4364c4824c3e00a3b6c38ac3790e40791e6c03f5888c5e7158a3b4506e3d7eb74995c521964a5edca80a99f5938455344cd25233b50cde30255eec1587409b40eb74c452037b3e2271015477481000803a2eb99c8411eb414505e63d40d19ced82fe37af0599a3e1fb0907be56ab62253dbc2dc23f"}}, @val={0x25, 0x3, {0x0, 0x38, 0x71}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xa5, "53346a16389b42604f1bfe0ac9bd944ee7a2f864e17beebe8366a3080e3d149fb0b4ea6124cef0cd250e0bac78b8d57d1ddbf4aee177ec4818e323d3f1a23645ed4300ae8d6a2b953f99123f0a23ac8df250aeb5696dcc000df347cbfa0b914d31634b79a278627ef209ad2517ca9a9501aea6f30c6323581f9274a6f64c478176891af915dfdc5493e02d5640cd0af5d43da1d7bda04a94aa2f89ef5be08da9d2f92089fe"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7e15, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x1]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x161, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0xb7, 0x2}}, @fast_bss_trans={0x37, 0x70, {0x0, 0x1, "92bf09fd5c21c4444bbd4727beaf4f22", "97d6e5cc271672f9f4efc1e462b778ae300a46902bb13739fe7b995735cf474b", "6000bc9e9615185baecb3cbd0b060a3e0f6eeaf9bb0bbc950d59b94fb144752b", [{0x3, 0x1c, "2d08cfe251d33ec1eec1790a9d39c8c3026dd217aa13420784063c57"}]}}, @fast_bss_trans={0x37, 0xca, {0x8, 0x8, "48e6868f9990b8f35afc97d36e8fb14b", "808480427a97eafc2af3e3e20eb58c3bdbcd68daef787bbfaee989cbcb921fc7", "1a46aba6ef97e0cefb42caf883344b9b0cbb6623f26d54465f89a16533324356", [{0x3, 0x14, "158f7cf14930c69d00187e9ee3ea88457d909755"}, {0x2, 0x7, "586e84049c1cb1"}, {0x3, 0x1, "9b"}, {0x4}, {0x4, 0xc, "c68baf6760ef28b4c9ad278b"}, {0x4, 0x4, "fc0a8a91"}, {0x1, 0x18, "4f367bda1f7fc5c75b811278202daec937823c748cd55e02"}, {0x4, 0x24, "b77c949b503f797236f7ee0606461239168cfc2d18a66e590a635d068fcffaeb0a0e8495"}]}}, @mic={0x8c, 0x18, {0xcc2, "f508faad4cbe", @long="8b60c58b31f8fa4f1507d81ea1c55afb"}}]}, @NL80211_ATTR_BEACON_TAIL={0x152, 0xf, [@measure_req={0x26, 0xeb, {0x3, 0x5, 0x7, "3df3389940459538690fca05767b1796174cb45455b8cee9d7ec20573de0696e23dab4bc7337a94137046eae0f65ef2712e5828f07b8dd006821d124778227addc792fa60f8a3f2c01a2032f34250c0d94578c12cc779c0a280becb522ea3435d518bc49fea9baf4df9b640bee86ce8395748829b42c0e54b039e2670e440e9430dd56c9ab5284c8f054d4944fca452ab8e6e1f684d87ba0890ca73f5aa0dfdcfdece01e080c62ba2a29110159bf666b4245092f2ac4a696d0a5236e30ed81a09e48095ed83f7f28076e16a8f9731eea7ec528c71a8ba0bbe745bfff25f8ef37ac4ec1495e9034fb"}}, @peer_mgmt={0x75, 0x6, {0x1, 0x723, @val=0x7, @void, @void}}, @channel_switch={0x25, 0x3, {0x1, 0xb7, 0xff}}, @preq={0x82, 0x4c, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x2, @broadcast, 0x70, @value=@broadcast, 0xff, 0x6, 0x4, [{{0x1}, @device_a, 0xb3}, {{0x1}, @device_b, 0xffff}, {{}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x8}]}}, @chsw_timing={0x68, 0x4, {0x8, 0x8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x68, 0x7f, [@measure_req={0x26, 0x4a, {0x4, 0x62, 0x58, "74e9d79e0b863d415659b424e13c550fb19385f21aa9a5f957df8e54be5cdbdd64c0985f60343a066862d02e4d95936dbf81d6a639b44002e6995068166958372052a7b96f2e8b"}}, @link_id={0x65, 0x12, {@random="f69839950765", @device_b, @broadcast}}, @ibss={0x6, 0x2, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x634, 0x9, 0x823, 0xfbff, 0x5fd, 0x8, 0x7, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x40]}]}]}, 0xe50}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r12, 0x1, 0x2d, &(0x7f0000000640)=""/169, &(0x7f0000000740)=0xa9) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x38, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x38}}, 0x0) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r14, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r14, @ANYBLOB="a5fdad88000000000a000100aaaaaaaaaa0000005822f9ae"], 0x2c}}, 0x0) 55.388249982s ago: executing program 4 (id=288): socket$inet6(0xa, 0x1, 0x0) io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0xed74}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 53.023617418s ago: executing program 5 (id=292): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @local, 'veth0_to_bond\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000500)=""/159, 0x9f}], 0x2, &(0x7f00000005c0)=""/129, 0x81}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000680)=""/109, 0x6d}], 0x2, &(0x7f0000000700)}, 0xe}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/100, 0x64}], 0x2, &(0x7f00000008c0)=""/130, 0x82}, 0xcbe8}, {{&(0x7f0000000980)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000a00)=""/40, 0x28}, {&(0x7f0000000a80)=""/90, 0x5a}, {&(0x7f0000000b00)=""/159, 0x9f}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000cc0)=""/251, 0xfb}, {&(0x7f0000000dc0)=""/23, 0x17}, {&(0x7f0000000e00)=""/182, 0xb6}, {&(0x7f0000000ec0)=""/102, 0x66}], 0x8, &(0x7f0000000fc0)=""/32, 0x20}, 0x9}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001000)=""/189, 0xbd}, {&(0x7f00000010c0)=""/227, 0xe3}, {&(0x7f00000011c0)=""/170, 0xaa}, {&(0x7f0000001280)=""/69, 0x45}, {&(0x7f0000001300)=""/84, 0x54}, {&(0x7f0000001380)=""/50, 0x32}, {&(0x7f00000013c0)=""/184, 0xb8}, {&(0x7f0000001480)=""/162, 0xa2}], 0x9}, 0xfdd}], 0x5, 0x43, &(0x7f0000001c00)={0x0, 0x989680}) 52.52828867s ago: executing program 5 (id=293): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='nolazytime'}]}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001fe"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x241, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002400), 0x1, 0x40010040, 0x0) 52.50124342s ago: executing program 4 (id=294): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c"], 0x8c}}, 0x40) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="0c002c80080000009d03000014002d800a000000010101010101000004000000"], 0x3c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getlink={0x2c, 0x12, 0x2fa9ccd93d5c0097, 0x70bd3d, 0xffffffff, {0x7}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendto$inet6(r0, &(0x7f0000000180)="21626cd7f4aae92f364f4b222f1ce9bdee366487ef9696ff5207cd8c30bd1a66f57ae63d4db32e7160604271116a93d5db81c3802f1a9d41eb8dee4020e61515b391236dedb4ceb1b5eda7f0f5fef9b41635963f9d5bc51fadfd", 0x5a, 0x8000, 0x0, 0x2b) r8 = socket$alg(0x26, 0x5, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000480)={0x1, 0x0, [{0x9, 0x5, 0x1, 0x0, @adapter={0x5, 0x8, 0x6, 0x5, 0x6}}]}) r12 = accept4(r8, 0x0, 0x0, 0x0) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB="200180"], 0x0}) recvmsg$qrtr(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x38, 0x0) 50.769186136s ago: executing program 5 (id=297): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (fail_nth: 10) 50.304296763s ago: executing program 5 (id=299): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='nolazytime'}]}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001fe"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x241, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002400), 0x1, 0x40010040, 0x0) 50.040534924s ago: executing program 36 (id=299): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@flag='nolazytime'}]}}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c000280060001fe"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x241, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002400), 0x1, 0x40010040, 0x0) 50.015688921s ago: executing program 4 (id=303): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000010000000030200"}}}]}, 0x48}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200"]) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "ba48"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, r8, 0x0, 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="7a50703372913e68ced863eb8426f89fcd14c446ef2cc07c5afa36cadad4162f47547c4ca990e71e8e0cad7a2e6219ddc75a1b1f4dff6ba37e1faa050266932b9e373c75fddd0465c228994cf674f8e56e485cbc91b88382a141f0325a7259a3930725bf57277be1cf6e442a881a707f0c5d52dd31431155fe579aea04aab3ab8e2ca5746c487a600ea65a671e95881696b960152ad7240e141425a3c7b405f68f4697531be3b8091b6991f68acef7b4aa08d7e5652a1d86e554991508fa", 0xbe, r8) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08"], 0x0) 47.604110967s ago: executing program 4 (id=310): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x32, 0xfffffffffffffffe]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300000010"], 0x20) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xa04c, 0x1, 0x1, 0x9, 0x19, "53af0f0b4ecf6c29bf85c173f4a8f5f73eb62f"}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x1, 0xfffffffffffffffb, 0x1, 0x0, [0x0]}}, 0x29) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000700)={0x0, 0x6, 0x1, "cd"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 44.388344556s ago: executing program 4 (id=316): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 44.011131012s ago: executing program 4 (id=317): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x6000810) signalfd(r0, &(0x7f0000000100), 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x17c, 0x4, {{0x10, 0x4, 0x1, 0x31, 0x40, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0x1a, [@local, @dev={0xac, 0x14, 0x14, 0x17}]}, @lsrr={0x83, 0xf, 0x8, [@multicast2, @local, @broadcast]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000012c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) r4 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x82, 0x0, 0x1) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000569000/0x4000)=nil, 0x4000}, 0x2}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000009f000040"]) close_range(r5, 0xffffffffffffffff, 0x0) 43.521644853s ago: executing program 37 (id=317): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x6000810) signalfd(r0, &(0x7f0000000100), 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x17c, 0x4, {{0x10, 0x4, 0x1, 0x31, 0x40, 0x66, 0x0, 0x2, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0x1a, [@local, @dev={0xac, 0x14, 0x14, 0x17}]}, @lsrr={0x83, 0xf, 0x8, [@multicast2, @local, @broadcast]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000012c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) r4 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x82, 0x0, 0x1) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000569000/0x4000)=nil, 0x4000}, 0x2}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, r8}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000009f000040"]) close_range(r5, 0xffffffffffffffff, 0x0) 19.303726638s ago: executing program 7 (id=415): r0 = socket$inet6(0xa, 0x1, 0x0) io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0xed74}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24048084}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) 18.293625468s ago: executing program 2 (id=420): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x11458}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "bac87754aa8db6ee6cc7a6f7ac7d9f2c"}, @IFLA_PORT_PROFILE={0xa, 0x2, 'wlan1\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_PROFILE={0xc, 0x2, '*.(\\@\x00!\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x40880) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="00f603000000019eac72"], 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40004) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000001a00010000000000000000000a000000"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) 17.204392506s ago: executing program 9 (id=421): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000980)='w\xffcr\xcfKd\xd8LV\xed\xae\x9fe\f\xa1\xd1\x84R\v\vs\x1b\xf8\xae\xf4\xdd\xc7\n\x10z\x03\xabm\xb3\xd4<\xf1\xddE\x02n\x02I\x12\xc4\x8a\x9c\xfb\xe0@\x89\xbb\xfb\xfar\xc2\x18\x01uU[\xc6$\x15\x9a$cPl;\xd2GU\x83\xab\xf9\t\xdbe\x12\xd0\xc9/\xe7\xbd\xa0\xa8F]>\xd6\xf4\n\xff\x06\xffL\x02M\x9a\xf0\xe35\xf5K\xc2\xf8\xb6\x92\x0e*\x98\xf0\x1f\x96J-1>\x12\xfb\xf4\x02\xdf)\x0e', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f0000002940)='\x19\x00\x00\x8dX\x12X\x96\x8a\xc5\xdd\x153\xdf\x9b\xd8\xb8N\x86\x95,B\x032\x13k\xc6]\xe5\xd4\x90\x1c\x06\x1d\xefo/U\x83E+', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 16.390698206s ago: executing program 9 (id=422): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) time(0x0) 15.496036598s ago: executing program 9 (id=425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a000100340f57e82298"], 0xb0}, 0x1, 0x0, 0x0, 0x8094}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000030a030000000000000000000400000408000b40000000010900030073797a300000000008000a4000000005500004801400030273797a6b616c6c657230000000000000140003006c6f00000000000000000000000000000800024011af1ff10800014000000001140003006e657464657673696d30000000000000140000001100010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 6.906288964s ago: executing program 7 (id=426): mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) 6.772179748s ago: executing program 8 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) (async) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r3, 0x43b3, 0xfffffffd, 0x0, 0x0, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000200000000170000004c0006803c0004"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) socket$packet(0x11, 0x3, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}]}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x73e, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x28) (async) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000080)={0x29, 0x3}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)=ANY=[], &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="050f0f0001041014f9435b606c005ad650e49cc6f20f4881000000020000"], 0x1, [{0x0, 0x0}]}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x80000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000007060500000000000000000002000005ff00020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x2000000) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) write$UHID_CREATE2(r10, &(0x7f0000001400)=ANY=[@ANYBLOB="0b00000073797a000000000000000200000000000000000000000000000000eaffffffffffffff00000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000101000006000000060000000900"/280], 0x118) 6.382133681s ago: executing program 7 (id=429): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 6.381372537s ago: executing program 9 (id=430): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f000001aa80)=""/4081, 0xff1}, {0x0}], 0x2, 0x15e, 0xb) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 6.176485063s ago: executing program 8 (id=431): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) 6.14815627s ago: executing program 7 (id=432): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 6.132641136s ago: executing program 1 (id=433): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000980)='w\xffcr\xcfKd\xd8LV\xed\xae\x9fe\f\xa1\xd1\x84R\v\vs\x1b\xf8\xae\xf4\xdd\xc7\n\x10z\x03\xabm\xb3\xd4<\xf1\xddE\x02n\x02I\x12\xc4\x8a\x9c\xfb\xe0@\x89\xbb\xfb\xfar\xc2\x18\x01uU[\xc6$\x15\x9a$cPl;\xd2GU\x83\xab\xf9\t\xdbe\x12\xd0\xc9/\xe7\xbd\xa0\xa8F]>\xd6\xf4\n\xff\x06\xffL\x02M\x9a\xf0\xe35\xf5K\xc2\xf8\xb6\x92\x0e*\x98\xf0\x1f\x96J-1>\x12\xfb\xf4\x02\xdf)\x0e', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f0000002940)='\x19\x00\x00\x8dX\x12X\x96\x8a\xc5\xdd\x153\xdf\x9b\xd8\xb8N\x86\x95,B\x032\x13k\xc6]\xe5\xd4\x90\x1c\x06\x1d\xefo/U\x83E+', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 5.986530527s ago: executing program 2 (id=434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea009c3c0020010000000000000000000000000002ff0200000000000000000000000000010000ce00"], 0x0) 5.871448s ago: executing program 1 (id=435): write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @eth={@broadcast, @local, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)=ANY=[@ANYRES32], 0x40, 0x40}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 5.306713072s ago: executing program 9 (id=436): r0 = socket$inet6(0xa, 0x1, 0x0) io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0xed74}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24048084}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) 4.640224394s ago: executing program 1 (id=437): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001200)={0x3, 0xfffffff9, 0x8, 0x4, 0x5, "430306000000000000dca0000bf53da0e5897c"}) readv(r0, &(0x7f0000000000), 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032bbd7000ffdbdf251c000000080001007063690011000200303030303a30303a31302e308000000008000b00ff0700008f6c3288538c70d5921a4cc9aaf038a87810c54ebca0b0a73930e71707a248243668ab4349f6341290ebedf5079735"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x2004c915) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000240)="7a5d11dba25ccb2dde2f82a419fe7ea41b4424adda4e8c3be797cf6910d54400a9aff2b55d33ad438a4f258f64a45a6783e20a8ffdc2a7e562fc1596aaeea7e5e9d309daaabd4573fe5605c2644bcdfa0aa19b6bad3aafc9ee43af2ec449e88891b5eef99e622795495035828dfeedb2f29b", 0xff51, 0xfffffffffffffffd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/189, 0xbd}], 0x1}, 0x0) 4.437081603s ago: executing program 7 (id=438): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, [@hopopts={0x67, 0x2, '\x00', [@calipso={0x7, 0x8}, @jumbo={0xc2, 0x4, 0x7}]}]}}}}}}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905843b87d3f739fcfe143389ef4a86db95046188535583561b7ee2ff455a0bd6d1ae64eb88b192c086910b9b8297a48e128eb466c1d6f3a0d4e49bd5ce81fb47cb49542b18e49a16551023ae60f25afcbd42c4087829c60cfaaaf5def56161d7b262c620391476e8bdea4d60bba3102dbeb4079b65a7a3bbe2d3c5c858e339c29d20187c13da5d261a29665c6a4963f85ad9d1"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000d80)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000008e000000f1a17d8f48424983bc7921b75ada32200f0ab83857a9d4d925f34f5a5543ba2433d63088a5538c26e0b8767eef06a6edbee31b8e182e05be38b235428fcbb307afedd26c87557b6b7f0a7b29e25253fe1286d958e4c94703a139f638ec5ed5cca91d9be2bdff5a5b8c535fbdb186a22665d1f50a453baca828fb141f996f8b3762d060381edf493cc8e0c556d14be91a216cc3740b"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x3}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x6, 0x9, '\x00', 0x4000000000b}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000400)={0x14, &(0x7f00000005c0)={0x0, 0x22, 0xc3, {0xc3, 0x31, "31dd478f13e56601072b88b176a7df119a8dc9fef93a260a7f154ea610edf98c29fa8813512384bc0ed6bd4aeff838df5594e4a5838aee3b4b3c84013d717f06f9f1aa05c9846db422bcfc215b296790d43a46bea234f61fd6717356d1db1a5a12941f01ba109494ba3b8c7f96f44e4ec982b87226d44b2df6096727cc6b3d940a0c5a80663a64a2714cc6a9015f31f9a319f5ceebff9b3bb57b260d1ffeb65386b1b6ac17221d0548e70a18ff4b45efcda7210ec0408e89341255f80822670a76"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000cc0)={0x20, 0x8, 0xb8, "8e9f11ad4110e3625d2343998824c3d4c8529dc8166079a3962bdafc1ab151fd0b0f6b834d91bb44a2a233b546e2e9e88462854e48baf718b7a197a62ad8034932276817bb506906db1caaf466ae94d44ce3993522512cee17ed24354b1ffabac640db93f1a294dac0d99d9fe2f7ef5279e073b730ab916a3302193a7ea55631e8d8a9009182bbe222d8092d684dad1979f99f27dd55085b47d774197963dd1f686f4688ad6689dd9798a263a204bc0f12be155e48d78d0c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xf}}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'ipvlan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x2e}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xb0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0xf9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xf, 0xf4, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0x3}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000005dc0)={'macvtap0\x00', &(0x7f0000000e40)=@ethtool_drvinfo={0x3, "d63dda8313c3bbcecdea0093e0002f7a8451889a736ee8eea9677f19eb992373", "73704b279ba1dd02e456110d7ca47b9530f65e6f89e440b7cca96a94fbc628a1", "ef57a5af28041171dc8788afc5e0efc8514c69c5f997a70349cf980d4c355921", "210d2694ce4e79adaddd6e3a7be3d5d5b407c08e7783c202a1af82638de24cd8", "62157357b14bec00dc7a42af596a4bbe826df885db32af8f16829e6d61b1d7d8", "19cc7273bd4d3b4da08431da", 0x5, 0x897, 0x6, 0x10, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv6_newrule={0x58, 0x20, 0x10, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x20, 0x3, 0x20, 0x0, 0x0, 0x5, 0x5}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @FRA_SRC={0x14, 0x2, @private0}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x2, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}) 3.567328835s ago: executing program 1 (id=439): mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) 3.361137335s ago: executing program 1 (id=440): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f209f9ffffff000000000904ae0000e7942600"], 0x0) (async, rerun: 64) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000012c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async, rerun: 64) pread64(r1, &(0x7f0000000080)=""/47, 0x2f, 0x1ff) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @loopback, 0x9}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) read(r0, &(0x7f0000001e80)=""/96, 0x60) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x2, 0x0, 0x2) 3.040162677s ago: executing program 1 (id=441): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './control/file0'}, 0x13) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14c7420afa95ad6d}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1f, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4018}, 0x6c084) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x80000006}) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x75, 0x4, 0x10, 0x8, 0x424, 0xcf19, 0x5d79, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x88, 0x80, 0x2, 0xf, 0x84, 0xc4, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0x4, 0xa}}, {{0x9, 0x5, 0x3, 0x7, 0x10, 0xd1, 0x1, 0x1}}]}}]}}]}}, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x0, 0x21, 0xc2, {0xc2, 0xd, "fb613467977da5511425359a82b53a087d1564f06c997ff21a9b85522676ccb477fe4996dcdaac5bd746d55140b783fa4219d3091fcc638b3f7b75b46e2e8fb0d4f57a7f1b314d1120c01857396bd044f741f19dae9d97cc744aa3550c6ed12b9c26e32a29bae04d2d752d1b06a06fa54fd1146a37c0a63950745cfa05fa6ed63c2eb6ff4b2d1fa70b14c3f40e59b33db45207be5a821bafadfb53bb2436910853745cfa711ecaae710b38a16515475f7b395ae40df10a3ac63644b2648e4a7f"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x40, 0x6, 0x51, "8c8b927fc44207e390c99fc0c69a0cf4ae9ea9854c0c7adf4d08e0bb7f0175c091b54c364552f59cfe59b8d7fdf374a469889633eae96dd9ed10bda422219fa59e8449401c7ef59937711787d306532d0b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}}) 2.951142739s ago: executing program 8 (id=442): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10204a8, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000400)=0xc) fcntl$setownex(r2, 0xf, &(0x7f0000000440)={0x0, r3}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000c00)=0xf3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x400000, {0x3, 0x0, 0x6, 0x0, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x7, 0x0, 0x0, 0x83, 0x0, 0x8, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x8}}, 0x50) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r10, 0x0, r9, 0x0, 0x4, 0x9) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x100000001, 0x3, 0x9, 0x80000000, {0x0, 0x0, 0x5, 0x6, 0x4, 0xfffffffffffffffe, 0x1, 0x0, 0xff, 0xc000, 0x2, r7, r8, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000180)) 2.284955799s ago: executing program 2 (id=443): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, &(0x7f00000001c0), 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x380003, @local, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000400), 0x3c, 0x2) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x1) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xffffff8c, 0x8, 0x0) 1.925168033s ago: executing program 9 (id=444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea009c3c0020010000000000000000000000000002ff0200000000000000000000000000010000ce00"], 0x0) 1.280310389s ago: executing program 2 (id=445): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000980)='w\xffcr\xcfKd\xd8LV\xed\xae\x9fe\f\xa1\xd1\x84R\v\vs\x1b\xf8\xae\xf4\xdd\xc7\n\x10z\x03\xabm\xb3\xd4<\xf1\xddE\x02n\x02I\x12\xc4\x8a\x9c\xfb\xe0@\x89\xbb\xfb\xfar\xc2\x18\x01uU[\xc6$\x15\x9a$cPl;\xd2GU\x83\xab\xf9\t\xdbe\x12\xd0\xc9/\xe7\xbd\xa0\xa8F]>\xd6\xf4\n\xff\x06\xffL\x02M\x9a\xf0\xe35\xf5K\xc2\xf8\xb6\x92\x0e*\x98\xf0\x1f\x96J-1>\x12\xfb\xf4\x02\xdf)\x0e', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f0000002940)='\x19\x00\x00\x8dX\x12X\x96\x8a\xc5\xdd\x153\xdf\x9b\xd8\xb8N\x86\x95,B\x032\x13k\xc6]\xe5\xd4\x90\x1c\x06\x1d\xefo/U\x83E+', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 1.250969819s ago: executing program 8 (id=446): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4094, 0xffe}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000001300)=""/208, 0xd0}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000000)=""/92, 0x5c}], 0x8}, 0x60012002) 1.235126566s ago: executing program 7 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="13000000060601"], 0x1c}}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[], 0x0) 1.061149619s ago: executing program 2 (id=448): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918b", 0x11}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {r4, r5+60000000}}, &(0x7f00000002c0)) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000300)=0x9, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYRES32=r3], 0x57) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r3) r8 = dup(r7) setsockopt(r8, 0x10, 0x3, &(0x7f0000000000)="5fd9bf7c157287533720bc122f843974806fddfb1859604b3f607cc67ca67a", 0x1f) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000500)="649b660fc73566b814a4b4a90f23d80f21f86635400000a00f23f83e36dd21260fe056003e660f79fc2e2e3664660f1be5baf80c66b824094b8566efbafc73ecb801008ed80f01c2"}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe89, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@broadcast, @loopback, @empty}, 0xc) 642.763271ms ago: executing program 2 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}], {0x14, 0x10}}, 0x90}}, 0x0) r2 = socket(0x2b, 0x1, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r2, 0x8905, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0xfb56, 0x0, &(0x7f0000000200)=[r2, r0, r2, r2, r1, r1, r2, r1]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x30}}, 0x0) 224.538428ms ago: executing program 8 (id=450): mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) 0s ago: executing program 8 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40050) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x67, 0x2}, {0x24, 0x4}, {0x1, 0x3}, {0xd, 0x3}, {0xfa, 0x4}, {0x81}, {0x2, 0x4}], "cc6d437e12e8726d"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x6, 0x7}, {0xbc, 0x5}, {0xd, 0x3}, {0x3, 0x2}, {0xff, 0x4}, {0x80, 0x6}, {0x6, 0x2}, {0xfb, 0x5}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0xee, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0xcd, 0x1}], "3e36f8cbbe664586"}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000010) (async) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0x68}}, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000280)=0x4, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x9000, 0x888, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x14, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 2699][ T6126] bond0: left promiscuous mode [ 88.935922][ T6126] bond_slave_0: left promiscuous mode [ 88.974469][ T6126] bond_slave_1: left promiscuous mode [ 89.213437][ T5829] Bluetooth: hci2: command tx timeout [ 89.245144][ T5974] veth1_macvtap: entered promiscuous mode [ 89.363425][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.374699][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.386135][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.400984][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.410973][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.421827][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.435216][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.445907][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.462130][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.512606][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.523151][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.533210][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.543804][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.553951][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.564607][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.574596][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.585201][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.603698][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.751085][ T6147] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 89.754534][ T5974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754572][ T5974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754599][ T5974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754625][ T5974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.224372][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.224391][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.402147][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.410137][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.310959][ T875] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.470668][ T875] usb 2-1: Using ep0 maxpacket: 32 [ 91.478964][ T875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.490445][ T875] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.511400][ T6160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.544627][ T875] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 91.568098][ T875] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 91.581031][ T875] usb 2-1: Product: syz [ 91.586329][ T875] usb 2-1: Manufacturer: syz [ 91.591377][ T875] usb 2-1: SerialNumber: syz [ 91.655219][ T875] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 92.073126][ T8] usb 2-1: USB disconnect, device number 4 [ 92.073126][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 92.559846][ T8] appletouch 2-1:1.0: input: appletouch disconnected [ 94.732227][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.80'. [ 94.748201][ T6264] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 94.912766][ T6264] team0: Failed to send options change via netlink (err -105) [ 94.953077][ T6264] team0: Port device netdevsim0 added [ 95.006482][ T35] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 95.700698][ T6286] Zero length message leads to an empty skb [ 96.488319][ T6305] hsr0: entered promiscuous mode [ 97.650739][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.830896][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 97.851633][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.910820][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 97.960802][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.973575][ T8] usb 5-1: config 0 descriptor?? [ 98.011049][ T912] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.189104][ T912] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.208865][ T912] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 98.270325][ T912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.301239][ T912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 98.350584][ T912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 98.373526][ T912] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.400723][ T912] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.420598][ T912] usb 1-1: Product: syz [ 98.427421][ T8] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0 [ 98.456026][ T912] usb 1-1: Manufacturer: syz [ 98.461156][ T8] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0 [ 98.469465][ T8] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0 [ 98.495404][ T912] cdc_wdm 1-1:1.0: skipping garbage [ 98.519569][ T912] cdc_wdm 1-1:1.0: skipping garbage [ 98.529887][ T912] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 98.540779][ T8] logitech-hidpp-device 0003:046D:0A87.0003: unknown main item tag 0x0 [ 98.565016][ T912] cdc_wdm 1-1:1.0: Unknown control protocol [ 98.582183][ T8] logitech-hidpp-device 0003:046D:0A87.0003: hidraw0: USB HID vd.f8 Device [HID 046d:0a87] on usb-dummy_hcd.4-1/input0 [ 98.631588][ T6334] usb 1-1: USB disconnect, device number 4 [ 98.792369][ T5855] usb 5-1: USB disconnect, device number 6 [ 99.079541][ T6365] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.091869][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.263140][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 99.286524][ T5880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.322847][ T5880] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.410679][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 99.428361][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 99.459549][ T5880] usb 4-1: Product: syz [ 99.478220][ T5880] usb 4-1: Manufacturer: syz [ 99.501411][ T5880] usb 4-1: SerialNumber: syz [ 99.543600][ T5880] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 99.623992][ T6391] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.633695][ T6391] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.643098][ T6391] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.651900][ T6391] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.672173][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 99.739911][ T6391] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 99.751980][ T5880] usb 4-1: USB disconnect, device number 4 [ 99.771684][ T6391] netlink: 'syz.0.115': attribute type 2 has an invalid length. [ 99.792987][ T5880] appletouch 4-1:1.0: input: appletouch disconnected [ 100.050970][ T51] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 100.205960][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.217626][ T51] usb 6-1: Using ep0 maxpacket: 16 [ 100.247465][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.249117][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.310652][ T51] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 100.330353][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.352111][ T51] usb 6-1: config 0 descriptor?? [ 100.498892][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.509575][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.581664][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.637930][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.768843][ T51] usbhid 6-1:0.0: can't add hid device: -71 [ 100.832553][ T51] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 100.880720][ T51] usb 6-1: USB disconnect, device number 2 [ 100.967732][ T62] team0: Port device netdevsim0 removed [ 100.992239][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.040855][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.540772][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'. [ 101.549918][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'. [ 101.590003][ T62] bridge_slave_1: left allmulticast mode [ 101.613617][ T62] bridge_slave_1: left promiscuous mode [ 101.651136][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.672447][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.682668][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.701123][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.711814][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.725071][ T5826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.735993][ T62] bridge_slave_0: left allmulticast mode [ 101.740668][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.778651][ T62] bridge_slave_0: left promiscuous mode [ 101.790876][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.952333][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.221554][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 102.244920][ T8] usb 4-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 102.260774][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.280337][ T8] usb 4-1: Product: syz [ 102.314999][ T8] usb 4-1: Manufacturer: syz [ 102.319665][ T8] usb 4-1: SerialNumber: syz [ 102.358206][ T8] usb 4-1: config 0 descriptor?? [ 102.769825][ T6450] netlink: 'syz.4.127': attribute type 10 has an invalid length. [ 102.860186][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.878593][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.902331][ T62] bond0 (unregistering): Released all slaves [ 102.924256][ T6423] syz_tun: entered promiscuous mode [ 102.930357][ T6423] syz_tun: left promiscuous mode [ 102.964305][ T6450] team0: Failed to send options change via netlink (err -105) [ 102.980691][ T6450] team0: Port device netdevsim0 added [ 102.990450][ T62] fþ: left promiscuous mode [ 103.101047][ T8] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 103.299842][ T8] usb 4-1: device firmware changed [ 103.387015][ T8] usb 4-1: USB disconnect, device number 5 [ 103.448322][ T62] IPVS: stopping backup sync thread 6147 ... [ 103.566962][ T6438] chnl_net:caif_netlink_parms(): no params data found [ 103.725298][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.772566][ T5826] Bluetooth: hci0: command tx timeout [ 103.790816][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 103.879376][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.891511][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.910662][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 103.948389][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.957077][ T8] usb 4-1: string descriptor 0 read error: -22 [ 103.979940][ T8] usb 4-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 104.007975][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.051522][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.116197][ T8] usb 4-1: config 0 descriptor?? [ 104.138719][ T62] veth1_macvtap: left promiscuous mode [ 104.160750][ T62] veth0_macvtap: left promiscuous mode [ 104.168727][ T62] veth1_vlan: left promiscuous mode [ 104.181354][ T62] veth0_vlan: left promiscuous mode [ 104.282582][ T8] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 105.192240][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.290068][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.316625][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.334274][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.574173][ T62] team0 (unregistering): Port device team_slave_1 removed [ 105.668028][ T62] team0 (unregistering): Port device team_slave_0 removed [ 105.853215][ T5826] Bluetooth: hci0: command tx timeout [ 106.433479][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.531866][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.544199][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.561275][ T6438] bridge_slave_0: entered allmulticast mode [ 106.572783][ T6438] bridge_slave_0: entered promiscuous mode [ 106.762074][ T6500] hsr_slave_0: left promiscuous mode [ 106.810285][ T6500] hsr_slave_1: left promiscuous mode [ 106.907303][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.917674][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.975335][ T6438] bridge_slave_1: entered allmulticast mode [ 106.989908][ T6438] bridge_slave_1: entered promiscuous mode [ 107.535602][ T8] usb 4-1: USB disconnect, device number 6 [ 107.951440][ T5826] Bluetooth: hci0: command tx timeout [ 109.009901][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.205915][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 109.223065][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.250778][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.310049][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 109.334021][ T8] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 109.370631][ T8] usb 5-1: Product: syz [ 109.374849][ T8] usb 5-1: Manufacturer: syz [ 109.392844][ T8] usb 5-1: SerialNumber: syz [ 109.422703][ T8] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10 [ 109.619652][ T8] usb 5-1: USB disconnect, device number 7 [ 109.625613][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 109.713134][ T8] appletouch 5-1:1.0: input: appletouch disconnected [ 110.016801][ T5826] Bluetooth: hci0: command tx timeout [ 111.430750][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.605680][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 111.620328][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.632395][ T8] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 111.649144][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.662778][ T8] usb 6-1: config 0 descriptor?? [ 111.987882][ T6543] hsr_slave_0: left promiscuous mode [ 111.995709][ T6543] hsr_slave_1: left promiscuous mode [ 112.050348][ T6547] vlan2: entered promiscuous mode [ 112.067633][ T6547] bond0: entered promiscuous mode [ 112.074518][ T6547] bond_slave_0: entered promiscuous mode [ 112.080468][ T6547] bond_slave_1: entered promiscuous mode [ 112.121079][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 112.140363][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 112.161069][ T6547] bond0: left promiscuous mode [ 112.169717][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 112.176968][ T6547] bond_slave_0: left promiscuous mode [ 112.191622][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 112.193383][ T6547] bond_slave_1: left promiscuous mode [ 112.204202][ T8] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 112.204769][ T8] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 112.298111][ T6559] netlink: 'syz.4.153': attribute type 10 has an invalid length. [ 112.325279][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.369706][ T8] usb 6-1: USB disconnect, device number 3 [ 112.477820][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 112.495977][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 112.514540][ T6561] syz_tun: entered promiscuous mode [ 112.521925][ T6561] syz_tun: left promiscuous mode [ 112.543909][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.634465][ T6438] team0: Port device team_slave_0 added [ 112.654224][ T6438] team0: Port device team_slave_1 added [ 112.752637][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.766255][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.860161][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.901870][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.913409][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.940739][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.265242][ T6438] hsr_slave_0: entered promiscuous mode [ 113.301966][ T6438] hsr_slave_1: entered promiscuous mode [ 113.321359][ T6438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.332400][ T6438] Cannot create hsr debugfs directory [ 113.490679][ T5880] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 113.680888][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 113.698155][ T5880] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.709876][ T5880] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.775663][ T5880] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 113.823437][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 113.840597][ T5880] usb 6-1: Product: syz [ 113.850684][ T5880] usb 6-1: Manufacturer: syz [ 113.855412][ T5880] usb 6-1: SerialNumber: syz [ 113.870800][ T6438] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.894574][ T5880] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input11 [ 114.043551][ T6438] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.099829][ T6438] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.160308][ T6438] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.187675][ T5879] usb 6-1: USB disconnect, device number 4 [ 114.200162][ T5879] appletouch 6-1:1.0: input: appletouch disconnected [ 114.220642][ T5855] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.416101][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 114.446981][ T5855] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 114.457015][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.460833][ T5855] usb 4-1: config 179 has no interface number 0 [ 114.478810][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 114.519528][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 114.542475][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.579778][ T5855] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 114.609776][ T5855] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 114.643254][ T5855] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 114.670789][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.712091][ T6438] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.718790][ T6606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 114.929932][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.975066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.982243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.001397][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.053477][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.060853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.188631][ T6438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.367806][ T6606] sctp: [Deprecated]: syz.3.164 (pid 6606) Use of int in max_burst socket option. [ 115.367806][ T6606] Use struct sctp_assoc_value instead [ 115.431037][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.498347][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.502602][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.738199][ T6438] veth0_vlan: entered promiscuous mode [ 115.780857][ T5879] usb 4-1: USB disconnect, device number 7 [ 115.780921][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 115.795814][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 115.831182][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.166'. [ 115.849888][ T6438] veth1_vlan: entered promiscuous mode [ 115.883419][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.166'. [ 115.928281][ T6637] syz_tun: entered promiscuous mode [ 116.035117][ T6637] syz_tun: left promiscuous mode [ 116.215350][ T6438] veth0_macvtap: entered promiscuous mode [ 116.392248][ T6438] veth1_macvtap: entered promiscuous mode [ 116.400872][ T5880] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.406480][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.418944][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.429452][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.440990][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.451120][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.463811][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.480681][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.491386][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.581736][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.593822][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.604351][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.610806][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 116.631887][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.651309][ T5880] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.661349][ T6659] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 116.671259][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.671592][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.711679][ T5880] usb 4-1: config 0 descriptor?? [ 116.760596][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.770454][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.846673][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.887638][ T6664] capability: warning: `syz.5.171' uses deprecated v2 capabilities in a way that may be insecure [ 116.925563][ T6438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.031656][ T6438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.099694][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.183449][ T6438] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.225348][ T5880] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 117.228826][ T6438] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.239737][ T5880] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 117.269423][ T5880] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 117.280811][ T5880] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 117.287994][ T5880] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 117.325431][ T6438] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.334286][ T6438] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.382404][ T5880] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 117.661043][ T5880] usb 4-1: USB disconnect, device number 8 [ 117.767864][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.776647][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.900671][ T875] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 117.913440][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.985085][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.081328][ T875] usb 6-1: Using ep0 maxpacket: 16 [ 118.090216][ T875] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 118.106005][ T875] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.124385][ T875] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.154084][ T875] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.168665][ T875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.248166][ T875] usb 6-1: Product: syz [ 118.290759][ T875] usb 6-1: Manufacturer: syz [ 118.310264][ T875] usb 6-1: SerialNumber: syz [ 118.504766][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 118.526225][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 118.739171][ T875] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 119.001879][ T6735] bridge_slave_1: left allmulticast mode [ 119.008185][ T6735] bridge_slave_1: left promiscuous mode [ 119.016740][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.491858][ T6748] hsr_slave_0: left promiscuous mode [ 119.554736][ T6748] hsr_slave_1: left promiscuous mode [ 119.564163][ T875] usb 6-1: current rate 9338617 is different from the runtime rate 9338507 [ 119.637253][ T6753] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 119.856692][ T6760] FAULT_INJECTION: forcing a failure. [ 119.856692][ T6760] name failslab, interval 1, probability 0, space 0, times 1 [ 119.872630][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.189'. [ 119.886006][ T875] usb 6-1: USB disconnect, device number 5 [ 119.917944][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.6.189'. [ 119.930201][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.3.190 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 119.940834][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 119.950905][ T6760] Call Trace: [ 119.954180][ T6760] [ 119.957153][ T6760] dump_stack_lvl+0x241/0x360 [ 119.961850][ T6760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.967048][ T6760] ? __pfx__printk+0x10/0x10 [ 119.971644][ T6760] should_fail_ex+0x3b0/0x4e0 [ 119.976391][ T6760] should_failslab+0xac/0x100 [ 119.981103][ T6760] __kmalloc_cache_noprof+0x70/0x390 [ 119.986383][ T6760] ? sctp_add_bind_addr+0x89/0x3a0 [ 119.991501][ T6760] sctp_add_bind_addr+0x89/0x3a0 [ 119.996440][ T6760] sctp_copy_local_addr_list+0x311/0x500 [ 120.002083][ T6760] ? sctp_copy_local_addr_list+0xab/0x500 [ 120.007801][ T6760] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 120.013969][ T6760] ? sctp_v4_is_any+0x35/0x60 [ 120.018664][ T6760] sctp_bind_addr_copy+0xad/0x3b0 [ 120.023697][ T6760] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 120.030028][ T6760] sctp_connect_new_asoc+0x2f3/0x6c0 [ 120.035310][ T6760] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 120.041110][ T6760] ? sctp_sendmsg+0xbb9/0x3520 [ 120.045870][ T6760] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 120.051672][ T6760] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 120.057219][ T6760] sctp_sendmsg+0x219a/0x3520 [ 120.061898][ T6760] ? aa_sk_perm+0x96d/0xab0 [ 120.066402][ T6760] ? __pfx_sctp_sendmsg+0x10/0x10 [ 120.071426][ T6760] ? __pfx_aa_sk_perm+0x10/0x10 [ 120.076279][ T6760] ? inet_sendmsg+0x330/0x390 [ 120.080952][ T6760] __sock_sendmsg+0x1a6/0x270 [ 120.085635][ T6760] __sys_sendto+0x363/0x4c0 [ 120.090138][ T6760] ? __pfx___sys_sendto+0x10/0x10 [ 120.095198][ T6760] ? __mutex_unlock_slowpath+0x21e/0x790 [ 120.100876][ T6760] ? __fget_files+0x2a/0x410 [ 120.105508][ T6760] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.111595][ T6760] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.117952][ T6760] __x64_sys_sendto+0xde/0x100 [ 120.122724][ T6760] do_syscall_64+0xf3/0x230 [ 120.127234][ T6760] ? clear_bhb_loop+0x35/0x90 [ 120.131914][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.137820][ T6760] RIP: 0033:0x7f61c7f85d29 [ 120.142244][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.161885][ T6760] RSP: 002b:00007f61c8e03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.170308][ T6760] RAX: ffffffffffffffda RBX: 00007f61c8175fa0 RCX: 00007f61c7f85d29 [ 120.178280][ T6760] RDX: 0000000000034000 RSI: 0000000020001000 RDI: 0000000000000003 [ 120.186248][ T6760] RBP: 00007f61c8e03090 R08: 0000000020000380 R09: 0000000000000010 [ 120.194218][ T6760] R10: 0000000004000815 R11: 0000000000000246 R12: 0000000000000002 [ 120.202187][ T6760] R13: 0000000000000000 R14: 00007f61c8175fa0 R15: 00007f61c829fa28 [ 120.210176][ T6760] [ 120.264038][ T6761] FAULT_INJECTION: forcing a failure. [ 120.264038][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.277772][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.6.189 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 120.288394][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 120.298483][ T6761] Call Trace: [ 120.301792][ T6761] [ 120.304746][ T6761] dump_stack_lvl+0x241/0x360 [ 120.309497][ T6761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.314747][ T6761] ? __pfx__printk+0x10/0x10 [ 120.319384][ T6761] ? __pfx_lock_release+0x10/0x10 [ 120.324439][ T6761] ? __lock_acquire+0x1397/0x2100 [ 120.329519][ T6761] should_fail_ex+0x3b0/0x4e0 [ 120.334248][ T6761] _copy_from_user+0x2f/0xc0 [ 120.338868][ T6761] kstrtouint_from_user+0xc6/0x190 [ 120.344015][ T6761] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 120.349781][ T6761] ? __pfx_lock_acquire+0x10/0x10 [ 120.354861][ T6761] proc_fail_nth_write+0xaa/0x2d0 [ 120.360032][ T6761] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 120.365964][ T6761] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.371642][ T6761] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.377314][ T6761] vfs_write+0x2a3/0xd30 [ 120.381600][ T6761] ? __pfx_vfs_write+0x10/0x10 [ 120.386484][ T6761] ? __fget_files+0x2a/0x410 [ 120.391107][ T6761] ? __fget_files+0x395/0x410 [ 120.395823][ T6761] ? __fget_files+0x2a/0x410 [ 120.400450][ T6761] ksys_write+0x18f/0x2b0 [ 120.404806][ T6761] ? __pfx_ksys_write+0x10/0x10 [ 120.409685][ T6761] ? do_syscall_64+0x100/0x230 [ 120.414492][ T6761] ? do_syscall_64+0xb6/0x230 [ 120.419223][ T6761] do_syscall_64+0xf3/0x230 [ 120.423762][ T6761] ? clear_bhb_loop+0x35/0x90 [ 120.428563][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.434592][ T6761] RIP: 0033:0x7f54d93847df [ 120.439041][ T6761] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 120.458677][ T6761] RSP: 002b:00007f54da274030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 120.467132][ T6761] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54d93847df [ 120.475145][ T6761] RDX: 0000000000000001 RSI: 00007f54da2740a0 RDI: 0000000000000004 [ 120.483142][ T6761] RBP: 00007f54da274090 R08: 0000000000000000 R09: 0000000000000000 [ 120.491137][ T6761] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 120.499155][ T6761] R13: 0000000000000000 R14: 00007f54d9575fa0 R15: 00007f54d969fa28 [ 120.507178][ T6761] [ 120.643438][ T6731] bridge_slave_0: left allmulticast mode [ 120.677030][ T6768] Failed to get privilege flags for destination (handle=0x2:0xffffffff) [ 120.706218][ T6731] bridge_slave_0: left promiscuous mode [ 120.750440][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.843293][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.941313][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.960659][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 121.095196][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 121.121070][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 121.127877][ T5879] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 121.150122][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.190722][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.211196][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.238090][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.249197][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 121.269014][ T5879] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 121.279717][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.299432][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 121.308754][ T8] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 121.323710][ T5879] usb 2-1: config 0 descriptor?? [ 121.328956][ T8] usb 4-1: Product: syz [ 121.333757][ T8] usb 4-1: Manufacturer: syz [ 121.339173][ T8] usb 4-1: SerialNumber: syz [ 121.364865][ T8] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12 [ 121.573273][ T5881] usb 4-1: USB disconnect, device number 9 [ 121.669606][ T5881] appletouch 4-1:1.0: input: appletouch disconnected [ 121.857774][ T6731] syz.4.182 (6731) used greatest stack depth: 18352 bytes left [ 122.318359][ T5879] usbhid 2-1:0.0: can't add hid device: -71 [ 122.325546][ T5879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.355548][ T5879] usb 2-1: USB disconnect, device number 5 [ 122.599864][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.204'. [ 122.636657][ T6825] netlink: 'syz.6.204': attribute type 1 has an invalid length. [ 122.661588][ T6825] netlink: 'syz.6.204': attribute type 2 has an invalid length. [ 122.680689][ T51] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 122.853126][ T51] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 122.871309][ T51] usb 4-1: config 0 has no interface number 0 [ 122.896464][ T51] usb 4-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 122.920963][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.947326][ T51] usb 4-1: config 0 descriptor?? [ 122.961790][ T51] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 122.975400][ T51] gspca_mr97310a: reg write [21] error -22 [ 122.992567][ T51] mr97310a 4-1:0.57: probe with driver mr97310a failed with error -22 [ 123.224078][ T6843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.251401][ T6843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.262039][ T51] usb 4-1: USB disconnect, device number 10 [ 123.425017][ T3547] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.480776][ T5879] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 123.572305][ T3547] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.642285][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 123.661294][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.673172][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.684245][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.695745][ T5879] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 123.705295][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.740387][ T5879] usb 6-1: config 0 descriptor?? [ 123.746492][ T6847] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 123.758821][ T3547] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.952460][ T5879] hub 6-1:0.0: USB hub found [ 123.964398][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.997031][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.008273][ T5879] hub 6-1:0.0: 3 ports detected [ 124.016671][ T5879] hub 6-1:0.0: insufficient power available to use all downstream ports [ 124.026347][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.039156][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.047209][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.056034][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.112654][ T3547] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.288183][ T5879] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 124.317328][ T5879] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 124.365361][ T5879] usbhid 6-1:0.0: can't add hid device: -71 [ 124.385350][ T5879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 124.422074][ T5879] usb 6-1: USB disconnect, device number 6 [ 124.740807][ T3547] bridge_slave_1: left allmulticast mode [ 124.790074][ T3547] bridge_slave_1: left promiscuous mode [ 124.826530][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.911203][ T3547] bridge_slave_0: left allmulticast mode [ 124.916908][ T3547] bridge_slave_0: left promiscuous mode [ 124.923873][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.312173][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 125.662695][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 126.044124][ T6923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.090770][ T5826] Bluetooth: hci0: command tx timeout [ 126.360654][ T912] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 126.530647][ T912] usb 6-1: Using ep0 maxpacket: 32 [ 126.546997][ T912] usb 6-1: unable to get BOS descriptor or descriptor too short [ 126.566851][ T912] usb 6-1: config 1 interface 0 has no altsetting 0 [ 126.578289][ T912] usb 6-1: New USB device found, idVendor=0eef, idProduct=7302, bcdDevice= 0.40 [ 126.587961][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.596224][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.600955][ T912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.616125][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.619455][ T912] usb 6-1: Product: syz [ 126.629352][ T912] usb 6-1: Manufacturer: 쇟Ꜷ幔淌æºá¢ºäµ°Ç®ï­ˆî‚«ä¤—é…¸í‰æ¶»âŽˆä”’å­ïš¨ã–Žç³šäŸìžìƒŠì®‹ç¨³é“”㞥衂⢫æ½æ‚…éµãµ¡è¹æ›³è“©î’‰é¡¨ãž˜ã¤»ê±Œâ¾‰í†”鿸ñ¬™ [ 126.649558][ T912] usb 6-1: SerialNumber: syz [ 126.652641][ T3547] bond0 (unregistering): Released all slaves [ 126.676259][ T6872] chnl_net:caif_netlink_parms(): no params data found [ 126.760680][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 126.770022][ T5879] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 126.780118][ T5881] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.789824][ T5879] usb 5-1: config 0 has no interface number 0 [ 126.796866][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.808296][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 126.826816][ T5879] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.842249][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.859863][ T5879] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 126.883716][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.905105][ T5879] usb 5-1: config 0 descriptor?? [ 126.915397][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.924196][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.937274][ T6872] bridge_slave_0: entered allmulticast mode [ 126.939767][ T912] usbhid 6-1:1.0: can't add hid device: -71 [ 126.950821][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 126.951198][ T6872] bridge_slave_0: entered promiscuous mode [ 126.957588][ T5879] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 126.971906][ T912] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 126.983198][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.986362][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.021002][ T5881] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.033116][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.048024][ T912] usb 6-1: USB disconnect, device number 7 [ 127.066496][ T5881] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 127.073454][ T6872] bridge_slave_1: entered allmulticast mode [ 127.088535][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 127.104240][ T5881] usb 2-1: Product: syz [ 127.109543][ T6872] bridge_slave_1: entered promiscuous mode [ 127.113756][ T5881] usb 2-1: Manufacturer: syz [ 127.120325][ T5881] usb 2-1: SerialNumber: syz [ 127.142621][ T6943] FAULT_INJECTION: forcing a failure. [ 127.142621][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.162517][ T6943] CPU: 1 UID: 0 PID: 6943 Comm: syz.3.230 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 127.171276][ T5881] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 127.173136][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 127.173152][ T6943] Call Trace: [ 127.173160][ T6943] [ 127.173169][ T6943] dump_stack_lvl+0x241/0x360 [ 127.173201][ T6943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.173225][ T6943] ? __pfx__printk+0x10/0x10 [ 127.213321][ T6943] ? __pfx_lock_release+0x10/0x10 [ 127.218376][ T6943] should_fail_ex+0x3b0/0x4e0 [ 127.223078][ T6943] _copy_from_user+0x2f/0xc0 [ 127.227717][ T6943] __keyctl_dh_compute+0x1f1/0xf50 [ 127.232878][ T6943] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 127.238548][ T6943] ? __pfx___might_resched+0x10/0x10 [ 127.243873][ T6943] ? __might_fault+0xc6/0x120 [ 127.248576][ T6943] keyctl_dh_compute+0x107/0x160 [ 127.253564][ T6943] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 127.259066][ T6943] ? vfs_write+0x730/0xd30 [ 127.263517][ T6943] __se_sys_keyctl+0x3f3/0x910 [ 127.268316][ T6943] ? __mutex_unlock_slowpath+0x21e/0x790 [ 127.273987][ T6943] ? __pfx___se_sys_keyctl+0x10/0x10 [ 127.279312][ T6943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.285326][ T6943] ? __fget_files+0x2a/0x410 [ 127.289956][ T6943] ? __fget_files+0x2a/0x410 [ 127.294593][ T6943] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 127.300608][ T6943] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.307058][ T6943] ? do_syscall_64+0x100/0x230 [ 127.311868][ T6943] ? __x64_sys_keyctl+0x20/0xc0 [ 127.316755][ T6943] do_syscall_64+0xf3/0x230 [ 127.321315][ T6943] ? clear_bhb_loop+0x35/0x90 [ 127.326197][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.332651][ T6943] RIP: 0033:0x7f61c7f85d29 [ 127.337095][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.356821][ T6943] RSP: 002b:00007f61c8e03038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 127.365351][ T6943] RAX: ffffffffffffffda RBX: 00007f61c8175fa0 RCX: 00007f61c7f85d29 [ 127.373362][ T6943] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000017 [ 127.381362][ T6943] RBP: 00007f61c8e03090 R08: 0000000020000000 R09: 0000000000000000 [ 127.389371][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.397374][ T6943] R13: 0000000000000000 R14: 00007f61c8175fa0 R15: 00007f61c829fa28 [ 127.405392][ T6943] [ 127.415571][ T875] usb 2-1: USB disconnect, device number 6 [ 127.415733][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 127.467960][ T875] appletouch 2-1:1.0: input: appletouch disconnected [ 127.634836][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.658084][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.825394][ T6872] team0: Port device team_slave_0 added [ 127.859570][ T3547] hsr_slave_0: left promiscuous mode [ 127.892989][ T3547] hsr_slave_1: left promiscuous mode [ 127.974218][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.006950][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.065724][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.136052][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.171709][ T5826] Bluetooth: hci0: command tx timeout [ 128.310391][ T3547] veth1_macvtap: left promiscuous mode [ 128.348557][ T3547] veth0_macvtap: left promiscuous mode [ 128.372057][ T3547] veth1_vlan: left promiscuous mode [ 128.416106][ T3547] veth0_vlan: left promiscuous mode [ 129.292549][ T6980] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.365735][ T5881] usb 5-1: USB disconnect, device number 8 [ 129.377436][ T5881] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 130.024586][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 130.128389][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 130.255963][ T5826] Bluetooth: hci0: command tx timeout [ 131.019669][ T6872] team0: Port device team_slave_1 added [ 131.111137][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.118212][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.144888][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.168010][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.177611][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.206959][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.402053][ T6872] hsr_slave_0: entered promiscuous mode [ 131.480172][ T6872] hsr_slave_1: entered promiscuous mode [ 131.926133][ T7007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.015084][ T6872] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 132.048537][ T6872] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 132.071026][ T912] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.105467][ T6872] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 132.133733][ T6872] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 132.251847][ T912] usb 2-1: Using ep0 maxpacket: 16 [ 132.268036][ T912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.309227][ T912] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.331155][ T5826] Bluetooth: hci0: command tx timeout [ 132.352217][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.372733][ T912] usb 2-1: config 0 descriptor?? [ 132.411292][ T5881] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.422948][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.492713][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.574319][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.581522][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.640799][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 132.671275][ T7024] tipc: Started in network mode [ 132.676450][ T7024] tipc: Node identity 4, cluster identity 4711 [ 132.683285][ T5881] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 132.703491][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.715158][ T7024] tipc: Node number set to 4 [ 132.742283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.749442][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.764323][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.819618][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.852076][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.891958][ T912] usbhid 2-1:0.0: can't add hid device: -71 [ 132.918007][ T5881] usb 4-1: Product: syz [ 132.922862][ T912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.952774][ T5881] usb 4-1: Manufacturer: syz [ 132.957429][ T5881] usb 4-1: SerialNumber: syz [ 132.973466][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.984069][ T912] usb 2-1: USB disconnect, device number 7 [ 133.144972][ T6872] veth0_vlan: entered promiscuous mode [ 133.223171][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.224395][ T6872] veth1_vlan: entered promiscuous mode [ 133.229489][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.367253][ T6872] veth0_macvtap: entered promiscuous mode [ 133.389735][ T6872] veth1_macvtap: entered promiscuous mode [ 133.439093][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.461395][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.475677][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.488995][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.509033][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.565060][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.588996][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.648342][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.674052][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.725770][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.742774][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.753056][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.769970][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.826479][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.871116][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.882816][ T6872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.927577][ T6872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.984855][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.028022][ T6872] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.069379][ T6872] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.150648][ T6872] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.188879][ T6872] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.548620][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.592724][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.664633][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.689277][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.995341][ T5881] usb 4-1: 0:2 : does not exist [ 135.085851][ T5881] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 135.120823][ T5881] usb 4-1: USB disconnect, device number 11 [ 135.138002][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.075891][ T7175] tipc: Started in network mode [ 138.107308][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 138.120876][ T7175] tipc: Node identity b20e344595a, cluster identity 4711 [ 138.130081][ T7175] tipc: Enabled bearer , priority 0 [ 138.173256][ T7182] syzkaller0: entered promiscuous mode [ 138.211481][ T7182] syzkaller0: entered allmulticast mode [ 138.274485][ T7178] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 138.311547][ T7178] netlink: 'syz.3.271': attribute type 2 has an invalid length. [ 138.360374][ T7184] tipc: Resetting bearer [ 138.784183][ T7184] tipc: Disabling bearer [ 139.344283][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.719236][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.770468][ T7213] hsr0: entered promiscuous mode [ 139.805410][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.814586][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.826116][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.834041][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.860648][ T5880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.890606][ T5829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.907598][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.916323][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.040882][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 140.088840][ T5880] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.110321][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.123374][ T5880] usb 5-1: Product: syz [ 140.128520][ T5880] usb 5-1: Manufacturer: syz [ 140.133424][ T5880] usb 5-1: SerialNumber: syz [ 140.154256][ T5880] usb 5-1: config 0 descriptor?? [ 140.161400][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.260062][ T7230] FAULT_INJECTION: forcing a failure. [ 140.260062][ T7230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.285601][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.7.286 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 140.296267][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 140.306361][ T7230] Call Trace: [ 140.309668][ T7230] [ 140.312626][ T7230] dump_stack_lvl+0x241/0x360 [ 140.317347][ T7230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.322598][ T7230] ? __pfx__printk+0x10/0x10 [ 140.327227][ T7230] ? snprintf+0xda/0x120 [ 140.331493][ T7230] should_fail_ex+0x3b0/0x4e0 [ 140.336187][ T7230] _copy_to_user+0x31/0xb0 [ 140.340617][ T7230] simple_read_from_buffer+0xca/0x150 [ 140.346002][ T7230] proc_fail_nth_read+0x1e9/0x250 [ 140.351028][ T7230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.356583][ T7230] ? rw_verify_area+0x55e/0x6f0 [ 140.361438][ T7230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.366982][ T7230] vfs_read+0x1fc/0xb70 [ 140.371138][ T7230] ? __pfx___mutex_lock+0x10/0x10 [ 140.376171][ T7230] ? __pfx_vfs_read+0x10/0x10 [ 140.380845][ T7230] ? __fget_files+0x2a/0x410 [ 140.385444][ T7230] ? __fget_files+0x395/0x410 [ 140.390123][ T7230] ? __fget_files+0x2a/0x410 [ 140.394727][ T7230] ksys_read+0x18f/0x2b0 [ 140.398966][ T7230] ? __pfx_ksys_read+0x10/0x10 [ 140.403727][ T7230] ? do_syscall_64+0x100/0x230 [ 140.408497][ T7230] ? do_syscall_64+0xb6/0x230 [ 140.413183][ T7230] do_syscall_64+0xf3/0x230 [ 140.417689][ T7230] ? clear_bhb_loop+0x35/0x90 [ 140.422361][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.428260][ T7230] RIP: 0033:0x7f7ce478473c [ 140.432670][ T7230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.452291][ T7230] RSP: 002b:00007f7ce5528030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.460732][ T7230] RAX: ffffffffffffffda RBX: 00007f7ce4975fa0 RCX: 00007f7ce478473c [ 140.468715][ T7230] RDX: 000000000000000f RSI: 00007f7ce55280a0 RDI: 0000000000000004 [ 140.476682][ T7230] RBP: 00007f7ce5528090 R08: 0000000000000000 R09: 0000000000000000 [ 140.484656][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.492635][ T7230] R13: 0000000000000000 R14: 00007f7ce4975fa0 R15: 00007f7ce4a9fa28 [ 140.500617][ T7230] [ 140.531156][ T5880] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.727166][ T5880] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.741245][ T5880] usb 5-1: USB disconnect, device number 9 [ 140.750903][ T875] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 140.862061][ T7220] chnl_net:caif_netlink_parms(): no params data found [ 140.952580][ T875] usb 6-1: not running at top speed; connect to a high speed hub [ 141.182198][ T62] bridge_slave_1: left allmulticast mode [ 141.188043][ T62] bridge_slave_1: left promiscuous mode [ 141.209495][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.294788][ T62] bridge_slave_0: left allmulticast mode [ 141.312740][ T62] bridge_slave_0: left promiscuous mode [ 141.319040][ T875] usb 6-1: config 2 has an invalid interface number: 175 but max is 0 [ 141.327375][ T875] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 141.336243][ T875] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 141.345201][ T875] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 141.353976][ T875] usb 6-1: config 2 has no interface number 0 [ 141.360090][ T875] usb 6-1: config 2 interface 175 altsetting 13 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 141.371366][ T875] usb 6-1: config 2 interface 175 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 141.382404][ T875] usb 6-1: config 2 interface 175 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 141.393546][ T875] usb 6-1: config 2 interface 175 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 141.405393][ T875] usb 6-1: config 2 interface 175 altsetting 13 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 141.417119][ T875] usb 6-1: config 2 interface 175 has no altsetting 0 [ 141.426566][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.438178][ T875] usb 6-1: New USB device found, idVendor=04cb, idProduct=0131, bcdDevice=e4.28 [ 141.450102][ T875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.480663][ T875] usb 6-1: Product:  [ 141.484882][ T875] usb 6-1: Manufacturer: à   [ 141.489516][ T875] usb 6-1: SerialNumber: Ð [ 141.745382][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.780978][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.010820][ T5829] Bluetooth: hci4: command tx timeout [ 142.596654][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.607564][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.617994][ T62] bond0 (unregistering): Released all slaves [ 142.624185][ T912] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 142.686121][ T7267] gretap0: entered promiscuous mode [ 142.707617][ T7267] vlan2: entered promiscuous mode [ 142.815645][ T912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.841845][ T912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 142.871011][ T912] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 142.884379][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.892550][ T875] gspca_main: finepix-2.14.0 probing 04cb:0131 [ 142.913234][ T875] usb 6-1: USB disconnect, device number 8 [ 142.966537][ T912] usb 2-1: config 0 descriptor?? [ 142.973788][ T7261] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 143.013900][ T912] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 143.120781][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.128132][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.151763][ T7220] bridge_slave_0: entered allmulticast mode [ 143.171844][ T7220] bridge_slave_0: entered promiscuous mode [ 143.249704][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.264707][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.280932][ T7220] bridge_slave_1: entered allmulticast mode [ 143.291472][ T7220] bridge_slave_1: entered promiscuous mode [ 143.346080][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.380818][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.389086][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.421213][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.493489][ T62] veth1_macvtap: left promiscuous mode [ 143.499250][ T62] veth0_macvtap: left promiscuous mode [ 143.517474][ T62] veth1_vlan: left promiscuous mode [ 143.524509][ T62] veth0_vlan: left promiscuous mode [ 143.572640][ C0] bcm5974 2-1:0.0: trackpad urb failed: -1 [ 143.734729][ T875] usb 2-1: USB disconnect, device number 8 [ 143.755350][ T5189] bcm5974 2-1:0.0: could not read from device [ 143.798337][ T5189] bcm5974 2-1:0.0: could not read from device [ 143.808830][ T5918] bcm5974 2-1:0.0: could not read from device [ 144.109274][ T5829] Bluetooth: hci4: command tx timeout [ 144.148541][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.293'. [ 144.423190][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 144.423210][ T29] audit: type=1800 audit(1734623505.126:14): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.294" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 144.639767][ T62] team0 (unregistering): Port device team_slave_1 removed [ 144.704814][ T62] team0 (unregistering): Port device team_slave_0 removed [ 144.790872][ T5881] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 144.994155][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 145.037627][ T5881] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 145.050380][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.066805][ T5881] usb 5-1: Product: syz [ 145.082447][ T5881] usb 5-1: Manufacturer: syz [ 145.094263][ T5881] usb 5-1: SerialNumber: syz [ 145.127848][ T5881] usb 5-1: config 0 descriptor?? [ 145.165217][ T5881] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 145.336351][ T7299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.646779][ T7290] netlink: 'syz.5.293': attribute type 1 has an invalid length. [ 145.656367][ T7290] netlink: 'syz.5.293': attribute type 2 has an invalid length. [ 145.681902][ T7220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.732764][ T7220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.815120][ T7220] team0: Port device team_slave_0 added [ 145.824499][ T5881] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 145.837166][ T7220] team0: Port device team_slave_1 added [ 145.843316][ T5881] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 145.882522][ T5881] usb 5-1: USB disconnect, device number 10 [ 145.980627][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.994071][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.021558][ T7220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.148668][ T7220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.157935][ T7220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.170996][ T5829] Bluetooth: hci4: command tx timeout [ 146.230666][ T7220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.259248][ T7310] netlink: 'syz.7.298': attribute type 16 has an invalid length. [ 146.267951][ T7310] netlink: 156 bytes leftover after parsing attributes in process `syz.7.298'. [ 146.429222][ T7220] hsr_slave_0: entered promiscuous mode [ 146.436886][ T7220] hsr_slave_1: entered promiscuous mode [ 146.448610][ T7220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.457378][ T7220] Cannot create hsr debugfs directory [ 146.803201][ T7325] hsr0: entered promiscuous mode [ 146.992296][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.021704][ T5855] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.089652][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.100086][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.108177][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.116049][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.123814][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.132524][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.206219][ T5855] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 147.220789][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.228875][ T5855] usb 5-1: Product: syz [ 147.233563][ T5855] usb 5-1: Manufacturer: syz [ 147.238275][ T5855] usb 5-1: SerialNumber: syz [ 147.248730][ T5855] usb 5-1: config 0 descriptor?? [ 147.294729][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.403044][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.687862][ T5855] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 147.717313][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.742925][ T5855] asix 5-1:0.0: probe with driver asix failed with error -71 [ 147.769102][ T7346] FAULT_INJECTION: forcing a failure. [ 147.769102][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 147.793769][ T7220] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 147.800683][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.7.306 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 147.811446][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 147.821509][ T7346] Call Trace: [ 147.824804][ T7346] [ 147.827768][ T7346] dump_stack_lvl+0x241/0x360 [ 147.832450][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.837691][ T7346] ? __pfx__printk+0x10/0x10 [ 147.842282][ T7346] ? ref_tracker_alloc+0x332/0x490 [ 147.847395][ T7346] should_fail_ex+0x3b0/0x4e0 [ 147.852074][ T7346] should_failslab+0xac/0x100 [ 147.856759][ T7346] ? skb_clone+0x20c/0x390 [ 147.861178][ T7346] kmem_cache_alloc_noprof+0x70/0x380 [ 147.866559][ T7346] skb_clone+0x20c/0x390 [ 147.870807][ T7346] __netlink_deliver_tap+0x3cc/0x7f0 [ 147.876108][ T7346] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.881323][ T7346] netlink_deliver_tap+0x19d/0x1b0 [ 147.886445][ T7346] netlink_sendskb+0x68/0x140 [ 147.891123][ T7346] netlink_unicast+0x39d/0x990 [ 147.895890][ T7346] ? __pfx_netlink_unicast+0x10/0x10 [ 147.901181][ T7346] netlink_rcv_skb+0x262/0x430 [ 147.905936][ T7346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.911315][ T7346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.916673][ T7346] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 147.922173][ T7346] genl_rcv+0x28/0x40 [ 147.926185][ T7346] netlink_unicast+0x7f6/0x990 [ 147.930986][ T7346] ? __pfx_netlink_unicast+0x10/0x10 [ 147.936306][ T7346] ? __virt_addr_valid+0x45f/0x530 [ 147.941444][ T7346] ? __phys_addr_symbol+0x2f/0x70 [ 147.946493][ T7346] ? __check_object_size+0x47a/0x730 [ 147.951809][ T7346] netlink_sendmsg+0x8e4/0xcb0 [ 147.956568][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.961858][ T7346] ? aa_sock_msg_perm+0x91/0x160 [ 147.966809][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.972111][ T7346] __sock_sendmsg+0x221/0x270 [ 147.976784][ T7346] ____sys_sendmsg+0x52a/0x7e0 [ 147.981566][ T7346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.986949][ T7346] ? __fget_files+0x2a/0x410 [ 147.991531][ T7346] ? __fget_files+0x2a/0x410 [ 147.996123][ T7346] __sys_sendmsg+0x269/0x350 [ 148.000732][ T7346] ? __pfx_lock_release+0x10/0x10 [ 148.005769][ T7346] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.011403][ T7346] ? __pfx_vfs_write+0x10/0x10 [ 148.016165][ T7346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.022570][ T7346] ? do_syscall_64+0x100/0x230 [ 148.027329][ T7346] ? do_syscall_64+0xb6/0x230 [ 148.031998][ T7346] do_syscall_64+0xf3/0x230 [ 148.036487][ T7346] ? clear_bhb_loop+0x35/0x90 [ 148.041151][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.047041][ T7346] RIP: 0033:0x7f7ce4785d29 [ 148.051449][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.071054][ T7346] RSP: 002b:00007f7ce5528038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.079464][ T7346] RAX: ffffffffffffffda RBX: 00007f7ce4975fa0 RCX: 00007f7ce4785d29 [ 148.087442][ T7346] RDX: 0000000004000004 RSI: 0000000020000100 RDI: 0000000000000003 [ 148.095404][ T7346] RBP: 00007f7ce5528090 R08: 0000000000000000 R09: 0000000000000000 [ 148.103367][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.111763][ T7346] R13: 0000000000000000 R14: 00007f7ce4975fa0 R15: 00007f7ce4a9fa28 [ 148.119739][ T7346] [ 148.128814][ T5855] usb 5-1: USB disconnect, device number 11 [ 148.190671][ T7220] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 148.225873][ T7220] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 148.251120][ T5829] Bluetooth: hci4: command tx timeout [ 148.276153][ T7349] FAULT_INJECTION: forcing a failure. [ 148.276153][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 148.305809][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.7.307 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 148.316470][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 148.326559][ T7349] Call Trace: [ 148.329868][ T7349] [ 148.332926][ T7349] dump_stack_lvl+0x241/0x360 [ 148.337633][ T7349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.342842][ T7349] ? __pfx__printk+0x10/0x10 [ 148.347438][ T7349] ? __kmalloc_cache_noprof+0x48/0x390 [ 148.352934][ T7349] ? __pfx___might_resched+0x10/0x10 [ 148.358214][ T7349] ? lockdep_init_map_type+0xa1/0x910 [ 148.363604][ T7349] should_fail_ex+0x3b0/0x4e0 [ 148.368286][ T7349] should_failslab+0xac/0x100 [ 148.372960][ T7349] __kmalloc_cache_noprof+0x70/0x390 [ 148.378344][ T7349] ? tcf_block_get_ext+0x656/0x1670 [ 148.383551][ T7349] tcf_block_get_ext+0x656/0x1670 [ 148.388634][ T7349] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.394270][ T7349] ? qdisc_alloc+0x7bd/0xa80 [ 148.398878][ T7349] ? qdisc_create+0x182/0x11a0 [ 148.403784][ T7349] tcf_block_get+0xf8/0x150 [ 148.408327][ T7349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.414424][ T7349] ? __pfx_tcf_block_get+0x10/0x10 [ 148.419562][ T7349] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 148.425850][ T7349] ? __pfx_qfq_init_qdisc+0x10/0x10 [ 148.431072][ T7349] qfq_init_qdisc+0x38/0x400 [ 148.435667][ T7349] ? qdisc_lookup+0x350/0x6b0 [ 148.440345][ T7349] ? __pfx_qfq_init_qdisc+0x10/0x10 [ 148.445567][ T7349] qdisc_create+0x9d4/0x11a0 [ 148.450169][ T7349] ? __pfx_qdisc_create+0x10/0x10 [ 148.455303][ T7349] tc_modify_qdisc+0xa26/0x1e40 [ 148.460201][ T7349] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 148.465527][ T7349] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 148.470841][ T7349] rtnetlink_rcv_msg+0x73f/0xcf0 [ 148.475774][ T7349] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 148.480893][ T7349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.486351][ T7349] ? ref_tracker_free+0x643/0x7e0 [ 148.491371][ T7349] netlink_rcv_skb+0x1e3/0x430 [ 148.496125][ T7349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.501655][ T7349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.506952][ T7349] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.512168][ T7349] netlink_unicast+0x7f6/0x990 [ 148.516952][ T7349] ? __pfx_netlink_unicast+0x10/0x10 [ 148.522269][ T7349] ? __virt_addr_valid+0x45f/0x530 [ 148.527422][ T7349] ? __phys_addr_symbol+0x2f/0x70 [ 148.532461][ T7349] ? __check_object_size+0x47a/0x730 [ 148.537740][ T7349] netlink_sendmsg+0x8e4/0xcb0 [ 148.542516][ T7349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.547792][ T7349] ? aa_sock_msg_perm+0x91/0x160 [ 148.552721][ T7349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.558009][ T7349] __sock_sendmsg+0x221/0x270 [ 148.562680][ T7349] ____sys_sendmsg+0x52a/0x7e0 [ 148.567457][ T7349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.572738][ T7349] ? __fget_files+0x2a/0x410 [ 148.577348][ T7349] ? __fget_files+0x2a/0x410 [ 148.581963][ T7349] __sys_sendmmsg+0x36a/0x720 [ 148.586635][ T7349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.591829][ T7349] ? __pfx_lock_release+0x10/0x10 [ 148.596839][ T7349] ? kstrtouint_from_user+0x128/0x190 [ 148.602210][ T7349] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 148.608092][ T7349] ? ksys_write+0x22a/0x2b0 [ 148.612597][ T7349] ? __pfx_lock_release+0x10/0x10 [ 148.617698][ T7349] ? vfs_write+0x730/0xd30 [ 148.622121][ T7349] ? __mutex_unlock_slowpath+0x21e/0x790 [ 148.627756][ T7349] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.633740][ T7349] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.640082][ T7349] ? do_syscall_64+0x100/0x230 [ 148.644845][ T7349] __x64_sys_sendmmsg+0xa0/0xb0 [ 148.649688][ T7349] do_syscall_64+0xf3/0x230 [ 148.654185][ T7349] ? clear_bhb_loop+0x35/0x90 [ 148.658849][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.664734][ T7349] RIP: 0033:0x7f7ce4785d29 [ 148.669132][ T7349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.688736][ T7349] RSP: 002b:00007f7ce5528038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.697148][ T7349] RAX: ffffffffffffffda RBX: 00007f7ce4975fa0 RCX: 00007f7ce4785d29 [ 148.705126][ T7349] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 148.713097][ T7349] RBP: 00007f7ce5528090 R08: 0000000000000000 R09: 0000000000000000 [ 148.721063][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.729025][ T7349] R13: 0000000000000000 R14: 00007f7ce4975fa0 R15: 00007f7ce4a9fa28 [ 148.737013][ T7349] [ 148.779122][ T7220] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 148.799044][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'. [ 149.203520][ T62] bridge_slave_1: left allmulticast mode [ 149.209751][ T62] bridge_slave_1: left promiscuous mode [ 149.212850][ T5829] Bluetooth: hci2: command tx timeout [ 149.217073][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.261640][ T62] bridge_slave_0: left allmulticast mode [ 149.267362][ T62] bridge_slave_0: left promiscuous mode [ 149.305640][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.330773][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 149.490726][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 149.499057][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.517568][ T5879] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 149.528359][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.542611][ T5879] usb 5-1: config 0 descriptor?? [ 149.558169][ T5879] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 149.913052][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.926319][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.942677][ T62] bond0 (unregistering): Released all slaves [ 150.087801][ T62] tipc: Left network mode [ 150.103171][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 150.184645][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.425566][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.440435][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.454084][ T7339] bridge_slave_0: entered allmulticast mode [ 150.469796][ T7339] bridge_slave_0: entered promiscuous mode [ 150.484344][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.521646][ T62] hsr_slave_0: left promiscuous mode [ 150.528561][ T62] hsr_slave_1: left promiscuous mode [ 150.541504][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.549012][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.565643][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.578067][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.609202][ T62] veth1_macvtap: left promiscuous mode [ 150.615279][ T62] veth0_macvtap: left promiscuous mode [ 150.627084][ T62] veth1_vlan: left promiscuous mode [ 150.632885][ T62] veth0_vlan: left promiscuous mode [ 151.238098][ T5879] gspca_vc032x: reg_w err -110 [ 151.243585][ T5879] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 151.293098][ T5829] Bluetooth: hci2: command tx timeout [ 151.409622][ T62] team0 (unregistering): Port device team_slave_1 removed [ 151.456543][ T62] team0 (unregistering): Port device team_slave_0 removed [ 151.463855][ T875] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 151.643778][ T875] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 151.659261][ T875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.677591][ T875] usb 2-1: config 0 descriptor?? [ 151.693677][ T875] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 151.989086][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.997205][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.013966][ T7339] bridge_slave_1: entered allmulticast mode [ 152.051890][ T7339] bridge_slave_1: entered promiscuous mode [ 152.170810][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.177136][ T5884] usb 5-1: USB disconnect, device number 12 [ 152.265918][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.387262][ T7339] team0: Port device team_slave_0 added [ 152.436746][ T875] usb 2-1: USB disconnect, device number 9 [ 152.483600][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.509407][ T7339] team0: Port device team_slave_1 added [ 152.587718][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.594851][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.604380][ T5842] syz-executor (5842) used greatest stack depth: 17656 bytes left [ 152.747763][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.843720][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.860007][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.903220][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.937923][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.945043][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.021913][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.048971][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.236267][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.370845][ T5829] Bluetooth: hci2: command tx timeout [ 153.394041][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.694801][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.694824][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.724686][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.735455][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.743464][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.753131][ T5826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.766856][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.906630][ T12] team0: Port device netdevsim0 removed [ 153.914948][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.969655][ T7339] hsr_slave_0: entered promiscuous mode [ 153.984684][ T7339] hsr_slave_1: entered promiscuous mode [ 154.397980][ T7441] bridge0: port 3(hsr_slave_1) entered blocking state [ 154.413198][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.426659][ T7441] bridge0: port 3(hsr_slave_1) entered disabled state [ 154.439240][ T7441] hsr_slave_1: entered allmulticast mode [ 154.455598][ T7441] bridge0: port 3(hsr_slave_1) entered blocking state [ 154.462550][ T7441] bridge0: port 3(hsr_slave_1) entered forwarding state [ 155.385835][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 155.455514][ T5826] Bluetooth: hci2: command tx timeout [ 155.626625][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.654297][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.664184][ T12] bond0 (unregistering): Released all slaves [ 155.850707][ T5826] Bluetooth: hci1: command tx timeout [ 155.994725][ T7220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.142290][ T7465] FAULT_INJECTION: forcing a failure. [ 156.142290][ T7465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.166381][ T7465] CPU: 1 UID: 0 PID: 7465 Comm: syz.1.328 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 156.177007][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 156.187068][ T7465] Call Trace: [ 156.190341][ T7465] [ 156.193276][ T7465] dump_stack_lvl+0x241/0x360 [ 156.197956][ T7465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.203155][ T7465] ? __pfx__printk+0x10/0x10 [ 156.207742][ T7465] ? __pfx_lock_release+0x10/0x10 [ 156.212763][ T7465] ? __lock_acquire+0x1397/0x2100 [ 156.217787][ T7465] should_fail_ex+0x3b0/0x4e0 [ 156.222475][ T7465] _copy_from_user+0x2f/0xc0 [ 156.227068][ T7465] kstrtouint_from_user+0xc6/0x190 [ 156.232262][ T7465] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 156.237975][ T7465] ? __pfx_lock_acquire+0x10/0x10 [ 156.243001][ T7465] proc_fail_nth_write+0xaa/0x2d0 [ 156.248025][ T7465] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 156.253925][ T7465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.259558][ T7465] ? vfs_write+0x1ed/0xd30 [ 156.263974][ T7465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.269601][ T7465] vfs_write+0x2a3/0xd30 [ 156.273848][ T7465] ? __pfx_vfs_write+0x10/0x10 [ 156.278611][ T7465] ? __fget_files+0x2a/0x410 [ 156.283197][ T7465] ? __fget_files+0x395/0x410 [ 156.287874][ T7465] ? __fget_files+0x2a/0x410 [ 156.292469][ T7465] ksys_write+0x18f/0x2b0 [ 156.296795][ T7465] ? __pfx_ksys_write+0x10/0x10 [ 156.301642][ T7465] ? do_syscall_64+0x100/0x230 [ 156.306407][ T7465] ? do_syscall_64+0xb6/0x230 [ 156.311108][ T7465] do_syscall_64+0xf3/0x230 [ 156.315633][ T7465] ? clear_bhb_loop+0x35/0x90 [ 156.320315][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.326231][ T7465] RIP: 0033:0x7f9a6ed847df [ 156.330666][ T7465] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 156.350279][ T7465] RSP: 002b:00007f9a6cbf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 156.358696][ T7465] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9a6ed847df [ 156.366663][ T7465] RDX: 0000000000000001 RSI: 00007f9a6cbf60a0 RDI: 0000000000000005 [ 156.374635][ T7465] RBP: 00007f9a6cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.382605][ T7465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 156.390577][ T7465] R13: 0000000000000000 R14: 00007f9a6ef75fa0 R15: 00007f9a6f09fa28 [ 156.398821][ T7465] [ 156.503681][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 156.581072][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.588530][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.628666][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.646763][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.702674][ T12] veth1_macvtap: left promiscuous mode [ 156.708250][ T12] veth0_macvtap: left promiscuous mode [ 156.718962][ T12] veth1_vlan: left promiscuous mode [ 156.725156][ T12] veth0_vlan: left promiscuous mode [ 157.509405][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.578015][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.830101][ T7485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.934587][ T5826] Bluetooth: hci1: command tx timeout [ 158.205096][ T7220] veth0_vlan: entered promiscuous mode [ 158.260786][ T7339] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 158.289984][ T7339] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 158.329370][ T7497] fuse: Bad value for 'fd' [ 158.335023][ T7339] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 158.446088][ T7220] veth1_vlan: entered promiscuous mode [ 158.465566][ T7339] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 158.702952][ T7220] veth0_macvtap: entered promiscuous mode [ 158.767744][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.783685][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.793258][ T7508] sctp: [Deprecated]: syz.1.335 (pid 7508) Use of int in max_burst socket option deprecated. [ 158.793258][ T7508] Use struct sctp_assoc_value instead [ 158.809626][ T7428] bridge_slave_0: entered allmulticast mode [ 158.819405][ T7428] bridge_slave_0: entered promiscuous mode [ 158.827757][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.839082][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.852910][ T7428] bridge_slave_1: entered allmulticast mode [ 158.859940][ T7428] bridge_slave_1: entered promiscuous mode [ 158.918659][ T7504] FAULT_INJECTION: forcing a failure. [ 158.918659][ T7504] name failslab, interval 1, probability 0, space 0, times 0 [ 158.943117][ T7504] CPU: 1 UID: 0 PID: 7504 Comm: syz.7.334 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 158.953761][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 158.963830][ T7504] Call Trace: [ 158.967099][ T7504] [ 158.970012][ T7504] dump_stack_lvl+0x241/0x360 [ 158.974703][ T7504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.979911][ T7504] ? __pfx__printk+0x10/0x10 [ 158.984500][ T7504] ? ref_tracker_alloc+0x332/0x490 [ 158.989603][ T7504] should_fail_ex+0x3b0/0x4e0 [ 158.994294][ T7504] should_failslab+0xac/0x100 [ 158.999003][ T7504] ? skb_clone+0x20c/0x390 [ 159.003445][ T7504] kmem_cache_alloc_noprof+0x70/0x380 [ 159.008858][ T7504] skb_clone+0x20c/0x390 [ 159.013130][ T7504] __netlink_deliver_tap+0x3cc/0x7f0 [ 159.018452][ T7504] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.023673][ T7504] netlink_deliver_tap+0x19d/0x1b0 [ 159.028813][ T7504] netlink_sendskb+0x68/0x140 [ 159.033528][ T7504] netlink_unicast+0x39d/0x990 [ 159.038330][ T7504] ? __pfx_netlink_unicast+0x10/0x10 [ 159.043637][ T7504] netlink_rcv_skb+0x262/0x430 [ 159.048393][ T7504] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.053868][ T7504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.059198][ T7504] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.064423][ T7504] netlink_unicast+0x7f6/0x990 [ 159.069221][ T7504] ? __pfx_netlink_unicast+0x10/0x10 [ 159.074551][ T7504] ? __virt_addr_valid+0x45f/0x530 [ 159.079690][ T7504] ? __phys_addr_symbol+0x2f/0x70 [ 159.084746][ T7504] ? __check_object_size+0x47a/0x730 [ 159.090061][ T7504] netlink_sendmsg+0x8e4/0xcb0 [ 159.094868][ T7504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.100179][ T7504] ? aa_sock_msg_perm+0x91/0x160 [ 159.105150][ T7504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.110443][ T7504] __sock_sendmsg+0x221/0x270 [ 159.115115][ T7504] ____sys_sendmsg+0x52a/0x7e0 [ 159.119873][ T7504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.125255][ T7504] ? __fget_files+0x2a/0x410 [ 159.129907][ T7504] ? __fget_files+0x2a/0x410 [ 159.134515][ T7504] __sys_sendmmsg+0x36a/0x720 [ 159.139207][ T7504] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.144423][ T7504] ? __pfx_lock_release+0x10/0x10 [ 159.149486][ T7504] ? kstrtouint_from_user+0x128/0x190 [ 159.154916][ T7504] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 159.160854][ T7504] ? ksys_write+0x22a/0x2b0 [ 159.165386][ T7504] ? __pfx_lock_release+0x10/0x10 [ 159.170442][ T7504] ? vfs_write+0x730/0xd30 [ 159.174908][ T7504] ? __mutex_unlock_slowpath+0x21e/0x790 [ 159.180608][ T7504] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.186622][ T7504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.192981][ T7504] ? do_syscall_64+0x100/0x230 [ 159.197779][ T7504] __x64_sys_sendmmsg+0xa0/0xb0 [ 159.202661][ T7504] do_syscall_64+0xf3/0x230 [ 159.207195][ T7504] ? clear_bhb_loop+0x35/0x90 [ 159.211900][ T7504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.217815][ T7504] RIP: 0033:0x7f7ce4785d29 [ 159.222338][ T7504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.241968][ T7504] RSP: 002b:00007f7ce5528038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.250410][ T7504] RAX: ffffffffffffffda RBX: 00007f7ce4975fa0 RCX: 00007f7ce4785d29 [ 159.258384][ T7504] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 159.266358][ T7504] RBP: 00007f7ce5528090 R08: 0000000000000000 R09: 0000000000000000 [ 159.274330][ T7504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.282324][ T7504] R13: 0000000000000000 R14: 00007f7ce4975fa0 R15: 00007f7ce4a9fa28 [ 159.290300][ T7504] [ 159.307172][ T7220] veth1_macvtap: entered promiscuous mode [ 159.361749][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.508272][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.625601][ T7428] team0: Port device team_slave_0 added [ 159.633112][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.643968][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.654468][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.665513][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.677981][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.698911][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.735322][ T7428] team0: Port device team_slave_1 added [ 159.828947][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.918477][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.946545][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.007729][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.018782][ T5826] Bluetooth: hci1: command tx timeout [ 160.038910][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.046168][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.071560][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.078707][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.088558][ T7544] FAULT_INJECTION: forcing a failure. [ 160.088558][ T7544] name failslab, interval 1, probability 0, space 0, times 0 [ 160.112948][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.134199][ T7544] CPU: 1 UID: 0 PID: 7544 Comm: syz.1.341 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 160.144851][ T7544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 160.154942][ T7544] Call Trace: [ 160.158256][ T7544] [ 160.161225][ T7544] dump_stack_lvl+0x241/0x360 [ 160.165940][ T7544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.171175][ T7544] ? __pfx__printk+0x10/0x10 [ 160.175801][ T7544] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 160.182344][ T7544] ? __pfx___might_resched+0x10/0x10 [ 160.187676][ T7544] should_fail_ex+0x3b0/0x4e0 [ 160.192398][ T7544] should_failslab+0xac/0x100 [ 160.197115][ T7544] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 160.200702][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.203456][ T7544] ? smb3_parse_devname+0xcb/0x770 [ 160.216935][ T7220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.218337][ T7544] ? smb3_parse_devname+0xe2/0x770 [ 160.229775][ T7220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.233825][ T7544] kstrndup+0x41/0xb0 [ 160.233859][ T7544] smb3_parse_devname+0xe2/0x770 [ 160.233881][ T7544] ? smb3_fs_context_parse_param+0x817/0x7ef0 [ 160.233906][ T7544] smb3_fs_context_parse_param+0x857/0x7ef0 [ 160.233931][ T7544] ? __pfx___mutex_lock+0x10/0x10 [ 160.248659][ T7220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.252611][ T7544] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 160.252652][ T7544] ? static_key_count+0x41/0x70 [ 160.252679][ T7544] vfs_parse_fs_param+0x1a5/0x420 [ 160.252705][ T7544] __se_sys_fsconfig+0xc34/0xf60 [ 160.252736][ T7544] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 160.252759][ T7544] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 160.252782][ T7544] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.271863][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.276902][ T7544] ? do_syscall_64+0x100/0x230 [ 160.291018][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.293097][ T7544] ? __x64_sys_fsconfig+0x20/0xc0 [ 160.299886][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.303469][ T7544] do_syscall_64+0xf3/0x230 [ 160.303502][ T7544] ? clear_bhb_loop+0x35/0x90 [ 160.303525][ T7544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.303549][ T7544] RIP: 0033:0x7f9a6ed85d29 [ 160.303567][ T7544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.303582][ T7544] RSP: 002b:00007f9a6cbf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 160.303603][ T7544] RAX: ffffffffffffffda RBX: 00007f9a6ef75fa0 RCX: 00007f9a6ed85d29 [ 160.303618][ T7544] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000003 [ 160.303631][ T7544] RBP: 00007f9a6cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.303643][ T7544] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 160.303655][ T7544] R13: 0000000000000000 R14: 00007f9a6ef75fa0 R15: 00007f9a6f09fa28 [ 160.338598][ T7339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.353521][ T7544] [ 160.390890][ T7544] CIFS: VFS: Unable to allocate memory for devname [ 160.434275][ T7339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.515985][ T7220] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.525455][ T7220] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.536750][ T7220] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.546138][ T7220] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.765262][ T7428] hsr_slave_0: entered promiscuous mode [ 160.787658][ T7428] hsr_slave_1: entered promiscuous mode [ 160.804801][ T7428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.817088][ T7428] Cannot create hsr debugfs directory [ 160.937123][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.134666][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.191984][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.241247][ T7339] veth0_vlan: entered promiscuous mode [ 161.312490][ T7339] veth1_vlan: entered promiscuous mode [ 161.369008][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.402119][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.766944][ T7339] veth0_macvtap: entered promiscuous mode [ 161.965240][ T7339] veth1_macvtap: entered promiscuous mode [ 162.002287][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.041625][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.070685][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.090875][ T5826] Bluetooth: hci1: command tx timeout [ 162.106579][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.116641][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.127271][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.143083][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.246240][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.270589][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.299282][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.320574][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.330436][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.397270][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.423327][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.438545][ T7339] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.467056][ T7339] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.482143][ T7339] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.497918][ T7339] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.719613][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.743313][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.842697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.854390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.901705][ T7428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.927548][ T7428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.961941][ T7428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.984045][ T7428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.154884][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.208644][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.228504][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.235642][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.253636][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.260822][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.341836][ T51] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 163.438397][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.509469][ T7428] veth0_vlan: entered promiscuous mode [ 163.543558][ T51] usb 10-1: Using ep0 maxpacket: 32 [ 163.559945][ T7428] veth1_vlan: entered promiscuous mode [ 163.573647][ T51] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.620629][ T51] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.642350][ T7428] veth0_macvtap: entered promiscuous mode [ 163.667419][ T51] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 163.674497][ T7428] veth1_macvtap: entered promiscuous mode [ 163.688897][ T51] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 163.719672][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.738802][ T51] usb 10-1: Product: syz [ 163.749124][ T51] usb 10-1: Manufacturer: syz [ 163.760576][ T51] usb 10-1: SerialNumber: syz [ 163.761385][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.784745][ T51] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input15 [ 163.805688][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.832979][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.871293][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.871320][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.871338][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.871360][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.875154][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.896588][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.896613][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.896625][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.896640][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.896651][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.896664][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.896676][ T7428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.896690][ T7428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.897572][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.913883][ T7634] bridge_slave_1: left allmulticast mode [ 163.913940][ T7634] bridge_slave_1: left promiscuous mode [ 163.914721][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.975993][ T7428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.976029][ T7428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.976052][ T7428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.976075][ T7428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.989542][ T51] usb 10-1: USB disconnect, device number 2 [ 164.006396][ T51] appletouch 10-1:1.0: input: appletouch disconnected [ 164.123595][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.123619][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.156563][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.156589][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.111857][ T7672] FAULT_INJECTION: forcing a failure. [ 166.111857][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 166.220702][ T7672] CPU: 0 UID: 0 PID: 7672 Comm: syz.9.370 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 166.231310][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 166.241443][ T7672] Call Trace: [ 166.244717][ T7672] [ 166.247638][ T7672] dump_stack_lvl+0x241/0x360 [ 166.252313][ T7672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.257501][ T7672] ? __pfx__printk+0x10/0x10 [ 166.262082][ T7672] ? __kmalloc_noprof+0xb5/0x4c0 [ 166.267006][ T7672] ? __pfx___might_resched+0x10/0x10 [ 166.272285][ T7672] should_fail_ex+0x3b0/0x4e0 [ 166.276993][ T7672] should_failslab+0xac/0x100 [ 166.281677][ T7672] __kmalloc_noprof+0xdd/0x4c0 [ 166.286447][ T7672] ? memcg_list_lru_alloc+0x2c5/0x9e0 [ 166.291852][ T7672] memcg_list_lru_alloc+0x2c5/0x9e0 [ 166.297058][ T7672] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 166.302794][ T7672] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 166.308541][ T7672] ? get_mem_cgroup_from_objcg+0x1af/0x1d0 [ 166.314335][ T7672] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 166.320042][ T7672] __memcg_slab_post_alloc_hook+0x140/0x7e0 [ 166.325956][ T7672] ? hugetlbfs_alloc_inode+0xf5/0x140 [ 166.331346][ T7672] ? hugetlbfs_alloc_inode+0xf5/0x140 [ 166.336794][ T7672] kmem_cache_alloc_lru_noprof+0x28e/0x390 [ 166.342593][ T7672] hugetlbfs_alloc_inode+0xf5/0x140 [ 166.347777][ T7672] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 166.353571][ T7672] alloc_inode+0x65/0x1a0 [ 166.357905][ T7672] new_inode+0x22/0x1d0 [ 166.362048][ T7672] ? resv_map_alloc+0x1c4/0x2c0 [ 166.366973][ T7672] hugetlbfs_get_inode+0x74/0x690 [ 166.372009][ T7672] hugetlb_file_setup+0x204/0x5c0 [ 166.377032][ T7672] ksys_mmap_pgoff+0x20d/0x720 [ 166.381791][ T7672] do_syscall_64+0xf3/0x230 [ 166.386287][ T7672] ? clear_bhb_loop+0x35/0x90 [ 166.390983][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.396899][ T7672] RIP: 0033:0x7f2bac785d29 [ 166.401318][ T7672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.420914][ T7672] RSP: 002b:00007f2baa5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 166.429336][ T7672] RAX: ffffffffffffffda RBX: 00007f2bac975fa0 RCX: 00007f2bac785d29 [ 166.437317][ T7672] RDX: 0000000003000006 RSI: 0000000000800000 RDI: 0000000020800000 [ 166.445281][ T7672] RBP: 00007f2baa5f6090 R08: ffffffffffffffff R09: 0000000180000000 [ 166.453335][ T7672] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000001 [ 166.461329][ T7672] R13: 0000000000000001 R14: 00007f2bac975fa0 R15: 00007f2baca9fa28 [ 166.469328][ T7672] [ 166.472455][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.789579][ T7683] netlink: 'syz.9.373': attribute type 4 has an invalid length. [ 166.963463][ T7688] netlink: 'syz.2.375': attribute type 32 has an invalid length. [ 167.349500][ T5879] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.686450][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 167.694373][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.719189][ T5879] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.817945][ T5879] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 167.851587][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 167.906258][ T5879] usb 2-1: Product: syz [ 167.910445][ T5879] usb 2-1: Manufacturer: syz [ 167.945639][ T5879] usb 2-1: SerialNumber: syz [ 167.958464][ T7730] bridge_slave_1: left allmulticast mode [ 168.061884][ T5879] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16 [ 168.168492][ T7730] bridge_slave_1: left promiscuous mode [ 168.202570][ T5879] usb 2-1: USB disconnect, device number 10 [ 168.279592][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.345080][ T5879] appletouch 2-1:1.0: input: appletouch disconnected [ 169.769970][ T7767] syz_tun: entered allmulticast mode [ 169.780220][ T7767] dvmrp0: entered allmulticast mode [ 169.787767][ T7767] dvmrp0: left allmulticast mode [ 169.797178][ T7767] syz_tun: left allmulticast mode [ 170.382280][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.515587][ T7822] netlink: 68 bytes leftover after parsing attributes in process `syz.9.392'. [ 173.010664][ T5855] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 173.293531][ T5855] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.310654][ T5855] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 173.350393][ T5855] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 173.377325][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.417456][ T5855] usb 10-1: config 0 descriptor?? [ 173.476642][ T7847] FAULT_INJECTION: forcing a failure. [ 173.476642][ T7847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.512069][ T7847] CPU: 1 UID: 0 PID: 7847 Comm: syz.7.397 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 173.522720][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 173.532795][ T7847] Call Trace: [ 173.536075][ T7847] [ 173.539028][ T7847] dump_stack_lvl+0x241/0x360 [ 173.543716][ T7847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.548914][ T7847] ? __pfx__printk+0x10/0x10 [ 173.553508][ T7847] ? __pfx_lock_release+0x10/0x10 [ 173.558623][ T7847] ? __lock_acquire+0x1397/0x2100 [ 173.563650][ T7847] should_fail_ex+0x3b0/0x4e0 [ 173.568338][ T7847] _copy_from_user+0x2f/0xc0 [ 173.572939][ T7847] kstrtouint_from_user+0xc6/0x190 [ 173.578050][ T7847] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 173.583769][ T7847] ? __pfx_lock_acquire+0x10/0x10 [ 173.588800][ T7847] proc_fail_nth_write+0xaa/0x2d0 [ 173.593822][ T7847] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 173.599713][ T7847] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.605361][ T7847] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.610994][ T7847] vfs_write+0x2a3/0xd30 [ 173.615237][ T7847] ? __pfx_vfs_write+0x10/0x10 [ 173.619995][ T7847] ? __fget_files+0x2a/0x410 [ 173.624587][ T7847] ? __fget_files+0x395/0x410 [ 173.629278][ T7847] ? __fget_files+0x2a/0x410 [ 173.633960][ T7847] ksys_write+0x18f/0x2b0 [ 173.638298][ T7847] ? __pfx_ksys_write+0x10/0x10 [ 173.643147][ T7847] ? do_syscall_64+0x100/0x230 [ 173.647917][ T7847] ? do_syscall_64+0xb6/0x230 [ 173.652596][ T7847] do_syscall_64+0xf3/0x230 [ 173.657120][ T7847] ? clear_bhb_loop+0x35/0x90 [ 173.661804][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.667786][ T7847] RIP: 0033:0x7f7ce47847df [ 173.672204][ T7847] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 173.691813][ T7847] RSP: 002b:00007f7ce5528030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 173.700228][ T7847] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ce47847df [ 173.708198][ T7847] RDX: 0000000000000001 RSI: 00007f7ce55280a0 RDI: 0000000000000005 [ 173.716170][ T7847] RBP: 00007f7ce5528090 R08: 0000000000000000 R09: 0000000000000000 [ 173.724139][ T7847] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 173.732104][ T7847] R13: 0000000000000000 R14: 00007f7ce4975fa0 R15: 00007f7ce4a9fa28 [ 173.740084][ T7847] [ 173.775825][ T5855] Bluetooth: Can't get state to change to load ram patch err [ 173.787899][ T5855] Bluetooth: Loading patch file failed [ 173.798346][ T5855] ath3k 10-1:0.0: probe with driver ath3k failed with error -121 [ 174.063395][ T8] usb 10-1: USB disconnect, device number 3 [ 174.240735][ T51] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.413152][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 174.435751][ T51] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.457348][ T51] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.480645][ T51] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.490865][ T51] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.504181][ T51] usb 2-1: config 0 interface 0 has no altsetting 0 [ 174.511088][ T51] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 174.520232][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.537734][ T51] usb 2-1: config 0 descriptor?? [ 174.994471][ T51] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0006/input/input17 [ 175.091145][ T51] kye 0003:0458:5010.0006: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 175.584594][ T5855] usb 2-1: USB disconnect, device number 11 [ 175.697551][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.406'. [ 176.847482][ T7929] bridge_slave_1: left allmulticast mode [ 176.882261][ T7929] bridge_slave_1: left promiscuous mode [ 176.920854][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.493776][ T5855] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.767561][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 177.879900][ T7972] delete_channel: no stack [ 177.934925][ T7972] delete_channel: no stack [ 178.421705][ T912] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 178.612711][ T912] usb 9-1: Using ep0 maxpacket: 16 [ 178.632580][ T912] usb 9-1: config 0 has an invalid interface number: 219 but max is 0 [ 178.664183][ T912] usb 9-1: config 0 has no interface number 0 [ 178.692120][ T912] usb 9-1: config 0 interface 219 has no altsetting 0 [ 178.709282][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.727581][ T912] usb 9-1: New USB device found, idVendor=78e6, idProduct=2ca6, bcdDevice=85.f6 [ 178.761098][ T912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.789397][ T912] usb 9-1: Product: syz [ 178.806235][ T912] usb 9-1: Manufacturer: syz [ 178.824224][ T912] usb 9-1: SerialNumber: syz [ 178.844155][ T912] usb 9-1: config 0 descriptor?? [ 178.879629][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.918118][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.947639][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.984538][ T8] usb 3-1: config 0 descriptor?? [ 179.015229][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 179.419090][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 179.446550][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 179.481445][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 179.692440][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.722955][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.860638][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.871606][ T5855] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.170702][ T5855] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 180.179861][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 180.188318][ T5855] usb 2-1: Product: syz [ 180.192577][ T5855] usb 2-1: Manufacturer: syz [ 180.219505][ T5855] usb 2-1: SerialNumber: syz [ 180.410005][ T5855] usb 2-1: can't set config #1, error -71 [ 183.936928][ T912] usb 9-1: bad CDC descriptors [ 184.573588][ T8] pwc: recv_control_msg error -110 req 04 val 1300 [ 184.580984][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 184.610772][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 184.620450][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 184.656198][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 184.683711][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 184.690414][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 184.713947][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 184.720743][ T8] pwc: recv_control_msg error -32 req 02 val 2900 [ 184.750745][ T8] pwc: recv_control_msg error -32 req 02 val 2800 [ 184.760416][ T8] pwc: recv_control_msg error -32 req 04 val 1100 [ 184.773821][ T8] pwc: recv_control_msg error -32 req 04 val 1200 [ 184.794172][ T8] pwc: Registered as video103. [ 184.799729][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 189.564398][ T7958] sched: DL replenish lagged too much [ 189.633398][ T5855] usb 2-1: USB disconnect, device number 12 [ 189.691268][ T51] usb 9-1: USB disconnect, device number 2 [ 190.387302][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 190.594821][ T5883] usb 3-1: USB disconnect, device number 6 [ 192.148725][ T8459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.910708][ T51] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.072888][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 194.093205][ T51] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 194.111738][ T51] usb 2-1: config 0 has no interface number 0 [ 194.139534][ T51] usb 2-1: config 0 interface 136 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1023 [ 194.175753][ T51] usb 2-1: config 0 interface 136 altsetting 128 endpoint 0x3 has an invalid bInterval 209, changing to 11 [ 194.248462][ T51] usb 2-1: config 0 interface 136 has no altsetting 0 [ 194.293351][ T51] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=5d.79 [ 194.345896][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.421495][ T51] usb 2-1: config 0 descriptor?? [ 194.427039][ T8521] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.639763][ T8521] process 'syz.1.441' launched '/dev/fd/3' with NULL argv: empty string added [ 194.658079][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.664934][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.597734][ T8586] netlink: 'syz.2.448': attribute type 4 has an invalid length. [ 195.625558][ T8586] netlink: 'syz.2.448': attribute type 4 has an invalid length. [ 195.757578][ T8559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.824388][ T8591] kvm: emulating exchange as write [ 195.846105][ T8591] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.192639][ T8604] bridge_slave_0: left allmulticast mode [ 196.202199][ T8604] bridge_slave_0: left promiscuous mode [ 196.211667][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.674579][ T5889] usb 2-1: USB disconnect, device number 13 [ 196.699535][ T5889] ================================================================== [ 196.707647][ T5889] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 196.715301][ T5889] Read of size 8 at addr ffff88802537d898 by task kworker/1:6/5889 [ 196.723177][ T5889] [ 196.725494][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:6 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 196.736242][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 196.746296][ T5889] Workqueue: usb_hub_wq hub_event [ 196.751338][ T5889] Call Trace: [ 196.752602][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 196.754615][ T5889] [ 196.763520][ T5889] dump_stack_lvl+0x241/0x360 [ 196.768208][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.773403][ T5889] ? __pfx__printk+0x10/0x10 [ 196.778000][ T5889] ? _printk+0xd5/0x120 [ 196.782158][ T5889] ? __virt_addr_valid+0x183/0x530 [ 196.787268][ T5889] ? __virt_addr_valid+0x183/0x530 [ 196.792368][ T5889] print_report+0x169/0x550 [ 196.796871][ T5889] ? __virt_addr_valid+0x183/0x530 [ 196.801971][ T5889] ? __virt_addr_valid+0x183/0x530 [ 196.807082][ T5889] ? __virt_addr_valid+0x45f/0x530 [ 196.812288][ T5889] ? __phys_addr+0xba/0x170 [ 196.816780][ T5889] ? hdm_disconnect+0x10d/0x1c0 [ 196.821625][ T5889] kasan_report+0x143/0x180 [ 196.826112][ T5889] ? kobject_put+0x272/0x480 [ 196.830698][ T5889] ? hdm_disconnect+0x10d/0x1c0 [ 196.835535][ T5889] hdm_disconnect+0x10d/0x1c0 [ 196.840203][ T5889] usb_unbind_interface+0x25b/0x940 [ 196.845393][ T5889] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 196.851105][ T5889] ? __pfx_usb_unbind_interface+0x10/0x10 [ 196.856897][ T5889] device_release_driver_internal+0x503/0x7c0 [ 196.863049][ T5889] bus_remove_device+0x34f/0x420 [ 196.867976][ T5889] device_del+0x57a/0x9b0 [ 196.872313][ T5889] ? kobject_put+0x272/0x480 [ 196.876894][ T5889] ? __pfx_device_del+0x10/0x10 [ 196.881745][ T5889] ? kobject_put+0x44d/0x480 [ 196.886337][ T5889] usb_disable_device+0x3bf/0x850 [ 196.891347][ T5889] usb_disconnect+0x340/0x950 [ 196.896025][ T5889] hub_event+0x1ebc/0x5150 [ 196.900424][ T5889] ? debug_object_deactivate+0x2d5/0x390 [ 196.906047][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 196.911237][ T5889] ? __pfx_hub_event+0x10/0x10 [ 196.916005][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 196.921016][ T5889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.926979][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.933290][ T5889] ? process_scheduled_works+0x976/0x1840 [ 196.938992][ T5889] process_scheduled_works+0xa66/0x1840 [ 196.944551][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.950520][ T5889] ? assign_work+0x364/0x3d0 [ 196.955109][ T5889] worker_thread+0x870/0xd30 [ 196.959685][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 196.965567][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 196.970580][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 196.975691][ T5889] kthread+0x2f0/0x390 [ 196.979740][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 196.984850][ T5889] ? __pfx_kthread+0x10/0x10 [ 196.989437][ T5889] ret_from_fork+0x4b/0x80 [ 196.993838][ T5889] ? __pfx_kthread+0x10/0x10 [ 196.998427][ T5889] ret_from_fork_asm+0x1a/0x30 [ 197.003179][ T5889] [ 197.006179][ T5889] [ 197.008480][ T5889] Allocated by task 51: [ 197.012610][ T5889] kasan_save_track+0x3f/0x80 [ 197.017277][ T5889] __kasan_kmalloc+0x98/0xb0 [ 197.021853][ T5889] __kmalloc_cache_noprof+0x243/0x390 [ 197.027211][ T5889] hdm_probe+0x98/0x13e0 [ 197.031439][ T5889] usb_probe_interface+0x641/0xbb0 [ 197.036537][ T5889] really_probe+0x2b8/0xad0 [ 197.041021][ T5889] __driver_probe_device+0x1a2/0x390 [ 197.046285][ T5889] driver_probe_device+0x50/0x430 [ 197.051291][ T5889] __device_attach_driver+0x2d6/0x530 [ 197.056645][ T5889] bus_for_each_drv+0x24e/0x2e0 [ 197.061489][ T5889] __device_attach+0x333/0x520 [ 197.066231][ T5889] bus_probe_device+0x189/0x260 [ 197.071080][ T5889] device_add+0x856/0xbf0 [ 197.075403][ T5889] usb_set_configuration+0x1976/0x1fb0 [ 197.080844][ T5889] usb_generic_driver_probe+0x88/0x140 [ 197.086300][ T5889] usb_probe_device+0x1b8/0x380 [ 197.091157][ T5889] really_probe+0x2b8/0xad0 [ 197.095653][ T5889] __driver_probe_device+0x1a2/0x390 [ 197.100936][ T5889] driver_probe_device+0x50/0x430 [ 197.105970][ T5889] __device_attach_driver+0x2d6/0x530 [ 197.111339][ T5889] bus_for_each_drv+0x24e/0x2e0 [ 197.116189][ T5889] __device_attach+0x333/0x520 [ 197.120961][ T5889] bus_probe_device+0x189/0x260 [ 197.125801][ T5889] device_add+0x856/0xbf0 [ 197.130119][ T5889] usb_new_device+0x104a/0x19a0 [ 197.134954][ T5889] hub_event+0x2d6d/0x5150 [ 197.139475][ T5889] process_scheduled_works+0xa66/0x1840 [ 197.145001][ T5889] worker_thread+0x870/0xd30 [ 197.149577][ T5889] kthread+0x2f0/0x390 [ 197.153633][ T5889] ret_from_fork+0x4b/0x80 [ 197.158033][ T5889] ret_from_fork_asm+0x1a/0x30 [ 197.162783][ T5889] [ 197.165086][ T5889] Freed by task 5889: [ 197.169041][ T5889] kasan_save_track+0x3f/0x80 [ 197.173705][ T5889] kasan_save_free_info+0x40/0x50 [ 197.178714][ T5889] __kasan_slab_free+0x59/0x70 [ 197.183463][ T5889] kfree+0x196/0x430 [ 197.187341][ T5889] device_release+0x99/0x1c0 [ 197.191920][ T5889] kobject_put+0x22f/0x480 [ 197.196321][ T5889] hdm_disconnect+0xf3/0x1c0 [ 197.200897][ T5889] usb_unbind_interface+0x25b/0x940 [ 197.206094][ T5889] device_release_driver_internal+0x503/0x7c0 [ 197.212166][ T5889] bus_remove_device+0x34f/0x420 [ 197.217099][ T5889] device_del+0x57a/0x9b0 [ 197.221415][ T5889] usb_disable_device+0x3bf/0x850 [ 197.226429][ T5889] usb_disconnect+0x340/0x950 [ 197.231086][ T5889] hub_event+0x1ebc/0x5150 [ 197.235504][ T5889] process_scheduled_works+0xa66/0x1840 [ 197.241033][ T5889] worker_thread+0x870/0xd30 [ 197.245611][ T5889] kthread+0x2f0/0x390 [ 197.249660][ T5889] ret_from_fork+0x4b/0x80 [ 197.254064][ T5889] ret_from_fork_asm+0x1a/0x30 [ 197.258814][ T5889] [ 197.261117][ T5889] The buggy address belongs to the object at ffff88802537c000 [ 197.261117][ T5889] which belongs to the cache kmalloc-8k of size 8192 [ 197.275169][ T5889] The buggy address is located 6296 bytes inside of [ 197.275169][ T5889] freed 8192-byte region [ffff88802537c000, ffff88802537e000) [ 197.289140][ T5889] [ 197.291454][ T5889] The buggy address belongs to the physical page: [ 197.297924][ T5889] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25378 [ 197.306671][ T5889] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 197.315151][ T5889] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 197.322705][ T5889] page_type: f5(slab) [ 197.326687][ T5889] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 197.335249][ T5889] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 197.343812][ T5889] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 197.352460][ T5889] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 197.361112][ T5889] head: 00fff00000000003 ffffea000094de01 ffffffffffffffff 0000000000000000 [ 197.369760][ T5889] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 197.378406][ T5889] page dumped because: kasan: bad access detected [ 197.384805][ T5889] page_owner tracks the page as allocated [ 197.390500][ T5889] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5498, tgid 5498 (dhcpcd), ts 194065088248, free_ts 189944903264 [ 197.411345][ T5889] post_alloc_hook+0x1f3/0x230 [ 197.416100][ T5889] get_page_from_freelist+0x365c/0x37a0 [ 197.421633][ T5889] __alloc_pages_noprof+0x292/0x710 [ 197.426817][ T5889] alloc_pages_mpol_noprof+0x3e8/0x680 [ 197.432269][ T5889] alloc_slab_page+0x6a/0x110 [ 197.436944][ T5889] allocate_slab+0x5a/0x2b0 [ 197.441438][ T5889] ___slab_alloc+0xc27/0x14a0 [ 197.446100][ T5889] __slab_alloc+0x58/0xa0 [ 197.450411][ T5889] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 197.456813][ T5889] kmalloc_reserve+0x111/0x2a0 [ 197.461559][ T5889] __alloc_skb+0x1f3/0x440 [ 197.465953][ T5889] netlink_dump+0x1ee/0xe10 [ 197.470437][ T5889] netlink_recvmsg+0x6bb/0x11d0 [ 197.475266][ T5889] sock_recvmsg+0x22f/0x280 [ 197.479750][ T5889] ____sys_recvmsg+0x1c6/0x480 [ 197.484495][ T5889] __sys_recvmsg+0x291/0x390 [ 197.489067][ T5889] page last free pid 8427 tgid 8427 stack trace: [ 197.495371][ T5889] free_unref_page+0xd3f/0x1010 [ 197.500209][ T5889] __put_partials+0x160/0x1c0 [ 197.504878][ T5889] put_cpu_partial+0x17c/0x250 [ 197.509639][ T5889] __slab_free+0x290/0x380 [ 197.514037][ T5889] qlist_free_all+0x9a/0x140 [ 197.518608][ T5889] kasan_quarantine_reduce+0x14f/0x170 [ 197.524046][ T5889] __kasan_slab_alloc+0x23/0x80 [ 197.528883][ T5889] kmem_cache_alloc_noprof+0x1d9/0x380 [ 197.534327][ T5889] getname_flags+0xb7/0x540 [ 197.538816][ T5889] __x64_sys_symlinkat+0x7a/0xb0 [ 197.543741][ T5889] do_syscall_64+0xf3/0x230 [ 197.548239][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.554131][ T5889] [ 197.556440][ T5889] Memory state around the buggy address: [ 197.562136][ T5889] ffff88802537d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.570174][ T5889] ffff88802537d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.578299][ T5889] >ffff88802537d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.586333][ T5889] ^ [ 197.591168][ T5889] ffff88802537d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.599209][ T5889] ffff88802537d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.607247][ T5889] ================================================================== [ 197.615383][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.870664][ T5889] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.877996][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:6 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 197.888855][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 197.898925][ T5889] Workqueue: usb_hub_wq hub_event [ 197.903960][ T5889] Call Trace: [ 197.907336][ T5889] [ 197.910280][ T5889] dump_stack_lvl+0x241/0x360 [ 197.914983][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.920213][ T5889] ? __pfx__printk+0x10/0x10 [ 197.924823][ T5889] ? preempt_schedule+0xe1/0xf0 [ 197.929668][ T5889] ? vscnprintf+0x5d/0x90 [ 197.934000][ T5889] panic+0x349/0x880 [ 197.937915][ T5889] ? check_panic_on_warn+0x21/0xb0 [ 197.943130][ T5889] ? __pfx_panic+0x10/0x10 [ 197.947559][ T5889] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 197.953538][ T5889] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.959859][ T5889] ? print_report+0x502/0x550 [ 197.964529][ T5889] check_panic_on_warn+0x86/0xb0 [ 197.969458][ T5889] ? hdm_disconnect+0x10d/0x1c0 [ 197.974388][ T5889] end_report+0x77/0x160 [ 197.978620][ T5889] kasan_report+0x154/0x180 [ 197.983116][ T5889] ? kobject_put+0x272/0x480 [ 197.987705][ T5889] ? hdm_disconnect+0x10d/0x1c0 [ 197.992557][ T5889] hdm_disconnect+0x10d/0x1c0 [ 197.997231][ T5889] usb_unbind_interface+0x25b/0x940 [ 198.002431][ T5889] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 198.008143][ T5889] ? __pfx_usb_unbind_interface+0x10/0x10 [ 198.013854][ T5889] device_release_driver_internal+0x503/0x7c0 [ 198.019911][ T5889] bus_remove_device+0x34f/0x420 [ 198.024845][ T5889] device_del+0x57a/0x9b0 [ 198.029165][ T5889] ? kobject_put+0x272/0x480 [ 198.033767][ T5889] ? __pfx_device_del+0x10/0x10 [ 198.038611][ T5889] ? kobject_put+0x44d/0x480 [ 198.043203][ T5889] usb_disable_device+0x3bf/0x850 [ 198.048222][ T5889] usb_disconnect+0x340/0x950 [ 198.052891][ T5889] hub_event+0x1ebc/0x5150 [ 198.057393][ T5889] ? debug_object_deactivate+0x2d5/0x390 [ 198.063027][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 198.068223][ T5889] ? __pfx_hub_event+0x10/0x10 [ 198.072976][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 198.077990][ T5889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 198.083964][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.090286][ T5889] ? process_scheduled_works+0x976/0x1840 [ 198.095995][ T5889] process_scheduled_works+0xa66/0x1840 [ 198.101538][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 198.107532][ T5889] ? assign_work+0x364/0x3d0 [ 198.112136][ T5889] worker_thread+0x870/0xd30 [ 198.116733][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 198.122647][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 198.127695][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 198.132819][ T5889] kthread+0x2f0/0x390 [ 198.136891][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 198.142003][ T5889] ? __pfx_kthread+0x10/0x10 [ 198.146590][ T5889] ret_from_fork+0x4b/0x80 [ 198.150999][ T5889] ? __pfx_kthread+0x10/0x10 [ 198.155589][ T5889] ret_from_fork_asm+0x1a/0x30 [ 198.160346][ T5889] [ 198.163651][ T5889] Kernel Offset: disabled [ 198.167989][ T5889] Rebooting in 86400 seconds..