last executing test programs: 2m46.109049895s ago: executing program 4 (id=935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000180)=0x8) 2m15.944920817s ago: executing program 4 (id=935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000180)=0x8) 1m59.399575877s ago: executing program 4 (id=935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000180)=0x8) 1m29.597727923s ago: executing program 4 (id=935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000180)=0x8) 12.161483057s ago: executing program 4 (id=935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000180)=0x8) 12.150977961s ago: executing program 4 (id=935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000190000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000180)=0x8) 8.106659324s ago: executing program 0 (id=1938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb00000000160000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400210000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000200000000000000fe8000000000000000000000000000bb"], 0x154}}, 0x0) fgetxattr(r2, &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f0000000940)=""/210, 0xd2) write$P9_RVERSION(r1, &(0x7f0000000e40)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise_type}, {@fsname}]}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = inotify_init1(0x0) r8 = inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x400) r9 = syz_io_uring_setup(0x516e, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r9, 0xb15, 0x0, 0x0, 0x0, 0x0) r12 = dup(r7) inotify_rm_watch(r12, r8) r13 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r13, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r14, 0xffffffffffffffff, 0x1000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r15, &(0x7f0000000000), &(0x7f0000000380)=@udp=r13, 0x2}, 0x20) 6.323116971s ago: executing program 0 (id=1943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) sendmmsg$alg(r1, &(0x7f0000004240)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}], 0x1, 0x0) 5.271143819s ago: executing program 0 (id=1949): r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x501880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/92) write$smackfs_access(r0, 0x0, 0x34) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000180)="5febd0a274ef68c04bcf8714eaffa77ac14ffc04324d8a3a23bfeadff2179674faf663285879ce4c181a39cdacf74bff553352c4b3b1", 0x36}, {&(0x7f00000000c0)="99", 0x1}], 0x2) 5.097199592s ago: executing program 0 (id=1950): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003802de0b34fe0000000400fea52c0002000000000000110400000000000000000000000000000901000000020000000000000802084e00000000000000000e030000000000000000003082db2eb2b639014ed433f586a743bad4b690aef9bf892a3bf0872d1c4dbfb1ae207924e623979557fec190f53aaf"], 0x0, 0x54}, 0x20) 4.862219836s ago: executing program 0 (id=1952): socket$qrtr(0x2a, 0x2, 0x0) fsopen(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x66dad841, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x24020400) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x6, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f000031e000/0x2000)=nil, 0x2000}, 0x3}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, 0x0) syz_io_uring_setup(0x3905, &(0x7f0000000280)={0x0, 0x71db, 0x400, 0x1fffff, 0x2ea, 0x0, r6}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) write$P9_RSTATu(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000008ac054b020000000000010902240001000000eb0804000000030000000921000000012207000905810300000000004813e56b3e41e6d38999086047ff7694030000008fb45746401a17d7e8962306dcc7999480de712863a622df0fddc62307d9fa8b0b77a3c8e488ce000a2224f4c555c49c91c6cb9223fc3354b9d1e0bb61de5cf60d54e1d2f27ab786f43424525e8937a63395e7addd9ab3dbf6ccc2aa129e974d9e5ac90bca3458d2eac319ecfd410adde5372dce1270cf4a857c2c1baebcfadd8a3385656b5ffdae7a7fc6ff4f88e658c9e84c045a519d86e0e5ee5b38eae496d1f06c572793fa01d698f0a8b7447cf6ac9e8acb17c6c38f956fd1c5aa237e38c7359b87d76411e63415520419fc2bdda7beca3bf29860c05c102fae9cd421b53aaf097a693e13c2b45295601364248fe6242f0cc866"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 4.811052244s ago: executing program 1 (id=1953): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xca1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x0) r3 = socket(0xf, 0x6, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20, &(0x7f0000000280)={0x7, 0x70}, 0x20) 3.515882308s ago: executing program 1 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x4c}}, 0x0) 3.514637031s ago: executing program 3 (id=1958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 3.105389481s ago: executing program 1 (id=1959): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) sendmmsg$alg(r1, &(0x7f0000004240)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}], 0x1, 0x0) 2.217014143s ago: executing program 2 (id=1960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000002300001801000025786c2500000000074720207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x86, 0x0, 0x0, 0x4, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000d000073113000000000001620000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) recvmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x80000123) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = landlock_create_ruleset(&(0x7f0000000940)={0x1a82}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277f0cffeb"}) r5 = dup(r4) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000340)={0x9, 0x0, 0x0, 0xfffa, 0x0, "b73a630d7000"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x7f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000940)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000cc0)={0x14, 0x49, 0x1, {0x2, 0x1, 0x5}}, 0x14) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0xac6, 0x0, 0x0, 0x1280, r5, 0x7, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2}, 0x48) readv(r6, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f0000000a40)=""/200, 0xc8}], 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) write$binfmt_elf64(r0, 0x0, 0x440) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = request_key(&(0x7f0000000c00)='dns_resolver\x00', &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000c80)='batadv_slave_1\x00', 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000b40)={'fscrypt:', @desc1}, &(0x7f0000000b80)={0x0, "72e2ae4703fc8e01ded705fefc70ebc194dedf3e5deeb5d7caf21b773bad300b65399b65358c1bad000b14bd90a1ac6cb382c85217f3120dc2dcaf74a8120f21", 0x17}, 0x48, r7) 1.915137645s ago: executing program 3 (id=1961): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000013c0), 0x49246ef, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000240)='1', 0x1}]) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x200a0}, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {{0x6}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000001540)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xd4, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40041}, 0x8004) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000003}, 0x800) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000500)="6d8958346c12628a12d2a740981c2b97bb85ac54d506e30e5ef1dcacba82fa7808d2e036354413e8dfce2114fdef814876cfaa12d0a6a6de7ad1033e2b116ecf9fdfce0bc1b68de94c92251a5c69ca56c34e65c26133aedad84b79dae569a7d1cbcab4c3086829b900c09142b33276b8c00e2d0b20f0d4f90462a8593de3f7d0628e5a60d9eda8cfce171a3682f9c535502dcdd76b4408da1fd5077284a86ab9e7e48272d0625dc5a77d8b30f6b133908137ba83e493dea4998f815d96099a4644c2b449b0d25f85fa42a7956318a30717cf398178cb362df62c0c692dcfdbe464", 0xe1}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r6, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044880}, 0x8001) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r10, &(0x7f0000000fc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xa, &(0x7f00000011c0)={&(0x7f0000001000)={0x1c, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX, @NL802154_ATTR_IFINDEX]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000001040)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000001340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fedbdf2502000000080001000300000008000100000000000800010002000000080008000100000000c78aa9031a9537e6c329712715b40824998deb664e0e2a00000080020002000000df36eb0c"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081) 1.837090887s ago: executing program 2 (id=1962): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x200a0}, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0xfff0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.636600878s ago: executing program 2 (id=1963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) 1.481278433s ago: executing program 2 (id=1964): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='./bus\x00') readlinkat(r0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000680)=""/206, 0xce) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='f2fs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x2000000, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x6}}], [{@subj_user}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000180)) readlinkat(r0, &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)=""/163, 0xa3) 1.377452055s ago: executing program 1 (id=1965): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000180)="57e6e32083a328c2da3964066135e463f922081ae50887ede09da114c1daa077f9611f8aa81d", 0x26}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f0000000300)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4f3e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d", 0x8d}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xfec7}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6, &(0x7f0000000840)="a6d462c399e20d9d7ab19933a9b3d0e1d617be45eb50440e1e51f20cd773cd1b34e2669a511f6292d81a777376560dc1daae580d2419af271bdd485f32ddaa3679178bcbe6ff6f5d5d758535afbe2a930342eaa16108a32d9d31fbfe8bf4d89784440c3ff3fef2f998aebc9634", 0x6d}, 0x80) close(r1) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/178, 0xb2}], 0x1, &(0x7f0000000b80)=""/65, 0x41}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={0xe0, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4f}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_IE={0xb8, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @challenge={0x10, 0x1, 0x49}, @chsw_timing={0x68, 0x4, {0x6, 0x8c9}}, @random={0x9, 0x7b, "0c37ad7b2327c2e09bc5f18edcf018e9ca017d010359b6132a945552b37926caa6e642c373203aef03d6418291c6809b762d96248fad6a1bba0694aa24e8cafe577d01d5f89dd1c89ec9de3554b5ab482ff54179a9f425509f27a98d0cb0e89eeeae0cbcb6fe1c3e6d071ae9656329b40e2d3b17b53431cfc601fb"}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @broadcast}}, @link_id={0x65, 0x12, {@random="da67ea5a4ab6", @device_a, @device_b}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0xe0}}, 0x20040000) 1.247822285s ago: executing program 3 (id=1966): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}], 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/meminfo\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) r4 = syz_io_uring_setup(0x4394, &(0x7f0000000240), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r6, r1, 0x0, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1}, 0x0, 0x40000121}) io_uring_enter(r2, 0x46f6, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000010c0)=[{{&(0x7f00000084c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}, {{&(0x7f0000000ec0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000001140)="cd", 0x1}], 0x1}}], 0x2, 0x0) 1.144853175s ago: executing program 1 (id=1967): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10000}, &(0x7f0000000380), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xec4, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0x19038, 0x2000000, 0x0) 969.102269ms ago: executing program 2 (id=1968): ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0x8) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) r1 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000100)={'syzkaller0\x00', 0x40}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x30100, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x30100, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}}}, 0x9) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0, 0x0) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0, 0x0) mknodat(r3, &(0x7f0000000200)='./file0\x00', 0x200, 0x5) r4 = socket(0x8, 0x2, 0x6) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x0, 0x80000000, 0x4}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x0, 0x80000000, 0x4}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r4) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xa}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x200040d0}, 0x4040) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000400)={"5e2197fdc6fdc0758b48ba995883f27ca1d04b2ae4b9ddec7ec03bef3725", 0x5, 0x6, 0x3, [0x8, 0x101, 0x2, 0x5, 0x9, 0x5, 0x0, 0x0, 0x1, 0x7, 0x101, 0x3, 0x4, 0x2, 0x2, 0x9, 0x8, 0x3]}) (async) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000400)={"5e2197fdc6fdc0758b48ba995883f27ca1d04b2ae4b9ddec7ec03bef3725", 0x5, 0x6, 0x3, [0x8, 0x101, 0x2, 0x5, 0x9, 0x5, 0x0, 0x0, 0x1, 0x7, 0x101, 0x3, 0x4, 0x2, 0x2, 0x9, 0x8, 0x3]}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x3}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r6, 0x0, 0x8}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000500)={r6, 0x0, 0x8}, 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000c081) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000c081) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r7) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), r7) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30a711de}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd21c260}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3393e975}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f46a355}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x364cb693}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40090}, 0x4c90) symlinkat(&(0x7f0000000880)='./file0\x00', r3, &(0x7f00000008c0)='./file0\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x71, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xfbe}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xa8, 0x3}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x310, 0x9, 0x1, 0xd, 0xff, 0x8}, 0xd1, &(0x7f0000000980)={0x5, 0xf, 0xd1, 0x2, [@generic={0xc5, 0x10, 0x1, "db4b972953decf60523a8a8cc747b2b87d0c2a36973297b8dd7c9ab7388e13e216db70a7b7ea04150b64d92a3c713c1e9c27ef142c75ff3b4677c9be29b76d7eabeb8ded35199aef85f6aa4fd257d7cce2d400e591ef8dd52edd79224edf5bd1b0b1fb83f85c363554f2f2222ff53876f6489b30d6fb838a1d46e5f182a479ca8f5fc02e2221321cb05f953e3f1ece6200281d6a174da68128a2d562288396b1f9dfcc26bd1a0084af0af2cd29b1fff22c8f8315056d8d45bd007cdd41d299d0c26a"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0xb}]}, 0x7, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x820}}, {0xf9, &(0x7f0000000ac0)=@string={0xf9, 0x3, "d5c3940ba15c8b209be19ad662e6fab01012cf99f2449259c87efcf2e00a8110cf58c9ecf9116a84e46a6c970ecca40c6f3df1976c29c132ce80d9b84c3d24d30a294df67e4af8dd2ae863e4249bcc08c945e20015caf014e083bf81406d0cd20e2edf190fe95b0249267f4926c24000005d685db1b675e0874b596a0cbdcb7cc3a998fc98ff8490a461ce0f4f4cd38c5e230d69c89698270790ca21c5863f2622206202ce29c8303c9813e33a1223376e0cd68348154bc18e3bbc869024cd0f49f2124491ec8d583b4345e093ef00f9b01cf00d658330b2eca29745f9a1bd7327d009695c59233e498717b45f8f0bc8d858a3a0e47067"}}, {0x4b, &(0x7f0000000bc0)=@string={0x4b, 0x3, "ec9a754a5bd081f5ed29bb79a4776b000bf1348e49b63cb84f32c4e0603e32538f040266c4e03bfdc9e008cdb5396a74722448483af6154f5cd490a155747c08908939b011b7504f2a"}}, {0xd2, &(0x7f0000000c40)=@string={0xd2, 0x3, "c7a1f10fa6fb8c8dd29ab050bf2a8e94d3112b9dc835696d39997d0336be196860192450ffdcc4ff909b144a5662dd94bda89d0592a1533be8f425f9682d5e94768f023f5584593f445034261267a680d275c73950e897c3fc37a639d3b7c42f7fde4e3b857b6d9ae9202c869746dc2825001954ad12bc65b62555a0ec17a4623ba11780b1a33e276c349271485e09ed3fc8d8ef25364da20e123d5abba7a9353dc81cf42547906eb5fbeb00d2eecea94746d681c2287838eee2e0023fc9ec702d17ff3a41f772fda6e41d70c06c7284"}}, {0x5f, &(0x7f0000000d40)=@string={0x5f, 0x3, "b93d53a909e10032b70defc24759fc924824c55c183f9b7ad98f1f65283cecae40f5c3a18b070934613422b8888131d889c4372dce03f50db6d97a7465bcd7b47bbf209874f73c705b0b286b36f7254dd94738072cde105dfe3d155b41"}}, {0x73, &(0x7f0000000dc0)=@string={0x73, 0x3, "8dec89ac7ecf3acd4a2ccb74411201de45d2541ee62b37ae374cc3cd261360ada736c29a2c043c500a65f6119442192d7ac31201964eb33a84b0c04c5b0d94a94cb4f90a8789e06c5b724cc35a54ad7025c268dbcb817463fdcd485fe2fc754cd72304341701edc0d7fd8f15ac7c84595b"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x3401}}]}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x71, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xfbe}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xa8, 0x3}}}}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x310, 0x9, 0x1, 0xd, 0xff, 0x8}, 0xd1, &(0x7f0000000980)={0x5, 0xf, 0xd1, 0x2, [@generic={0xc5, 0x10, 0x1, "db4b972953decf60523a8a8cc747b2b87d0c2a36973297b8dd7c9ab7388e13e216db70a7b7ea04150b64d92a3c713c1e9c27ef142c75ff3b4677c9be29b76d7eabeb8ded35199aef85f6aa4fd257d7cce2d400e591ef8dd52edd79224edf5bd1b0b1fb83f85c363554f2f2222ff53876f6489b30d6fb838a1d46e5f182a479ca8f5fc02e2221321cb05f953e3f1ece6200281d6a174da68128a2d562288396b1f9dfcc26bd1a0084af0af2cd29b1fff22c8f8315056d8d45bd007cdd41d299d0c26a"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0xb}]}, 0x7, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x820}}, {0xf9, &(0x7f0000000ac0)=@string={0xf9, 0x3, "d5c3940ba15c8b209be19ad662e6fab01012cf99f2449259c87efcf2e00a8110cf58c9ecf9116a84e46a6c970ecca40c6f3df1976c29c132ce80d9b84c3d24d30a294df67e4af8dd2ae863e4249bcc08c945e20015caf014e083bf81406d0cd20e2edf190fe95b0249267f4926c24000005d685db1b675e0874b596a0cbdcb7cc3a998fc98ff8490a461ce0f4f4cd38c5e230d69c89698270790ca21c5863f2622206202ce29c8303c9813e33a1223376e0cd68348154bc18e3bbc869024cd0f49f2124491ec8d583b4345e093ef00f9b01cf00d658330b2eca29745f9a1bd7327d009695c59233e498717b45f8f0bc8d858a3a0e47067"}}, {0x4b, &(0x7f0000000bc0)=@string={0x4b, 0x3, "ec9a754a5bd081f5ed29bb79a4776b000bf1348e49b63cb84f32c4e0603e32538f040266c4e03bfdc9e008cdb5396a74722448483af6154f5cd490a155747c08908939b011b7504f2a"}}, {0xd2, &(0x7f0000000c40)=@string={0xd2, 0x3, "c7a1f10fa6fb8c8dd29ab050bf2a8e94d3112b9dc835696d39997d0336be196860192450ffdcc4ff909b144a5662dd94bda89d0592a1533be8f425f9682d5e94768f023f5584593f445034261267a680d275c73950e897c3fc37a639d3b7c42f7fde4e3b857b6d9ae9202c869746dc2825001954ad12bc65b62555a0ec17a4623ba11780b1a33e276c349271485e09ed3fc8d8ef25364da20e123d5abba7a9353dc81cf42547906eb5fbeb00d2eecea94746d681c2287838eee2e0023fc9ec702d17ff3a41f772fda6e41d70c06c7284"}}, {0x5f, &(0x7f0000000d40)=@string={0x5f, 0x3, "b93d53a909e10032b70defc24759fc924824c55c183f9b7ad98f1f65283cecae40f5c3a18b070934613422b8888131d889c4372dce03f50db6d97a7465bcd7b47bbf209874f73c705b0b286b36f7254dd94738072cde105dfe3d155b41"}}, {0x73, &(0x7f0000000dc0)=@string={0x73, 0x3, "8dec89ac7ecf3acd4a2ccb74411201de45d2541ee62b37ae374cc3cd261360ada736c29a2c043c500a65f6119442192d7ac31201964eb33a84b0c04c5b0d94a94cb4f90a8789e06c5b724cc35a54ad7025c268dbcb817463fdcd485fe2fc754cd72304341701edc0d7fd8f15ac7c84595b"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x3401}}]}) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000f00)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x0, 0xfc, 0x43, &(0x7f0000000f40)="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", &(0x7f0000001040)=""/67, 0x8, 0x0, 0xee, 0x69, &(0x7f00000010c0)="7088b256bad3a91a09d3e9ef813dc7a6f56d43e43f9e6848b95c54976d52b00e5d0028ce291ab84451a96da8eeaa477a702dbe887b44883c39e1eca0f909df65eeee31002a4a8bb92be13673d539a647aba251da05bbe7d9742ac05c85d5f7cc42b0d7159b766d87c06d329dcfc6b913ade35e67d7e553929e554767d2d4ed2d38b65be5fd98f299ba3768c2db951586eee1c085f53a2384b562bb3d5a13b7e1b310e48f93f2517236927d77dcc17b701b6d5f81c49447139bb7b1a1f578506456d9edbbad38ce8d7ba717559c5af69a1515feeb53c2843083cfb3d3885f580b80c28d0b6894495e2ec7cba3779e", &(0x7f00000011c0)="81d6964a1d25949d6767aaf9a6012ab47d9a595350dc5959a766fd8aaaf03b63bd5fd55beeeaab07caabe77f96e9432a4ec850bbe873ea0bf1d0ab9abcaecc57c5f399524fcee853d88afa2a47a500aba57c79bf73704d093e8ae35e36d729f0d8737239fbf555b5db", 0x3, 0x0, 0xe}, 0x50) epoll_create(0x2) (async) r9 = epoll_create(0x2) epoll_pwait2(r9, &(0x7f00000012c0)=[{}, {}], 0x2, &(0x7f0000001300), &(0x7f0000001340)={[0xe]}, 0x8) 923.659865ms ago: executing program 3 (id=1969): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000ac0)={0x7, 0x0, 0x0, "61040707000000e00000006bebeffe2935000000ff00004000"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat(r5, &(0x7f0000000340)='.\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffffb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8d0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000002c0)=0x3f, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x3, 0x0) 697.008985ms ago: executing program 3 (id=1970): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0xc0ef, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 592.141037ms ago: executing program 1 (id=1971): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xa) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002", @ANYRES32, @ANYRES32], 0x78}}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007", @ANYRES16=r3], 0xd) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00004900000062499228be69361202229b93234429d7275a330a25e95517e418e65aa94ec078776651c2231e78efc51639a28a878774028a236007ab111157c784d0a83542662ea646cbde890d1ad9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x0) 409.841784ms ago: executing program 0 (id=1972): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0x1}], 0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1f, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 308.766524ms ago: executing program 3 (id=1973): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380001000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000900ef00"/120], 0x78) close(0xffffffffffffffff) socket(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x80000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x1, 0x1800, &(0x7f00000007c0)='b'}) 0s ago: executing program 2 (id=1974): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001240)={0x0, 0xd}, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/176, &(0x7f0000000000)=0xb0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f00000008c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = socket(0x22, 0x2, 0x2) getsockopt$bt_BT_SECURITY(r4, 0x28, 0x6, 0x0, 0x150ec4961d2b7688) getdents64(r3, 0xfffffffffffffffe, 0x29) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000001080)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f00000007c0)={0x90, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x7c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="ad19cb5b2bbd"}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000280)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="25cf7324af640e3ed174361301a0fb598232777902d724cb8eda12da3c2eb1394e76", 0x22}, {&(0x7f0000000340)="5ef2722006e02bb4986169a630f236e9dec6413b181ad0523386b42e563664fdf61cf239d12f91d77357e4181ce34833eac9609ed920e77b6ced76f5a55209e050dc747cdf46e6924f04e5adc96c251d494ddddecc9300706c1d772caf4c9a401860fc2a6aacbcb609109cce1f140adee3754e7d7924d3f2a3ef627b216508bde7e747c350ced2b117c0e998ebd4340d3d687f20f58d761f85b2a57d70c788050cff4b4215f9134a10c6ae4495fd9da478b3714ef326c43ea924a1226f25848810c1feb3416b2685eca93445487d", 0xce}], 0x2, &(0x7f0000000480)=[{0x60, 0x103, 0x7, "5edf670516d4771f1756c5dd625fc8419be33591c68cb160cefa688182762fcb482be3bad48d1f3d2f429a0bda2db46f65ea48f1bc6439b12f603b75e6653ccea1f281fade0a4c60b6dd8d8d"}, {0x40, 0x113, 0x100, "e4834714a51468c846409822d3e019c1ba77c9102356610d9ade8f0000c800000043000000000000000000"}], 0xa0}}, {{&(0x7f0000000540)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000005c0)="67e6de0ab6dea771d6694956029a184ab026dd5254c774a66e853d4139f6132f5b396d706b3c9c39cea4d2143a9c2fb3b617b8f0c1ceeee99d40a80cfc66c9128dacfa2dd20dee3174d9c11d872a1a5ca07470e8ea583e32cd27d68b3cf8e2210aba007334a6bef1ae34e64421fda7160977a3e309f4a04f74b3a93b6a9ab319174d833f5f25401f27498e21fa6803fe1b02ff43d3311e86ee4aa7e8bbcc1f70cdc50c6985aab03e155c7195818082aeea6d3b90d8cf0e3c018e9558b4d306285a78634647adc5002bdc0fccc781c6", 0xcf}, {&(0x7f00000006c0)="1beb32bf5d29588a3fbf4270469f6ff3d395b4f7c244a4d847eaadeefbc2fd51ba5e29000775f761c555efeb167ba9dc19267bcbaba377aa65b2c722d6520838156fe229358b8af34d918aed6379e88a47c4cdc0b5ea9b14d7472289d288ab3a7f5303ba4181e79810f73183ea0c9282aab9602eeb65154d8c424d14c7c63cf759b7e4db1d8bff93edccfb6ba069d91a9844da8e48a1adef8ddf4824e02ae4", 0x9f}, {&(0x7f0000000e40)="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", 0x1f7}, {&(0x7f0000000880)="069d1d476bf1ae0be8ab43dd4f773f946417b8fdade32eac1b020f958c18f78d0302c63675b55090b76ced874f34b726eb30c6d55c52cbf4e8867a978bda7324b6c3ca8d0ec185364c5cae43b780121c3e", 0x51}, {&(0x7f0000000900)="ab565b19a477a160c825dace56e1d0bce9bef7131dc0af24e77ee9ac2453", 0x1e}, {&(0x7f0000000940)="a3fb904d9d7075acfc7f28356e380d441c603522a26173c3ef9c66e9c69d5029310d0997524f299649dbce8c2fde72196b28c6b23f5d49da1a13891f1fc28e1b24a2b929c0121a2eee66ff52cb3d64ad429793392291ee95ccb1545258fe9450ec8a052f1968a152cb9c", 0x6a}, {&(0x7f00000009c0)="5617948f7556fafd3c710d39b508971dbcef4020a0554c35636f1d3dd9e7028404d3195b8d085ee79a8a250e260f88f3efe9fa16dedbd4ffec67c28be439ca18d6e742d974ddca8d9edad77b39aec239d0cbfe325250a7e4ff76e3a5cfaf4f436cce5d54dfc6a18ca49ee9a84ff5d3568e9113b83e8b5fd0c51f040d3ff4c203a0f3b6f2d539f64aa9d68202d2a265615c13745d32d0047dd2f261f6a6b24155ec9c2186f45af774d46f7bc6ff0ece7b3b1d88755dd6cf20fe8fba5b780d53d72a5a9855f880240c9f5e525acb58254cd73ce245dcf453d0636b7b", 0xdb}, {&(0x7f0000000ac0)="dd04a32068aeca292027c82b90628385c3ac651e5a48b120de6062422bd67558ca59f30da7f180de3857b06ea9ef3846e5574dda848e2345e67ecbedfeeca896b5c9c64b1179c8b17df927c1fd4e816923d89beeb6d98e863fd41921f3cd9b7ee1403310ab7d802f38d537ccd1f75d9638576ca71b278dd2ab48c741dce85012c5d93206be", 0x85}], 0x8, &(0x7f0000000c00)=[{0xd8, 0x117, 0x0, "97726c7a9b4bb750988c4a2c869f6c13ebf2a9cbb5ec6e8e7ce02114a2cb40b6f8e8dda659e9ef47db61436f0e21d71c8847443b328e2440e024be5605673777a1484a643d756c13b2c35e42aff0861301b00fff06675ff7cc54ead3fff0aeb3a0503566abd950e0f65d5566778b08493355268f6a30e2eba887ede1e8b6e8e01d0ec3643f18c7909c7528108ab8f4fcbaa93aba7ed3c23fd42631c83d5e1e68aa1d3fb4fa1730888046b785bec475c3ca6645ac54d68543c8a6081276c8b67758e2"}, {0x78, 0x3a, 0x2, "4ed334603c48314d6dc8a8d1c3afeea522edd7e0d583fd3682b048a07789986ded8b728f6e0036907e88d0e8b9d57a91f1e82f81c972275ebbd0fa1935651b00b1a263c095b1cdf982f93252dabe9b703c0f925cfce50887a789ec5bf53f6b064e6de317"}], 0x150}}], 0x3, 0xfffe) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r9, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000009c0)={0x38, r9, 0x0, 0x0, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff1d, 0x2}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}}, 0x24000800) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xbc, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "9604623d797ce4aeab2c123e5ac0297e"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db1945e81a53cfdb4e5f9dfb84"}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0f9b5b42ff"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ad1ff21524cacf7101"}, @NL80211_ATTR_SSID={0x5, 0x34, @random='?'}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 22481][T12192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.337362][T12192] bridge_slave_1: left allmulticast mode [ 620.348911][T12192] bridge_slave_1: left promiscuous mode [ 620.356075][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.366391][T12192] bridge_slave_0: left allmulticast mode [ 620.372658][T12192] bridge_slave_0: left promiscuous mode [ 620.378814][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.836055][T12192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.848132][T12192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.865598][T12192] bond0 (unregistering): Released all slaves [ 621.737834][T12192] hsr_slave_0: left promiscuous mode [ 621.784181][T12192] hsr_slave_1: left promiscuous mode [ 621.818934][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.831628][T12192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.864527][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.889305][T12192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.997248][T13019] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.009395][T13019] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.019219][T13019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.027971][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.049789][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.065810][T13300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 622.074012][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 622.082900][T13300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 622.092337][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 622.101149][T13300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 622.112264][T13300] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 622.121535][T13300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 622.288615][T12192] veth1_macvtap: left promiscuous mode [ 622.326072][T12192] veth0_macvtap: left promiscuous mode [ 622.346880][T12192] veth1_vlan: left promiscuous mode [ 622.357688][ T5084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 622.357839][T12192] veth0_vlan: left promiscuous mode [ 622.375589][ T5084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 622.384627][ T5084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 622.394833][ T5084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 622.402694][ T5084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 622.411263][ T5084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 623.117785][T13314] tmpfs: Unknown parameter 'usrquotau$Ê·q›¯$¯ÿR$5°ìŸ„òl™&óIùx“ÿžz”QEÕÒ&…öNÒ*Àh³7íeÀ"íò´7P S¸*¹hξt½»AüîŸæ…é®&ŸÚóAE.Ë' [ 623.176147][T13314] Process accounting resumed [ 623.332780][T12192] team0 (unregistering): Port device team_slave_1 removed [ 623.421514][T12192] team0 (unregistering): Port device team_slave_0 removed [ 624.169044][T13313] veth1: mtu less than device minimum [ 624.174686][T13300] Bluetooth: hci4: command tx timeout [ 624.180569][ T5084] Bluetooth: hci1: command tx timeout [ 624.498614][T13300] Bluetooth: hci7: command tx timeout [ 624.744778][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.751424][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.517530][T13306] chnl_net:caif_netlink_parms(): no params data found [ 626.173640][T13299] chnl_net:caif_netlink_parms(): no params data found [ 626.232061][T13295] chnl_net:caif_netlink_parms(): no params data found [ 626.248651][T13300] Bluetooth: hci1: command tx timeout [ 626.255783][ T5084] Bluetooth: hci4: command tx timeout [ 626.572093][T13300] Bluetooth: hci7: command tx timeout [ 626.666581][T13306] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.677282][T13306] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.684710][T13306] bridge_slave_0: entered allmulticast mode [ 626.692543][T13306] bridge_slave_0: entered promiscuous mode [ 626.717804][T13306] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.725611][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.733804][T13306] bridge_slave_1: entered allmulticast mode [ 626.741886][T13306] bridge_slave_1: entered promiscuous mode [ 627.801240][T13306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.962500][T13306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.991732][T13295] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.027438][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.053729][T13295] bridge_slave_0: entered allmulticast mode [ 628.064199][T13384] tmpfs: Unknown parameter 'usrquotau$Ê·q›¯$¯ÿR$5°ìŸ„òl™&óIùx“ÿžz”QEÕÒ&…öNÒ*Àh³7íeÀ"íò´7P S¸*¹hξt½»AüîŸæ…é®&ŸÚóAE.Ë' [ 628.099877][T13295] bridge_slave_0: entered promiscuous mode [ 628.124830][T13295] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.141187][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.171875][T13295] bridge_slave_1: entered allmulticast mode [ 628.180479][T13295] bridge_slave_1: entered promiscuous mode [ 628.328984][ T5084] Bluetooth: hci4: command tx timeout [ 628.329858][T13300] Bluetooth: hci1: command tx timeout [ 628.366255][T13385] Process accounting resumed [ 628.392685][T13382] veth1: mtu less than device minimum [ 628.526039][T13299] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.543065][T13299] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.558678][T13299] bridge_slave_0: entered allmulticast mode [ 628.588482][T13299] bridge_slave_0: entered promiscuous mode [ 628.633559][T13306] team0: Port device team_slave_0 added [ 628.649043][T13300] Bluetooth: hci7: command tx timeout [ 628.721559][T13295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.731270][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.748202][T13299] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.766029][T13299] bridge_slave_1: entered allmulticast mode [ 628.790672][T13299] bridge_slave_1: entered promiscuous mode [ 628.836798][T13306] team0: Port device team_slave_1 added [ 628.856325][T13295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.952637][T13299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.154182][T13299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.450171][T13295] team0: Port device team_slave_0 added [ 629.511233][T13306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.540893][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.645709][T13306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.693177][T13295] team0: Port device team_slave_1 added [ 629.865971][T13299] team0: Port device team_slave_0 added [ 629.890519][T13299] team0: Port device team_slave_1 added [ 630.283463][T13306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.342754][T13306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.399051][T13306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.427571][T13300] Bluetooth: hci4: command tx timeout [ 630.428699][ T5084] Bluetooth: hci1: command tx timeout [ 630.483600][T13295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.508378][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.537440][T13295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.713801][T13295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.727745][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.763981][ T5084] Bluetooth: hci7: command tx timeout [ 630.771238][T13295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.925628][T13299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.963494][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.995864][T13299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.051654][T13306] hsr_slave_0: entered promiscuous mode [ 631.084592][T13306] hsr_slave_1: entered promiscuous mode [ 631.113103][T13306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.138661][T13306] Cannot create hsr debugfs directory [ 631.226314][T13299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.248741][T13299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.306989][T13299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.303418][T13295] hsr_slave_0: entered promiscuous mode [ 632.329614][T13295] hsr_slave_1: entered promiscuous mode [ 632.343677][T13295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.354630][T13295] Cannot create hsr debugfs directory [ 632.447954][T13299] hsr_slave_0: entered promiscuous mode [ 632.459125][T13299] hsr_slave_1: entered promiscuous mode [ 632.469170][T13299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.476785][T13299] Cannot create hsr debugfs directory [ 632.976709][T13440] overlayfs: missing 'workdir' [ 633.076128][T13450] veth1: mtu less than device minimum [ 633.118910][T13450] tmpfs: Unknown parameter 'usrquotau$Ê·q›¯$¯ÿR$5°ìŸ„òl™&óIùx“ÿžz”QEÕÒ&…öNÒ*Àh³7íeÀ"íò´7P S¸*¹hξt½»AüîŸæ…é®&ŸÚóAE.Ë' [ 633.191490][T13450] Process accounting resumed [ 633.237319][T13306] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.562879][T13306] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.821293][T13306] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.861903][ T29] audit: type=1326 audit(1720003182.108:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13456 comm="syz.3.1807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bff75b99 code=0x0 [ 633.983531][T13306] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.319306][T13306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 634.573576][T13306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 634.602093][T13306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 634.711119][T13306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 636.510785][T13490] syz.3.1811: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 636.543780][T13490] CPU: 0 PID: 13490 Comm: syz.3.1811 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 636.553999][T13490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 636.564061][T13490] Call Trace: [ 636.567344][T13490] [ 636.570281][T13490] dump_stack_lvl+0x241/0x360 [ 636.574976][T13490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.580186][T13490] ? __pfx__printk+0x10/0x10 [ 636.584807][T13490] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 636.591278][T13490] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 636.597848][T13490] warn_alloc+0x278/0x410 [ 636.602240][T13490] ? __pfx_warn_alloc+0x10/0x10 [ 636.607144][T13490] ? packet_set_ring+0x6da/0x2450 [ 636.612226][T13490] ? __get_vm_area_node+0x23d/0x270 [ 636.617488][T13490] __vmalloc_node_range_noprof+0x69f/0x1460 [ 636.623442][T13490] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 636.629250][T13490] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 636.635658][T13490] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 636.641689][T13490] ? packet_set_ring+0x62b/0x2450 [ 636.646773][T13490] ? rcu_is_watching+0x15/0xb0 [ 636.651590][T13490] ? packet_set_ring+0x6da/0x2450 [ 636.656677][T13490] vzalloc_noprof+0x79/0x90 [ 636.661228][T13490] ? packet_set_ring+0x6da/0x2450 [ 636.666308][T13490] packet_set_ring+0x6da/0x2450 [ 636.671212][T13490] ? __pfx_packet_set_ring+0x10/0x10 [ 636.676528][T13490] ? irqentry_exit+0x63/0x90 [ 636.681143][T13490] ? lockdep_hardirqs_on+0x99/0x150 [ 636.686370][T13490] ? packet_setsockopt+0x1122/0x1970 [ 636.691703][T13490] packet_setsockopt+0x1140/0x1970 [ 636.696871][T13490] ? mark_lock+0x9a/0x350 [ 636.701235][T13490] ? __pfx_packet_setsockopt+0x10/0x10 [ 636.706759][T13490] ? __pfx_lock_acquire+0x10/0x10 [ 636.711808][T13490] ? __fget_files+0x29/0x470 [ 636.716419][T13490] ? __pfx_lock_release+0x10/0x10 [ 636.721460][T13490] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 636.727020][T13490] ? security_socket_setsockopt+0x87/0xb0 [ 636.732762][T13490] ? __pfx_packet_setsockopt+0x10/0x10 [ 636.738243][T13490] do_sock_setsockopt+0x3af/0x720 [ 636.743313][T13490] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 636.748879][T13490] ? __fget_files+0x29/0x470 [ 636.753496][T13490] ? __fget_files+0x3f6/0x470 [ 636.758216][T13490] __sys_setsockopt+0x1ae/0x250 [ 636.763106][T13490] __x64_sys_setsockopt+0xb5/0xd0 [ 636.768164][T13490] do_syscall_64+0xf3/0x230 [ 636.772703][T13490] ? clear_bhb_loop+0x35/0x90 [ 636.777414][T13490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.783340][T13490] RIP: 0033:0x7f06bff75b99 [ 636.787775][T13490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.807406][T13490] RSP: 002b:00007f06c0c74048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 636.815839][T13490] RAX: ffffffffffffffda RBX: 00007f06c0104038 RCX: 00007f06bff75b99 [ 636.823826][T13490] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 000000000000000d [ 636.831816][T13490] RBP: 00007f06bffe4a7a R08: 000000000000001c R09: 0000000000000000 [ 636.839797][T13490] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 636.847777][T13490] R13: 000000000000006e R14: 00007f06c0104038 R15: 00007ffc460fa3e8 [ 636.855802][T13490] [ 636.874846][T13490] Mem-Info: [ 636.902475][T13490] active_anon:292 inactive_anon:5641 isolated_anon:0 [ 636.902475][T13490] active_file:5514 inactive_file:40033 isolated_file:0 [ 636.902475][T13490] unevictable:2816 dirty:78 writeback:0 [ 636.902475][T13490] slab_reclaimable:8452 slab_unreclaimable:106181 [ 636.902475][T13490] mapped:26497 shmem:2229 pagetables:881 [ 636.902475][T13490] sec_pagetables:0 bounce:0 [ 636.902475][T13490] kernel_misc_reclaimable:0 [ 636.902475][T13490] free:1349395 free_pcp:2692 free_cma:0 [ 636.958026][T13490] Node 0 active_anon:1168kB inactive_anon:22564kB active_file:21988kB inactive_file:160132kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:105988kB dirty:312kB writeback:0kB shmem:7480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:3524kB sec_pagetables:0kB all_unreclaimable? no [ 637.017875][T13490] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 637.057614][T13490] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.067276][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.090304][T13490] lowmem_reserve[]: 0 2571 2571 0 0 [ 637.104353][T13490] Node 0 DMA32 free:1429744kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:4964kB inactive_anon:18828kB active_file:21720kB inactive_file:160080kB unevictable:9728kB writepending:308kB present:3129332kB managed:2659872kB mlocked:8192kB bounce:0kB free_pcp:10508kB local_pcp:724kB free_cma:0kB [ 637.176993][T13490] lowmem_reserve[]: 0 0 0 0 0 [ 637.183762][T13490] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:268kB inactive_file:52kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.242157][T13306] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.249178][T13490] lowmem_reserve[]: 0 0 0 0 0 [ 637.253985][T13490] Node 1 Normal free:3952252kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.293899][T13490] lowmem_reserve[]: 0 0 0 0 0 [ 637.322135][T13490] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 637.366237][T13490] Node 0 DMA32: 1*4kB (M) 38*8kB (E) 150*16kB (UME) 74*32kB (UME) 49*64kB (UME) 44*128kB (UME) 26*256kB (UME) 10*512kB (UME) 13*1024kB (UM) 3*2048kB (UM) 338*4096kB (UM) = 1429524kB [ 637.387189][ T9822] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.394364][ T9822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.416980][T13490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 637.430485][T13490] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 12*16kB (UM) 4*32kB (UM) 6*64kB (U) 3*128kB (U) 4*256kB (UM) 3*512kB (UM) 2*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3952252kB [ 637.448187][T13490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.477104][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.484380][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.518005][T13490] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.532018][T13490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.542641][T13490] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.557334][T13490] 47762 total pagecache pages [ 637.575373][T13490] 0 pages in swap cache [ 637.580649][T13490] Free swap = 124436kB [ 637.585030][T13490] Total swap = 124996kB [ 637.604792][T13490] 2097051 pages RAM [ 637.609705][T13490] 0 pages HighMem/MovableOnly [ 637.622463][T13490] 400873 pages reserved [ 637.643531][T13490] 0 pages cma reserved [ 637.673723][T13295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.865780][T13299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.962150][T13295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.126698][T13299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.208861][T13295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.243186][T13295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.385365][T13299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.653064][T13299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.745878][T13306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.195096][T13306] veth0_vlan: entered promiscuous mode [ 639.253640][T13299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 639.293425][T13299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 639.347849][T13299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 639.400380][T13529] overlayfs: missing 'workdir' [ 639.432698][T13299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 639.521683][T13306] veth1_vlan: entered promiscuous mode [ 639.653230][T13295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.791274][T13306] veth0_macvtap: entered promiscuous mode [ 639.822342][T13306] veth1_macvtap: entered promiscuous mode [ 639.971192][T13295] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.018230][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.033970][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.048333][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.071951][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.116094][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.147188][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.188486][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.214623][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.228653][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.257039][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.303994][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.348323][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.381483][T13306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.402585][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.409878][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.485414][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.558381][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.598363][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.636382][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.662524][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.690883][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.738324][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.749227][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.759222][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.788653][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.817758][T13306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.858458][T13306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.880678][T13306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.930679][ T1794] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.937888][ T1794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.004043][T13306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.025377][T13306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.058441][T13306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.088568][T13306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.338124][T13299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.453271][T13295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.592411][T13299] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.660071][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.667352][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.766638][T12191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.795739][T12191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.824825][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.832074][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.969819][T12191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.996038][T12191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.132452][T13299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.244770][T13295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.727663][T13595] IPVS: stopping backup sync thread 13597 ... [ 642.801168][T13595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1822'. [ 642.864940][T13299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.316418][T13299] veth0_vlan: entered promiscuous mode [ 643.470613][T13299] veth1_vlan: entered promiscuous mode [ 643.491484][T13295] veth0_vlan: entered promiscuous mode [ 643.520549][ T9822] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 643.544734][T13295] veth1_vlan: entered promiscuous mode [ 643.685296][T13299] veth0_macvtap: entered promiscuous mode [ 643.725993][ T9822] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 643.768990][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 643.785381][T13299] veth1_macvtap: entered promiscuous mode [ 643.798828][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 643.816691][T13295] veth0_macvtap: entered promiscuous mode [ 643.839833][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 643.870216][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 643.889022][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 643.897948][T13295] veth1_macvtap: entered promiscuous mode [ 643.948051][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 643.959466][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 643.992313][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.022165][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.029820][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.059749][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.106202][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.106234][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.144531][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.171046][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.186632][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.197454][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.213231][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.228469][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.259652][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.273619][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.296061][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.297165][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.328190][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.388633][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.411869][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.414203][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.448907][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.469146][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.481302][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.508446][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.515185][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.517695][T13299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.610376][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.653714][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.671944][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.695808][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.716192][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.732572][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.748694][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.757129][ T9822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 644.767856][ T9822] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 644.790939][ T9822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.809448][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.845214][ T9822] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 644.848403][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.874902][ T9822] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 644.909581][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.921294][ T9822] usb 2-1: Product: syz [ 644.925560][ T9822] usb 2-1: Manufacturer: syz [ 644.929306][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.947988][ T9822] usb 2-1: SerialNumber: syz [ 644.948793][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.965626][ T9822] usb 2-1: config 0 descriptor?? [ 644.983724][ T9822] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 644.992550][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.992647][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.992703][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.992830][T13299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.992902][T13299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.000886][T13299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.151437][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.166212][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.278904][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.333022][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.406351][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.473277][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.547801][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.618686][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.684607][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.749523][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.814503][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.883591][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.958746][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.033771][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.094568][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.168963][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.218170][T13295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.409171][ T5130] usb 2-1: USB disconnect, device number 27 [ 646.424328][ T5130] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 646.453938][T13299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.476680][T13299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.486387][T13299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.517987][T13299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.580842][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.613391][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.628144][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.748506][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.784580][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.834950][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.867568][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.896485][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.909615][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.920298][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.934316][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.955048][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.979036][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.000779][T13666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1830'. [ 647.355969][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.418716][T13295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.479326][T13295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.531575][T13295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.623619][T13295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.639752][ T5084] block nbd1: Receive control failed (result -107) [ 647.708466][T13295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.747956][T13295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.805029][T13295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.890991][T13665] nbd1: detected capacity change from 0 to 15960 [ 648.015959][T13417] block nbd1: Dead connection, failed to find a fallback [ 648.054505][T13417] block nbd1: shutting down sockets [ 648.093671][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.126896][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.149334][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.208525][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.251626][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.290177][T12191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.299260][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.314113][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.337050][T12191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.365049][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.383568][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.409612][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.427838][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.452777][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.479313][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.489542][T12187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.512998][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.523100][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.526877][T12187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.533537][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.562325][T13417] ldm_validate_partition_table(): Disk read failed. [ 648.575773][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.585904][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.623704][T13417] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.657690][ T7600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.678430][ T7600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.681489][T13417] Buffer I/O error on dev nbd1, logical block 0, async page read [ 648.707683][T13417] Dev nbd1: unable to read RDB block 0 [ 648.726866][ T7600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.752280][T13417] nbd1: unable to read partition table [ 648.761489][ T7600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.842433][T13417] ldm_validate_partition_table(): Disk read failed. [ 648.862559][T13417] Dev nbd1: unable to read RDB block 0 [ 648.900616][T13417] nbd1: unable to read partition table [ 649.305266][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 649.327631][T13697] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1836'. [ 649.418001][T13703] mkiss: ax0: crc mode is auto. [ 649.610101][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 649.663809][T12192] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.668515][ T29] audit: type=1326 audit(1720003197.898:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13704 comm="syz.0.1837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4616b75b99 code=0x0 [ 649.918185][T12192] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.071998][T12192] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.347714][T12192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.624341][T12192] bridge_slave_1: left allmulticast mode [ 650.632701][T12192] bridge_slave_1: left promiscuous mode [ 650.641684][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.652363][T12192] bridge_slave_0: left allmulticast mode [ 650.658171][T12192] bridge_slave_0: left promiscuous mode [ 650.665706][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.117359][T12192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.195977][T12192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.311453][T12192] bond0 (unregistering): Released all slaves [ 652.574758][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 652.710025][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 652.711141][T13300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 652.740406][T13300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 652.749754][T13300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 652.761556][T13300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 652.783424][T13300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 652.795519][T13300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 652.811088][T13745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.828824][T13745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.658839][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'. [ 653.745003][ T29] audit: type=1326 audit(1720003201.988:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13761 comm="syz.2.1848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd674b75b99 code=0x0 [ 653.983420][T13775] FAULT_INJECTION: forcing a failure. [ 653.983420][T13775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.006790][T13775] CPU: 1 PID: 13775 Comm: syz.0.1851 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 654.017464][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 654.027561][T13775] Call Trace: [ 654.030877][T13775] [ 654.033846][T13775] dump_stack_lvl+0x241/0x360 [ 654.038596][T13775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.043851][T13775] ? __pfx__printk+0x10/0x10 [ 654.048487][T13775] ? __pfx_lock_release+0x10/0x10 [ 654.053563][T13775] should_fail_ex+0x3b0/0x4e0 [ 654.058352][T13775] _copy_from_user+0x2f/0xe0 [ 654.062981][T13775] copy_msghdr_from_user+0xae/0x680 [ 654.068237][T13775] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 654.074118][T13775] __sys_sendmsg+0x23d/0x3a0 [ 654.078766][T13775] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.083937][T13775] ? irqtime_account_irq+0x18e/0x1e0 [ 654.089287][T13775] ? __irq_exit_rcu+0xf4/0x1c0 [ 654.094206][T13775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.100177][ T5134] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 654.100562][T13775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.114467][T13775] ? __irq_exit_rcu+0x100/0x1c0 [ 654.119365][T13775] ? do_syscall_64+0xb6/0x230 [ 654.124094][T13775] do_syscall_64+0xf3/0x230 [ 654.128631][T13775] ? clear_bhb_loop+0x35/0x90 [ 654.133336][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.139261][T13775] RIP: 0033:0x7f4616b75b99 [ 654.143688][T13775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.163326][T13775] RSP: 002b:00007f46179c9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.171786][T13775] RAX: ffffffffffffffda RBX: 00007f4616d03f60 RCX: 00007f4616b75b99 [ 654.179771][T13775] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 654.187750][T13775] RBP: 00007f46179c90a0 R08: 0000000000000000 R09: 0000000000000000 [ 654.195731][T13775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.203721][T13775] R13: 000000000000000b R14: 00007f4616d03f60 R15: 00007fff5f714928 [ 654.211730][T13775] [ 654.270972][T12192] hsr_slave_0: left promiscuous mode [ 654.297639][T12192] hsr_slave_1: left promiscuous mode [ 654.344488][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.371552][T12192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.402750][ T5134] usb 2-1: config 1 interface 0 altsetting 231 bulk endpoint 0x1 has invalid maxpacket 32 [ 654.419070][ T5134] usb 2-1: config 1 interface 0 has no altsetting 0 [ 654.428305][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.453315][T12192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.460537][ T5134] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 654.460576][ T5134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.460601][ T5134] usb 2-1: Product: à Œ [ 654.460622][ T5134] usb 2-1: Manufacturer: ȗ⩪㞄밽屠莅ã©é½Ÿà­¾á—žæ´«ëœ à¶“ç—ǽ馊䚭讇ã•ã£¸ê—Œã“›á½‹æ¥„銹ꋥ껗⊻矤كç®è¤Ÿá„†è¨€æ™”é£§î¿€ì³¾æ…§í•€ï…–åŒ¥å¿‹å‘‘ë“„ì¯®á€ˆí†‰î˜¤è–“ä†»ç¿³ì¼Šï¹°æˆ [ 654.460652][ T5134] usb 2-1: SerialNumber: ц [ 654.544005][T13768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 654.674359][T12192] veth1_macvtap: left promiscuous mode [ 654.688886][T12192] veth0_macvtap: left promiscuous mode [ 654.705746][T12192] veth1_vlan: left promiscuous mode [ 654.751460][T12192] veth0_vlan: left promiscuous mode [ 654.893724][T13300] Bluetooth: hci1: command tx timeout [ 654.911981][ T5134] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 231 proto 1 vid 0x0525 pid 0xA4A8 [ 654.929640][ T5134] usb 2-1: USB disconnect, device number 28 [ 654.941716][ T5134] usblp0: removed [ 656.175774][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 656.261129][T13300] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 656.968739][T13300] Bluetooth: hci1: command tx timeout [ 657.412123][T12192] team0 (unregistering): Port device team_slave_1 removed [ 657.523291][T12192] team0 (unregistering): Port device team_slave_0 removed [ 657.790937][T13822] FAULT_INJECTION: forcing a failure. [ 657.790937][T13822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.805777][T13822] CPU: 1 PID: 13822 Comm: syz.1.1863 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 657.815972][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 657.826908][T13822] Call Trace: [ 657.830210][T13822] [ 657.833167][T13822] dump_stack_lvl+0x241/0x360 [ 657.837864][T13822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.843075][T13822] ? __pfx__printk+0x10/0x10 [ 657.847681][T13822] ? __pfx_lock_release+0x10/0x10 [ 657.852716][T13822] should_fail_ex+0x3b0/0x4e0 [ 657.857410][T13822] _copy_from_user+0x2f/0xe0 [ 657.862025][T13822] copy_msghdr_from_user+0xae/0x680 [ 657.867273][T13822] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 657.873125][T13822] __sys_sendmsg+0x23d/0x3a0 [ 657.877733][T13822] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.882859][T13822] ? vfs_write+0x7c4/0xc90 [ 657.887356][T13822] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 657.893719][T13822] ? do_syscall_64+0x100/0x230 [ 657.898509][T13822] ? do_syscall_64+0xb6/0x230 [ 657.903202][T13822] do_syscall_64+0xf3/0x230 [ 657.907727][T13822] ? clear_bhb_loop+0x35/0x90 [ 657.912427][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.918347][T13822] RIP: 0033:0x7f615e375b99 [ 657.922775][T13822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.942395][T13822] RSP: 002b:00007f615f18c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.951257][T13822] RAX: ffffffffffffffda RBX: 00007f615e503f60 RCX: 00007f615e375b99 [ 657.959242][T13822] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 657.967270][T13822] RBP: 00007f615f18c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 657.975253][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.983233][T13822] R13: 000000000000000b R14: 00007f615e503f60 R15: 00007ffd5f8afdf8 [ 657.991248][T13822] [ 658.380237][ T5134] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 658.579174][ T5134] usb 2-1: Using ep0 maxpacket: 32 [ 658.620713][ T5134] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 658.661963][ T5134] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 658.683675][ T5134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.737069][ T5134] usb 2-1: Product: syz [ 658.751122][ T5134] usb 2-1: Manufacturer: syz [ 658.769650][ T5134] usb 2-1: SerialNumber: syz [ 658.790578][ T5134] usb 2-1: config 0 descriptor?? [ 658.820856][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 658.839333][T13824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 658.851128][ T5134] hub 2-1:0.0: bad descriptor, ignoring hub [ 658.857801][ T5134] hub 2-1:0.0: probe with driver hub failed with error -5 [ 658.892353][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 658.893435][ T29] audit: type=1326 audit(1720003207.138:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.3.1865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bff75b99 code=0x0 [ 658.904460][ T5134] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 659.048907][T13300] Bluetooth: hci1: command tx timeout [ 659.198862][ T5134] usb 2-1: USB disconnect, device number 29 [ 659.198956][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 660.635927][T13862] overlayfs: failed to resolve './file0': -2 [ 660.735268][T13739] chnl_net:caif_netlink_parms(): no params data found [ 661.128867][T13300] Bluetooth: hci1: command tx timeout [ 661.397402][T13874] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 661.532191][T13874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.619568][T13874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.815965][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.863823][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.909990][T13739] bridge_slave_0: entered allmulticast mode [ 661.947744][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 661.971562][T13739] bridge_slave_0: entered promiscuous mode [ 662.022478][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.083826][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.140756][T13739] bridge_slave_1: entered allmulticast mode [ 662.180622][T13739] bridge_slave_1: entered promiscuous mode [ 662.461960][T13739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.534576][T13739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.800266][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 662.831373][T13739] team0: Port device team_slave_0 added [ 662.880905][T13739] team0: Port device team_slave_1 added [ 662.928553][ T5090] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 663.064546][T13739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.084932][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.127922][T13739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.154138][ T5090] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 663.163510][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 663.165680][T13739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.218559][ T5090] usb 2-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 663.262606][T13739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.267974][ T5090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 663.345250][ T29] audit: type=1326 audit(1720003211.588:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13911 comm="syz.0.1879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4616b75b99 code=0x0 [ 663.400803][ T5090] usb 2-1: Product: syz [ 663.405522][ T5090] usb 2-1: Manufacturer: syz [ 663.408348][T13739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.451105][ T5090] usb 2-1: SerialNumber: syz [ 663.493615][ T5090] usb 2-1: config 0 descriptor?? [ 663.549112][ T5090] usb 2-1: bad CDC descriptors [ 663.770623][ T5090] usb 2-1: USB disconnect, device number 30 [ 663.988041][T13739] hsr_slave_0: entered promiscuous mode [ 664.054129][T13739] hsr_slave_1: entered promiscuous mode [ 664.104090][T13739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.127800][T13739] Cannot create hsr debugfs directory [ 664.209084][T13925] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 665.277059][T13931] FAULT_INJECTION: forcing a failure. [ 665.277059][T13931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.331273][T13931] CPU: 1 PID: 13931 Comm: syz.1.1882 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 665.341497][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 665.351597][T13931] Call Trace: [ 665.354914][T13931] [ 665.357876][T13931] dump_stack_lvl+0x241/0x360 [ 665.362616][T13931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.367871][T13931] ? __pfx__printk+0x10/0x10 [ 665.372515][T13931] ? snprintf+0xda/0x120 [ 665.376894][T13931] should_fail_ex+0x3b0/0x4e0 [ 665.381722][T13931] _copy_to_user+0x2f/0xb0 [ 665.386186][T13931] simple_read_from_buffer+0xca/0x150 [ 665.391621][T13931] proc_fail_nth_read+0x1e9/0x250 [ 665.396705][T13931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.402386][T13931] ? rw_verify_area+0x520/0x6b0 [ 665.407289][T13931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.412886][T13931] vfs_read+0x204/0xbc0 [ 665.417094][T13931] ? __pfx_lock_release+0x10/0x10 [ 665.422167][T13931] ? __pfx_vfs_read+0x10/0x10 [ 665.426897][T13931] ? __fget_files+0x29/0x470 [ 665.431536][T13931] ? __fget_files+0x3f6/0x470 [ 665.436268][T13931] ksys_read+0x1a0/0x2c0 [ 665.440567][T13931] ? __pfx_ksys_read+0x10/0x10 [ 665.445359][T13931] ? do_syscall_64+0x100/0x230 [ 665.450150][T13931] ? do_syscall_64+0xb6/0x230 [ 665.454855][T13931] do_syscall_64+0xf3/0x230 [ 665.459385][T13931] ? clear_bhb_loop+0x35/0x90 [ 665.464103][T13931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.470037][T13931] RIP: 0033:0x7f615e37467c [ 665.474470][T13931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 665.494102][T13931] RSP: 002b:00007f615f18c040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 665.502725][T13931] RAX: ffffffffffffffda RBX: 00007f615e503f60 RCX: 00007f615e37467c [ 665.510729][T13931] RDX: 000000000000000f RSI: 00007f615f18c0b0 RDI: 0000000000000003 [ 665.518720][T13931] RBP: 00007f615f18c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 665.526701][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.534689][T13931] R13: 000000000000000b R14: 00007f615e503f60 R15: 00007ffd5f8afdf8 [ 665.542701][T13931] [ 666.206856][T13300] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 676.689936][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 678.598873][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1892'. [ 679.140515][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 679.160598][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 679.170996][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 679.311758][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 679.324504][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 679.333139][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 679.520700][T13300] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 679.556615][T13300] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 679.569714][T13300] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 679.600996][T13300] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 679.611520][T13300] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 679.620560][T13300] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 680.074996][T13300] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 680.093180][T13300] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 680.125880][T13300] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 680.140273][T13300] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 680.159363][T13300] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 680.172709][T13300] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 681.059292][T12187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.449422][ T5084] Bluetooth: hci3: command tx timeout [ 681.658214][T12187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.770032][ T5084] Bluetooth: hci8: command tx timeout [ 681.964669][T12187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.131020][T12187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.328900][ T5084] Bluetooth: hci9: command tx timeout [ 682.766486][T13739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 682.820984][T13739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 682.964048][T13739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 683.123679][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 683.150477][T12187] bridge_slave_1: left allmulticast mode [ 683.168501][T12187] bridge_slave_1: left promiscuous mode [ 683.174978][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.241095][T12187] bridge_slave_0: left allmulticast mode [ 683.247423][T12187] bridge_slave_0: left promiscuous mode [ 683.267602][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.530076][ T5084] Bluetooth: hci3: command tx timeout [ 683.850458][ T5084] Bluetooth: hci8: command tx timeout [ 684.222465][T12187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.238570][T12187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.260911][T12187] bond0 (unregistering): Released all slaves [ 684.282942][T13739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 684.411842][ T5084] Bluetooth: hci9: command tx timeout [ 684.557679][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 684.895958][T13972] chnl_net:caif_netlink_parms(): no params data found [ 685.412315][T12187] hsr_slave_0: left promiscuous mode [ 685.421160][T12187] hsr_slave_1: left promiscuous mode [ 685.441991][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.451378][T12187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.464426][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.475307][T12187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.515206][T12187] veth1_macvtap: left promiscuous mode [ 685.523770][T12187] veth0_macvtap: left promiscuous mode [ 685.538761][T12187] veth1_vlan: left promiscuous mode [ 685.544967][T12187] veth0_vlan: left promiscuous mode [ 685.608591][ T5084] Bluetooth: hci3: command tx timeout [ 685.939223][ T5084] Bluetooth: hci8: command tx timeout [ 686.175411][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.183036][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.426878][T12187] team0 (unregistering): Port device team_slave_1 removed [ 686.496966][ T5084] Bluetooth: hci9: command tx timeout [ 686.511461][T12187] team0 (unregistering): Port device team_slave_0 removed [ 687.100448][T13970] chnl_net:caif_netlink_parms(): no params data found [ 687.214151][T13980] chnl_net:caif_netlink_parms(): no params data found [ 687.688605][ T5084] Bluetooth: hci3: command tx timeout [ 687.738675][T13972] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.768410][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.776676][T13972] bridge_slave_0: entered allmulticast mode [ 687.841288][T13972] bridge_slave_0: entered promiscuous mode [ 687.875477][T13972] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.908569][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.916835][T13972] bridge_slave_1: entered allmulticast mode [ 687.959005][T13972] bridge_slave_1: entered promiscuous mode [ 688.008711][ T5084] Bluetooth: hci8: command tx timeout [ 688.351688][T13970] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.378486][T13970] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.386739][T13970] bridge_slave_0: entered allmulticast mode [ 688.421423][T13970] bridge_slave_0: entered promiscuous mode [ 688.448016][T13972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.561148][T13980] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.568622][ T5084] Bluetooth: hci9: command tx timeout [ 688.587807][T13980] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.595749][T13980] bridge_slave_0: entered allmulticast mode [ 688.604191][T13980] bridge_slave_0: entered promiscuous mode [ 688.617236][T13970] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.630702][T13970] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.638156][T13970] bridge_slave_1: entered allmulticast mode [ 688.651277][T13970] bridge_slave_1: entered promiscuous mode [ 688.674959][T13972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.785858][T13972] team0: Port device team_slave_0 added [ 688.814429][T13980] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.823586][T13980] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.833945][T13980] bridge_slave_1: entered allmulticast mode [ 688.845948][T13980] bridge_slave_1: entered promiscuous mode [ 688.941256][T13972] team0: Port device team_slave_1 added [ 689.179931][T13980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.200166][T13970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.253329][T13970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.341599][T13972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.360683][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.405555][T13972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.476571][T13739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.492840][T13980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.772314][T14063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.811547][T14063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.828680][T12187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.896382][T13972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.912936][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.952267][T13972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.018849][T13980] team0: Port device team_slave_0 added [ 690.045858][T13970] team0: Port device team_slave_0 added [ 690.110932][T12187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.184209][T13739] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.202921][T13980] team0: Port device team_slave_1 added [ 690.255303][T13970] team0: Port device team_slave_1 added [ 690.381764][T12187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.512264][T13980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.529910][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.587566][T13980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.674516][T13970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.688309][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.732420][T13970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.845992][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.853287][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.946846][T12187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.985361][T13980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.007004][T13980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.110959][T13980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.156720][T13970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.179536][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.255057][T13970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.333900][T13972] hsr_slave_0: entered promiscuous mode [ 691.356506][T13972] hsr_slave_1: entered promiscuous mode [ 691.377937][T13972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.397028][T13972] Cannot create hsr debugfs directory [ 691.471298][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.478561][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.764475][T13980] hsr_slave_0: entered promiscuous mode [ 691.805678][T13980] hsr_slave_1: entered promiscuous mode [ 691.866247][T13980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.890813][T13980] Cannot create hsr debugfs directory [ 692.153139][T13970] hsr_slave_0: entered promiscuous mode [ 692.162709][T13970] hsr_slave_1: entered promiscuous mode [ 692.170608][T13970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.178220][T13970] Cannot create hsr debugfs directory [ 692.393369][T14103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.406516][T14103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.542524][T12187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.675816][T12187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.788972][T12187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.881901][T12187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.845148][T13739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.869831][T12187] bridge_slave_1: left allmulticast mode [ 693.905281][T12187] bridge_slave_1: left promiscuous mode [ 693.945530][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.996068][T12187] bridge_slave_0: left allmulticast mode [ 694.038603][T12187] bridge_slave_0: left promiscuous mode [ 694.044452][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.116416][T12187] bridge_slave_1: left allmulticast mode [ 694.149447][T12187] bridge_slave_1: left promiscuous mode [ 694.155266][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.220127][T12187] bridge_slave_0: left allmulticast mode [ 694.246563][T12187] bridge_slave_0: left promiscuous mode [ 694.319091][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.479137][T12187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.510790][T12187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.524220][T12187] bond0 (unregistering): Released all slaves [ 696.707582][T12187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.725671][T12187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.739430][T12187] bond0 (unregistering): Released all slaves [ 697.407090][T13972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 697.601940][T13972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 697.768011][T13972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 697.794009][T13972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 698.525178][T12187] hsr_slave_0: left promiscuous mode [ 698.547582][T12187] hsr_slave_1: left promiscuous mode [ 698.555822][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.564818][T12187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.590544][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.609024][T12187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.653610][T12187] hsr_slave_0: left promiscuous mode [ 698.669923][T12187] hsr_slave_1: left promiscuous mode [ 698.690434][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.708187][T12187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.721550][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.732314][T12187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.813687][T12187] veth1_macvtap: left promiscuous mode [ 698.824394][T12187] veth0_macvtap: left promiscuous mode [ 698.830863][T12187] veth1_vlan: left promiscuous mode [ 698.836917][T12187] veth0_vlan: left promiscuous mode [ 698.852981][T12187] veth1_macvtap: left promiscuous mode [ 698.859570][T12187] veth0_macvtap: left promiscuous mode [ 698.866012][T12187] veth1_vlan: left promiscuous mode [ 698.872611][T12187] veth0_vlan: left promiscuous mode [ 699.432189][T14153] fuse: Bad value for 'fd' [ 699.544498][T14154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1910'. [ 701.302107][T12187] team0 (unregistering): Port device team_slave_1 removed [ 701.435199][T12187] team0 (unregistering): Port device team_slave_0 removed [ 702.785724][T12187] team0 (unregistering): Port device team_slave_1 removed [ 702.858647][T12187] team0 (unregistering): Port device team_slave_0 removed [ 703.643106][T13739] veth0_vlan: entered promiscuous mode [ 703.663847][T14159] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 703.872029][T13739] veth1_vlan: entered promiscuous mode [ 704.055356][T13980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 704.214661][T14167] bond0: entered promiscuous mode [ 704.222980][T14167] bond_slave_0: entered promiscuous mode [ 704.232350][T14167] bond_slave_1: entered promiscuous mode [ 704.255169][T13980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 704.273312][T13980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 704.422268][T13980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 704.671822][T13739] veth0_macvtap: entered promiscuous mode [ 704.860067][T13739] veth1_macvtap: entered promiscuous mode [ 704.935104][T13972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.156063][T13972] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.345087][T13300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.360466][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.373195][T13300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.381985][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.382013][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.382035][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.382056][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.382073][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.382094][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.382111][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.382129][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.382145][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.394505][T13739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.487098][T13300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.510329][T13300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.530816][T13300] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 705.550133][T13300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.569830][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.608167][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.619796][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.631368][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.645655][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.657355][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.668635][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.680250][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.691716][T13739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.703053][T13739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.720758][T13739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.857884][T13739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.884066][T13739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.894369][T13739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.914450][T13739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.942444][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.950245][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.973707][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.981767][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.137163][T13970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 706.167575][T13970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 706.201735][T13970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 706.215768][T13970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 706.413176][T12187] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.557840][T13980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.624294][T12187] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.902224][T12187] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.019129][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.027255][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.033998][T13980] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.224081][T12187] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.300636][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.307826][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.547452][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.554734][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.609285][ T5084] Bluetooth: hci2: command tx timeout [ 707.619111][T12190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.627826][T12190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.736342][T13970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.836863][T14177] chnl_net:caif_netlink_parms(): no params data found [ 707.892883][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.256442][T13970] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.424141][T12187] bridge_slave_1: left allmulticast mode [ 708.431034][T12187] bridge_slave_1: left promiscuous mode [ 708.437734][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.452988][T12187] bridge_slave_0: left allmulticast mode [ 708.460659][T12187] bridge_slave_0: left promiscuous mode [ 708.467467][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.108466][T12187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.117510][T12187] bond_slave_0: left promiscuous mode [ 709.130574][T12187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.146172][T12187] bond_slave_1: left promiscuous mode [ 709.155963][T12187] bond0 (unregistering): Released all slaves [ 709.319155][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.326366][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.393455][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.403016][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.410822][T14177] bridge_slave_0: entered allmulticast mode [ 709.421777][T14177] bridge_slave_0: entered promiscuous mode [ 709.451456][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.458883][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.518845][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.526176][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.556842][T14177] bridge_slave_1: entered allmulticast mode [ 709.565114][T14177] bridge_slave_1: entered promiscuous mode [ 709.593988][T13972] veth0_vlan: entered promiscuous mode [ 709.698855][ T5084] Bluetooth: hci2: command tx timeout [ 709.766612][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.830763][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.870618][T13972] veth1_vlan: entered promiscuous mode [ 709.973371][T14177] team0: Port device team_slave_0 added [ 710.036431][T12187] hsr_slave_0: left promiscuous mode [ 710.046519][T12187] hsr_slave_1: left promiscuous mode [ 710.055468][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.063259][T12187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.084406][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.104499][T12187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.182098][T12187] veth1_macvtap: left promiscuous mode [ 710.187724][T12187] veth0_macvtap: left promiscuous mode [ 710.205351][T12187] veth1_vlan: left promiscuous mode [ 710.211434][T12187] veth0_vlan: left promiscuous mode [ 710.574710][T13300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 710.589068][T13300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 710.615403][T13300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 710.625434][T13300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 710.636879][T13300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 710.646962][T13300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 711.172683][T12187] team0 (unregistering): Port device team_slave_1 removed [ 711.225897][T12187] team0 (unregistering): Port device team_slave_0 removed [ 711.690190][T14177] team0: Port device team_slave_1 added [ 711.778499][T13300] Bluetooth: hci2: command tx timeout [ 711.828019][T13980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.941916][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.958562][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.009153][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.041373][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.058295][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.108668][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.316700][T14177] hsr_slave_0: entered promiscuous mode [ 712.345666][T14177] hsr_slave_1: entered promiscuous mode [ 712.360990][T14177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.385685][T14177] Cannot create hsr debugfs directory [ 712.519375][T13972] veth0_macvtap: entered promiscuous mode [ 712.600904][T13972] veth1_macvtap: entered promiscuous mode [ 712.639394][T13970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.660716][T13980] veth0_vlan: entered promiscuous mode [ 712.731230][T13300] Bluetooth: hci1: command tx timeout [ 712.828926][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.855847][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.866801][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.898466][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.918344][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.938621][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.958599][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.983601][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.994157][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.015456][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.030569][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.106927][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.129694][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.142713][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.153652][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.177397][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.198350][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.209236][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.220175][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.230557][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.241446][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.253836][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.277028][T13980] veth1_vlan: entered promiscuous mode [ 713.418351][T12187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.483492][T13972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.495286][T13972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.506675][T13972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.516518][T13972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.582751][T12187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.641342][T13970] veth0_vlan: entered promiscuous mode [ 713.777458][T12187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.848924][T13300] Bluetooth: hci2: command tx timeout [ 713.971272][T13970] veth1_vlan: entered promiscuous mode [ 714.045563][T12187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.091412][T14229] chnl_net:caif_netlink_parms(): no params data found [ 714.205219][T13980] veth0_macvtap: entered promiscuous mode [ 714.353212][T13980] veth1_macvtap: entered promiscuous mode [ 714.561485][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.573029][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.583515][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.594394][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.604558][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.615438][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.627658][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.638161][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.650011][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.660571][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.671061][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 714.681851][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.694143][T13980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.746202][ T5558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.766385][ T5558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.788070][T13970] veth0_macvtap: entered promiscuous mode [ 714.809059][T13300] Bluetooth: hci1: command tx timeout [ 714.830362][T14229] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.837599][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.845771][T14229] bridge_slave_0: entered allmulticast mode [ 714.855206][T14229] bridge_slave_0: entered promiscuous mode [ 714.864442][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.872630][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.880282][T14229] bridge_slave_1: entered allmulticast mode [ 714.887422][T14229] bridge_slave_1: entered promiscuous mode [ 714.913450][T12187] bridge_slave_1: left allmulticast mode [ 714.924565][T12187] bridge_slave_1: left promiscuous mode [ 714.931072][T12187] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.942156][T12187] bridge_slave_0: left allmulticast mode [ 714.947816][T12187] bridge_slave_0: left promiscuous mode [ 714.954810][T12187] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.446118][T12187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.461724][T12187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.474518][T12187] bond0 (unregistering): Released all slaves [ 715.500463][T13970] veth1_macvtap: entered promiscuous mode [ 715.552781][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.609988][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.623041][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.634561][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.646008][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.655944][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.666466][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.676448][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.686944][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.697727][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.708353][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.718209][T13980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.730948][T13980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.751498][T13980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.796122][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.805873][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.812717][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.868023][T13980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.877804][T13980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.888986][T13980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.897824][T13980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.959699][T14177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 715.972891][T14177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 715.984301][T14177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 715.997253][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.012933][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.023516][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.034564][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.044609][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.056984][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.066925][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.077477][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.087370][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.098390][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.108370][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.120810][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.130746][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.141337][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.155621][T13970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.166991][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.177991][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.190320][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.207034][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.217184][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.228087][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.240084][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.251260][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.263024][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.273594][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.283613][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.294137][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.304133][T13970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.314713][T13970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.327397][T13970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.396674][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 716.403465][T14229] team0: Port device team_slave_0 added [ 716.422166][T14229] team0: Port device team_slave_1 added [ 716.460591][T14177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 716.559802][T12187] hsr_slave_0: left promiscuous mode [ 716.575121][T12187] hsr_slave_1: left promiscuous mode [ 716.594609][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.608711][T12187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.628036][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.636123][T12187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.667282][T12187] veth1_macvtap: left promiscuous mode [ 716.673363][T12187] veth0_macvtap: left promiscuous mode [ 716.679688][T12187] veth1_vlan: left promiscuous mode [ 716.685069][T12187] veth0_vlan: left promiscuous mode [ 716.889515][T13300] Bluetooth: hci1: command tx timeout [ 716.898523][ T1794] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 717.085889][ T1794] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.097295][ T1794] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.116443][ T1794] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.126083][ T1794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.134618][ T1794] usb 2-1: Product: syz [ 717.139278][ T1794] usb 2-1: Manufacturer: syz [ 717.143921][ T1794] usb 2-1: SerialNumber: syz [ 717.417361][T12187] team0 (unregistering): Port device team_slave_1 removed [ 717.476675][T12187] team0 (unregistering): Port device team_slave_0 removed [ 718.091788][T13970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.138659][T13970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.170462][T13970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.188508][T13970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.197659][ T1794] cdc_ncm 2-1:1.0: bind() failure [ 718.225937][ T1794] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 718.243838][ T1794] cdc_ncm 2-1:1.1: bind() failure [ 718.291105][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.298113][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.349926][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.465228][ T8] usb 2-1: USB disconnect, device number 31 [ 718.488169][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.522267][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.556475][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.848772][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.857996][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.914319][T14229] hsr_slave_0: entered promiscuous mode [ 718.937796][T14229] hsr_slave_1: entered promiscuous mode [ 718.945225][T14229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.958502][T14229] Cannot create hsr debugfs directory [ 718.968609][T13300] Bluetooth: hci1: command tx timeout [ 719.102445][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.134257][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.302116][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.329761][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.427686][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 719.463956][ T29] audit: type=1326 audit(1720003267.708:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14318 comm="syz.3.1891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedb9775b99 code=0x0 [ 719.604276][T12194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.622816][T12194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.712151][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.966295][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.052130][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.059401][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.125639][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.132938][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.802484][T14229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 720.842646][T14229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 720.886491][T14229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 720.912945][T14229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 721.032437][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.230245][T14177] veth0_vlan: entered promiscuous mode [ 721.271381][T14177] veth1_vlan: entered promiscuous mode [ 721.387993][T14229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.491800][T14229] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.561175][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.568432][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.590573][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.597779][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.617835][T14177] veth0_macvtap: entered promiscuous mode [ 721.675475][T14177] veth1_macvtap: entered promiscuous mode [ 721.756911][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.805813][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.826404][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.844005][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.854634][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.866316][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.876712][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.898846][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.916405][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.927083][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.938796][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.955480][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.968286][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.991721][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.017037][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.058875][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.083245][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.097162][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.108474][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.119996][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.131137][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.143954][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.158453][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.178451][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.206070][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.227448][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.245808][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.256265][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.266898][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.280328][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.322828][T14177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.333469][T14177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.342822][T14177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.352019][T14177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.557440][ T7600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.583271][ T7600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.694596][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.719462][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.812819][T14229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.462759][T14229] veth0_vlan: entered promiscuous mode [ 723.506120][T14229] veth1_vlan: entered promiscuous mode [ 723.567865][T14229] veth0_macvtap: entered promiscuous mode [ 723.583973][T14229] veth1_macvtap: entered promiscuous mode [ 723.604899][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.617755][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.631658][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.644687][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.655829][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.666757][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.676737][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.687982][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.717415][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.744390][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.765086][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.786618][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.807145][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.844049][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.855065][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.876198][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.889288][T14229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.906200][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.918073][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.930868][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.944159][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.954108][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.964970][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.975649][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.987208][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.997565][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.008279][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.018156][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.032178][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.043588][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.054469][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.065211][T14229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.075741][T14229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.090155][T14229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.106498][T14229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.115350][T14229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.124859][T14229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.134300][T14229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.268691][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.276936][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.317081][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.325689][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.001724][ T1278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.087237][ T1278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.167840][ T1278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.251067][ T1278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.434892][ T1278] bridge_slave_1: left allmulticast mode [ 727.440926][ T1278] bridge_slave_1: left promiscuous mode [ 727.446737][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.456421][ T1278] bridge_slave_0: left allmulticast mode [ 727.462587][ T1278] bridge_slave_0: left promiscuous mode [ 727.468624][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.671584][T14389] FAULT_INJECTION: forcing a failure. [ 727.671584][T14389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.693770][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'. [ 727.718736][T14389] CPU: 0 PID: 14389 Comm: syz.3.1923 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 727.728972][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 727.739108][T14389] Call Trace: [ 727.742418][T14389] [ 727.745379][T14389] dump_stack_lvl+0x241/0x360 [ 727.750121][T14389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.755375][T14389] ? __pfx__printk+0x10/0x10 [ 727.760124][T14389] ? snprintf+0xda/0x120 [ 727.764419][T14389] should_fail_ex+0x3b0/0x4e0 [ 727.769160][T14389] _copy_to_user+0x2f/0xb0 [ 727.773628][T14389] simple_read_from_buffer+0xca/0x150 [ 727.779068][T14389] proc_fail_nth_read+0x1e9/0x250 [ 727.784148][T14389] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.789749][T14389] ? rw_verify_area+0x520/0x6b0 [ 727.794640][T14389] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.800214][T14389] vfs_read+0x204/0xbc0 [ 727.804393][T14389] ? __pfx_lock_release+0x10/0x10 [ 727.809436][T14389] ? __pfx_vfs_read+0x10/0x10 [ 727.814132][T14389] ? __fget_files+0x29/0x470 [ 727.818734][T14389] ? __fget_files+0x3f6/0x470 [ 727.823437][T14389] ksys_read+0x1a0/0x2c0 [ 727.827719][T14389] ? __pfx_ksys_read+0x10/0x10 [ 727.832512][T14389] ? do_syscall_64+0x100/0x230 [ 727.837300][T14389] ? do_syscall_64+0xb6/0x230 [ 727.842001][T14389] do_syscall_64+0xf3/0x230 [ 727.846522][T14389] ? clear_bhb_loop+0x35/0x90 [ 727.851222][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.857133][T14389] RIP: 0033:0x7fedb977467c [ 727.861565][T14389] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 727.881226][T14389] RSP: 002b:00007fedba59e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.889665][T14389] RAX: ffffffffffffffda RBX: 00007fedb9903f60 RCX: 00007fedb977467c [ 727.897648][T14389] RDX: 000000000000000f RSI: 00007fedba59e0b0 RDI: 0000000000000003 [ 727.905629][T14389] RBP: 00007fedba59e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 727.913696][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.921677][T14389] R13: 000000000000000b R14: 00007fedb9903f60 R15: 00007ffd31c64048 [ 727.929676][T14389] [ 728.427290][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 728.451645][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 728.462579][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 728.471639][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 728.483745][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 728.495013][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 728.770315][ T1278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.794887][ T1278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.833581][ T1278] bond0 (unregistering): Released all slaves [ 729.291829][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 729.324529][T14419] FAULT_INJECTION: forcing a failure. [ 729.324529][T14419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.378666][T14419] CPU: 0 PID: 14419 Comm: syz.0.1931 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 729.388863][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 729.398952][T14419] Call Trace: [ 729.402234][T14419] [ 729.405191][T14419] dump_stack_lvl+0x241/0x360 [ 729.409887][T14419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.415116][T14419] ? __pfx__printk+0x10/0x10 [ 729.419716][T14419] ? __pfx_lock_release+0x10/0x10 [ 729.424769][T14419] ? timekeeping_get_ns+0x5c/0x420 [ 729.429916][T14419] should_fail_ex+0x3b0/0x4e0 [ 729.434620][T14419] _copy_to_user+0x2f/0xb0 [ 729.439054][T14419] bpf_test_finish+0x593/0x8b0 [ 729.443833][T14419] ? bpf_test_timer_leave+0x10b/0x150 [ 729.449220][T14419] ? __pfx_bpf_test_finish+0x10/0x10 [ 729.454520][T14419] bpf_prog_test_run_flow_dissector+0x554/0x7f0 [ 729.460777][T14419] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 729.467564][T14419] ? __fget_files+0x3f6/0x470 [ 729.472245][T14419] ? __fget_files+0x29/0x470 [ 729.476844][T14419] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 729.483616][T14419] bpf_prog_test_run+0x33a/0x3b0 [ 729.488574][T14419] __sys_bpf+0x48d/0x810 [ 729.492850][T14419] ? __pfx___sys_bpf+0x10/0x10 [ 729.497635][T14419] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 729.503638][T14419] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 729.509967][T14419] ? do_syscall_64+0x100/0x230 [ 729.514765][T14419] __x64_sys_bpf+0x7c/0x90 [ 729.519213][T14419] do_syscall_64+0xf3/0x230 [ 729.523726][T14419] ? clear_bhb_loop+0x35/0x90 [ 729.528435][T14419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.534334][T14419] RIP: 0033:0x7f950d175b99 [ 729.538751][T14419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.558354][T14419] RSP: 002b:00007f950e034048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 729.566781][T14419] RAX: ffffffffffffffda RBX: 00007f950d303f60 RCX: 00007f950d175b99 [ 729.574784][T14419] RDX: 0000000000000050 RSI: 0000000020000440 RDI: 000000000000000a [ 729.582761][T14419] RBP: 00007f950e0340a0 R08: 0000000000000000 R09: 0000000000000000 [ 729.590732][T14419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.598698][T14419] R13: 000000000000000b R14: 00007f950d303f60 R15: 00007ffdecfc2268 [ 729.606698][T14419] [ 729.756182][ T29] audit: type=1326 audit(1720003277.978:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14413 comm="syz.3.1929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedb9775b99 code=0x0 [ 730.154934][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 730.334753][ T1278] hsr_slave_0: left promiscuous mode [ 730.341738][ T1278] hsr_slave_1: left promiscuous mode [ 730.348140][ T1278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.362568][ T1278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.443916][ T1278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.478470][ T1278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.567703][ T1278] veth1_macvtap: left promiscuous mode [ 730.578534][ T5084] Bluetooth: hci1: command tx timeout [ 730.593436][ T1278] veth0_macvtap: left promiscuous mode [ 730.606562][ T1278] veth1_vlan: left promiscuous mode [ 730.612434][ T1278] veth0_vlan: left promiscuous mode [ 730.733921][T14455] random: crng reseeded on system resumption [ 730.932337][T14462] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1937'. [ 731.740138][ T1278] team0 (unregistering): Port device team_slave_1 removed [ 731.798371][ T1278] team0 (unregistering): Port device team_slave_0 removed [ 732.047912][ T29] audit: type=1326 audit(1720003280.288:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14472 comm="syz.1.1941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea8fd75b99 code=0x0 [ 732.525850][T14463] netlink: 'syz.0.1938': attribute type 12 has an invalid length. [ 732.534217][T14463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1938'. [ 732.651401][ T5084] Bluetooth: hci1: command tx timeout [ 732.863076][ T5084] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 732.984396][T14406] chnl_net:caif_netlink_parms(): no params data found [ 733.168673][ T1794] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 733.328884][T14497] fuse: Unknown parameter 'f' [ 733.369087][ T1794] usb 4-1: Using ep0 maxpacket: 16 [ 733.380025][ T1794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 733.398369][ T1794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 733.414280][ T1794] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 733.441482][ T1794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.447274][T14406] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.475902][T14406] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.489971][ T1794] usb 4-1: config 0 descriptor?? [ 733.492237][T14406] bridge_slave_0: entered allmulticast mode [ 733.515543][T14406] bridge_slave_0: entered promiscuous mode [ 733.569725][T14406] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.587068][T14406] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.608965][T14406] bridge_slave_1: entered allmulticast mode [ 733.631572][T14406] bridge_slave_1: entered promiscuous mode [ 733.823721][T14406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.874024][T14406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.037758][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.046667][T14406] team0: Port device team_slave_0 added [ 734.067167][T14406] team0: Port device team_slave_1 added [ 734.089733][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.164357][ T1794] hid (null): report_id 0 is invalid [ 734.229855][ T1794] hid (null): unknown global tag 0xd [ 734.235246][ T1794] hid (null): unknown global tag 0xe [ 734.268645][T14406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.272697][ T1794] hid (null): report_id 908678640 is invalid [ 734.444075][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.470009][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.517748][ T1794] hid (null): report_id 12511 is invalid [ 734.528490][ T1794] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 734.535969][ T1794] hid-generic 0003:0158:0100.0016: unexpected long global item [ 734.544510][ T1794] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 734.557827][ T1794] usb 4-1: USB disconnect, device number 33 [ 734.815093][ T5084] Bluetooth: hci1: command tx timeout [ 734.853006][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.866825][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.150001][T14406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.239628][T14406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.278947][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.472827][T14406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.536045][T14540] kernel read not supported for file /file0 (pid: 14540 comm: syz.3.1958) [ 735.573420][ T29] audit: type=1800 audit(1720003283.818:182): pid=14540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1958" name="file0" dev="mqueue" ino=62188 res=0 errno=0 [ 736.693818][T14406] hsr_slave_0: entered promiscuous mode [ 736.747738][T14406] hsr_slave_1: entered promiscuous mode [ 736.793038][T14406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.845534][T14406] Cannot create hsr debugfs directory [ 736.889499][T13300] Bluetooth: hci1: command tx timeout [ 737.696024][T14565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 737.737624][T14565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 737.775288][T14565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 737.824061][T14565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 738.185553][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.229606][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.288663][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.290600][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.708876][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 738.929662][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 738.963687][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.033248][ T8] usb 2-1: config 0 descriptor?? [ 739.062593][ T8] cp210x 2-1:0.0: cp210x converter detected [ 739.089334][T14607] IPVS: length: 176 != 8 [ 739.114562][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.127425][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.154159][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.175511][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.213715][T14406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 739.261344][T14406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 739.275684][T14594] Bluetooth: MGMT ver 1.22 [ 739.302506][T14406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 739.361821][T14406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 739.573135][T14594] ================================================================== [ 739.581266][T14594] BUG: KASAN: slab-use-after-free in dev_map_enqueue+0x40/0x3e0 [ 739.588947][T14594] Read of size 8 at addr ffff888023e99b00 by task syz.1.1971/14594 [ 739.596906][T14594] [ 739.599258][T14594] CPU: 1 PID: 14594 Comm: syz.1.1971 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 739.609543][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 739.619615][T14594] Call Trace: [ 739.622912][T14594] [ 739.625878][T14594] dump_stack_lvl+0x241/0x360 [ 739.630606][T14594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.635844][T14594] ? __pfx__printk+0x10/0x10 [ 739.640471][T14594] ? _printk+0xd5/0x120 [ 739.644668][T14594] ? __virt_addr_valid+0x183/0x520 [ 739.649811][T14594] ? __virt_addr_valid+0x183/0x520 [ 739.654961][T14594] print_report+0x169/0x550 [ 739.659511][T14594] ? __virt_addr_valid+0x183/0x520 [ 739.664725][T14594] ? __virt_addr_valid+0x183/0x520 [ 739.669876][T14594] ? __virt_addr_valid+0x44e/0x520 [ 739.675025][T14594] ? __phys_addr+0xba/0x170 [ 739.679572][T14594] ? dev_map_enqueue+0x40/0x3e0 [ 739.684453][T14594] kasan_report+0x143/0x180 [ 739.688987][T14594] ? dev_map_enqueue+0x40/0x3e0 [ 739.693900][T14594] dev_map_enqueue+0x40/0x3e0 [ 739.698608][T14594] xdp_do_redirect_frame+0x2a6/0x660 [ 739.703926][T14594] bpf_test_run_xdp_live+0xe60/0x1e60 [ 739.709364][T14594] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 739.714941][T14594] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 739.720816][T14594] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 739.727182][T14594] ? __might_fault+0xaa/0x120 [ 739.731887][T14594] ? __might_fault+0xc6/0x120 [ 739.736615][T14594] ? _copy_from_user+0xa6/0xe0 [ 739.741408][T14594] ? bpf_test_init+0x15a/0x180 [ 739.746217][T14594] ? xdp_convert_md_to_buff+0x5b/0x330 [ 739.751714][T14594] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 739.757115][T14594] ? __pfx_lock_release+0x10/0x10 [ 739.762163][T14594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 739.768038][T14594] ? __fget_files+0x29/0x470 [ 739.772669][T14594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 739.778517][T14594] bpf_prog_test_run+0x33a/0x3b0 [ 739.783483][T14594] __sys_bpf+0x48d/0x810 [ 739.787749][T14594] ? __pfx___sys_bpf+0x10/0x10 [ 739.792576][T14594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 739.798594][T14594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 739.804952][T14594] ? do_syscall_64+0x100/0x230 [ 739.809762][T14594] __x64_sys_bpf+0x7c/0x90 [ 739.814266][T14594] do_syscall_64+0xf3/0x230 [ 739.818901][T14594] ? clear_bhb_loop+0x35/0x90 [ 739.823615][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.829539][T14594] RIP: 0033:0x7fea8fd75b99 [ 739.833997][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.853817][T14594] RSP: 002b:00007fea90c12048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.862251][T14594] RAX: ffffffffffffffda RBX: 00007fea8ff03f60 RCX: 00007fea8fd75b99 [ 739.870252][T14594] RDX: 0000000000000048 RSI: 00000000200000c0 RDI: 000000000000000a [ 739.878248][T14594] RBP: 00007fea8fde4a7a R08: 0000000000000000 R09: 0000000000000000 [ 739.886338][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.894336][T14594] R13: 000000000000000b R14: 00007fea8ff03f60 R15: 00007ffe32917f88 [ 739.902335][T14594] [ 739.905364][T14594] [ 739.907682][T14594] Allocated by task 14448: [ 739.912118][T14594] kasan_save_track+0x3f/0x80 [ 739.916859][T14594] __kasan_kmalloc+0x98/0xb0 [ 739.921481][T14594] __kmalloc_node_noprof+0x22a/0x440 [ 739.926775][T14594] kvmalloc_node_noprof+0x72/0x190 [ 739.931920][T14594] simple_xattr_alloc+0x43/0xa0 [ 739.936802][T14594] shmem_initxattrs+0x24a/0x450 [ 739.941686][T14594] security_inode_init_security+0x250/0x440 [ 739.947629][T14594] shmem_symlink+0x168/0x6a0 [ 739.952248][T14594] vfs_symlink+0x137/0x2e0 [ 739.956708][T14594] do_symlinkat+0x222/0x3a0 [ 739.961228][T14594] __x64_sys_symlinkat+0x99/0xb0 [ 739.966182][T14594] do_syscall_64+0xf3/0x230 [ 739.970707][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.976617][T14594] [ 739.978951][T14594] Freed by task 13972: [ 739.983029][T14594] kasan_save_track+0x3f/0x80 [ 739.987740][T14594] kasan_save_free_info+0x40/0x50 [ 739.992787][T14594] poison_slab_object+0xe0/0x150 [ 739.997746][T14594] __kasan_slab_free+0x37/0x60 [ 740.002530][T14594] kfree+0x149/0x360 [ 740.006445][T14594] simple_xattrs_free+0x139/0x170 [ 740.011494][T14594] shmem_evict_inode+0x885/0xa60 [ 740.016464][T14594] evict+0x2a8/0x630 [ 740.020391][T14594] do_unlinkat+0x512/0x830 [ 740.024817][T14594] __x64_sys_unlink+0x49/0x60 [ 740.029504][T14594] do_syscall_64+0xf3/0x230 [ 740.034027][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.040006][T14594] [ 740.042345][T14594] The buggy address belongs to the object at ffff888023e99b00 [ 740.042345][T14594] which belongs to the cache kmalloc-cg-64 of size 64 [ 740.056502][T14594] The buggy address is located 0 bytes inside of [ 740.056502][T14594] freed 64-byte region [ffff888023e99b00, ffff888023e99b40) [ 740.070071][T14594] [ 740.072408][T14594] The buggy address belongs to the physical page: [ 740.078837][T14594] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23e99 [ 740.087626][T14594] memcg:ffff88802b0b7601 [ 740.091867][T14594] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 740.098981][T14594] page_type: 0xffffefff(slab) [ 740.103668][T14594] raw: 00fff00000000000 ffff88801504dc80 ffffea0001e702c0 dead000000000004 [ 740.112266][T14594] raw: 0000000000000000 0000000000200020 00000001ffffefff ffff88802b0b7601 [ 740.120951][T14594] page dumped because: kasan: bad access detected [ 740.127385][T14594] page_owner tracks the page as allocated [ 740.133164][T14594] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5235, tgid 5235 (syz-executor), ts 254143118031, free_ts 254140544967 [ 740.152556][T14594] post_alloc_hook+0x1f3/0x230 [ 740.157352][T14594] get_page_from_freelist+0x2e4c/0x2f10 [ 740.162922][T14594] __alloc_pages_noprof+0x256/0x6c0 [ 740.168145][T14594] alloc_slab_page+0x5f/0x120 [ 740.172841][T14594] allocate_slab+0x5a/0x2f0 [ 740.177371][T14594] ___slab_alloc+0xcd1/0x14b0 [ 740.182077][T14594] __slab_alloc+0x58/0xa0 [ 740.186438][T14594] __kmalloc_node_noprof+0x286/0x440 [ 740.191763][T14594] kvmalloc_node_noprof+0x72/0x190 [ 740.196895][T14594] simple_xattr_alloc+0x43/0xa0 [ 740.201776][T14594] shmem_initxattrs+0x24a/0x450 [ 740.206659][T14594] security_inode_init_security+0x250/0x440 [ 740.212579][T14594] shmem_mknod+0xc5/0x1d0 [ 740.216941][T14594] shmem_mkdir+0x33/0x70 [ 740.221218][T14594] vfs_mkdir+0x2f9/0x4f0 [ 740.225484][T14594] do_mkdirat+0x264/0x3a0 [ 740.229841][T14594] page last free pid 5082 tgid 5082 stack trace: [ 740.236193][T14594] free_unref_page+0xd19/0xea0 [ 740.240983][T14594] vfree+0x186/0x2e0 [ 740.244903][T14594] do_ipt_get_ctl+0x11df/0x1810 [ 740.249781][T14594] nf_getsockopt+0x299/0x2c0 [ 740.254436][T14594] ip_getsockopt+0x222/0x2e0 [ 740.259070][T14594] tcp_getsockopt+0x163/0x1c0 [ 740.263792][T14594] do_sock_getsockopt+0x373/0x850 [ 740.268852][T14594] __sys_getsockopt+0x271/0x330 [ 740.273824][T14594] __x64_sys_getsockopt+0xb5/0xd0 [ 740.278883][T14594] do_syscall_64+0xf3/0x230 [ 740.283429][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.289354][T14594] [ 740.291693][T14594] Memory state around the buggy address: [ 740.297344][T14594] ffff888023e99a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 740.305458][T14594] ffff888023e99a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 740.313562][T14594] >ffff888023e99b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 740.321666][T14594] ^ [ 740.325752][T14594] ffff888023e99b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 740.334365][T14594] ffff888023e99c00: 00 00 00 00 00 01 fc fc fc fc fc fc fc fc fc fc [ 740.342437][T14594] ================================================================== [ 740.350678][T14594] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 740.357891][T14594] CPU: 1 PID: 14594 Comm: syz.1.1971 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 740.368069][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 740.378153][T14594] Call Trace: [ 740.381450][T14594] [ 740.384399][T14594] dump_stack_lvl+0x241/0x360 [ 740.389120][T14594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.394355][T14594] ? __pfx__printk+0x10/0x10 [ 740.398969][T14594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 740.404980][T14594] ? vscnprintf+0x5d/0x90 [ 740.409336][T14594] panic+0x349/0x860 [ 740.413264][T14594] ? check_panic_on_warn+0x21/0xb0 [ 740.418404][T14594] ? __pfx_panic+0x10/0x10 [ 740.422942][T14594] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 740.428877][T14594] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 740.434813][T14594] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 740.441210][T14594] check_panic_on_warn+0x86/0xb0 [ 740.446184][T14594] ? dev_map_enqueue+0x40/0x3e0 [ 740.451068][T14594] end_report+0x77/0x160 [ 740.455336][T14594] kasan_report+0x154/0x180 [ 740.459864][T14594] ? dev_map_enqueue+0x40/0x3e0 [ 740.464753][T14594] dev_map_enqueue+0x40/0x3e0 [ 740.469458][T14594] xdp_do_redirect_frame+0x2a6/0x660 [ 740.474780][T14594] bpf_test_run_xdp_live+0xe60/0x1e60 [ 740.480203][T14594] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 740.485766][T14594] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 740.491646][T14594] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 740.497599][T14594] ? __might_fault+0xaa/0x120 [ 740.502320][T14594] ? __might_fault+0xc6/0x120 [ 740.507068][T14594] ? _copy_from_user+0xa6/0xe0 [ 740.511860][T14594] ? bpf_test_init+0x15a/0x180 [ 740.516672][T14594] ? xdp_convert_md_to_buff+0x5b/0x330 [ 740.522172][T14594] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 740.527675][T14594] ? __pfx_lock_release+0x10/0x10 [ 740.532717][T14594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 740.538589][T14594] ? __fget_files+0x29/0x470 [ 740.543216][T14594] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 740.549050][T14594] bpf_prog_test_run+0x33a/0x3b0 [ 740.554017][T14594] __sys_bpf+0x48d/0x810 [ 740.558305][T14594] ? __pfx___sys_bpf+0x10/0x10 [ 740.563110][T14594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 740.569121][T14594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 740.575493][T14594] ? do_syscall_64+0x100/0x230 [ 740.580280][T14594] __x64_sys_bpf+0x7c/0x90 [ 740.584740][T14594] do_syscall_64+0xf3/0x230 [ 740.589280][T14594] ? clear_bhb_loop+0x35/0x90 [ 740.594001][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.600021][T14594] RIP: 0033:0x7fea8fd75b99 [ 740.604458][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.624093][T14594] RSP: 002b:00007fea90c12048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 740.632575][T14594] RAX: ffffffffffffffda RBX: 00007fea8ff03f60 RCX: 00007fea8fd75b99 [ 740.640663][T14594] RDX: 0000000000000048 RSI: 00000000200000c0 RDI: 000000000000000a [ 740.648677][T14594] RBP: 00007fea8fde4a7a R08: 0000000000000000 R09: 0000000000000000 [ 740.656667][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.664733][T14594] R13: 000000000000000b R14: 00007fea8ff03f60 R15: 00007ffe32917f88 [ 740.672759][T14594] [ 740.676138][T14594] Kernel Offset: disabled [ 740.680471][T14594] Rebooting in 86400 seconds..