last executing test programs: 5.874335474s ago: executing program 0 (id=300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fc_commit_stop\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) 5.53548635s ago: executing program 0 (id=305): r0 = gettid() timer_create(0x0, &(0x7f0000004140)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004100)) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x6, 'veth1_virt_wifi\x00'}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) 5.311476556s ago: executing program 0 (id=310): futex(0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) close(r0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x541b) 5.050720125s ago: executing program 0 (id=315): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) dup3(r3, r2, 0x0) sendmsg$netlink(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) read$char_usb(r1, &(0x7f0000000840)=""/150, 0x96) 4.831816604s ago: executing program 0 (id=317): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001f00)='/sys/kernel/address_bits', 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 4.707771471s ago: executing program 0 (id=319): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) statx(0xffffffffffffffff, 0x0, 0x1000, 0x2, &(0x7f0000000000)) 2.194822541s ago: executing program 1 (id=345): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.015840518s ago: executing program 2 (id=347): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2000c000) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000005c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 1.984151633s ago: executing program 1 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 1.880166671s ago: executing program 2 (id=350): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000400)={{0x2, 0x4e24, @multicast2}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x4e20, @loopback}, 'vlan0\x00'}) 1.842732983s ago: executing program 1 (id=351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x1c) openat$cgroup_root(0xffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x179, 0x179, 0x3, [@datasec={0x9, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x72603e26, 0x7}, {0x5, 0x2, 0x7}, {0x3, 0x7, 0x2}, {0x5, 0x100, 0x101}, {0x2, 0x7}], "8c"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x2}}, @struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x2, [{0xd, 0x2, 0xffffffff}, {0x3, 0x4, 0xffffffc0}, {0x10, 0x2, 0x9e}, {0x0, 0x0, 0x5}, {0x0, 0x4, 0x1f}]}, @struct={0x3, 0x3, 0x0, 0x4, 0x1, 0x0, [{0xb, 0x4, 0x6}, {0x9, 0x0, 0x81}, {0x7, 0x3}]}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x8, 0x2}, @fwd={0x7}, @union={0xe, 0x9, 0x0, 0x5, 0x1, 0x8000, [{0x5, 0x5, 0x976}, {0xe, 0x0, 0x81}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0xfffffbe3}, {0x0, 0x0, 0x3}, {0x4, 0x5, 0x401}, {0xc, 0x4, 0x80000000}, {0x6, 0x5, 0x5}, {0x2, 0x4, 0x7fff}]}, @typedef={0xf}]}, {0x0, [0x30]}}, &(0x7f00000004c0)=""/120, 0x197, 0x78, 0x1, 0x9}, 0x20) r5 = fcntl$dupfd(r0, 0x406, r1) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$pfkey(0xffffff9c, &(0x7f0000000580), 0x600001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x23, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfbe, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5d438f74, 0x0, 0x0, 0x0, 0x5}, @btf_id, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x6, &(0x7f00000002c0)=""/6, 0x41000, 0xa, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r5, r6], &(0x7f0000000600)=[{0x2, 0x3, 0x0, 0xc}, {0x0, 0x5, 0x4, 0x8}, {0x3, 0x3, 0xf, 0x1}], 0x10, 0x7}, 0x90) 1.749051933s ago: executing program 3 (id=352): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @private1, 0x0, 0x0, 0x0, 0xe5b}}) 1.737034947s ago: executing program 2 (id=353): fchdir(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000), 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f00000002c0), 0x8) 1.554098844s ago: executing program 2 (id=355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x2}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={0x84, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x65, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x8, 0x0, 0x4, 0x0, {0x9, 0x3, 0x0, 0x1f}, 0x1, 0x3, 0x5}}, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x1}}, @val={0x76, 0x6}}}]}, 0x84}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "78927f097f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001b00000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r10, @ANYBLOB="9406663e306ca621213f3c445ee81ae1a0810389bda5497f34b470e6dcdd269089dd8d501654afc1663fd77bb175b5fa799a7158d832d76d910c1e5f78e9327c1e8aed8d724a744df1673c76c4949f52dc29f61131b3ca123f3f1008d1f45464da30799a"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8}, 0x90) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_id}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x5, 0x0, 0x0) 1.405031399s ago: executing program 3 (id=357): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.364868326s ago: executing program 1 (id=358): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.241530842s ago: executing program 4 (id=359): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.143096929s ago: executing program 2 (id=360): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) 1.135157499s ago: executing program 1 (id=361): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.065113803s ago: executing program 4 (id=362): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r0) 908.116571ms ago: executing program 3 (id=363): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000400)={{0x2, 0x4e24, @multicast2}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x4e20, @loopback}, 'vlan0\x00'}) 886.993001ms ago: executing program 2 (id=364): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000000000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c94a6fb08bb1fb4, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0x33, 0x0, 0x1}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0xf, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x2}]) r2 = memfd_create(&(0x7f0000000440)='\x107m\xadJ\xdc:F\xa0\x06\xe6\xbb\xb8\xb0\xe8\xc3\x87\x12+\x8fY\xee\xc7\xd0,\xc6\x01*\x88\x14U\xde\xfa:\xee\xe8\x1d\x91F\x86)', 0x0) finit_module(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000016c0), 0x3af4701e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000002380)={0x1084, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "f3e6dd48914fadf21a9cc55b2999cbed3e463818ecca9c56c20a40294904d85115697f5c90ae9f35105487fa56a2c10bbd5385d217ab844cae0a3c07866924c5013fd95b729bb496d2d1314687a6d0316814791ed3a1402ea974536425a6f35b9301a7f50c9edf4a7029156cb03723ff0724b7a45c79dc0cb40a58f3df9323990edb139d1f4235ae34d070500487b57c2b91e5fa20d89c32b28f38ddfda48f3d234a74c64fc825cc72b0862498ad9318487e35cdaf652b42bc46964df3396e1ccb821bb0f2c810072bb6e414a3d2d4877a94ed33b3ed6fb1ad05a57905d248c144f9dcca1414127e5c4ef361401272e658aa23d601b30cee4b3b72469e8a83d48a79c09a65c8682fd7fcada6ce26bfd97dfce2c2086c4cac994abe9a959622b9c7ce5c7930f6a150f6390961424e4bfaf9c88b2bd48c950f7cd6560b5f485f4e8b50e6298693c8121b9a33f9132e7d061e5f4b8d3a01b09f38c8a94ac8d34ece65580a0218255bc0b7022b3560832f696c68a247981cc60c5eec366feec06c80c40c01229a76c220fa9e12b7947f6fe1ea390d623d6347569e457766c814a8d8c45ea46c2bd241a1923d9b105cdbb65e9e960f05bb30ff93cd573cc80d32e2a64d1ef1fde0e3bbffd4c87813d0e2080c61a07ea62dddf6340f892291afa57ac34d7613813557b090bba4b9ab6bd8c63981a46a784da725b23da7721876512a9e241dd25220af1da5f499f62333d7adc82f5004d7b4c2d8ac538b78e5af63285b170b03881c4a0de9ccfcc64a43f0cf459dac008006dc1c7c482bfb473bc132bcebba8f8caef2c768ec98c650f36afbe75e0fae05b489e2ea11ef60e17cb18771edfca8dddde8f4cb3cfe23d3e393c08d159d70f6cdb47c1ecbf82c753a38d444d3ebc533f53852d761e5e68d11afcb29d44ade18cd1fc2702b37a69820b9447121c39480fdf1fa1a28cf8cff0c994611ed3e7d770d6c00eb15e6a2c1b64f37495f458c1ba49a7b6fbde3c3ec003032e9cb04c24d76bcf06f092dbc57a6f37c17e8753e9ee9628c2a047fda26196421a6553271345ad28a621ff381b74ffa15ea84f56bba4073749763c3cc0ac6096a721d59eb82b74bf1daeb8ae6ea5da1f3794a4a00f7a0c5c9046238a01cb784eba3f0053fb7758cfcbbee7275cc1c8cb1143f79761594185b79ca3b8d3b5aaea88a660f90913fbae012a45edf64da773f85611fa914cd1cb9b9e7be952e073c8b056dcfbeb04929948e15fb98b96a064d885b7217a1ed6f047258d4596ec48633ce0c5e1799bf8b48ceaeb8f146d571fe5779ba7365ac9531de0b5e30b9c69dbf62d06d50ce82ae9132e2d21a54d25b68ab69f740959d692db8ed411c0244e6b9a3b2028d25386ba7da5cf352b1ad6cb1f7f5cd275cc438ddea0e1ce450d715d56750f6d77c0231b92b707ce6a33ac13de605f99f9d069c741da0ba04de920658b48093fb27eb400641efa08bda3da8b0b7900e56cb65734ac6a2639db6cd66ae5519c8f12dd596f9d98d84c94fc13148381a0386740f251cb75fa81de0a4e2c532b9aaf2c3bcb9cb98213d54038c844ccca83961b0405c5fd4ac9b81133b883f6ed666f65dd6a6c90c4560a445923098a3107158dafb5713618adc45dba93a4ceb345bf31e7d09eb4c9e531c9430f6421f889beac58c87f334677408e4b0d0595c6628bf27ee8e8043cd6b3fad6b4e0fad5e784a2db77679cd3006a5fde892e87d49d9ee0e491988f9b019b7573b192a8c8e7735835e8a4208bf4280646179958541d4e5f57b87a80821b4b405091b86f62ae476d56dfc4be1fbfc7bf33c80d32a248270ac0907878903437bba2dc94fb8fa0daea0c167b0c425b28c8b0b70917cbc525ccc8856e254f35ebb43aa497d96ca5867da9061c1fe5968abe2b4e3d89d6b8b38e14799883babe15f6ddbb9cc4a282464333730512e5bed481a0df7f6692593bb19fb31364b5f9285deb52f018ab8d75d9722a0aa2b45e67c5bc97dd488a85029cd66f81202d3ffa862675b4e8b65aa708736d883b6882b8e7642d881a92e182c2a806c99989247d9e25cef56bb7b0f3c8d44a7476801629a47e9f7547c7d1d2994574b048ec8c8bf1004361b43ef617bdb7d4e8be0cd0a887bdd6fe737eba511f50ea658f0c0b18856d55fd00f40b43a918bad65b366516e7ba2c97e57637bb3f883fe2e2eb415514d4ea42c3c2265180e1637c075cb2045bfa1e76d02bb8732e70b68410cb777643af8bc688749e3af21046640f070d8af92597fb0cd8ca2d4690b498c317a3f0be5a4f2c9dd970a293e7dbbb629f6b0bff273346d4ddd244b4f733e7240cee7c885c3beaf87787c5f218c46f8d9affc49524463841b53aa04322d1c7a38b00e363e8d12b6ee8c2fc438f382af71aaf0e04c442d8e0735576e2c410170a4f3dd2e1bfb8fa429e290c96c87df414533145a146a9b5e2c21726d13330db48dc9a5a82c78829a65edd5f824eb6bad8e6b0ea4684a50214f9fe27ff8e5689b2a33ea9fb8711f8e6fd3d66b9d7c02dac065c89639262fbc363700dc28200cf0321fa6fed9cab176ddd0aea96a6ffccc5e34591239e037217616107362279e30708e827781d8cb74fb7af10b90714d71014e38dcc6b38e42a95b2fd82ba8ad6e62a425ddb8aee075dbb103774265572b872ef5334866771dee6007b733460545b96d716bedbcc3ed675a8cc40db6230297f35b72d3f6543a6bdad548e8776f9bec386a40f39bc1f94e73ba849594ee1bd3a05bf1ea2165af227ac4100cd17cbe5b530a5ebc061178b72c9a8aa55d9330cc923cf83b12f2f9cabd9eaac49ebe2ba0d8b8f30f436b2617037f0990b3de39f973460171aa4c0a43b516a35e1cfd6d808e13700cc498dc86fa106ab5d1681f2455c261e190f2c8bd88ff00eb0a169a6d073eabf2297dea3746748e21d06874f295b9eee8d01e2ef3fbf94201b5738b9527f3691770fb7a11d791ecf1b0b37ffd7b17fd54f0c0025fa18ce71937ca3e31b2d78eb125839e835e95c163d80d61d5b413a180822d37d95764fcfa409385df9c7f4382ec93b43f547816cd6a067a10dab3310cd529c5a8ef8d73d075f830b90f57956b905edc834e89f64d4eb85f0cc4e7fd99724c8f86f0482390de20209613ac4195ddeb43462da3038ec787a6b40b12fdd1f0745f55db77e9fee3cfd3feb35ac2bbfac27972461dbf370b9797da9d220a3772c88679c108b237ad2e16ea08aa848e84603a97727a4f97e1cc6f18716f60b53a52a012de683dacb7420c130183dd5c71351cab4e516c88ca4c5cce816153158e87aa0baab387c12f85f53d983de6666b6b831cc9f31e2d6d6302f6a3cc5cb468914b1af4578ad1594bddb2e81acf6f747f30d5350c2a641b128aa3fa4811b5e1e1b9d5833abee16fc940807cb3ec6b31f90b088701ce6bf70df2b939afb923b90e09ca4fc8da3d6c9a77099351340ad74925409afa1ee41ee6f97ff2eb1d48f9d30838b227b49ffabd1a0432a1a0ac7ae8284089688b88e709a74e8c47f4a80dfad9a44ee5d649930c4113267600b994dddcbae1a084a021e666c659262db810342d53488e0637a6a783d044de15a6f96c16fa33469e4626c802b745f995a6f43383b45b838620149f28c222cf2b67c7b309ccac680e9a3fe70e9f4ff9bff04e6bffda49f8160b46f6ec358674719681b49eae8bb4433ba0697f698499af90b276ae39336c513b2bdae4910a13d9214c4418452a5f0d5b3a796f32754afc5f623c3cb8d536f7357ab67f91e1a53b3a32cb19004a125c8f49e4bcd53a6a9cbd8a60ed0602ca0384df82a21aada3c7291e3420e15b3bb98bf0eb98f22090a625cadaa8c6cc811455ae5c18ac56819d43cb975666ce738b8dad5b93cf17d32122dab2c27fa58562cc1c6ce844cecfc9e13bc1392e1c64b241500d1c1bc65782d5e35986cb475470fa9951a0751eef91be17ecb87cdd3fdc55ef05b348b7427888f388f3074357d67c66475f1564878f7292387ab0585e124da7bb5433d51fa11cdb2608e5439667f26913e6c1f911b5bab2c8dd46f8093022a3ded08a5791ace45f082e5fb73decf069b6538713092833f1ed0d21b3820333079bf255006ac91473ed56f7ae670bc49e478c71b653a76d947ee88a0a42bec281d78401f335bbcac2dcd7c3b3d1d38b143f22541321d107280e7cb6f920f870e8e17945e709572fbb6a4e1438e60d13d7cd9e810cef001aa4fab0ded3f7e63068390012f467367e24856ddaa18c54fb57eddc1082043f531be5ba498174f15ad90f2621f387f282f0458b89f6f7a21fdbc717af6dfb615a1e099a21c666398ee192d092613c378b911f256aa391ded6130a0ae5e957eef2711bc97c6fcee0bd850e95eb5d592f9c6c6bdcc9952fa8a659e9cf7aaad6d935f9b7e0ea86c83788d8d0d940e827c9c5eee01b26d4fe41d6c926ae15686d38a650760362a5558312b96b6e9980a8af1d6775a268a539a218d32f5e15252cd190c77db90360bd024bacace6db6b7643f6d994593183214e05b86e0d0b7564cc3d7e608b6278f60c73f494a8a6eec2b2847dd747b0234b5b234acc738359c12ba474d3b079734641478c460013cb084f6257e0b38614ca2c60e6e7cbe2b830a269493e85b7ecfe1c9ee013c3177b1ec1c9b408ecbc1384f9d0dd7b2ad3c4bbb011b61027e7c5af83920b74ba374014212c34c7d067a3dabce8ebfa3e2713fe7f0322e786f3de2f1f8b32a6da21b80b79c8a4339b6f02d29bfc2a6e5363bb263a6b5da69af92e4870f8b4760495d12cacbd8f8083283ff6c3d0da7846f82f79e5e0b2a65cf965b15330dc7d6f6557e0f52b2f437d47b97cd1ea591881d220101b4155e226fac7b7864ad327633434c748adb6d063fd99c7af6c5e926edfec2030f6beb6da513bb343f1e389f9649c22482b46adc0429f64e7752a481bbcaf16f6a4718af8fa32267f63bf3d2273ed22d59e91cbca5ee17f0adf8e19b8b6667276e4e13f6bbec9d38dae386be9be1773fa644620023988c08931dd0267d7384c26ead830bfe6dc0cf5e1b256c111dd1cea6b7b052560cdd3c35a60a9f5c727402ec527e5a6a35e890a2421eb0c338f4a7ca48990c22780332b76790fb75c26f75e95ae5e7c1ce3f42d740c509047ebaea82bb1e92f90f1d0684bc0cb2672913387cbc629a1498e7985a462ab0ba73566057600d711008a4387663be66258bd46d26746f9c0ed16993a57f9ef04de2b50ac87ad31abbb296f5de033a2a20d0a0efc426497bae9c5d04f883d38d25707b6e61ed7daddaf507c890d18929e61d2d4c899a1490f66972377a0e199e19c655f335d1913f39d34d43f52931d5248a0bfb39d1c4ace2a1ce3cab78c75f4232caa684f783a71eee017d8461c45765e22e3b179c5d1837a2f95347ec586a95599ebd0a4c220e0e232382f3fad25d91bd308c05f3f2b7e99a60f1a4fa160bcc0d076a286a6da6bba6e8beaf10ceccec56331b4c6e30e48af259cd10b8a3d26327be8c1139e9a1a90a1ddc40af0362454029cbf5f3bd8d1f540746373c07a026686b25fbb92969045244a61709ea1d21fa6b56a275e86caef2faacfb90d15081b64370f779ae268c3c0b19664c64c53bf0566bc0a2e472ada04996711563838733ab6cb8bc3e7bffae088a02a00833002d0ec9798c533d34260a4ad668a87f7f642c800f7dd1f91c8e2690ed1b8636b02ac80a1893f3f0dba55ba1f127af651870fe96c696e804768f1cc4f284afb54e1435da12606538cac"}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_USE_RRM={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac12, 0x0, 0xfac0a, 0xfac14, 0xfac07]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac00, 0xfac08]}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10, {0x0, 0x6, 0x3, 0xa2}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x1084}, 0x1, 0x0, 0x0, 0x41}, 0x4008051) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) 886.162473ms ago: executing program 1 (id=365): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x3}, {0x0, 0x1f, 0x0, 0x80000001}, {0x9, 0x4}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x891a, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) 784.627262ms ago: executing program 4 (id=366): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001fc0)={0xa8, r0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0xa8}}, 0x0) 624.88093ms ago: executing program 4 (id=367): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x9}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaa"], 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'vlan0\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) 603.575429ms ago: executing program 3 (id=368): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r1 = socket$inet(0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000003e00)) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast, {[@noop, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x6, 0x7, "7cae9b9853"}, {0x0, 0xb, "63f313354a8b6d23e1"}, {0x7, 0x6, "cf1a45ac"}, {0x0, 0x5, "ea3261"}, {0x0, 0x2}, {0x0, 0x9, "6afe0ac74d79e5"}]}, @end, @end, @generic={0x94, 0x2}]}}}}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6=@private0, 0x4e21, 0x3, 0x4e20, 0x0, 0x2, 0x180, 0x0, 0x84, r3, r4}, {0x1, 0x2, 0x6, 0xff, 0x3, 0x6, 0x7f, 0x100000000}, {0x100, 0x3, 0x5, 0x7}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0xef}, 0x2, @in=@broadcast, 0x0, 0x2, 0x3, 0x81, 0x8000, 0x6, 0x3}}, 0xe8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000695ffc)) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0}, &(0x7f0000001500)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f0000000880)=[{&(0x7f0000000340)={0x2c8, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, "", [@generic="6af3d831e81d8ecff76aeead1946740f4c83ba12e3b0e9482ab9f0782300df79d10da72d7c68751f81118b668df654a042931498d9b981a8fe5c07f310b65716e28b985d6cf5ae459bb6b232fa32b050333d799f59e48e362f3531f08ced926bb296", @nested={0x43, 0x13b, 0x0, 0x1, [@generic="cca8e23b2e978f1cdeaafe45fc3b263710108032c3e6d95dd44cd600da8873067153a7ad7efa0aa5392b4be9c06832a0bf32ddf799512ad022cd9432204746"]}, @generic="d3", @typed={0x93, 0x92, 0x0, 0x0, @binary="0508a32938e367e239b567cc183025a43899f11c8b264352d44c1cc59d07529b8c8d918d3b37a7f4d51532fe5dab77f6b38ccf581a79782000285ad677e4ec66c3c5d32c6dd71b1b183f3d3a7489d88f8ec5e27de8917167c34a0b4f817b4e0f3241a6ae0bb0a1f0d8f7e34012c08c6ecd9bb59885c37f698a718f59e71c4dd2445e2460beb8cf1b71adcac07cefcb"}, @nested={0x17b, 0x67, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast2}, @generic="a0df03fa1199dc06dbb29369cdfd3bef37eb6cf77bb9c51c8602fab62c79e8ebb7440b2fd6156fc4344b4e0d76d4302f3f25ee915195b4eb76f2dcc38055fc106d5176df64aff6", @typed={0x8, 0xac, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x2e, 0x0, 0x0, @pid}, @typed={0xb, 0x112, 0x0, 0x0, @str=':].$-/\x00'}, @typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@remote}, @generic="a2d2fc42393627ed0db1e7ec2a100c8e19a45185d22919f827f5cc8632c72d3b796fc940f49cdcf5367d5d512d4dc7086b28095c9e16676a875adbc5fcea167c13d76c4ac3210de7d732084c0052eef0a18b98641c1e2d5be837ed0fa2a3a36c8548d640f8cda437420eb98b09747efdda06666b7bbe10122744e6079dd1d489d0790c4ef034a0befabaeb498cbae0496ecb95e53670919e752ade471b24f533c88ec4c6069755c1b95430370836eba34841954bac3f4251f3e23ae59ffebf90d756e93a64f068a4bb08153693001bf90be753a57eede95eb91689ced05fbfe68c011e70a48a438c6802390d980e0670c0d91520bca5bbe8"]}]}, 0x2c8}, {&(0x7f0000000700)={0x108, 0x28, 0x300, 0x70bd2a, 0x0, "", [@typed={0x8, 0x66, 0x0, 0x0, @pid}, @generic="64e6aed2cbcfcf905517f030e6f9e0810271dce1cf05467ecb27aa8eb0247c5cbf3e6bb7e4baf32a2bff4869cb5989d64b679bb127881aba2170b7477e24bc832838662fd2ad1080a771f6f9fce0d67c011fe17d91c8ef81bec52f43dc954ca436541a5f75a67cd59adf75d4c35f229d3f97e8233070b3caf63f9edbc0047d5f6fc5b64196ede9ab28afad491b49998297aa71deb30e5a8b2459d5f66504e5cbec4cab4ecdefc37ada4aa162ef24b9d6e65b8800def8f7aeb58bcdbd423797f7ba869dc785f1e2904a8a7d1ac3dd3b71ffa8c305b866106ade39880bbe384664fda584d8e729ec", @typed={0x8, 0x105, 0x0, 0x0, @u32=0x4}]}, 0x108}, {&(0x7f0000000c00)={0x3b4, 0x2c, 0x20, 0x70bd29, 0x25dfdbfe, "", [@nested={0x223, 0x68, 0x0, 0x1, [@typed={0x7, 0x70, 0x0, 0x0, @str='%:\x00'}, @typed={0xcf, 0x53, 0x0, 0x0, @binary="20b01086a7a27e74b99e2c4d682d020bc8e38eddf99e44c1044bfe855ebef8e4fc4f495d84c21a5a59a9231181173c6c5d7eaedde6dfc7c3b300ad35a3b306508c59eab706e2417e2d89c635b0be83e5ce30f864b3b922c71924a0e8032630eec5359e712cf7a7caefd55ed73b3ddfee8ce97e6623d65b433992856bcb91f8917c6e218cfda6f1b376ff25bc808c341d46aa37c18292b30566267d064b5402470959f2a5c4d986cb4e0f9d4e380975408ce4f4c21af1e3f7fb348187af4053c0b114124044898eb09caf23"}, @typed={0x8, 0xe3, 0x0, 0x0, @uid}, @generic="49088a422b8f95046ece4e410c80ba056e8f1ca1e5a29a43f2b38c9466272bec8778649d8edec1b59af6ca10a8f243f0a10312fc3bf9d1db5939a5ce29853da1864e6f613f8dfd2b7a1b710712733ed6b568617c39fcf66087aaad2650aa214c8a4b15d155db8f", @typed={0xc, 0xea, 0x0, 0x0, @u64=0x80000000}, @generic="9d95", @generic="80b7f8de47f364a070d43c17930cb2f29bb3866a61845ddbf79abb65d6d11c53efc269454665602ad867f631d56feb73c2232207f2d2e66eccaefd9fe8bd2778290710a1947e4b7abb3f8bb119fceaf986d7640406be3f637de007b1d11bdc0fb01e4cb760c99d0d02ccc5489369a93ec381c0136a077f501dec7f624cad7fc6c128d7feab234ccd2596c6a3cc47ad0e1b12b981b1522b301d0ea953397851827839fe95fa696cbb841b4a4d6f12cfaa8bdb33b44f90875d3013df40de3cb6dd2f938e2a1e393bbe1310"]}, @typed={0x8e, 0x48, 0x0, 0x0, @binary="b91c04250e6ada1e18cdbe0499c2d780c6059579b31c4f9620fc407bcd21fdeec2190566fe1a2c9eec5915842cd1099f6eba4d9c1b847dc265b44828a47826baca2de53aa48eca2e081004193f6b3da3bb4dbc130b74d05a404ec230fe6b426c569580f70b20aaf7a8f153ff5785a09193c7213fd1c04da818cd463f06aa4221862e6010f13827d97464"}, @nested={0x4, 0x2b}, @generic="c643ffb643c56e50ea3673e0c76b4a2c8a11042353a5df53f8d3c9093230f151e72654f1e4d6401a7fb7835c9f9d75736d1d141509ddd5c12791d539ea12a83baef64935b7f971100dcb79bcb5efa82394b1ff57ef8d17e1f8264e1dd4d33d6353134d7078e1bd461d925a1cd83560714dbfc544bf8b9441af507cb95bc071912d29ffabb38c0dde50ab2d58d5963645decaef31b3ba0979fb562570c7b24e2afbfa8edc10419c0c7cc40bbf902e6399ac8a9af9a0e34d9c21c7c6256898afc766bbe7c507d80728dccaabeaab953d8b6db9a2d2914632f5a7003b289e402b6ab2325693315d47fe9b4105a1"]}, 0x3b4}, {&(0x7f0000000fc0)={0x510, 0x19, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="9fabf5e7183559c3ac5a95e7ba3d309b56c001c23c6307", @generic="daabc6af3ccca265dfa3fed22a14058ee860a65cb5d7ebfe1cc6dbf8b1d1d7b021f04adc4548b0c30f7d4b631b4fd04c3acf1ff72773b19e7fb93c3a96a8ba4e251c80f7893179aa141345286a5438a5139d8a888ca26ace6e98f803e6c327897b4f562ade4cb24549f9229fdd88db86610c2526bea30fdecf7291f7bf562ae9b39ae6ec8ae90e0b2691cb1b03d70398d252b33b17de3744b7fdc5f1b8773fe094e36d32719ee682ec5a818b247773eba72a27635f885b7cbcd8f8454d2245ec943e236dfc7351a011e1ce78cc7c5da7b9ea1ebab2ca61e54343d8", @generic="12dbeb65f8053e1dec95fe373afce023ea167f35b6e08a7c83f64076de235503bb554ce9e711c3d12ce98722020d2454743aa920eacd5a7fee289340b3ef0b51ee7af337e3133fcb96ac18b6fd18df20d9194bdbca37a389486606d5eb9c4e52c2b114a6194c813978d5f125988f336a71c380560dd2deb0856b8feb5460a721d89444b113fdf5a9b67fd84b6e", @nested={0xc3, 0x1e, 0x0, 0x1, [@typed={0x6, 0x79, 0x0, 0x0, @str='-\x00'}, @generic="66ce5c8a72efe5a448be87d84a409e377e83074f113895321f7108b22488d7a37c03429206a008f3f93b5454fe5f9b9e9235796860dccfa5cbc13d616d4129788d2f77e17140a347b6b4478d4e68f6022db0527ddaf590871d37e84db8673c655a8526917488c25337438414bf6cfa05b19cd63f63d8aacfd4c21472424e441f568787a8d4cb563fe4f48c1451c3f627bf1be56a00a865591630bf5a8e7375954cc655", @typed={0x8, 0x4, 0x0, 0x0, @fd}, @typed={0xc, 0xc3, 0x0, 0x0, @u64=0x74a}]}, @generic="8a036342daef38e11a7515c1ea97fe0e190a0532b659e9a5b2f8c5f35c056f381844eb318e39abed7416b70f3f663300ba5e3c731b14baccda18f651deab8a6b06b2cd8281110f520e1d4eca664a6502785cf71cc421770689fb0ac1f411bc3e8c7ab7f2c6daca546e67b9f5a409a94edc29fe02f8a8542de1bd04b91b8ee7b8fa7c6ccde3a7ebf9031b7539b2c63095", @nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @pid}]}, @generic="23c5f75c65366f0e09f6661a0d0b5683feead5584dacd3ac33419da9790a9dafd56bf464dde5c1774a8ebf333e47e4f83eefbf972d6d6425e12c74ac2208f883ca5765b2c9523ac9899792e305ebeb8354f57174f569096726c01ad3660a9bfd404145853920330c4579ba970c3b96d2d13f52a3b7932e43dc7e02db5a875062da4829169ed77df063bccbf3af3be8e636d9e7fc4b2dab7b0f7bf54449c6a17c7619b57fc839f86ef667b66cdb9f281194f2e1d46f1c881a4e97db22f1d5807d2b0a5f8d766b992b378e36e88dd6590316df959a10ee26624402d888d6e7caec820a89d9fa6f22d8453c23cfdf779fe7b494", @nested={0x34, 0xd0, 0x0, 0x1, [@typed={0xa, 0x148, 0x0, 0x0, @str='*.\xbe*.\x00'}, @typed={0x11, 0x130, 0x0, 0x0, @str='sched_switch\x00'}, @typed={0x8, 0x1e, 0x0, 0x0, @pid}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@remote}]}, @generic="d247b1025b1731ab7262a293289a1245c442fe11b941192d5682f31714c740fa101bf8f368b3c35704a552fe51380432e79b3cc2bd986073ff5112750a7ae67434ed3649e18916b66683dfe978864e91ed56ffb3d65fbfdb62670d17c498d33f2b254f515c1fd4641c6d99611aecb307b9a88742c996078c8fbd923e6048d5a80c474b4803c3a6cdaae1c16900a0c2bca9e355122b97f4369553cd6f8c5257663e9d66b32a59da8260dbc551bbc7014539f9e08702ed86a218d1b50fd4a0a4f69787c43de25d00e162dab3b7750110dad9eb920d94da977ba1a0580073ef3729e7b6a8c030f0fe6c14bf1fb330", @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x6}]}, 0x510}, {&(0x7f0000000840)={0x2c, 0x30, 0x200, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1c, 0x6d, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x129, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}]}]}, 0x2c}], 0x5, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r5, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}], 0x140, 0x10}, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) 314.47223ms ago: executing program 4 (id=369): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x20040, 0x0) 165.122118ms ago: executing program 4 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fc_commit_stop\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x4, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xa91, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xa}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000500), &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0, 0x4e24, 0x1cf, 0x4e21, 0x7, 0xa, 0x20, 0x0, 0x2c, 0x0, r5}, {0x6, 0x7, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x4, 0x2}, {0x1, 0x8, 0x1f, 0x800}, 0xfffffffa, 0x6e6bbd, 0x2, 0x0, 0x4, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x2, 0x1, 0x12, 0x9, 0x9, 0xa87e}}, 0xe8) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x15) 159.929918ms ago: executing program 3 (id=371): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=372): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 48.737888][ T5071] cgroup: Unknown subsys name 'net' [ 48.899069][ T5071] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.239946][ T5071] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.923395][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.942814][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.951247][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.954820][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.958893][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.973161][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.974880][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 50.982027][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.995357][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.997157][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.004118][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.009889][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.017528][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.023842][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.032546][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.038920][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.051247][ T5094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.051562][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.066241][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.066960][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.074420][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.082355][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.089672][ T4483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.094952][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.101798][ T4483] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.111731][ T5093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.116114][ T4483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.129507][ T4483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.138397][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.155451][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.625234][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 51.686109][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 51.744318][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 51.875822][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 51.942870][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.950601][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.958471][ T5081] bridge_slave_0: entered allmulticast mode [ 51.966253][ T5081] bridge_slave_0: entered promiscuous mode [ 51.980952][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.988655][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.995867][ T5081] bridge_slave_1: entered allmulticast mode [ 52.002697][ T5081] bridge_slave_1: entered promiscuous mode [ 52.023978][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.031097][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.038861][ T5080] bridge_slave_0: entered allmulticast mode [ 52.045598][ T5080] bridge_slave_0: entered promiscuous mode [ 52.053848][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.060925][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.068236][ T5080] bridge_slave_1: entered allmulticast mode [ 52.075252][ T5080] bridge_slave_1: entered promiscuous mode [ 52.112649][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 52.124762][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.132304][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.139557][ T5087] bridge_slave_0: entered allmulticast mode [ 52.147646][ T5087] bridge_slave_0: entered promiscuous mode [ 52.180849][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.197698][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.219622][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.227460][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.234816][ T5087] bridge_slave_1: entered allmulticast mode [ 52.241497][ T5087] bridge_slave_1: entered promiscuous mode [ 52.250629][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.316619][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.348231][ T5081] team0: Port device team_slave_0 added [ 52.390317][ T5081] team0: Port device team_slave_1 added [ 52.410875][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.424345][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.435673][ T5080] team0: Port device team_slave_0 added [ 52.456091][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.463414][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.470519][ T5086] bridge_slave_0: entered allmulticast mode [ 52.477575][ T5086] bridge_slave_0: entered promiscuous mode [ 52.496493][ T5080] team0: Port device team_slave_1 added [ 52.521021][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.528259][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.535916][ T5086] bridge_slave_1: entered allmulticast mode [ 52.542978][ T5086] bridge_slave_1: entered promiscuous mode [ 52.581039][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.588109][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.614502][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.656747][ T5087] team0: Port device team_slave_0 added [ 52.671436][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.681479][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.708174][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.719465][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.726676][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.733947][ T5082] bridge_slave_0: entered allmulticast mode [ 52.740614][ T5082] bridge_slave_0: entered promiscuous mode [ 52.749938][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.761586][ T5087] team0: Port device team_slave_1 added [ 52.769003][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.776532][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.802495][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.815435][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.822581][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.848485][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.865917][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.873908][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.881080][ T5082] bridge_slave_1: entered allmulticast mode [ 52.888662][ T5082] bridge_slave_1: entered promiscuous mode [ 52.904980][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.965237][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.989693][ T5086] team0: Port device team_slave_0 added [ 52.997260][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.004524][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.030554][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.043936][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.050891][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.076879][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.098931][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.120057][ T5086] team0: Port device team_slave_1 added [ 53.179112][ T5081] hsr_slave_0: entered promiscuous mode [ 53.186513][ T5081] hsr_slave_1: entered promiscuous mode [ 53.193141][ T5093] Bluetooth: hci2: command tx timeout [ 53.195411][ T53] Bluetooth: hci3: command tx timeout [ 53.204686][ T5093] Bluetooth: hci1: command tx timeout [ 53.205233][ T5096] Bluetooth: hci4: command tx timeout [ 53.210451][ T5089] Bluetooth: hci0: command tx timeout [ 53.257707][ T5080] hsr_slave_0: entered promiscuous mode [ 53.264445][ T5080] hsr_slave_1: entered promiscuous mode [ 53.270502][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.278563][ T5080] Cannot create hsr debugfs directory [ 53.308100][ T5082] team0: Port device team_slave_0 added [ 53.317038][ T5082] team0: Port device team_slave_1 added [ 53.327561][ T5087] hsr_slave_0: entered promiscuous mode [ 53.334445][ T5087] hsr_slave_1: entered promiscuous mode [ 53.340427][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.348684][ T5087] Cannot create hsr debugfs directory [ 53.366820][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.373880][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.400075][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.413134][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.420097][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.446329][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.526944][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.534020][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.560410][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.610138][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.617319][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.643465][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.720529][ T5086] hsr_slave_0: entered promiscuous mode [ 53.727045][ T5086] hsr_slave_1: entered promiscuous mode [ 53.734698][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.742694][ T5086] Cannot create hsr debugfs directory [ 53.889579][ T5082] hsr_slave_0: entered promiscuous mode [ 53.896410][ T5082] hsr_slave_1: entered promiscuous mode [ 53.905695][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.913420][ T5082] Cannot create hsr debugfs directory [ 54.079007][ T5081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.090541][ T5081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.114024][ T5081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.146700][ T5081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.213415][ T5080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.230492][ T5080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.245765][ T5080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.269879][ T5080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.338698][ T5087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.349987][ T5087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.360338][ T5087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.387295][ T5087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.477207][ T5086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.496745][ T5086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.522074][ T5086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.547950][ T5086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.636420][ T5082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.645954][ T5082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.658010][ T5082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.669611][ T5082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.738856][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.754279][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.837073][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.867362][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.897353][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.904731][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.917491][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.924662][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.955814][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.975093][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.982241][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.007545][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.023274][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.030389][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.095126][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.124083][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.145575][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.157212][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.164362][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.175003][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.182165][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.216592][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.223702][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.234416][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.241479][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.271925][ T5089] Bluetooth: hci0: command tx timeout [ 55.272132][ T5093] Bluetooth: hci1: command tx timeout [ 55.277374][ T5089] Bluetooth: hci4: command tx timeout [ 55.283281][ T5093] Bluetooth: hci3: command tx timeout [ 55.288142][ T5089] Bluetooth: hci2: command tx timeout [ 55.327645][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.353538][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.360617][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.448708][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.455976][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.785467][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.871143][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.976274][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.994694][ T5080] veth0_vlan: entered promiscuous mode [ 56.006223][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.035023][ T5080] veth1_vlan: entered promiscuous mode [ 56.101456][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.110131][ T5081] veth0_vlan: entered promiscuous mode [ 56.129284][ T5081] veth1_vlan: entered promiscuous mode [ 56.244643][ T5086] veth0_vlan: entered promiscuous mode [ 56.258072][ T5087] veth0_vlan: entered promiscuous mode [ 56.280643][ T5080] veth0_macvtap: entered promiscuous mode [ 56.294612][ T5086] veth1_vlan: entered promiscuous mode [ 56.301634][ T5081] veth0_macvtap: entered promiscuous mode [ 56.315792][ T5087] veth1_vlan: entered promiscuous mode [ 56.327041][ T5080] veth1_macvtap: entered promiscuous mode [ 56.339289][ T5081] veth1_macvtap: entered promiscuous mode [ 56.405745][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.456964][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.474659][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.487173][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.499612][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.510554][ T5080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.519560][ T5080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.529478][ T5080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.538418][ T5080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.559851][ T5086] veth0_macvtap: entered promiscuous mode [ 56.567293][ T5087] veth0_macvtap: entered promiscuous mode [ 56.578749][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.589602][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.601274][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.617757][ T5086] veth1_macvtap: entered promiscuous mode [ 56.634263][ T5087] veth1_macvtap: entered promiscuous mode [ 56.675099][ T5081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.684677][ T5081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.698646][ T5081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.707443][ T5081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.723111][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.734666][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.745092][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.756131][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.767610][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.779437][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.789993][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.802528][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.813427][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.824552][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.848717][ T5086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.860710][ T5086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.870876][ T5086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.880504][ T5086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.970314][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.983333][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.996997][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.007529][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.017699][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.028373][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.040761][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.061562][ T5082] veth0_vlan: entered promiscuous mode [ 57.114011][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.127232][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.137607][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.148471][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.158803][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.169284][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.180185][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.196530][ T5082] veth1_vlan: entered promiscuous mode [ 57.223838][ T5087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.233072][ T5087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.242177][ T5087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.250866][ T5087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.280616][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.288824][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.326418][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.334554][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.352012][ T5089] Bluetooth: hci2: command tx timeout [ 57.352132][ T5093] Bluetooth: hci3: command tx timeout [ 57.357417][ T5089] Bluetooth: hci4: command tx timeout [ 57.363153][ T53] Bluetooth: hci1: command tx timeout [ 57.368605][ T5089] Bluetooth: hci0: command tx timeout [ 57.416202][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.418725][ T5082] veth0_macvtap: entered promiscuous mode [ 57.433587][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.451095][ T5082] veth1_macvtap: entered promiscuous mode [ 57.521472][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.539593][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.569935][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.584450][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.593570][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.612034][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.648052][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.660094][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.672588][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.683599][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.693775][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.704403][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.723182][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.745846][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.756240][ T5169] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure [ 57.760718][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.787891][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.799271][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.822256][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.833978][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.846985][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.864978][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.876917][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.928746][ T2871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.950795][ T5082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.960916][ T2871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.973205][ T5082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.004948][ T5082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.031680][ T5082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.202503][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.210485][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.248813][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.260254][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.359891][ T2856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.381759][ T2856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.609094][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.617051][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.323342][ T5193] fuse: Unknown parameter '*{~[>' [ 59.391986][ T5199] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.407705][ T5196] warning: `syz.4.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.431960][ T5093] Bluetooth: hci3: command tx timeout [ 59.437460][ T5089] Bluetooth: hci0: command tx timeout [ 59.443096][ T5096] Bluetooth: hci1: command tx timeout [ 59.443154][ T53] Bluetooth: hci4: command tx timeout [ 59.448491][ T5096] Bluetooth: hci2: command tx timeout [ 59.506788][ T5199] 9pnet_fd: Insufficient options for proto=fd [ 59.567454][ T5199] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 60.173036][ T5217] cgroup: noprefix used incorrectly [ 60.300918][ T5222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 60.373358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.413529][ T5222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17'. [ 60.665591][ T5222] 9pnet: Could not find request transport: rdm [ 60.795308][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 60.996111][ T5096] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 61.850734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.954389][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 62.021968][ T29] audit: type=1800 audit(1719486403.277:2): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.23" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 62.219308][ T5261] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25'. [ 62.346453][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.471745][ T5096] Bluetooth: hci3: command 0x2016 tx timeout [ 62.565758][ T5284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.593702][ T5284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.659141][ T5284] netlink: 'syz.0.32': attribute type 3 has an invalid length. [ 62.676722][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 62.694095][ T5284] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 62.820926][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 62.905216][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 63.240165][ T5285] 9pnet: Could not find request transport: rdm [ 63.943472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.986216][ T5133] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.998037][ T5299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 64.085044][ T5299] team_slave_0: entered promiscuous mode [ 64.097938][ T5299] team_slave_0: entered allmulticast mode [ 64.134524][ T5299] team0: Port device team_slave_0 removed [ 64.189565][ T53] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 64.221714][ T5133] usb 1-1: Using ep0 maxpacket: 16 [ 64.236987][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 64.248648][ T5133] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 64.258918][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.274351][ T5133] usb 1-1: config 0 descriptor?? [ 64.361484][ T5314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.487359][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.497630][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.509639][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 64.551731][ T53] Bluetooth: hci3: command 0x2016 tx timeout [ 64.581701][ T5136] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.725446][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.737651][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.751439][ T5133] hid (null): unknown global tag 0x83 [ 64.757357][ T5133] hid (null): unknown global tag 0xc [ 64.768631][ T5133] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 64.778426][ T5133] hid-generic 0003:0158:0100.0001: unexpected long global item [ 64.784609][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.786892][ T5133] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 64.798974][ T5136] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 64.813785][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.835040][ T5136] usb 3-1: config 0 descriptor?? [ 64.846411][ T5136] smsusb:smsusb_probe: board id=8, interface number 0 [ 64.853622][ T5136] smsusb:smsusb_probe: Device initialized with return code -19 [ 64.971950][ T5136] usb 1-1: USB disconnect, device number 2 [ 65.212552][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.462793][ T5328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 66.171167][ T5136] usb 3-1: USB disconnect, device number 2 [ 66.244597][ T5341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.269466][ T5339] cgroup: noprefix used incorrectly [ 66.342656][ T5341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.450009][ T5341] netlink: 'syz.4.45': attribute type 3 has an invalid length. [ 66.477900][ T5341] __nla_validate_parse: 1 callbacks suppressed [ 66.477917][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 66.630691][ T5341] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 67.432237][ T53] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 67.445155][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 69.384625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.462553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 69.512183][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 69.532279][ T5136] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.754741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.778393][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 69.794632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.896131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.203363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.305626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.630947][ T5374] 9pnet_fd: Insufficient options for proto=fd [ 70.691702][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 70.699963][ T5136] usb 3-1: device descriptor read/all, error -71 [ 70.753510][ T5374] netlink: 'syz.1.56': attribute type 4 has an invalid length. [ 71.201190][ T5385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.592090][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 71.802324][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.808875][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.067938][ T5386] team0: entered promiscuous mode [ 72.087159][ T5386] team_slave_1: entered promiscuous mode [ 72.288020][ T5382] team0: left promiscuous mode [ 72.304805][ T5382] team_slave_1: left promiscuous mode [ 72.415412][ T5397] netlink: 'syz.0.61': attribute type 3 has an invalid length. [ 72.471960][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 72.552283][ T5397] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 73.247294][ T5409] cgroup: noprefix used incorrectly [ 74.403812][ T5418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 74.616910][ T5096] Bluetooth: hci4: command 0x0406 tx timeout [ 75.399798][ T5422] 9pnet_fd: Insufficient options for proto=fd [ 75.445098][ T5422] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 75.562661][ T53] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 76.964568][ T1147] cfg80211: failed to load regulatory.db [ 77.887126][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 78.310909][ T5450] netlink: 'syz.4.75': attribute type 3 has an invalid length. [ 78.360411][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 78.415393][ T5450] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 78.645757][ T5138] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.980959][ T5467] netlink: 'syz.4.79': attribute type 10 has an invalid length. [ 78.999328][ T5467] hsr0: entered promiscuous mode [ 79.045552][ T5138] usb 4-1: Using ep0 maxpacket: 8 [ 79.069632][ T5467] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 79.121323][ T5138] usb 4-1: config 6 has an invalid interface number: 3 but max is 2 [ 79.141972][ T5138] usb 4-1: config 6 has an invalid interface number: 243 but max is 2 [ 79.150182][ T5138] usb 4-1: config 6 has an invalid interface number: 251 but max is 2 [ 79.156750][ T5467] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 79.176801][ T5467] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 79.202168][ T5138] usb 4-1: config 6 has no interface number 0 [ 79.208311][ T5138] usb 4-1: config 6 has no interface number 1 [ 79.218585][ T5467] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 79.220935][ T5138] usb 4-1: config 6 has no interface number 2 [ 79.232215][ T5138] usb 4-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 79.242747][ T5138] usb 4-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 79.253045][ T5138] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 79.264072][ T5138] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 79.294913][ T5138] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7 [ 79.312499][ T5138] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024 [ 79.319628][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 79.344944][ T5138] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 79.366783][ T5138] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 79.407770][ T5138] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping [ 79.447484][ T5138] usb 4-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 79.541919][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 79.588025][ T5138] usb 4-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7 [ 79.633021][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 79.664433][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping [ 79.688214][ T5479] cgroup: noprefix used incorrectly [ 79.689973][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping [ 79.854585][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 79.879228][ T5481] 9pnet_fd: Insufficient options for proto=fd [ 79.891360][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 79.975430][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 80.651721][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 80.783237][ T5481] netlink: 'syz.2.81': attribute type 4 has an invalid length. [ 80.861646][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping [ 80.879992][ T5096] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 80.960183][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 81.016370][ T5138] usb 4-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 81.042322][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping [ 81.100696][ T5138] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 81.227583][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.242301][ T5138] usb 4-1: config 6 interface 3 has no altsetting 0 [ 81.249388][ T5138] usb 4-1: config 6 interface 251 has no altsetting 0 [ 81.257976][ T5138] usb 4-1: string descriptor 0 read error: -71 [ 81.266193][ T5138] usb 4-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28 [ 81.276381][ T5138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.294783][ T5138] usb 4-1: can't set config #6, error -71 [ 81.322832][ T5138] usb 4-1: USB disconnect, device number 2 [ 81.812697][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.137258][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 82.191745][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.240051][ T8] usb 2-1: config 0 descriptor?? [ 82.249572][ T8] smsusb:smsusb_probe: board id=8, interface number 0 [ 82.266183][ T8] smsusb:smsusb_probe: Device initialized with return code -19 [ 82.346938][ T5096] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 83.067524][ T5096] Bluetooth: hci1: command 0x0406 tx timeout [ 83.250435][ T5507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.281808][ T5507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.318086][ T5507] netlink: 'syz.3.89': attribute type 3 has an invalid length. [ 83.354563][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 83.392467][ T5507] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 84.441996][ T4870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.691929][ T4870] usb 4-1: Using ep0 maxpacket: 8 [ 84.727364][ T4870] usb 4-1: config 6 has an invalid interface number: 3 but max is 2 [ 84.763611][ T4870] usb 4-1: config 6 has an invalid interface number: 243 but max is 2 [ 84.779447][ T4870] usb 4-1: config 6 has an invalid interface number: 251 but max is 2 [ 84.916603][ T4870] usb 4-1: config 6 has no interface number 0 [ 84.935418][ T4870] usb 4-1: config 6 has no interface number 1 [ 85.115547][ T5535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.733662][ T4870] usb 4-1: config 6 has no interface number 2 [ 85.739867][ T4870] usb 4-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 85.842773][ T4870] usb 4-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 85.890602][ T4870] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 85.952344][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 85.953161][ T1147] usb 2-1: USB disconnect, device number 2 [ 86.023644][ T4870] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7 [ 86.073114][ T4870] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024 [ 86.131504][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 86.215637][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 86.230480][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping [ 86.242574][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 86.318401][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 86.397144][ T4870] usb 4-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7 [ 86.453817][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 86.601977][ T5096] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 87.283850][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping [ 87.401488][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping [ 87.448006][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 87.512728][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 87.558570][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping [ 87.575902][ T29] audit: type=1804 audit(1719486428.837:3): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.102" name="/root/syzkaller.KxEKEO/17/file0" dev="sda1" ino=1957 res=1 errno=0 [ 87.579015][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 87.757007][ T4870] usb 4-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 87.784374][ T5570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.817162][ T5570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.823350][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping [ 87.847264][ T5570] netlink: 'syz.1.103': attribute type 3 has an invalid length. [ 87.868467][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 87.893292][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 87.901702][ T4870] usb 4-1: config 6 interface 3 has no altsetting 0 [ 87.908921][ T4870] usb 4-1: config 6 interface 251 has no altsetting 0 [ 87.928349][ T5570] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 87.933833][ T4870] usb 4-1: string descriptor 0 read error: -71 [ 87.959040][ T4870] usb 4-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28 [ 87.968421][ T4870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.017375][ T4870] usb 4-1: can't set config #6, error -71 [ 88.040508][ T4870] usb 4-1: USB disconnect, device number 3 [ 88.142904][ T5138] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.166820][ T5576] process 'syz.1.107' launched './file0' with NULL argv: empty string added [ 88.230212][ T5096] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 88.389717][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.403133][ T29] audit: type=1804 audit(1719486429.667:4): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.102" name="/root/syzkaller.KxEKEO/17/file0" dev="sda1" ino=1957 res=1 errno=0 [ 88.443604][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.471934][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 88.525442][ T5138] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 88.615975][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.667145][ T5138] usb 5-1: config 0 descriptor?? [ 89.161777][ T5133] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.371803][ T5133] usb 2-1: Using ep0 maxpacket: 8 [ 89.390518][ T5133] usb 2-1: config 6 has an invalid interface number: 3 but max is 2 [ 89.423071][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.431768][ T5133] usb 2-1: config 6 has an invalid interface number: 243 but max is 2 [ 89.441035][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.453561][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.461917][ T5133] usb 2-1: config 6 has an invalid interface number: 251 but max is 2 [ 89.471856][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.480129][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.483786][ T2871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.497991][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.501753][ T5133] usb 2-1: config 6 has no interface number 0 [ 89.540872][ T5133] usb 2-1: config 6 has no interface number 1 [ 89.599924][ T5133] usb 2-1: config 6 has no interface number 2 [ 89.638058][ T2871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.682532][ T5133] usb 2-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 89.752189][ T5133] usb 2-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 89.799300][ T5133] usb 2-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 89.815622][ T2871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.826274][ T5133] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 89.855253][ T5133] usb 2-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7 [ 89.886011][ T5133] usb 2-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024 [ 89.938414][ T5133] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 89.983569][ T2871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.013911][ T5133] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 90.067353][ T5133] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping [ 90.083189][ T5133] usb 2-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 90.101500][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 90.127319][ T5133] usb 2-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7 [ 90.245720][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 90.262204][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping [ 90.391234][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping [ 90.551689][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 90.577644][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 90.770718][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 90.782738][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping [ 90.795497][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 90.814560][ T5133] usb 2-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 90.840129][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping [ 90.852688][ T5133] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 90.864718][ T5133] usb 2-1: config 6 interface 3 has no altsetting 0 [ 90.871565][ T5138] usbhid 5-1:0.0: can't add hid device: -71 [ 90.880777][ T5138] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 90.889893][ T5133] usb 2-1: config 6 interface 251 has no altsetting 0 [ 90.973393][ T5138] usb 5-1: USB disconnect, device number 2 [ 90.991415][ T5133] usb 2-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28 [ 91.043031][ T5133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.097525][ T5133] usb 2-1: Product: ࠌ [ 91.107301][ T5133] usb 2-1: Manufacturer: 〉 [ 91.118852][ T5133] usb 2-1: SerialNumber: 屉쿮峭Ⳇ옜타撅ꨱ鹒驹끤⌒꘤팽뗌嗝㕰㮚撫⤸쨵袉잹鴂樓牧쎸럜ቍ閹ധ乸愊뭘皔㪯㹖✸켮䠈웧 [ 91.165197][ T5613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 91.294534][ T5618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.476183][ T5613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 91.642994][ T5096] Bluetooth: hci3: command tx timeout [ 91.961548][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 91.975970][ T5133] usb 2-1: can't set config #6, error -32 [ 92.108502][ T5133] usb 2-1: USB disconnect, device number 3 [ 92.152928][ T5622] 9pnet: Could not find request transport: rdm [ 92.339225][ T2871] bridge_slave_1: left allmulticast mode [ 92.389308][ T2871] bridge_slave_1: left promiscuous mode [ 92.397531][ T5096] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 92.426284][ T2871] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.485327][ T2871] bridge_slave_0: left allmulticast mode [ 92.501894][ T2871] bridge_slave_0: left promiscuous mode [ 92.509500][ T2871] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.672109][ T5096] Bluetooth: hci3: command tx timeout [ 94.797717][ T29] audit: type=1804 audit(1719486436.047:5): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.124" name="/root/syzkaller.5IWBpf/26/file0" dev="sda1" ino=1968 res=1 errno=0 [ 94.952945][ T2871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.029592][ T2871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.107041][ T2871] bond0 (unregistering): Released all slaves [ 96.298344][ T5096] Bluetooth: hci3: command tx timeout [ 96.307138][ T5598] chnl_net:caif_netlink_parms(): no params data found [ 96.370090][ T5627] pimreg: entered allmulticast mode [ 96.423891][ T5629] pimreg: left allmulticast mode [ 96.463955][ T5136] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.651879][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 96.672117][ T5136] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 96.691399][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.701506][ T5136] usb 3-1: Product: syz [ 96.707576][ T5136] usb 3-1: Manufacturer: syz [ 96.712323][ T5136] usb 3-1: SerialNumber: syz [ 96.811160][ T29] audit: type=1804 audit(1719486438.047:6): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.124" name="/root/syzkaller.5IWBpf/26/file0" dev="sda1" ino=1968 res=1 errno=0 [ 96.844114][ T5136] usb 3-1: config 0 descriptor?? [ 96.886281][ T5136] ums-datafab 3-1:0.0: USB Mass Storage device detected [ 96.987320][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.041468][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.127912][ T5598] bridge_slave_0: entered allmulticast mode [ 97.137142][ T5598] bridge_slave_0: entered promiscuous mode [ 97.165505][ T5136] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 97.166126][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.201257][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.228067][ T5598] bridge_slave_1: entered allmulticast mode [ 97.249248][ T5598] bridge_slave_1: entered promiscuous mode [ 97.298464][ T5136] usb 3-1: USB disconnect, device number 5 [ 97.368876][ T29] audit: type=1800 audit(1719486438.617:7): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.126" name="file0" dev="sda1" ino=1948 res=0 errno=0 [ 97.526486][ T5096] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 97.711735][ T5108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.752619][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.811726][ T4870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.829116][ T2871] hsr_slave_0: left promiscuous mode [ 97.958175][ T2871] hsr_slave_1: left promiscuous mode [ 97.966024][ T2871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.982668][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.163416][ T5108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.227220][ T2871] veth1_macvtap: left promiscuous mode [ 98.238295][ T5108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.284294][ T2871] veth0_macvtap: left promiscuous mode [ 98.312152][ T5096] Bluetooth: hci3: command tx timeout [ 98.357361][ T5108] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.402216][ T2871] veth1_vlan: left promiscuous mode [ 98.487165][ T2871] veth0_vlan: left promiscuous mode [ 98.515104][ T5108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.811034][ T5108] usb 5-1: config 0 descriptor?? [ 98.991692][ T4870] usb 4-1: Using ep0 maxpacket: 8 [ 99.008077][ T4870] usb 4-1: config 6 has an invalid interface number: 3 but max is 2 [ 99.021646][ T4870] usb 4-1: config 6 has an invalid interface number: 243 but max is 2 [ 99.029846][ T4870] usb 4-1: config 6 has an invalid interface number: 251 but max is 2 [ 99.058386][ T4870] usb 4-1: config 6 has no interface number 0 [ 99.066512][ T4870] usb 4-1: config 6 has no interface number 1 [ 99.093460][ T4870] usb 4-1: config 6 has no interface number 2 [ 99.099628][ T4870] usb 4-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 99.162078][ T4870] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 99.301890][ T29] audit: type=1804 audit(1719486440.507:8): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.136" name="/root/syzkaller.5IWBpf/32/file0" dev="sda1" ino=1967 res=1 errno=0 [ 99.366574][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 99.378453][ T4870] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7 [ 99.390619][ T4870] usb 4-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024 [ 99.411666][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 99.431789][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 99.459818][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping [ 99.608853][ T4870] usb 4-1: config 6 interface 243 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 99.944075][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 100.052070][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.176251][ T4870] usb 4-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7 [ 100.262793][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 100.267304][ T5108] usbhid 5-1:0.0: can't add hid device: -71 [ 100.289934][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping [ 100.291768][ T5108] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 100.312201][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping [ 100.325197][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 100.337151][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 100.348943][ T5108] usb 5-1: USB disconnect, device number 3 [ 100.349109][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 100.368088][ T4870] usb 4-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 100.393072][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping [ 100.407443][ T4870] usb 4-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 100.419763][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 100.463122][ T25] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 100.477528][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.488837][ T4870] usb 4-1: config 6 interface 3 has no altsetting 0 [ 100.497032][ T25] usb 3-1: Product: syz [ 100.501225][ T25] usb 3-1: Manufacturer: syz [ 100.505935][ T4870] usb 4-1: config 6 interface 251 has no altsetting 0 [ 100.520350][ T25] usb 3-1: SerialNumber: syz [ 100.536487][ T4870] usb 4-1: string descriptor 0 read error: -71 [ 100.556234][ T25] usb 3-1: config 0 descriptor?? [ 100.563985][ T4870] usb 4-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28 [ 100.578166][ T25] ums-datafab 3-1:0.0: USB Mass Storage device detected [ 100.606179][ T4870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.644815][ T4870] usb 4-1: can't set config #6, error -71 [ 100.682116][ T4870] usb 4-1: USB disconnect, device number 4 [ 100.691302][ T25] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 100.803533][ T29] audit: type=1804 audit(1719486442.037:9): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.136" name="/root/syzkaller.5IWBpf/32/file0" dev="sda1" ino=1967 res=1 errno=0 [ 101.028853][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 101.160877][ T2871] team0 (unregistering): Port device team_slave_1 removed [ 101.233088][ T2871] team0 (unregistering): Port device team_slave_0 removed [ 101.502140][ T5096] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 102.412029][ T4870] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.708580][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.732048][ T4870] usb 4-1: Using ep0 maxpacket: 8 [ 102.746715][ T4870] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 102.778884][ T4870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.808767][ T4870] usb 4-1: Product: syz [ 102.808981][ T5136] usb 3-1: USB disconnect, device number 6 [ 102.847316][ T4870] usb 4-1: Manufacturer: syz [ 102.861872][ T4870] usb 4-1: SerialNumber: syz [ 102.876793][ T5728] team0: entered promiscuous mode [ 102.885622][ T5728] team_slave_1: entered promiscuous mode [ 102.902358][ T4870] usb 4-1: config 0 descriptor?? [ 102.905120][ T5728] team0: left promiscuous mode [ 102.911421][ T4870] ums-datafab 4-1:0.0: USB Mass Storage device detected [ 102.932123][ T5728] team_slave_1: left promiscuous mode [ 103.055202][ T29] audit: type=1800 audit(1719486444.317:10): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.146" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 103.055485][ T4870] ums-sddr55 4-1:0.0: USB Mass Storage device detected [ 103.099254][ T5598] team0: Port device team_slave_0 added [ 103.132451][ T5598] team0: Port device team_slave_1 added [ 103.238845][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.251047][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.314064][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.348460][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.371760][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.401754][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.460626][ T29] audit: type=1800 audit(1719486444.717:11): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.147" name="file0" dev="sda1" ino=1972 res=0 errno=0 [ 103.605512][ T5598] hsr_slave_0: entered promiscuous mode [ 103.620603][ T5598] hsr_slave_1: entered promiscuous mode [ 103.637048][ T5598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.650292][ T5598] Cannot create hsr debugfs directory [ 103.723166][ T5096] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 104.590673][ T5136] usb 4-1: USB disconnect, device number 5 [ 104.758458][ T5791] cgroup: noprefix used incorrectly [ 104.839882][ T29] audit: type=1804 audit(1719486446.097:12): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.152" name="/root/syzkaller.KxEKEO/26/file0" dev="sda1" ino=1963 res=1 errno=0 [ 106.875722][ T5096] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 107.146370][ T5096] Bluetooth: hci4: command 0x0406 tx timeout [ 107.189720][ T29] audit: type=1804 audit(1719486448.187:13): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.152" name="/root/syzkaller.KxEKEO/26/file0" dev="sda1" ino=1963 res=1 errno=0 [ 107.695012][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.707415][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.711723][ T1147] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.744889][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.769445][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.818176][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 107.951765][ T1147] usb 5-1: Using ep0 maxpacket: 8 [ 107.963417][ T1147] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 107.989359][ T1147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.028322][ T1147] usb 5-1: Product: syz [ 108.038435][ T1147] usb 5-1: Manufacturer: syz [ 108.052561][ T1147] usb 5-1: SerialNumber: syz [ 108.057695][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.077851][ T1147] usb 5-1: config 0 descriptor?? [ 108.114180][ T1147] ums-datafab 5-1:0.0: USB Mass Storage device detected [ 108.160001][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.234471][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.241706][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.249595][ T1147] ums-sddr55 5-1:0.0: USB Mass Storage device detected [ 108.288404][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.295616][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.735335][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 109.754761][ T4870] usb 5-1: USB disconnect, device number 4 [ 109.855158][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 111.271889][ T5870] cgroup: noprefix used incorrectly [ 111.303061][ T5868] team0: entered promiscuous mode [ 111.323853][ T5868] team_slave_0: entered promiscuous mode [ 111.340704][ T5868] team_slave_1: entered promiscuous mode [ 111.368530][ T5871] team_slave_0: entered allmulticast mode [ 111.412272][ T5136] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.425650][ T5871] team0: Port device team_slave_0 removed [ 111.455454][ T5862] team0: left promiscuous mode [ 111.460329][ T5862] team_slave_1: left promiscuous mode [ 111.504361][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.579681][ T5598] veth0_vlan: entered promiscuous mode [ 111.604668][ T5598] veth1_vlan: entered promiscuous mode [ 111.628659][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 111.661827][ T5136] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 111.714788][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.859610][ T5136] usb 2-1: Product: syz [ 111.866285][ T5598] veth0_macvtap: entered promiscuous mode [ 111.874740][ T5136] usb 2-1: Manufacturer: syz [ 111.890290][ T5136] usb 2-1: SerialNumber: syz [ 111.904299][ T5136] usb 2-1: config 0 descriptor?? [ 111.921873][ T5136] ums-datafab 2-1:0.0: USB Mass Storage device detected [ 111.956781][ T5598] veth1_macvtap: entered promiscuous mode [ 112.030691][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.114001][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.194710][ T53] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 112.215206][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.281798][ T1147] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.307292][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.371641][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.432455][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.498202][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.541751][ T1147] usb 3-1: Using ep0 maxpacket: 8 [ 112.561745][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.589525][ T1147] usb 3-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 112.785346][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.107515][ T5136] ums-sddr55 2-1:0.0: USB Mass Storage device detected [ 113.116320][ T1147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.124197][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.127031][ T1147] usb 3-1: Product: syz [ 113.187963][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.198200][ T1147] usb 3-1: Manufacturer: syz [ 113.204449][ T1147] usb 3-1: SerialNumber: syz [ 113.212898][ T1147] usb 3-1: config 0 descriptor?? [ 113.222381][ T1147] ums-datafab 3-1:0.0: USB Mass Storage device detected [ 113.231245][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.255636][ T5598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.269836][ T5598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.285668][ T5136] usb 2-1: USB disconnect, device number 4 [ 113.295669][ T5598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.304610][ T5598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.435328][ T1147] ums-sddr55 3-1:0.0: USB Mass Storage device detected [ 113.512962][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 113.549926][ T29] audit: type=1804 audit(1719486454.797:14): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.167" name="/root/syzkaller.5IWBpf/42/file0" dev="sda1" ino=1966 res=1 errno=0 [ 114.287128][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.322938][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.410399][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.434915][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.738538][ T1147] usb 3-1: USB disconnect, device number 7 [ 115.682471][ T29] audit: type=1804 audit(1719486456.907:15): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.167" name="/root/syzkaller.5IWBpf/42/file0" dev="sda1" ino=1966 res=1 errno=0 [ 115.715258][ T5096] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 116.097133][ T5937] netlink: 56 bytes leftover after parsing attributes in process `syz.2.169'. [ 116.378772][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 117.342901][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 117.491873][ T5957] team0: entered promiscuous mode [ 117.540610][ T5957] team_slave_0: entered promiscuous mode [ 117.564006][ T5957] team_slave_1: entered promiscuous mode [ 117.591049][ T5966] team_slave_0: entered allmulticast mode [ 117.663343][ T5966] team0: Port device team_slave_0 removed [ 117.705878][ T5954] team0: left promiscuous mode [ 117.710685][ T5954] team_slave_1: left promiscuous mode [ 117.866285][ T5975] cgroup: noprefix used incorrectly [ 117.926790][ T5978] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 117.961261][ T5978] hsr0: entered promiscuous mode [ 117.994414][ T5978] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 118.042211][ T5978] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 118.054038][ T5978] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 118.067144][ T5978] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 118.317432][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 118.531780][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.540605][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.343683][ T5986] sched: RT throttling activated [ 120.349448][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 120.563477][ T5994] netlink: 'syz.0.180': attribute type 3 has an invalid length. [ 120.571173][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 122.572078][ T5994] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 122.680762][ T5136] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.814643][ T29] audit: type=1804 audit(1719486464.077:16): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.181" name="/root/syzkaller.5IWBpf/47/file0" dev="sda1" ino=1963 res=1 errno=0 [ 122.893401][ T5136] usb 4-1: Using ep0 maxpacket: 8 [ 122.918524][ T5136] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59 [ 122.940552][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.102762][ T5136] usb 4-1: Product: syz [ 123.107359][ T5136] usb 4-1: Manufacturer: syz [ 123.131886][ T5136] usb 4-1: SerialNumber: syz [ 123.207127][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 123.965469][ T5136] usb 4-1: config 0 descriptor?? [ 123.976443][ T5136] usb 4-1: can't set config #0, error -71 [ 123.989518][ T5136] usb 4-1: USB disconnect, device number 6 [ 124.222661][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 124.292038][ T5096] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 124.490053][ T6018] team0: entered promiscuous mode [ 124.996223][ T6018] team_slave_0: entered promiscuous mode [ 125.012468][ T6018] team_slave_1: entered promiscuous mode [ 125.062141][ T6024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.187'. [ 125.090511][ T6018] team_slave_0: entered allmulticast mode [ 125.219052][ T6018] team0: Port device team_slave_0 removed [ 125.276917][ T6017] team0: left promiscuous mode [ 125.330165][ T6017] team_slave_1: left promiscuous mode [ 125.688539][ T29] audit: type=1804 audit(1719486466.847:17): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.181" name="/root/syzkaller.5IWBpf/47/file0" dev="sda1" ino=1963 res=1 errno=0 [ 125.709908][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.238000][ T6052] cgroup: noprefix used incorrectly [ 126.277159][ T5096] Bluetooth: hci0: unexpected event 0x04 length: 14 > 10 [ 128.382488][ T5096] Bluetooth: hci0: command tx timeout [ 130.493892][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 130.585761][ T6076] team0: entered promiscuous mode [ 130.590837][ T6076] team_slave_1: entered promiscuous mode [ 130.650580][ T6075] team0: left promiscuous mode [ 130.672993][ T6075] team_slave_1: left promiscuous mode [ 130.833845][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 130.876648][ T6088] team0: entered promiscuous mode [ 130.886871][ T6088] team_slave_1: entered promiscuous mode [ 131.061942][ T6085] team0: left promiscuous mode [ 131.071372][ T6085] team_slave_1: left promiscuous mode [ 131.757584][ T6127] syz.0.213[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.757735][ T6127] syz.0.213[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.296294][ T6150] sit0: entered allmulticast mode [ 132.383672][ T6153] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 132.408181][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.451278][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.480692][ T6153] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 132.493546][ T6150] sit0: entered promiscuous mode [ 132.543792][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 132.588429][ T6160] bridge0: entered promiscuous mode [ 132.629300][ T6160] bridge0: entered allmulticast mode [ 132.805398][ T6168] Zero length message leads to an empty skb [ 132.812198][ T29] audit: type=1804 audit(1719486474.067:18): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.229" name="/root/syzkaller.8KTwnp/17/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 132.894851][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 132.932183][ T6173] netlink: 'syz.1.230': attribute type 25 has an invalid length. [ 133.025860][ T6173] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.035146][ T6173] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.043920][ T6173] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.052726][ T6173] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.082988][ T6182] 8021q: VLANs not supported on lo [ 133.114631][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121131][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.417888][ T29] audit: type=1800 audit(1719486474.677:19): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.238" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 136.564885][ T6233] tipc: Failed to remove unknown binding: 66,1,1/0:3098952665/3098952667 [ 136.783884][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'. [ 138.269631][ T6274] netlink: 168 bytes leftover after parsing attributes in process `syz.4.263'. [ 138.450688][ T6279] dlm: no locking on control device [ 138.462010][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 138.576111][ T6279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.819318][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 139.321797][ T1147] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.554051][ T1147] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.582983][ T1147] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.632595][ T1147] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.663672][ T1147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 139.816211][ T1147] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 140.011756][ T6305] input: syz0 as /devices/virtual/input/input7 [ 140.579665][ T1147] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.594859][ T1147] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.626024][ T1147] usb 2-1: Product: syz [ 140.630241][ T1147] usb 2-1: Manufacturer: syz [ 140.763359][ T1147] cdc_wdm 2-1:1.0: skipping garbage [ 140.771988][ T1147] cdc_wdm 2-1:1.0: skipping garbage [ 140.787375][ T1147] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 140.795634][ T1147] cdc_wdm 2-1:1.0: Unknown control protocol [ 140.884943][ T6314] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 140.977670][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.022219][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.111503][ T6325] 8021q: VLANs not supported on lo [ 141.154441][ T6325] : renamed from gretap0 [ 141.286663][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 141.294716][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.335523][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.383729][ T6293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.402138][ T6293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.420699][ T6339] dlm: no locking on control device [ 141.452847][ T6331] team0: entered promiscuous mode [ 141.493837][ T6331] team_slave_0: entered promiscuous mode [ 141.548296][ T6331] team_slave_1: entered promiscuous mode [ 141.561420][ T6339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.598159][ T6338] team_slave_0: entered allmulticast mode [ 141.716323][ T6338] team0: Port device team_slave_0 removed [ 141.852274][ T6330] team0: left promiscuous mode [ 141.879904][ T6330] team_slave_1: left promiscuous mode [ 142.122623][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 142.123637][ T4870] usb 2-1: USB disconnect, device number 5 [ 142.129429][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 142.141144][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.150651][ T6293] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 143.831776][ T1147] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.896038][ T6416] 9pnet_virtio: no channels available for device syz [ 144.013790][ T1147] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.013821][ T1147] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 144.013842][ T1147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.013882][ T1147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 144.161225][ T1147] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 144.204079][ T1147] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.219805][ T1147] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.240961][ T1147] usb 5-1: Product: syz [ 144.257148][ T1147] usb 5-1: Manufacturer: syz [ 144.286647][ T1147] cdc_wdm 5-1:1.0: skipping garbage [ 144.301046][ T1147] cdc_wdm 5-1:1.0: skipping garbage [ 144.319290][ T1147] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 144.337291][ T1147] cdc_wdm 5-1:1.0: Unknown control protocol [ 144.567429][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.599343][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.855026][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 145.039926][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.071088][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.172523][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.213948][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.091564][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.098312][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.104672][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.111394][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.117688][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.124300][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.130618][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.137239][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.143656][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.150373][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.156665][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.163285][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.169565][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.176182][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.182490][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.189103][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.195396][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 146.202006][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 146.213955][ T4870] usb 5-1: USB disconnect, device number 5 [ 146.214013][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 146.215456][ T6470] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 147.932556][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 147.935466][ T29] audit: type=1326 audit(1719486489.177:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.094097][ T29] audit: type=1326 audit(1719486489.187:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.190453][ T29] audit: type=1326 audit(1719486489.247:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.411488][ T29] audit: type=1326 audit(1719486489.247:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.411538][ T29] audit: type=1326 audit(1719486489.247:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.411577][ T29] audit: type=1326 audit(1719486489.247:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.411774][ T29] audit: type=1326 audit(1719486489.247:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.411814][ T29] audit: type=1326 audit(1719486489.247:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a8156cb67 code=0x7ffc0000 [ 148.411850][ T29] audit: type=1326 audit(1719486489.247:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a81511539 code=0x7ffc0000 [ 148.411885][ T29] audit: type=1326 audit(1719486489.247:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3a81575ae9 code=0x7ffc0000 [ 148.971560][ T6566] kernel profiling enabled (shift: 0) [ 148.981620][ C1] ================================================================== [ 148.981635][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170 [ 148.981683][ C1] Read of size 8 at addr ffffc900049c7540 by task syz.1.365/6549 [ 148.981699][ C1] [ 148.981708][ C1] CPU: 1 PID: 6549 Comm: syz.1.365 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 148.981728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 148.981742][ C1] Call Trace: [ 148.981749][ C1] [ 148.981757][ C1] dump_stack_lvl+0x241/0x360 [ 148.981791][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.981816][ C1] ? __pfx__printk+0x10/0x10 [ 148.981839][ C1] ? _printk+0xd5/0x120 [ 148.981866][ C1] print_report+0x169/0x550 [ 148.981886][ C1] ? __virt_addr_valid+0xbd/0x520 [ 148.981912][ C1] ? profile_pc+0xd2/0x170 [ 148.981933][ C1] kasan_report+0x143/0x180 [ 148.981953][ C1] ? profile_pc+0xd2/0x170 [ 148.981978][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 148.982010][ C1] profile_pc+0xd2/0x170 [ 148.982034][ C1] profile_tick+0xd7/0x150 [ 148.982060][ C1] tick_nohz_handler+0x386/0x500 [ 148.982091][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 148.982119][ C1] __hrtimer_run_queues+0x551/0xd50 [ 148.982145][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 148.982175][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 148.982200][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 148.982223][ C1] hrtimer_interrupt+0x396/0x990 [ 148.982260][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 148.982288][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 148.982312][ C1] [ 148.982319][ C1] [ 148.982326][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.982357][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 148.982386][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 7e 9d 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 a3 af dd f5 65 8b 05 e4 e7 7b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 148.982401][ C1] RSP: 0018:ffffc900049c7540 EFLAGS: 00000206 [ 148.982425][ C1] RAX: 534a9b8c4ebdde00 RBX: 1ffff92000938eac RCX: ffffffff8172d8fa [ 148.982439][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 148.982452][ C1] RBP: ffffc900049c75d0 R08: ffffffff92f7162f R09: 1ffffffff25ee2c5 [ 148.982464][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2c6 R12: dffffc0000000000 [ 148.982477][ C1] R13: 1ffff92000938ea8 R14: ffffc900049c7560 R15: 0000000000000246 [ 148.982496][ C1] ? mark_lock+0x9a/0x350 [ 148.982521][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.982548][ C1] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 148.982577][ C1] __skb_try_recv_datagram+0x1cb/0x6a0 [ 148.982604][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 148.982625][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 148.982651][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 148.982672][ C1] __unix_dgram_recvmsg+0x3ba/0x12f0 [ 148.982708][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 148.982739][ C1] ? __pfx___might_resched+0x10/0x10 [ 148.982760][ C1] ? iovec_from_user+0x61/0x240 [ 148.982786][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 148.982804][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 148.982825][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 148.982846][ C1] ____sys_recvmsg+0x3c0/0x470 [ 148.982874][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 148.982902][ C1] ? __might_fault+0xaa/0x120 [ 148.982925][ C1] do_recvmmsg+0x474/0xae0 [ 148.982950][ C1] ? __pfx___futex_wait+0x10/0x10 [ 148.982968][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 148.982987][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 148.983022][ C1] ? futex_wait+0x285/0x360 [ 148.983058][ C1] ? __pfx_futex_wait+0x10/0x10 [ 148.983083][ C1] ? fd_install+0x9c/0x5d0 [ 148.983101][ C1] ? __pfx_lock_release+0x10/0x10 [ 148.983126][ C1] ? __pfx_do_futex+0x10/0x10 [ 148.983152][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 148.983178][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 148.983202][ C1] ? do_syscall_64+0x100/0x230 [ 148.983229][ C1] ? do_syscall_64+0xb6/0x230 [ 148.983255][ C1] do_syscall_64+0xf3/0x230 [ 148.983280][ C1] ? clear_bhb_loop+0x35/0x90 [ 148.983306][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.983330][ C1] RIP: 0033:0x7fc76a175ae9 [ 148.983351][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.983366][ C1] RSP: 002b:00007fc76af19048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 148.983386][ C1] RAX: ffffffffffffffda RBX: 00007fc76a304070 RCX: 00007fc76a175ae9 [ 148.983400][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 148.983412][ C1] RBP: 00007fc76a1f6756 R08: 0000000000000000 R09: 0000000000000000 [ 148.983424][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 148.983435][ C1] R13: 000000000000006e R14: 00007fc76a304070 R15: 00007ffee8a717b8 [ 148.983456][ C1] [ 148.983464][ C1] [ 148.983468][ C1] The buggy address belongs to stack of task syz.1.365/6549 [ 148.983478][ C1] and is located at offset 0 in frame: [ 148.983486][ C1] _raw_spin_unlock_irqrestore+0x0/0x140 [ 148.983512][ C1] [ 148.983516][ C1] This frame has 1 object: [ 148.983526][ C1] [32, 40) 'flags.i.i.i.i' [ 148.983535][ C1] [ 148.983543][ C1] The buggy address belongs to the virtual mapping at [ 148.983543][ C1] [ffffc900049c0000, ffffc900049c9000) created by: [ 148.983543][ C1] copy_process+0x5d1/0x3dc0 [ 148.983568][ C1] [ 148.983573][ C1] The buggy address belongs to the physical page: [ 148.983585][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888029ee16f0 pfn:0x29ee1 [ 148.983602][ C1] memcg:ffff888028e05302 [ 148.983611][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.983641][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 148.983657][ C1] raw: ffff888029ee16f0 0000000000000000 00000001ffffffff ffff888028e05302 [ 148.983667][ C1] page dumped because: kasan: bad access detected [ 148.983679][ C1] page_owner tracks the page as allocated [ 148.983686][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 2812, tgid 2812 (kworker/u8:9), ts 147252896953, free_ts 144112637904 [ 148.983715][ C1] post_alloc_hook+0x1f3/0x230 [ 148.983734][ C1] get_page_from_freelist+0x2e43/0x2f00 [ 148.983753][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 148.983773][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 148.983790][ C1] __vmalloc_node_range_noprof+0x971/0x1460 [ 148.983813][ C1] dup_task_struct+0x444/0x8c0 [ 148.983829][ C1] copy_process+0x5d1/0x3dc0 [ 148.983844][ C1] kernel_clone+0x223/0x870 [ 148.983861][ C1] user_mode_thread+0x132/0x1a0 [ 148.983879][ C1] call_usermodehelper_exec_work+0x9b/0x230 [ 148.983896][ C1] process_scheduled_works+0xa2c/0x1830 [ 148.983913][ C1] worker_thread+0x86d/0xd50 [ 148.983929][ C1] kthread+0x2f0/0x390 [ 148.983947][ C1] ret_from_fork+0x4b/0x80 [ 148.983968][ C1] ret_from_fork_asm+0x1a/0x30 [ 148.983990][ C1] page last free pid 45 tgid 45 stack trace: [ 148.984005][ C1] free_unref_page+0xd19/0xea0 [ 148.984022][ C1] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 148.984045][ C1] __apply_to_page_range+0x8a8/0xe50 [ 148.984062][ C1] kasan_release_vmalloc+0x9a/0xb0 [ 148.984083][ C1] purge_vmap_node+0x3e3/0x770 [ 148.984106][ C1] __purge_vmap_area_lazy+0x708/0xae0 [ 148.984130][ C1] drain_vmap_area_work+0x27/0x40 [ 148.984153][ C1] process_scheduled_works+0xa2c/0x1830 [ 148.984169][ C1] worker_thread+0x86d/0xd50 [ 148.984185][ C1] kthread+0x2f0/0x390 [ 148.984203][ C1] ret_from_fork+0x4b/0x80 [ 148.984223][ C1] ret_from_fork_asm+0x1a/0x30 [ 148.984244][ C1] [ 148.984248][ C1] Memory state around the buggy address: [ 148.984256][ C1] ffffc900049c7400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.984268][ C1] ffffc900049c7480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.984280][ C1] >ffffc900049c7500: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 148.984288][ C1] ^ [ 148.984298][ C1] ffffc900049c7580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 148.984310][ C1] ffffc900049c7600: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 148.984319][ C1] ================================================================== [ 148.984329][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.984339][ C1] CPU: 1 PID: 6549 Comm: syz.1.365 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 148.984357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 148.984368][ C1] Call Trace: [ 148.984376][ C1] [ 148.984383][ C1] dump_stack_lvl+0x241/0x360 [ 148.984410][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.984435][ C1] ? __pfx__printk+0x10/0x10 [ 148.984459][ C1] ? rcu_is_watching+0x15/0xb0 [ 148.984482][ C1] ? vscnprintf+0x5d/0x90 [ 148.984501][ C1] panic+0x349/0x860 [ 148.984523][ C1] ? __pfx_lock_release+0x10/0x10 [ 148.984542][ C1] ? check_panic_on_warn+0x21/0xb0 [ 148.984565][ C1] ? __pfx_panic+0x10/0x10 [ 148.984587][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 148.984616][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 148.984643][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.984672][ C1] check_panic_on_warn+0x86/0xb0 [ 148.984695][ C1] ? profile_pc+0xd2/0x170 [ 148.984717][ C1] end_report+0x77/0x160 [ 148.984734][ C1] kasan_report+0x154/0x180 [ 148.984753][ C1] ? profile_pc+0xd2/0x170 [ 148.984777][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 148.984803][ C1] profile_pc+0xd2/0x170 [ 148.984826][ C1] profile_tick+0xd7/0x150 [ 148.984852][ C1] tick_nohz_handler+0x386/0x500 [ 148.984881][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 148.984907][ C1] __hrtimer_run_queues+0x551/0xd50 [ 148.984932][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 148.984961][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 148.984986][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 148.985014][ C1] hrtimer_interrupt+0x396/0x990 [ 148.985051][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 148.985078][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 148.985102][ C1] [ 148.985108][ C1] [ 148.985115][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 148.985141][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 148.985169][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 7e 9d 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 a3 af dd f5 65 8b 05 e4 e7 7b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 148.985184][ C1] RSP: 0018:ffffc900049c7540 EFLAGS: 00000206 [ 148.985200][ C1] RAX: 534a9b8c4ebdde00 RBX: 1ffff92000938eac RCX: ffffffff8172d8fa [ 148.985215][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 148.985228][ C1] RBP: ffffc900049c75d0 R08: ffffffff92f7162f R09: 1ffffffff25ee2c5 [ 148.985241][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2c6 R12: dffffc0000000000 [ 148.985255][ C1] R13: 1ffff92000938ea8 R14: ffffc900049c7560 R15: 0000000000000246 [ 148.985273][ C1] ? mark_lock+0x9a/0x350 [ 148.985297][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.985324][ C1] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 148.985352][ C1] __skb_try_recv_datagram+0x1cb/0x6a0 [ 148.985379][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 148.985399][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 148.985425][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 148.985446][ C1] __unix_dgram_recvmsg+0x3ba/0x12f0 [ 148.985481][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 148.985512][ C1] ? __pfx___might_resched+0x10/0x10 [ 148.985532][ C1] ? iovec_from_user+0x61/0x240 [ 148.985554][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 148.985573][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 148.985594][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 148.985614][ C1] ____sys_recvmsg+0x3c0/0x470 [ 148.985641][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 148.985672][ C1] ? __might_fault+0xaa/0x120 [ 148.985696][ C1] do_recvmmsg+0x474/0xae0 [ 148.985721][ C1] ? __pfx___futex_wait+0x10/0x10 [ 148.985743][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 148.985765][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 148.985795][ C1] ? futex_wait+0x285/0x360 [ 148.985816][ C1] ? __pfx_futex_wait+0x10/0x10 [ 148.985841][ C1] ? fd_install+0x9c/0x5d0 [ 148.985858][ C1] ? __pfx_lock_release+0x10/0x10 [ 148.985883][ C1] ? __pfx_do_futex+0x10/0x10 [ 148.985908][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 148.985933][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 148.985957][ C1] ? do_syscall_64+0x100/0x230 [ 148.985983][ C1] ? do_syscall_64+0xb6/0x230 [ 148.986014][ C1] do_syscall_64+0xf3/0x230 [ 148.986039][ C1] ? clear_bhb_loop+0x35/0x90 [ 148.986063][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.986084][ C1] RIP: 0033:0x7fc76a175ae9 [ 148.986098][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.986111][ C1] RSP: 002b:00007fc76af19048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 148.986128][ C1] RAX: ffffffffffffffda RBX: 00007fc76a304070 RCX: 00007fc76a175ae9 [ 148.986141][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 148.986151][ C1] RBP: 00007fc76a1f6756 R08: 0000000000000000 R09: 0000000000000000 [ 148.986163][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 148.986175][ C1] R13: 000000000000006e R14: 00007fc76a304070 R15: 00007ffee8a717b8 [ 148.986196][ C1] [ 148.986408][ C1] Kernel Offset: disabled