last executing test programs: 4.882757004s ago: executing program 3 (id=4): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x140, 0x150, 0x150, 0x0, 0x0, 0x258, 0x238, 0x206, 0x258, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@tcpmss={{}, {0x401, 0x1, 0x1}}, @common=@inet=@ecn={{0x28}, {0x10, 0x0, 0x0, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@hl={{}, {0x0, 0x9}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f1) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0xc, 0x8001, 0x21, 0x4, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x27}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x30}}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000240)=0x2c) preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/229, 0xe5}], 0x7, 0x9f, 0x5) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4.627977702s ago: executing program 3 (id=6): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) set_mempolicy(0x2, &(0x7f0000000240)=0xbef3, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = getpgid(0x0) tkill(r4, 0x29) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280060003000000000004001200060011000000000006000f000000000008001f", @ANYRESDEC=r0, @ANYRESDEC=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) 4.385696793s ago: executing program 1 (id=2): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4040) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) r5 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40, 0x0) fsopen(0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8004, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x8, 0x7, {0x7, 0x23, "0bc1a628b7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB]) socket$inet6_udp(0xa, 0x2, 0x0) 4.322185626s ago: executing program 0 (id=1): r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a010200000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 4.063370228s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@rand_addr=0x64010100, 0x4e1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000007, 0xe6}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=r0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0051ff028008003a00f8ff07"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x90, 0x80, 0xe1, 0x40, 0x4fc, 0x504a, 0x43bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xae, 0x15, 0xd1}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0), 0x0, 0x0}) 3.789880567s ago: executing program 0 (id=7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x7f, 0x5}, {0x6, 0xfffffffffffffffe}, 0x88, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0xfe}, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f00000001c0)=""/189, &(0x7f0000000280)=0xbd) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x5f6f, 0x4) close(r2) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000180)=0x7) accept4(r3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080245000028000000000006907859a27e5d0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) 3.786249538s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ddeef7201d0680c1f0fc0102030109023d00010000000009041e00049efb6f0009050200ff03b20403090500024189007f0f8700000008000107000905080300020104010725010107ff0f"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) unshare(0x400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x470, 0x190, 0x2b8, 0xfeffffff, 0x2b8, 0x190, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @dev, @local, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@realm={{0x30}}, @common=@inet=@ecn={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00'}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x9, 0xffff, @private0, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140), 0x4) 3.45618644s ago: executing program 3 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_io_uring_setup(0x4272, &(0x7f00000000c0)={0x0, 0x6aed, 0x800, 0x0, 0x7c}, &(0x7f0000000140), &(0x7f00000001c0)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) socketpair(0xa, 0x4, 0x4, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') futimesat(r1, &(0x7f0000000000)='./cgroup\x00', 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b80)=""/186, 0xba}, {&(0x7f0000000640)=""/4089, 0xff9}, {&(0x7f0000002c40)=""/201, 0xc9}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4126, 0x101e}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000440)=""/118, 0x76}, {&(0x7f0000001c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/133, 0x85}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x40008062, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_io_uring_setup(0x4272, &(0x7f00000000c0)={0x0, 0x6aed, 0x800, 0x0, 0x7c}, &(0x7f0000000140), &(0x7f00000001c0)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) socketpair(0xa, 0x4, 0x4, &(0x7f0000000040)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') (async) futimesat(r1, &(0x7f0000000000)='./cgroup\x00', 0x0) (async) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b80)=""/186, 0xba}, {&(0x7f0000000640)=""/4089, 0xff9}, {&(0x7f0000002c40)=""/201, 0xc9}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4126, 0x101e}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000440)=""/118, 0x76}, {&(0x7f0000001c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/133, 0x85}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x40008062, 0x0) (async) 3.410665036s ago: executing program 0 (id=9): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000080)={0x0, 0x11, 0xd5, {0xd5, 0xe, "a52a4608822bbb4ce8d28bada48b845e2d09b927fc977f46991394dc8fe912b45da90623c3c4a5e5ffcfa1c3b8af067c8d945532af15729c54d6575c58a2a0906b37f8c2519eb7ba697a09db408318e7b77ca48c5449bcdf8f6ca40e242be6db8904799e76ce6232b90a87937ef97475c7b49a692d5dba831322e59e82df652149c86c58bbe779453db5a1ff15f3e4e3ec88c7dd6acadb6598cfbf1cfba56c1c4a2925522cd484981e1a4e0a41659b19764d03f3f1e137d44e03eadbd8067e5ec4bb7b2e5d4259f1146786fc9fa8025e4a1396"}}, &(0x7f0000000240)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "8cb8c379deb4c378b68d3dc69742890f10647a07278f153c0c7be8909afba994f3493cd7c3525de7164f911208a5155435b6584040780f5596a72e6010e4971c087160898e8abbd69751835341cdfb78ec654cde92c46a56c17e9349db4ad581adfe74383c1bff60e2967a8783c368fb5b56732ef8e303164e"}}, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xe1, 0x1, {0x22, 0x942}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x40, 0xc, 0xa9, "8634164cabf71ca12633de900ee2aed902bfe10b0fe0ecf03f31f1ad9be246de4b735d3a4bf6be232293cb93f9a4288bf373351aaa099160c14415981d7013c05d7c96e2cc1a6094df19ee10dbe7fcf831d59652bc4dfe1caa7e1bcc5ff3d4e3c1bb65c41cb1ee9d16c0d5cb61f6bbacb3569366e254ac46acd4fbe22d06871a771cb48a3897180c83461c3abba7721331c720703659b87dc0c7174b55cc7980523947929ae0c9f0b1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3b}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0x7a, "1eba6fdc0b553eb26097af254bd3edeed5cbc265b70373b3b014118a0df570e105986ffcd89605a0fb0daf0258f525f7bad0f132a8409537d6e94ec15de5a1f96532b4be8cd90ff575bd64a17f8983945ae9ad882250f9154af8bb31aac7bd64dfe2e50c9c76030bb2d553a863b7444d98d3913e06193ea19c12"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x1}}) 3.16598052s ago: executing program 3 (id=10): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "0f584b70"}]}}, 0x0}, 0x0) 1.840273919s ago: executing program 4 (id=11): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x11}}, {@in=@local, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x6}, {0xfffffffffffff461}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x10}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfcf1}, @mark={0xc, 0x15, {0x35075b, 0x8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="38000000000000002900000039000000040400040000000020010000000000000000000000000001fe800000000000000000000000000019200000000000000029000000360000000800000000000000b296c204000007e10000"], 0x58}, 0x0) 1.649868766s ago: executing program 2 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) fanotify_mark(0xffffffffffffffff, 0x10, 0xc000032, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x60a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x53, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0xba01}, 0x0) 1.372081275s ago: executing program 4 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000000ab2a00ab000a20000000000a01040000000000000000010000000900010073797a3100000000e4000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000080007006e6174000b00070066696c74657200000900030073797a3100000000700008800c00024000000000000000060c0001"], 0x184}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) close_range(0xffffffffffffffff, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x140e, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x24000014) 1.248223805s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000100000000090400000103001000092100000001"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x34, 0x23, 0x0, 0x4a, 0x4, 0x61}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c"], 0x270}}, 0x0) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$unix(r8, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in=@dev}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) r9 = mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r9, 0x15b77000) shmget(0x3, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8f, 0xcc, 0x9, 0x20, 0x4e8, 0xa101, 0x808e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x81, 0x0, 0x1, 0xff, 0xef, 0x98, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) 1.083519574s ago: executing program 4 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0xa}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.082246846s ago: executing program 4 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a010200000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 1.072468233s ago: executing program 3 (id=17): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc0000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3}, 0xe) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x400, 0x9, 0xc00, r2, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xa, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x6, 0x400, 0x9, 0xc00, r2, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xa, @void, @value, @void, @value}, 0x50) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r3, 0x2}, &(0x7f0000000240)=0x8) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xa3) (async) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xa3) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000ac0)=""/4096) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e70009058a", @ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) readahead(r5, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f00000001c0)={0x40, 0x20, &(0x7f0000000300)="5d4a6b92f462f6c70c6007998b1a91fa0c06f41e3670717b7e086b5ee5737b0cb4342c3c956bc026c5555ce1fcf41651abc2deb2e688e199ab35bee6c6c21348823202bff93efab60c2f025438e575ca720a3be732ed7658d45ca81f39f6315bc12812991be1050234356372e797942879c311acd1117dec668953c01eabc54cd15496a5c3b973552f34b0b640975ed987d676063318b84d05e34b7edb0f56f3", {0x7, 0x7, 0x30314142, 0x1, 0x1, 0x8, 0xb, 0x101}}) 941.157637ms ago: executing program 4 (id=18): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000001c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x1}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000800)="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", 0x1000}], 0x1, &(0x7f0000000100)="4633e4729b0fa741fe44451b9ef0e160451181feb09ab4c323767971e5fd654d1c72917edf54676c2cd5034462ba1df4733109335bb86574b725e8ca3875a34b3140887b5076ababa718c84095fc220bfe98006de32217219c9eeaa43538fa6608dd50484451b79be50dbf51204503127afa052e11850235c6389c41f9145290070fe1b8a58a0824cb43d067b7d28dbea4e32d269b73f759842baa6e3fcf8d13e6939577fb63", 0xa6, 0x10}, 0x400c044) fspick(0xffffffffffffffff, 0x0, 0x17ef38cc6d5bba7c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={r3, 0x4, 0x5}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x3d7, &(0x7f0000000200)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000cc74a467ca000904"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x0, 0x2, 0x89}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x137}}, 0x4000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r6, 0x0, 0x0) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) mount_setattr(r6, &(0x7f0000000240)='./file0\x00', 0x8100, &(0x7f0000000340)={0x100000, 0x1, 0x60000, {r7}}, 0x20) 596.606003ms ago: executing program 0 (id=19): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x10000, {0x0, 0x0, 0x0, r3, {0x9cf6eadcf8e62472}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9f, 0x8, 0x143, 0x9, 0x3}, 0x4, 0x0, 0xabcc, 0x3, 0x8, 0x4, 0x1e, 0x11, 0x8, 0x8, {0x5, 0x8e, 0x9, 0x5, 0xb2e, 0x6}}}}]}, 0x78}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) userfaultfd(0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x179c, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x9f}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x19, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}, {'C'}}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000100)) 388.870681ms ago: executing program 0 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x20, r5, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x20}, 0x5}, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x40f0e4ee2f432281}) io_uring_enter(r6, 0x24ea, 0x200000, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000240), 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde106"], 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async, rerun: 32) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0xfff9, &(0x7f00000001c0)={&(0x7f0000000680)={0x1c, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfc}, [@NFTA_FLOWTABLE_FLAGS={0x2, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) (rerun: 32) 231.406139ms ago: executing program 0 (id=21): lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xa080, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0x3) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '1'}, @global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x2c, r2, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da0102030109023800b297bd8d851062f151c1e3a5c3af12cb83020840b3090400b20102020194052406000105240002000d240f0110000800d500ff000306241a0300d509050a1078e004060f"], 0x0) 0s ago: executing program 1 (id=22): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, &(0x7f0000000300)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x5a000) r4 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000006380), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000180)) ioctl$KDSKBLED(r3, 0x4b65, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 64.723087][ T5821] cgroup: Unknown subsys name 'net' [ 64.865087][ T5821] cgroup: Unknown subsys name 'cpuset' [ 64.872887][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.276122][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.499801][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.510841][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.518821][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.527536][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.542503][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.555665][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.562113][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.570831][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.578386][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.590755][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.598489][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.606591][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.609079][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.613716][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.624301][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.628442][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.636490][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.648688][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.649536][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.663728][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.670983][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.678744][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.680371][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.686097][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.704643][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.715886][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.723314][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.730700][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.737984][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.745296][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.009006][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 69.197310][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.204646][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.211898][ T5846] bridge_slave_0: entered allmulticast mode [ 69.219000][ T5846] bridge_slave_0: entered promiscuous mode [ 69.234382][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 69.263294][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.270465][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.278901][ T5846] bridge_slave_1: entered allmulticast mode [ 69.285858][ T5846] bridge_slave_1: entered promiscuous mode [ 69.311248][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 69.361937][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.386470][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 69.398395][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.431362][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 69.473988][ T5846] team0: Port device team_slave_0 added [ 69.501971][ T5846] team0: Port device team_slave_1 added [ 69.564256][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.571316][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.579494][ T5852] bridge_slave_0: entered allmulticast mode [ 69.586262][ T5852] bridge_slave_0: entered promiscuous mode [ 69.593944][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.601017][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.608258][ T5852] bridge_slave_1: entered allmulticast mode [ 69.615117][ T5852] bridge_slave_1: entered promiscuous mode [ 69.638804][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.645910][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.671927][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.684584][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.691546][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.717498][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.740415][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.747721][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.755242][ T5849] bridge_slave_0: entered allmulticast mode [ 69.761812][ T5849] bridge_slave_0: entered promiscuous mode [ 69.771925][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.779362][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.786579][ T5851] bridge_slave_0: entered allmulticast mode [ 69.793544][ T5851] bridge_slave_0: entered promiscuous mode [ 69.801033][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.808317][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.815461][ T5851] bridge_slave_1: entered allmulticast mode [ 69.822199][ T5851] bridge_slave_1: entered promiscuous mode [ 69.845142][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.852492][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.859627][ T5849] bridge_slave_1: entered allmulticast mode [ 69.866511][ T5849] bridge_slave_1: entered promiscuous mode [ 69.917262][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.928619][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.947871][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.964296][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.971520][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.979243][ T5850] bridge_slave_0: entered allmulticast mode [ 69.986261][ T5850] bridge_slave_0: entered promiscuous mode [ 69.995701][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.007066][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.039283][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.055966][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.063144][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.070323][ T5850] bridge_slave_1: entered allmulticast mode [ 70.077526][ T5850] bridge_slave_1: entered promiscuous mode [ 70.093146][ T5852] team0: Port device team_slave_0 added [ 70.109359][ T5846] hsr_slave_0: entered promiscuous mode [ 70.119917][ T5846] hsr_slave_1: entered promiscuous mode [ 70.141280][ T5852] team0: Port device team_slave_1 added [ 70.156543][ T5849] team0: Port device team_slave_0 added [ 70.178937][ T5851] team0: Port device team_slave_0 added [ 70.186779][ T5851] team0: Port device team_slave_1 added [ 70.199911][ T5849] team0: Port device team_slave_1 added [ 70.211759][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.263371][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.279050][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.286198][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.312868][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.325025][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.331976][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.358338][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.390583][ T5850] team0: Port device team_slave_0 added [ 70.400552][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.407612][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.433635][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.450906][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.458395][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.484737][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.496376][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.503577][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.529513][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.546367][ T5850] team0: Port device team_slave_1 added [ 70.574755][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.581693][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.607904][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.661674][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.668739][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.668805][ T5836] Bluetooth: hci0: command tx timeout [ 70.694980][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.713192][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.720130][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.743327][ T5836] Bluetooth: hci1: command tx timeout [ 70.746345][ T5844] Bluetooth: hci3: command tx timeout [ 70.757175][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.770651][ T5852] hsr_slave_0: entered promiscuous mode [ 70.776772][ T5852] hsr_slave_1: entered promiscuous mode [ 70.783005][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.790764][ T5852] Cannot create hsr debugfs directory [ 70.809935][ T5851] hsr_slave_0: entered promiscuous mode [ 70.816591][ T5851] hsr_slave_1: entered promiscuous mode [ 70.822704][ T5844] Bluetooth: hci4: command tx timeout [ 70.828350][ T5844] Bluetooth: hci2: command tx timeout [ 70.828907][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.841479][ T5851] Cannot create hsr debugfs directory [ 70.909076][ T5849] hsr_slave_0: entered promiscuous mode [ 70.916002][ T5849] hsr_slave_1: entered promiscuous mode [ 70.921956][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.929602][ T5849] Cannot create hsr debugfs directory [ 70.985904][ T5850] hsr_slave_0: entered promiscuous mode [ 70.991917][ T5850] hsr_slave_1: entered promiscuous mode [ 70.998270][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.006222][ T5850] Cannot create hsr debugfs directory [ 71.178871][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.204684][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.217882][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.240973][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.295679][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.304687][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.331290][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.340939][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.385492][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.393733][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.396743][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.426976][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.435504][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.449133][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.539347][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.548971][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.569373][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.583037][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.593478][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.646581][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.655619][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.665504][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.676384][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.706588][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.726868][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.773164][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.781701][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.788890][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.809883][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.816996][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.843492][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.867383][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.874496][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.887920][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.911714][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.918820][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.949720][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.956871][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.970071][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.006892][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.026571][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.033688][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.068209][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.108550][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.115647][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.132898][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.143971][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.151075][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.200901][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.230714][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.244789][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.293715][ T5852] veth0_vlan: entered promiscuous mode [ 72.309106][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.336513][ T5851] veth0_vlan: entered promiscuous mode [ 72.344878][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.351954][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.364660][ T5852] veth1_vlan: entered promiscuous mode [ 72.385638][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.392784][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.408484][ T5851] veth1_vlan: entered promiscuous mode [ 72.460074][ T5846] veth0_vlan: entered promiscuous mode [ 72.470760][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.489714][ T5852] veth0_macvtap: entered promiscuous mode [ 72.512569][ T5852] veth1_macvtap: entered promiscuous mode [ 72.520004][ T5846] veth1_vlan: entered promiscuous mode [ 72.538020][ T5851] veth0_macvtap: entered promiscuous mode [ 72.557956][ T5851] veth1_macvtap: entered promiscuous mode [ 72.590511][ T5846] veth0_macvtap: entered promiscuous mode [ 72.611822][ T5850] veth0_vlan: entered promiscuous mode [ 72.631574][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.641601][ T5846] veth1_macvtap: entered promiscuous mode [ 72.652929][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.665165][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.677008][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.686019][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.695381][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.711336][ T5850] veth1_vlan: entered promiscuous mode [ 72.719637][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.730722][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.742257][ T5844] Bluetooth: hci0: command tx timeout [ 72.744016][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.758428][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.767668][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.777028][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.786703][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.797369][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.808074][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.818241][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.828971][ T5844] Bluetooth: hci3: command tx timeout [ 72.833244][ T5844] Bluetooth: hci1: command tx timeout [ 72.835601][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.851056][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.869151][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.878097][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.887468][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.897062][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.905917][ T5844] Bluetooth: hci2: command tx timeout [ 72.912457][ T5844] Bluetooth: hci4: command tx timeout [ 72.919120][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.931161][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.941301][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.952505][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.964886][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.985896][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.995124][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.004099][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.013223][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.079102][ T5850] veth0_macvtap: entered promiscuous mode [ 73.111118][ T5850] veth1_macvtap: entered promiscuous mode [ 73.151387][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.166934][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.177357][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.188075][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.197957][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.208746][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.220022][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.259323][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.270723][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.280677][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.291827][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.303049][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.313612][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.324597][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.340033][ T5849] veth0_vlan: entered promiscuous mode [ 73.345953][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.354847][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.363561][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.371391][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.387928][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.396860][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.405958][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.414863][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.432836][ T5849] veth1_vlan: entered promiscuous mode [ 73.453619][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.462515][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.516698][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.530147][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.571051][ T5849] veth0_macvtap: entered promiscuous mode [ 73.615966][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.645698][ T5849] veth1_macvtap: entered promiscuous mode [ 73.653824][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.679154][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.733894][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.736662][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.756898][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.767740][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.779039][ T5892] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 73.780644][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.800487][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.810349][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.820814][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.830752][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.841277][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.855420][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.912665][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.942212][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.953575][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.981417][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.997385][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.008536][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.018659][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.030574][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.040956][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.051692][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.062850][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.090351][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.108856][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.120290][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.135391][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.159626][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.169180][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.258995][ T5903] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.452374][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.460231][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.542956][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.566813][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.663515][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.829993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.839058][ T5916] process 'syz.1.2' launched '/dev/fd/8' with NULL argv: empty string added [ 74.848213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 74.878518][ T5844] Bluetooth: hci0: command tx timeout [ 74.912674][ T5844] Bluetooth: hci1: command tx timeout [ 74.918101][ T5836] Bluetooth: hci3: command tx timeout [ 74.982624][ T5844] Bluetooth: hci4: command tx timeout [ 74.988159][ T5844] Bluetooth: hci2: command tx timeout [ 75.112885][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.152761][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.207065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 75.216176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.232450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.240666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.272317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.291280][ T8] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.bb [ 75.302147][ T51] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.310440][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.413874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.466191][ T8] usb 5-1: Product: syz [ 75.476726][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 75.496494][ T51] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 75.502199][ T8] usb 5-1: Manufacturer: syz [ 75.509344][ T51] usb 3-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 75.520133][ T8] usb 5-1: SerialNumber: syz [ 75.525693][ T5890] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.532408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 75.541822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 75.553483][ T5908] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 75.583063][ T51] usb 3-1: config 0 has no interface number 0 [ 75.589550][ T51] usb 3-1: config 0 interface 30 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 75.598023][ T8] usb 5-1: config 0 descriptor?? [ 75.605662][ T51] usb 3-1: config 0 interface 30 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.625360][ T51] usb 3-1: config 0 interface 30 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 75.638877][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.638905][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 75.638940][ T5908] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 75.638961][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.719515][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 75.729113][ T5908] usb 2-1: config 0 descriptor?? [ 75.734548][ T51] usb 3-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 75.750044][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.758458][ T51] usb 3-1: Product: syz [ 75.769853][ T5890] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.781157][ T5890] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.798287][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 75.808953][ T51] usb 3-1: Manufacturer: syz [ 75.819997][ T5890] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 75.830934][ T51] usb 3-1: SerialNumber: syz [ 75.843200][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.873390][ T977] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.884477][ T51] usb 3-1: config 0 descriptor?? [ 75.898479][ T5920] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 75.911411][ T5890] usb 1-1: config 0 descriptor?? [ 75.930087][ T51] quatech2 3-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected [ 76.044714][ T977] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 76.055819][ T977] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.074601][ T5888] usb 5-1: USB disconnect, device number 2 [ 76.084076][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.117123][ T977] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 76.178954][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.200403][ T977] usb 4-1: config 0 descriptor?? [ 76.283551][ T5932] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 76.371469][ T5890] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 76.379291][ T5890] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 76.390147][ T5890] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 76.405140][ T5908] uclogic 0003:28BD:0075.0002: interface is invalid, ignoring [ 76.469488][ T5890] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 76.486033][ T5890] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0001/input/input5 [ 76.520425][ T5890] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 76.528276][ T5890] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 76.546455][ T5890] hid-steam 0003:28DE:1102.0003: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 76.715670][ T977] gembird 0003:11FF:3331.0004: hidraw1: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0 [ 76.902157][ T5844] Bluetooth: hci0: command tx timeout [ 76.914411][ T51] usb 3-1: qt2_attach - failed to power on unit: -71 [ 76.915760][ T5908] usb 4-1: USB disconnect, device number 2 [ 76.958005][ T51] quatech2 3-1:0.30: probe with driver quatech2 failed with error -71 [ 76.983069][ T5844] Bluetooth: hci1: command tx timeout [ 76.988504][ T5836] Bluetooth: hci3: command tx timeout [ 77.048568][ T51] usb 3-1: USB disconnect, device number 2 [ 77.062341][ T5844] Bluetooth: hci2: command tx timeout [ 77.067870][ T5836] Bluetooth: hci4: command tx timeout [ 77.162659][ T5943] vlan2: entered allmulticast mode [ 77.167856][ T5943] vlan1: entered allmulticast mode [ 77.210596][ T5943] veth0_vlan: entered allmulticast mode [ 77.239680][ T5945] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13'. [ 77.562170][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 77.734197][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.744618][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.758073][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 77.767185][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.779953][ T9] usb 3-1: config 0 descriptor?? [ 77.788890][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 77.832120][ T5908] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 77.902195][ T5907] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.984253][ T5908] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 77.993851][ T5908] usb 4-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 78.005612][ T5908] usb 4-1: config 0 has no interface number 0 [ 78.006291][ T5947] netlink: 'syz.2.14': attribute type 34 has an invalid length. [ 78.011716][ T5908] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 195, changing to 4 [ 78.039634][ T5908] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 23989, setting to 1023 [ 78.049384][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.052238][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 78.068614][ T5908] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.082875][ T5908] usb 4-1: config 0 interface 52 has no altsetting 0 [ 78.091568][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.106658][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.118877][ T5907] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.131781][ T5908] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 78.141698][ T5947] kernel read not supported for file / œ7³ÏüâW)ës“§Ç-ë (pid: 5947 comm: syz.2.14) [ 78.155471][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 78.166706][ T5908] usb 4-1: Product: syz [ 78.171594][ T5908] usb 4-1: SerialNumber: syz [ 78.177876][ T5907] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 78.190187][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.199317][ T5907] usb 5-1: Product: syz [ 78.204086][ T5907] usb 5-1: Manufacturer: syz [ 78.209693][ T5908] usb 4-1: config 0 descriptor?? [ 78.217105][ T29] audit: type=1800 audit(1740125694.801:2): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=7115 res=0 errno=0 [ 78.222941][ T5907] usb 5-1: SerialNumber: syz [ 78.249200][ T5947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.283052][ T5907] usb 5-1: config 0 descriptor?? [ 78.299702][ T977] usb 1-1: USB disconnect, device number 2 [ 78.334953][ T5947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.361363][ T977] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 78.389026][ T51] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0001/input/input6 [ 78.438538][ T51] kobject: kobject_add_internal failed for js0 (error: -2 parent: input6) [ 78.452895][ T5908] usb 3-1: USB disconnect, device number 3 [ 78.467146][ T5833] usb 2-1: USB disconnect, device number 2 [ 78.529642][ T5907] usb 5-1: USB disconnect, device number 3 [ 78.540136][ T51] input: failed to attach handler joydev to device input6, error: -2 [ 78.570908][ T51] kobject: kobject_add_internal failed for event4 (error: -2 parent: input6) [ 78.598704][ T51] input: failed to attach handler evdev to device input6, error: -2 [ 78.617355][ T51] ================================================================== [ 78.625446][ T51] BUG: KASAN: slab-use-after-free in steam_input_register+0xe75/0x1140 [ 78.633735][ T51] Write of size 8 at addr ffff8880591a0920 by task kworker/1:1/51 [ 78.641568][ T51] [ 78.644008][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 78.644032][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.644046][ T51] Workqueue: events steam_work_unregister_cb [ 78.644080][ T51] Call Trace: [ 78.644091][ T51] [ 78.644099][ T51] dump_stack_lvl+0x241/0x360 [ 78.644125][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.644154][ T51] ? __pfx__printk+0x10/0x10 [ 78.644174][ T51] ? _printk+0xd5/0x120 [ 78.644193][ T51] ? __virt_addr_valid+0x183/0x530 [ 78.644213][ T51] ? __virt_addr_valid+0x183/0x530 [ 78.644235][ T51] print_report+0x16e/0x5b0 [ 78.644260][ T51] ? __virt_addr_valid+0x183/0x530 [ 78.644279][ T51] ? __virt_addr_valid+0x183/0x530 [ 78.644297][ T51] ? __virt_addr_valid+0x45f/0x530 [ 78.644316][ T51] ? __phys_addr+0xba/0x170 [ 78.644360][ T51] ? steam_input_register+0xe75/0x1140 [ 78.644382][ T51] kasan_report+0x143/0x180 [ 78.644407][ T51] ? steam_input_register+0xe75/0x1140 [ 78.644432][ T51] steam_input_register+0xe75/0x1140 [ 78.644457][ T51] steam_work_unregister_cb+0xf7/0x130 [ 78.644480][ T51] ? process_scheduled_works+0x9c6/0x18e0 [ 78.644505][ T51] process_scheduled_works+0xabe/0x18e0 [ 78.644542][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.644572][ T51] ? assign_work+0x364/0x3d0 [ 78.644597][ T51] worker_thread+0x870/0xd30 [ 78.644629][ T51] ? __kthread_parkme+0x169/0x1d0 [ 78.644657][ T51] ? __pfx_worker_thread+0x10/0x10 [ 78.644683][ T51] kthread+0x7a9/0x920 [ 78.644711][ T51] ? __pfx_kthread+0x10/0x10 [ 78.644741][ T51] ? __pfx_worker_thread+0x10/0x10 [ 78.644767][ T51] ? __pfx_kthread+0x10/0x10 [ 78.644795][ T51] ? __pfx_kthread+0x10/0x10 [ 78.644826][ T51] ? __pfx_kthread+0x10/0x10 [ 78.644854][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.644875][ T51] ? lockdep_hardirqs_on+0x99/0x150 [ 78.644898][ T51] ? __pfx_kthread+0x10/0x10 [ 78.644927][ T51] ret_from_fork+0x4b/0x80 [ 78.644953][ T51] ? __pfx_kthread+0x10/0x10 [ 78.644982][ T51] ret_from_fork_asm+0x1a/0x30 [ 78.645012][ T51] [ 78.645019][ T51] [ 78.855332][ T51] Allocated by task 5890: [ 78.859676][ T51] kasan_save_track+0x3f/0x80 [ 78.864379][ T51] __kasan_kmalloc+0x98/0xb0 [ 78.868996][ T51] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 78.875449][ T51] devm_kmalloc+0x88/0x310 [ 78.879890][ T51] steam_probe+0xc5/0xd70 [ 78.884238][ T51] hid_device_probe+0x3bf/0x710 [ 78.889123][ T51] really_probe+0x2b9/0xad0 [ 78.893646][ T51] __driver_probe_device+0x1a2/0x390 [ 78.898967][ T51] driver_probe_device+0x50/0x430 [ 78.904014][ T51] __device_attach_driver+0x2d6/0x530 [ 78.909400][ T51] bus_for_each_drv+0x24e/0x2e0 [ 78.914285][ T51] __device_attach+0x333/0x520 [ 78.919082][ T51] bus_probe_device+0x189/0x260 [ 78.923956][ T51] device_add+0x856/0xbf0 [ 78.928319][ T51] hid_add_device+0x3b6/0x520 [ 78.933031][ T51] usbhid_probe+0xd87/0x1270 [ 78.937638][ T51] usb_probe_interface+0x641/0xbb0 [ 78.942759][ T51] really_probe+0x2b9/0xad0 [ 78.947271][ T51] __driver_probe_device+0x1a2/0x390 [ 78.952574][ T51] driver_probe_device+0x50/0x430 [ 78.957607][ T51] __device_attach_driver+0x2d6/0x530 [ 78.962990][ T51] bus_for_each_drv+0x24e/0x2e0 [ 78.967859][ T51] __device_attach+0x333/0x520 [ 78.972641][ T51] bus_probe_device+0x189/0x260 [ 78.977505][ T51] device_add+0x856/0xbf0 [ 78.981847][ T51] usb_set_configuration+0x1976/0x1fb0 [ 78.987308][ T51] usb_generic_driver_probe+0x88/0x140 [ 78.992775][ T51] usb_probe_device+0x1b8/0x380 [ 78.997626][ T51] really_probe+0x2b9/0xad0 [ 79.002143][ T51] __driver_probe_device+0x1a2/0x390 [ 79.007443][ T51] driver_probe_device+0x50/0x430 [ 79.012467][ T51] __device_attach_driver+0x2d6/0x530 [ 79.017830][ T51] bus_for_each_drv+0x24e/0x2e0 [ 79.022670][ T51] __device_attach+0x333/0x520 [ 79.027433][ T51] bus_probe_device+0x189/0x260 [ 79.032278][ T51] device_add+0x856/0xbf0 [ 79.036612][ T51] usb_new_device+0x104a/0x19a0 [ 79.041465][ T51] hub_event+0x2d6d/0x5150 [ 79.045872][ T51] process_scheduled_works+0xabe/0x18e0 [ 79.051426][ T51] worker_thread+0x870/0xd30 [ 79.056013][ T51] kthread+0x7a9/0x920 [ 79.060084][ T51] ret_from_fork+0x4b/0x80 [ 79.064508][ T51] ret_from_fork_asm+0x1a/0x30 [ 79.069274][ T51] [ 79.071588][ T51] Freed by task 977: [ 79.075472][ T51] kasan_save_track+0x3f/0x80 [ 79.080155][ T51] kasan_save_free_info+0x40/0x50 [ 79.085184][ T51] __kasan_slab_free+0x59/0x70 [ 79.089944][ T51] kfree+0x196/0x430 [ 79.093837][ T51] devres_release_group+0x328/0x350 [ 79.099027][ T51] hid_device_remove+0x250/0x370 [ 79.103967][ T51] device_release_driver_internal+0x4a9/0x7c0 [ 79.110046][ T51] bus_remove_device+0x34f/0x420 [ 79.114985][ T51] device_del+0x57a/0x9b0 [ 79.119340][ T51] hid_destroy_device+0x6a/0x1b0 [ 79.124278][ T51] usbhid_disconnect+0x9e/0xc0 [ 79.129034][ T51] usb_unbind_interface+0x25b/0x940 [ 79.134224][ T51] device_release_driver_internal+0x503/0x7c0 [ 79.140293][ T51] bus_remove_device+0x34f/0x420 [ 79.145232][ T51] device_del+0x57a/0x9b0 [ 79.149578][ T51] usb_disable_device+0x3bf/0x850 [ 79.154618][ T51] usb_disconnect+0x340/0x950 [ 79.159294][ T51] hub_event+0x1ebc/0x5150 [ 79.163700][ T51] process_scheduled_works+0xabe/0x18e0 [ 79.169264][ T51] worker_thread+0x870/0xd30 [ 79.173860][ T51] kthread+0x7a9/0x920 [ 79.177935][ T51] ret_from_fork+0x4b/0x80 [ 79.182352][ T51] ret_from_fork_asm+0x1a/0x30 [ 79.187113][ T51] [ 79.189452][ T51] Last potentially related work creation: [ 79.195170][ T51] kasan_save_stack+0x3f/0x60 [ 79.199844][ T51] kasan_record_aux_stack+0xaa/0xc0 [ 79.205046][ T51] insert_work+0x3e/0x330 [ 79.209373][ T51] __queue_work+0xc8b/0xf50 [ 79.213879][ T51] queue_work_on+0x1c2/0x380 [ 79.218469][ T51] hid_hw_close+0xac/0xe0 [ 79.222808][ T51] drop_ref+0x98/0x360 [ 79.226887][ T51] hidraw_disconnect+0x4f/0x60 [ 79.231650][ T51] hid_hw_stop+0x100/0x1e0 [ 79.236064][ T51] hid_device_remove+0x225/0x370 [ 79.240997][ T51] device_release_driver_internal+0x4a9/0x7c0 [ 79.247065][ T51] bus_remove_device+0x34f/0x420 [ 79.251995][ T51] device_del+0x57a/0x9b0 [ 79.256326][ T51] hid_destroy_device+0x6a/0x1b0 [ 79.261260][ T51] steam_remove+0xe3/0x1b0 [ 79.265664][ T51] hid_device_remove+0x225/0x370 [ 79.270603][ T51] device_release_driver_internal+0x4a9/0x7c0 [ 79.276675][ T51] bus_remove_device+0x34f/0x420 [ 79.281615][ T51] device_del+0x57a/0x9b0 [ 79.285942][ T51] hid_destroy_device+0x6a/0x1b0 [ 79.290880][ T51] usbhid_disconnect+0x9e/0xc0 [ 79.295638][ T51] usb_unbind_interface+0x25b/0x940 [ 79.300839][ T51] device_release_driver_internal+0x503/0x7c0 [ 79.306908][ T51] bus_remove_device+0x34f/0x420 [ 79.311840][ T51] device_del+0x57a/0x9b0 [ 79.316166][ T51] usb_disable_device+0x3bf/0x850 [ 79.321181][ T51] usb_disconnect+0x340/0x950 [ 79.325853][ T51] hub_event+0x1ebc/0x5150 [ 79.330264][ T51] process_scheduled_works+0xabe/0x18e0 [ 79.335810][ T51] worker_thread+0x870/0xd30 [ 79.340400][ T51] kthread+0x7a9/0x920 [ 79.344475][ T51] ret_from_fork+0x4b/0x80 [ 79.348885][ T51] ret_from_fork_asm+0x1a/0x30 [ 79.353643][ T51] [ 79.355955][ T51] Second to last potentially related work creation: [ 79.362542][ T51] kasan_save_stack+0x3f/0x60 [ 79.367219][ T51] kasan_record_aux_stack+0xaa/0xc0 [ 79.372414][ T51] insert_work+0x3e/0x330 [ 79.376736][ T51] __queue_work+0xc8b/0xf50 [ 79.381235][ T51] queue_work_on+0x1c2/0x380 [ 79.385825][ T51] steam_client_ll_open+0xb1/0xc0 [ 79.390844][ T51] hid_hw_open+0xe3/0x170 [ 79.395171][ T51] hidraw_open+0x298/0x8e0 [ 79.399629][ T51] chrdev_open+0x521/0x600 [ 79.404072][ T51] do_dentry_open+0xdec/0x1960 [ 79.408835][ T51] vfs_open+0x3b/0x370 [ 79.412900][ T51] path_openat+0x2c81/0x3590 [ 79.417518][ T51] do_filp_open+0x27f/0x4e0 [ 79.422018][ T51] do_sys_openat2+0x13e/0x1d0 [ 79.426694][ T51] __x64_sys_openat+0x247/0x2a0 [ 79.431538][ T51] do_syscall_64+0xf3/0x230 [ 79.436036][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.441924][ T51] [ 79.444238][ T51] The buggy address belongs to the object at ffff8880591a0800 [ 79.444238][ T51] which belongs to the cache kmalloc-1k of size 1024 [ 79.458280][ T51] The buggy address is located 288 bytes inside of [ 79.458280][ T51] freed 1024-byte region [ffff8880591a0800, ffff8880591a0c00) [ 79.472165][ T51] [ 79.474490][ T51] The buggy address belongs to the physical page: [ 79.480893][ T51] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x591a0 [ 79.489741][ T51] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 79.498237][ T51] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 79.505767][ T51] page_type: f5(slab) [ 79.509751][ T51] raw: 00fff00000000040 ffff88801b041dc0 dead000000000122 0000000000000000 [ 79.518341][ T51] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 79.526922][ T51] head: 00fff00000000040 ffff88801b041dc0 dead000000000122 0000000000000000 [ 79.535581][ T51] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 79.544390][ T51] head: 00fff00000000003 ffffea0001646801 ffffffffffffffff 0000000000000000 [ 79.553080][ T51] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 79.561736][ T51] page dumped because: kasan: bad access detected [ 79.568146][ T51] page_owner tracks the page as allocated [ 79.573849][ T51] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 52, tgid 52 (kworker/u8:3), ts 76343947834, free_ts 75474515354 [ 79.592855][ T51] post_alloc_hook+0x1f4/0x240 [ 79.597619][ T51] get_page_from_freelist+0x365c/0x37a0 [ 79.603158][ T51] __alloc_frozen_pages_noprof+0x292/0x710 [ 79.608956][ T51] alloc_pages_mpol+0x311/0x660 [ 79.613804][ T51] allocate_slab+0x8f/0x3a0 [ 79.618300][ T51] ___slab_alloc+0xc27/0x14a0 [ 79.622997][ T51] __slab_alloc+0x58/0xa0 [ 79.627326][ T51] __kmalloc_noprof+0x2e6/0x4c0 [ 79.632181][ T51] ___neigh_create+0x6c3/0x2360 [ 79.637037][ T51] ip6_finish_output2+0xb70/0x17c0 [ 79.642154][ T51] ip6_finish_output+0x41e/0x840 [ 79.647096][ T51] ndisc_send_skb+0xb52/0x1530 [ 79.651854][ T51] addrconf_dad_completed+0x76c/0xcd0 [ 79.657223][ T51] addrconf_dad_work+0xdbc/0x16a0 [ 79.662241][ T51] process_scheduled_works+0xabe/0x18e0 [ 79.667781][ T51] worker_thread+0x870/0xd30 [ 79.672365][ T51] page last free pid 63 tgid 63 stack trace: [ 79.678415][ T51] free_unref_folios+0xe40/0x18b0 [ 79.683435][ T51] folios_put_refs+0x76c/0x860 [ 79.688187][ T51] release_pages+0x5c0/0x690 [ 79.692764][ T51] io_free_region+0xb7/0x260 [ 79.697349][ T51] io_ring_ctx_free+0x329/0x530 [ 79.702199][ T51] io_ring_exit_work+0x813/0x8a0 [ 79.707152][ T51] process_scheduled_works+0xabe/0x18e0 [ 79.712697][ T51] worker_thread+0x870/0xd30 [ 79.717288][ T51] kthread+0x7a9/0x920 [ 79.721360][ T51] ret_from_fork+0x4b/0x80 [ 79.725772][ T51] ret_from_fork_asm+0x1a/0x30 [ 79.730533][ T51] [ 79.732879][ T51] Memory state around the buggy address: [ 79.738497][ T51] ffff8880591a0800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.746547][ T51] ffff8880591a0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.754614][ T51] >ffff8880591a0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.762662][ T51] ^ [ 79.767758][ T51] ffff8880591a0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.775811][ T51] ffff8880591a0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.783862][ T51] ================================================================== [ 79.822294][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.829517][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.14.0-rc3-syzkaller-00137-g27eddbf34490 #0 [ 79.840121][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.850226][ T51] Workqueue: events steam_work_unregister_cb [ 79.856237][ T51] Call Trace: [ 79.859509][ T51] [ 79.862441][ T51] dump_stack_lvl+0x241/0x360 [ 79.867124][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.872321][ T51] ? __pfx__printk+0x10/0x10 [ 79.876906][ T51] ? preempt_schedule+0xe1/0xf0 [ 79.881752][ T51] ? vscnprintf+0x5d/0x90 [ 79.886072][ T51] panic+0x349/0x880 [ 79.889964][ T51] ? check_panic_on_warn+0x21/0xb0 [ 79.895089][ T51] ? __pfx_panic+0x10/0x10 [ 79.899518][ T51] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 79.905506][ T51] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 79.912089][ T51] ? print_report+0x519/0x5b0 [ 79.916761][ T51] check_panic_on_warn+0x86/0xb0 [ 79.921699][ T51] ? steam_input_register+0xe75/0x1140 [ 79.927154][ T51] end_report+0x77/0x160 [ 79.931393][ T51] kasan_report+0x154/0x180 [ 79.935891][ T51] ? steam_input_register+0xe75/0x1140 [ 79.941348][ T51] steam_input_register+0xe75/0x1140 [ 79.946718][ T51] steam_work_unregister_cb+0xf7/0x130 [ 79.952175][ T51] ? process_scheduled_works+0x9c6/0x18e0 [ 79.957909][ T51] process_scheduled_works+0xabe/0x18e0 [ 79.963468][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 79.969450][ T51] ? assign_work+0x364/0x3d0 [ 79.974046][ T51] worker_thread+0x870/0xd30 [ 79.978638][ T51] ? __kthread_parkme+0x169/0x1d0 [ 79.983752][ T51] ? __pfx_worker_thread+0x10/0x10 [ 79.988864][ T51] kthread+0x7a9/0x920 [ 79.992946][ T51] ? __pfx_kthread+0x10/0x10 [ 79.997536][ T51] ? __pfx_worker_thread+0x10/0x10 [ 80.002643][ T51] ? __pfx_kthread+0x10/0x10 [ 80.007229][ T51] ? __pfx_kthread+0x10/0x10 [ 80.011816][ T51] ? __pfx_kthread+0x10/0x10 [ 80.016405][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.021612][ T51] ? lockdep_hardirqs_on+0x99/0x150 [ 80.026828][ T51] ? __pfx_kthread+0x10/0x10 [ 80.031419][ T51] ret_from_fork+0x4b/0x80 [ 80.035830][ T51] ? __pfx_kthread+0x10/0x10 [ 80.040423][ T51] ret_from_fork_asm+0x1a/0x30 [ 80.045192][ T51] [ 80.048533][ T51] Kernel Offset: disabled [ 80.052883][ T51] Rebooting in 86400 seconds..