last executing test programs: 8.990421075s ago: executing program 1 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x297, 0x100000010, 0x2000000000000003, 0x0, 0x4, 0x7fff, 0x81, 0x8000000, 0xca, 0x0, 0x25d, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x6, 0x200000000000000], 0xeeef0000, 0x201641}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="09000100ac1414aa"], 0x2c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000001000)=ANY=[@ANYBLOB="440f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000340)={0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 7.357479194s ago: executing program 0 (id=153): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed01000000000001090224000100000000090400000103000000092100000001220500090581030400000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x14, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) 6.04990733s ago: executing program 4 (id=164): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4000, 0x4, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) dup3(r1, r0, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000002000000000003900000008000300", @ANYRES32=r3, @ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000080)={0x7, 0x3, 0x1, 0x1, 0x5, 0x100000001, 0x8, 0x2}, &(0x7f0000000240)={0x9, 0x5, 0x9, 0x0, 0x299, 0xfffffffffffffe00, 0xffffffff80000001, 0x2c362cc3}, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x35f48f9e250dba0b, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(0x0, 0x0) mkdir(0x0, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 5.8283491s ago: executing program 4 (id=166): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)=',:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 5.621913456s ago: executing program 4 (id=167): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2(0x0, 0x0) syz_open_dev$evdev(0x0, 0x20000, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000580)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x406) 5.621590437s ago: executing program 0 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) socket(0x8, 0x3, 0x0) r3 = getpid() ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r2, 0x0, 0x46) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000008300000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff6e000000200011801c0005801800008014000380100001800c00018005000300830000006580d392c747673aa19d9d6c3aba120e3ad35a4d2b53ffc9769f09c5e799fcbca19e351e6fa14116780a393524b96fefd41422126dc7a619a15a59ce9fac81915ab4eb4c3927dac0a9c3e57de682e5dbb8a1cd23dde9649fa03bbd15e9b95f23bea60e563e0453c7b5f6b6d4f97b598d019d6323e4b8"], 0x48}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x884) socket$igmp(0x2, 0x3, 0x2) read$dsp(r2, &(0x7f0000000240)=""/203, 0xcb) 5.398036412s ago: executing program 0 (id=171): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) ioctl$FS_IOC_GETVERSION(r0, 0x5b01, 0x0) 5.217795123s ago: executing program 1 (id=174): mq_open(&(0x7f0000000100)='\xbd\x16 lhOb\xed\xf1~\xe5\x01\xd1h\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\xe4R\xfan\xc1\xb7FGr\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Q\x7fV\x7f7\xb6\xb7\"qH\xe1\x11\x97\xc9d0\x9d\xfa\x86\xf8\x88\xb9\x89\xfd%Nny\xb5\x03\x83\x1c\xddD\x02\x00\x00\x00\x00\x00\x00\x00`\x1f~\xe9\xe4N@\xbb\xdb\x80\xcf\x1e \x9eW\x13\x02\xe2ct\xe9\x7f+8+\v\x88\x01\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x83\xcd\xe21\x92X\x8c!\x0e\x1b(\xdf~ +\xb7{T\xb0\xff\xce\xbdv\xc1\xc0\xfc\xd9r,\xc9\xc5\xc7o\x1d]e\x03t)\xb6)\xe0\x88p\x84\x9e\xae\xaad\xf9\a\xce\x81\x99z\xb3\xb9\xa2\r{\x83\x05=\xfcu\xb3\xa1\x8b\xd1uw\f \xe0\x9fd\xcca&6\xa5{y\bS@\x00TO\'\xc7v\xa9\v_\xd7\x1f\x9cs\f\x7f\xab\x8d\x12\xf3\x1fR\x9f\x80M\x04\xa8\x1b5(s\x94\xeao\xe8\\\xa1sv\x81\xcd\xbd\xfd\x86\x14\xf0V\xe2\x84\xa4C\xfd\xf5c\xfe\x0f\x94>\x87\xdf\xf8\xc7\xe1\xce\xb1\xfe\xfc\xfd\x84\xa7\xee \xb4L*\xc7\xf6\xe4\xfa\x84\x95\xfb\xbd:\vfK-\x10YOja\x9a\xcd\xdb\xccj\xfd\x10\x8a\x1d\x9a\x8d\x00'/360, 0x40, 0x81, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a, 0xfec, &(0x7f0000006680)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xb1, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) recvmmsg$unix(r0, &(0x7f0000002b40)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000b40)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000380)}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/156, 0x9c}, {&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/69, 0x45}, {&(0x7f00000006c0)=""/25, 0x19}, {&(0x7f0000000a40)=""/211, 0xd3}], 0xa, &(0x7f0000000bc0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x90}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/209, 0xd1}, {&(0x7f0000000e00)=""/168, 0xa8}, {&(0x7f0000000ec0)=""/72, 0x48}], 0x3, &(0x7f0000000f80)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x94}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001200)=[{&(0x7f00000010c0)=""/61, 0x3d}, {&(0x7f0000001100)=""/231, 0xe7}], 0x2, &(0x7f0000001240)=[@cred={{0x18}}], 0x18}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001300)=""/46, 0x2e}, {&(0x7f0000001340)=""/218, 0xda}, {&(0x7f0000001440)=""/54, 0x36}], 0x3, &(0x7f00000014c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x84}}, {{&(0x7f0000001580), 0x6e, &(0x7f0000001800)=[{&(0x7f0000001600)=""/108, 0x6c}, {&(0x7f0000001680)=""/28, 0x1c}, {&(0x7f00000016c0)=""/133, 0x85}, {&(0x7f0000001780)=""/58, 0x3a}, {&(0x7f00000017c0)=""/11, 0xb}], 0x5, &(0x7f0000001840)=[@cred={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)}, {&(0x7f00000028c0)=""/199, 0xc7}, {&(0x7f00000029c0)=""/204, 0xcc}], 0x4, &(0x7f0000002b00)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}}], 0x6, 0x2000, &(0x7f0000002c00)={0x77359400}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000440)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B+0\xa2M\xf1B|\xe4\x91cI\xf2\r\xeao\v2\xc7\xbb\xbb\xcbRG7\x88\x1f\xfb=\xfd\x00\xf4f\x8efE\x974\x9c\xc4V\xce/\x83\xb9\x1aYl\xc0\xe4\xc0\xf4>C\x0eL+\xc5\xf3f6\xb3sB\v\xef t\x1e\xc4\xac@\x17m\xa0Y\xd8\xec\xa6~\xda\xccM\x15N\xba\x9d\xd6AQ\x96*\xca\xb1\xb3\xc7\x1e\xaf\xae\xfdx2|\xab3\xa9\x14\xa4\xbb\xab\xa2\x00\xae\xfbY\x8f\xa9\xf7\xabNUQ\xbf\x9eL\xcb|\xd9}\x1a\xa8\xbaw\xde\x80\x00X\x99\"/\x9d\x86\x7fZ\xdb\xd1A\x89\x17\xfc s_Oa\x15', 0x0) 5.155367912s ago: executing program 0 (id=175): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (fail_nth: 4) 4.565863184s ago: executing program 0 (id=178): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000000000000000000220000000a0001006f776e65720000000900010073797a30000000000900020073797a"], 0x98}}, 0x4048010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) getresuid(0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045503, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) syz_open_dev$dri(0x0, 0x8, 0x80280) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000013c0)=0xc7f) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf25130000002c00028004000400080001000d050000080001000520d5b2fb3559953c8e0000000400040008000100000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc8769723e875f523) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x2}}}, 0x24}}, 0x4000004) 3.757680441s ago: executing program 1 (id=179): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0xb8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x64, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x144}, 0x1, 0x0, 0x0, 0x20048150}, 0x2400c8c0) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce) 3.560509742s ago: executing program 1 (id=180): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x91, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x2}, 0x9c) 2.424863374s ago: executing program 4 (id=184): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x228, 0x30, 0x400, 0x70bd29, 0x25dfdbff, {}, [{0x214, 0x1, [@m_nat={0xe4, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x800, 0x0, 0x6, 0x5}, @broadcast, @private=0xa010101, 0xff, 0x1}}]}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xcc, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "b994bedd346bce0500000000000000d115251a878473985c1ed7a3d4fca80601598de37da823754e06000000b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x228}}, 0x48000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 14) 1.942881756s ago: executing program 0 (id=185): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0xfffffffffffffffb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x5b01, 0x0) 1.846019554s ago: executing program 4 (id=186): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r0, r0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r3, 0x100000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.551009857s ago: executing program 2 (id=188): socket$inet6(0x10, 0xa, 0xe5be) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x15, 0x6, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2002, 0x5, 0x3}) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0xda2, 0x8166, 0x6}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e00000004000280", @ANYRES64=r6], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.524071461s ago: executing program 4 (id=189): r0 = socket(0x80000000000000a, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="ae061ff3fae188434e41b1", 0xb, 0x5, 0x0, 0x2}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f0000000140)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc01cf509, &(0x7f00000001c0)={r0, 0x133, 0x4000000000000b, 0x4}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r8, 0x0) getpeername$packet(r7, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0e05403, &(0x7f0000000280)={{0xffffffffffffffff, 0x2, 0x38000, 0x0, 0xaa}, 0x2, 0xfffffff7, 'id1\x00', 'timer0\x00', 0x0, 0x9, 0x9, 0x9, 0x4f266808}) 1.431877343s ago: executing program 3 (id=190): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0xb8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x64, 0xe, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x144}, 0x1, 0x0, 0x0, 0x20048150}, 0x2400c8c0) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce) 1.389147266s ago: executing program 1 (id=191): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x4000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffeb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x4}, {0x2, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4884) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x6, 0xffffffff, 0x6181, 0xffffffffffffffff, 0xd, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xe, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.290891241s ago: executing program 2 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2c020400) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r8, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40018}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001200)=@filter={'filter\x00', 0x42, 0x4, 0x1334, 0xffffffff, 0x11e8, 0x11e8, 0x11e8, 0xffffffff, 0xffffffff, 0x12a0, 0x12a0, 0x12a0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x3127, 0x10cc, 0x10f0, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0xe, 0x0, './cgroup.net/syz0\x00'}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0xd4, 0xf8, 0x0, {0x0, 0x4}, [@common=@addrtype={{0x2c}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@set1={{0x24}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x1390) mq_unlink(0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000001c0), 0x10) sendfile(r10, r9, 0x0, 0x20000038) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000cbfcffff0200000000000000000100a3d7bab00d612037964675553b99da40a82634494f11ec6769c9f31199044e4b13598028e388dddbabc14e32bf97df3b151c5811b34a57a0de8f3dbfde18291d11f14e46d63e80243a01e29b9db45764b9cf7a10c2d7e940d40b9e7b74254952359180ce46ae37c7970d990c08b897c984a8c9f8f5abb46653d2236ae3d9371b3fc27adb756285144a3fe20984d7a5cb1a12eb95d0e198d859b296af"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1.236525122s ago: executing program 3 (id=193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x1, 0x1, @start={0x400}}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) 1.045924897s ago: executing program 3 (id=194): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{&(0x7f0000000640)={0xa, 0x4e20, 0x858, @local, 0x7}, 0x1c, &(0x7f0000000c80)=[{0x0}, {&(0x7f00000008c0)="f2e0d64f89f1d0db692196f4a7a9e03c1426c8079254d688c1a96d4dd5ce141bd988127d50b9e4ed65fe3fd0fc0425157a3ace3b86f45406ba12dc5a381f0d3ce77bcf5bf26f970129b9dcd51bf0da1ec8b13320827e070862eb406a6bc305a47ab121fd3a442b4e5dcd21d294645908cd94e2eafbc8839efa8926557a26120ff195c5ded920bb742e9c0e401a4d20e37e6b711e8818aeba2fd7e5fb", 0x9c}, {0x0}, {&(0x7f0000000a40)="c077bacb9387365ec84db16cee5275d01fdb73a14a624d", 0x17}, {&(0x7f0000000c00)}], 0x5}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@dstopts={{0x1c, 0x29, 0x37, {0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x9}]}}}], 0x1c}}, {{0x0, 0x0, &(0x7f0000002400), 0x0, &(0x7f0000002440)=[@hopopts_2292={{0x34, 0x29, 0x36, {0x2b, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x8, {0x2, 0x0, 0xff, 0x8e}}, @enc_lim={0x4, 0x1, 0x9}]}}}, @hopopts_2292={{0x24, 0x29, 0x36, {0x2f, 0x1, '\x00', [@generic={0x38}, @ra={0x5, 0x2, 0x10}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x9}}, @pktinfo={{0x20, 0x29, 0x32, {@remote}}}], 0x88}}], 0x3, 0x440c0) 997.837117ms ago: executing program 2 (id=195): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x19b1, 0x4) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0xf, @mcast1, 0x40000000}, 0x1c, 0x0}}], 0x1, 0x4040884) 875.419511ms ago: executing program 3 (id=196): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x228, 0x30, 0x400, 0x70bd29, 0x25dfdbff, {}, [{0x214, 0x1, [@m_nat={0xe4, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x800, 0x0, 0x6, 0x5}, @broadcast, @private=0xa010101, 0xff, 0x1}}]}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xcc, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "b994bedd346bce0500000000000000d115251a878473985c1ed7a3d4fca80601598de37da823754e06000000b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x228}}, 0x48000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c40)={0x178, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "adf29b3317f88c3e586e32a90cdd2e44d9e8bdf9648c061d0934f8f8913297dfe6ee78ba"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "df35835e938b5205f2a1a424cef85d02716ab28721542201ffe1491d1ea74cd36b785fb9ab219b17dc3e71590f3ff752e2771f8d9712f0a4030d7b972eec1e017e86e8ddc40510be043754ad5530f5c05b2e493250db8dbaa73b1eb786f2cf55f505a0"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xca1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x281}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48f}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 756.722525ms ago: executing program 2 (id=197): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r0, r0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r3, 0x100000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000140)) 698.531281ms ago: executing program 3 (id=198): r0 = openat$full(0xffffff9c, &(0x7f0000000200), 0x200, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x9a3c5b3c8329afc3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r1, 0x25, 0x10, @void}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mlockall(0x1) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0xfe, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x2, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x10, "f79eb4cf48b5a5788fc15a45b5b1"}, {0x0, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r5, r6, 0x93, 0x8, 0x9, 0x80, {0x8, 0x0, 0x3, 0x4, 0x4, 0x5, 0xe, 0x3, 0x6, 0x3a, 0x4, 0x7, 0x5, 0xff, "e277757ff8f6376a2bea41916e6b67ed3b8680c42ded88c143ad5fd3d8c7ff15"}}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r2, &(0x7f00000000c0)=0x58, 0x9) 448.336649ms ago: executing program 2 (id=199): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r0, r0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r3, 0x100000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 220.689873ms ago: executing program 2 (id=200): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3, 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)={0x200, 0x9}) 29.778079ms ago: executing program 1 (id=201): socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000), 0x10) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 3 (id=202): socket$inet6(0x10, 0xa, 0xe5be) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x15, 0x6, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2002, 0x5, 0x3}) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0xda2, 0x8166, 0x6}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r6], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 64.706804][ T5825] cgroup: Unknown subsys name 'net' [ 64.837209][ T5825] cgroup: Unknown subsys name 'cpuset' [ 64.846287][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.256602][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.713938][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.724284][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.732131][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.742687][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.747711][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.755400][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.764421][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.769148][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.779397][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.779812][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.797095][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.804578][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.817195][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.824651][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.831878][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.844509][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.861336][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.869270][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.876759][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.885601][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.895829][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.898492][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.904095][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.910853][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.925717][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.420680][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 69.563026][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 69.680451][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.688770][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.696589][ T5851] bridge_slave_0: entered allmulticast mode [ 69.704755][ T5851] bridge_slave_0: entered promiscuous mode [ 69.718762][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.726759][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.734402][ T5851] bridge_slave_1: entered allmulticast mode [ 69.741392][ T5851] bridge_slave_1: entered promiscuous mode [ 69.816511][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 69.870070][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 69.883229][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.903160][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.934296][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 70.061809][ T5851] team0: Port device team_slave_0 added [ 70.068580][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.077087][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.084942][ T5857] bridge_slave_0: entered allmulticast mode [ 70.091915][ T5857] bridge_slave_0: entered promiscuous mode [ 70.138135][ T5851] team0: Port device team_slave_1 added [ 70.157642][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.165291][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.172416][ T5857] bridge_slave_1: entered allmulticast mode [ 70.179563][ T5857] bridge_slave_1: entered promiscuous mode [ 70.269291][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.276443][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.302580][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.316450][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.323699][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.349798][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.425400][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.437793][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.447238][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.454566][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.462043][ T5852] bridge_slave_0: entered allmulticast mode [ 70.469345][ T5852] bridge_slave_0: entered promiscuous mode [ 70.528135][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.536297][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.543991][ T5852] bridge_slave_1: entered allmulticast mode [ 70.550950][ T5852] bridge_slave_1: entered promiscuous mode [ 70.571348][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.578587][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.586571][ T5853] bridge_slave_0: entered allmulticast mode [ 70.593785][ T5853] bridge_slave_0: entered promiscuous mode [ 70.601268][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.608841][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.616199][ T5856] bridge_slave_0: entered allmulticast mode [ 70.623222][ T5856] bridge_slave_0: entered promiscuous mode [ 70.657065][ T5857] team0: Port device team_slave_0 added [ 70.682170][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.691515][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.700672][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.708032][ T5853] bridge_slave_1: entered allmulticast mode [ 70.716124][ T5853] bridge_slave_1: entered promiscuous mode [ 70.722669][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.730117][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.737842][ T5856] bridge_slave_1: entered allmulticast mode [ 70.744819][ T5856] bridge_slave_1: entered promiscuous mode [ 70.757843][ T5851] hsr_slave_0: entered promiscuous mode [ 70.764254][ T5851] hsr_slave_1: entered promiscuous mode [ 70.772733][ T5857] team0: Port device team_slave_1 added [ 70.780831][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.871934][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.884199][ T5842] Bluetooth: hci1: command tx timeout [ 70.928417][ T5852] team0: Port device team_slave_0 added [ 70.936399][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.953669][ T5842] Bluetooth: hci0: command tx timeout [ 70.962057][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.971324][ T5842] Bluetooth: hci2: command tx timeout [ 70.986021][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.992979][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.019455][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.032285][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.039327][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.045217][ T5843] Bluetooth: hci3: command tx timeout [ 71.065417][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.068108][ T5852] team0: Port device team_slave_1 added [ 71.070924][ T5842] Bluetooth: hci4: command tx timeout [ 71.110636][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.163753][ T5853] team0: Port device team_slave_0 added [ 71.170461][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.177891][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.204290][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.239119][ T5853] team0: Port device team_slave_1 added [ 71.245676][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.252611][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.279070][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.292769][ T5856] team0: Port device team_slave_0 added [ 71.332444][ T5856] team0: Port device team_slave_1 added [ 71.362670][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.369734][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.391435][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.398873][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.425142][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.465071][ T5857] hsr_slave_0: entered promiscuous mode [ 71.471544][ T5857] hsr_slave_1: entered promiscuous mode [ 71.478142][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.485951][ T5857] Cannot create hsr debugfs directory [ 71.508149][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.515578][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.541937][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.596398][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.603352][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.629649][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.677217][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.684590][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.710520][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.745692][ T5852] hsr_slave_0: entered promiscuous mode [ 71.751893][ T5852] hsr_slave_1: entered promiscuous mode [ 71.758273][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.765889][ T5852] Cannot create hsr debugfs directory [ 71.809574][ T5853] hsr_slave_0: entered promiscuous mode [ 71.816537][ T5853] hsr_slave_1: entered promiscuous mode [ 71.822531][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.830145][ T5853] Cannot create hsr debugfs directory [ 72.034115][ T5856] hsr_slave_0: entered promiscuous mode [ 72.040360][ T5856] hsr_slave_1: entered promiscuous mode [ 72.047579][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.055273][ T5856] Cannot create hsr debugfs directory [ 72.264742][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.279152][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.301518][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.336086][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.425351][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.454976][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.465714][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.486666][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.558143][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.569824][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.580956][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.608799][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.719836][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.732837][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.766750][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.778821][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.831498][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.879498][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.901375][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.913888][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.931488][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.946434][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.954488][ T5842] Bluetooth: hci1: command tx timeout [ 72.982002][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.989269][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.030931][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.034768][ T5843] Bluetooth: hci0: command tx timeout [ 73.038091][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.043514][ T5842] Bluetooth: hci2: command tx timeout [ 73.105341][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.114819][ T5843] Bluetooth: hci4: command tx timeout [ 73.120053][ T5842] Bluetooth: hci3: command tx timeout [ 73.139214][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.161469][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.190006][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.211499][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.218667][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.230449][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.237618][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.264425][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.271559][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.328188][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.335511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.400756][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.454938][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.511803][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.518928][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.531556][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.538673][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.550924][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.567119][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.648890][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.688276][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.727507][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.736687][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.763095][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.770348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.802828][ T5853] veth0_vlan: entered promiscuous mode [ 73.819900][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.827160][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.847702][ T5853] veth1_vlan: entered promiscuous mode [ 73.857785][ T5851] veth0_vlan: entered promiscuous mode [ 73.869274][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.906294][ T5851] veth1_vlan: entered promiscuous mode [ 73.999013][ T5851] veth0_macvtap: entered promiscuous mode [ 74.013045][ T5853] veth0_macvtap: entered promiscuous mode [ 74.040134][ T5853] veth1_macvtap: entered promiscuous mode [ 74.054223][ T5852] veth0_vlan: entered promiscuous mode [ 74.066080][ T5851] veth1_macvtap: entered promiscuous mode [ 74.089980][ T5852] veth1_vlan: entered promiscuous mode [ 74.106343][ T5857] veth0_vlan: entered promiscuous mode [ 74.145202][ T5857] veth1_vlan: entered promiscuous mode [ 74.160271][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.178255][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.190606][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.209588][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.218903][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.230652][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.240355][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.261410][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.273200][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.286142][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.310316][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.321375][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.334322][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.370445][ T5857] veth0_macvtap: entered promiscuous mode [ 74.386161][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.397766][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.407901][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.417096][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.443183][ T5857] veth1_macvtap: entered promiscuous mode [ 74.500902][ T5852] veth0_macvtap: entered promiscuous mode [ 74.529322][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.540692][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.551085][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.562405][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.575116][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.585688][ T5852] veth1_macvtap: entered promiscuous mode [ 74.601528][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.612237][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.622565][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.633085][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.645685][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.686385][ T5856] veth0_vlan: entered promiscuous mode [ 74.697929][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.708133][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.720103][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731817][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.741216][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750114][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.768288][ T5856] veth1_vlan: entered promiscuous mode [ 74.849833][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.858000][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.861232][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.879208][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.889155][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.899674][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.909583][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.920109][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.932154][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.961053][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.972626][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.983646][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.995378][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.006671][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.017579][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.027497][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.039141][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.044135][ T5842] Bluetooth: hci1: command tx timeout [ 75.062072][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.100067][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.110055][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.118980][ T5842] Bluetooth: hci2: command tx timeout [ 75.119021][ T5842] Bluetooth: hci0: command tx timeout [ 75.137173][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.146343][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.172140][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.188431][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.196983][ T5843] Bluetooth: hci4: command tx timeout [ 75.212186][ T5843] Bluetooth: hci3: command tx timeout [ 75.217826][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.221384][ T5856] veth0_macvtap: entered promiscuous mode [ 75.236035][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.236901][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.286747][ T5856] veth1_macvtap: entered promiscuous mode [ 75.402343][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.414935][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.428813][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.443970][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.468818][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.484481][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.494833][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.506375][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.511653][ T5901] fuse: Bad value for 'fd' [ 75.533572][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.553459][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576947][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.597302][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.617375][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.627614][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.641958][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.663496][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.676159][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.687359][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.704494][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.719335][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.745195][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.766902][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.779034][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.788015][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.884376][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.945874][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.172140][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.250214][ T5888] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 76.261560][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.271202][ T5888] usb 2-1: Product: syz [ 76.278348][ T5888] usb 2-1: Manufacturer: syz [ 76.287599][ T5888] usb 2-1: SerialNumber: syz [ 76.297654][ T5888] usb 2-1: config 0 descriptor?? [ 76.535779][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.813177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 76.822839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 77.114076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 77.115885][ T5843] Bluetooth: hci1: command tx timeout [ 77.194731][ T5843] Bluetooth: hci0: command tx timeout [ 77.200581][ T5843] Bluetooth: hci2: command tx timeout [ 77.273883][ T5843] Bluetooth: hci3: command tx timeout [ 77.279344][ T5843] Bluetooth: hci4: command tx timeout [ 77.359675][ T5888] usb 2-1: Firmware version (0.0) predates our first public release. [ 77.395842][ T5904] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 77.406120][ T5888] usb 2-1: Please update to version 0.2 or newer [ 77.458538][ T5904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 77.545816][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.708323][ T5888] usb 2-1: USB disconnect, device number 2 [ 78.004607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.020391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.177676][ T1139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.224961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.233709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.255226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.319272][ T1139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.344948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.355078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.588160][ T1139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.888279][ T1139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.336861][ T5961] process 'syz.4.11' launched './file2' with NULL argv: empty string added [ 79.446329][ T1139] bridge_slave_1: left allmulticast mode [ 79.468971][ T1139] bridge_slave_1: left promiscuous mode [ 79.502837][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.575573][ T1139] bridge_slave_0: left allmulticast mode [ 79.581261][ T1139] bridge_slave_0: left promiscuous mode [ 79.654113][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.954099][ T5839] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.968503][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.977069][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.984794][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.992873][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.003134][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.062123][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.083174][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.092394][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.106608][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.115346][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.129069][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 80.151188][ T5839] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 80.194626][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.223079][ T5839] usb 2-1: Product: syz [ 80.231820][ T5839] usb 2-1: Manufacturer: syz [ 80.232360][ T5986] fuse: Bad value for 'fd' [ 80.251753][ T5839] usb 2-1: SerialNumber: syz [ 80.290175][ T5839] usb 2-1: config 0 descriptor?? [ 80.312774][ T5988] mmap: syz.4.16 (5988) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.556362][ T5839] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 80.593232][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.620063][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.642028][ T1139] bond0 (unregistering): Released all slaves [ 80.979220][ T1139] hsr_slave_0: left promiscuous mode [ 80.994916][ T1139] hsr_slave_1: left promiscuous mode [ 81.001109][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.012013][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.020937][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.029364][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.050982][ T1139] veth1_macvtap: left promiscuous mode [ 81.058203][ T1139] veth0_macvtap: left promiscuous mode [ 81.066612][ T1139] veth1_vlan: left promiscuous mode [ 81.072067][ T1139] veth0_vlan: left promiscuous mode [ 81.687079][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 81.729648][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 82.075428][ T5843] Bluetooth: hci0: command tx timeout [ 82.153726][ T5843] Bluetooth: hci3: command tx timeout [ 82.417796][ T5839] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.430174][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 82.439478][ T5839] dvbdev: DVB: registering new adapter (Terratec H7) [ 82.459098][ T5839] usb 2-1: media controller created [ 82.517624][ T5918] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.668459][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 82.695968][ T5918] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.728565][ T5918] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.753324][ T5918] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.791780][ T5918] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 82.810252][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.812017][ T5918] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 82.818744][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.849742][ T5981] bridge_slave_0: entered allmulticast mode [ 82.858627][ T5981] bridge_slave_0: entered promiscuous mode [ 82.865999][ T5918] usb 4-1: Manufacturer: syz [ 82.878169][ T5918] usb 4-1: SerialNumber: syz [ 82.899474][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.908571][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.916444][ T5981] bridge_slave_1: entered allmulticast mode [ 82.925668][ T5981] bridge_slave_1: entered promiscuous mode [ 83.116486][ T5918] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 83.146271][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.163266][ T5918] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input6 [ 83.170774][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.181603][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.183534][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.194779][ T5982] bridge_slave_0: entered allmulticast mode [ 83.198457][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.207132][ T5982] bridge_slave_0: entered promiscuous mode [ 83.209793][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.223326][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.230771][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.238992][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.253487][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.261956][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 83.268767][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 83.289883][ T5918] usb 4-1: USB disconnect, device number 2 [ 83.297847][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.311863][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.322902][ T5982] bridge_slave_1: entered allmulticast mode [ 83.339977][ T5982] bridge_slave_1: entered promiscuous mode [ 83.377923][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.497749][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.586420][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.627449][ T5981] team0: Port device team_slave_0 added [ 83.707520][ T5981] team0: Port device team_slave_1 added [ 83.808245][ T5982] team0: Port device team_slave_0 added [ 83.937658][ T5982] team0: Port device team_slave_1 added [ 83.973283][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.988462][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.019612][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.074683][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.081689][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.089749][ T6060] fuse: Bad value for 'fd' [ 84.119758][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.159383][ T5843] Bluetooth: hci0: command tx timeout [ 84.171295][ T5839] usb read operation failed. (-71) [ 84.198169][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.205337][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.208705][ T5839] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 84.232664][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.253288][ T5843] Bluetooth: hci3: command tx timeout [ 84.358354][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.381007][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.393824][ T5839] usb 2-1: USB disconnect, device number 3 [ 84.468393][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.474237][ T6070] fuse: Bad value for 'fd' [ 84.709480][ T5981] hsr_slave_0: entered promiscuous mode [ 84.722606][ T5981] hsr_slave_1: entered promiscuous mode [ 84.730050][ T5981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.737938][ T5981] Cannot create hsr debugfs directory [ 85.018798][ T5982] hsr_slave_0: entered promiscuous mode [ 85.026867][ T5982] hsr_slave_1: entered promiscuous mode [ 85.033307][ T5982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.042813][ T5982] Cannot create hsr debugfs directory [ 85.666896][ T6105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35'. [ 85.690245][ T6105] fuse: Bad value for 'fd' [ 85.702963][ T6105] binfmt_misc: register: failed to install interpreter file ./file1 [ 86.236022][ T5843] Bluetooth: hci0: command tx timeout [ 86.263657][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.314491][ T5843] Bluetooth: hci3: command tx timeout [ 86.411555][ T5982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.445323][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.460650][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.471060][ T5891] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 86.481174][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.494108][ T5891] usb 5-1: Product: syz [ 86.502883][ T5982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.503467][ T5891] usb 5-1: Manufacturer: syz [ 86.525881][ T5891] usb 5-1: SerialNumber: syz [ 86.554354][ T5891] usb 5-1: config 0 descriptor?? [ 86.565534][ T5891] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 86.580068][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.604946][ T5982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.615932][ T5891] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 86.633720][ T5891] usb 5-1: media controller created [ 86.680075][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.735127][ T24] cfg80211: failed to load regulatory.db [ 86.753076][ T5982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.838527][ T5891] DVB: Unable to find symbol tda10046_attach() [ 86.863467][ T5891] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 86.872111][ T5891] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 87.126162][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.143325][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.182955][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.210143][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 87.227327][ T6138] FAULT_INJECTION: forcing a failure. [ 87.227327][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.243562][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.1.48 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 87.243584][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.243598][ T6138] Call Trace: [ 87.243605][ T6138] [ 87.243611][ T6138] dump_stack_lvl+0x241/0x360 [ 87.243651][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.243673][ T6138] ? __pfx__printk+0x10/0x10 [ 87.243706][ T6138] should_fail_ex+0x424/0x570 [ 87.243728][ T6138] _copy_from_iter+0x211/0x1c70 [ 87.243755][ T6138] ? __build_skb_around+0x247/0x3d0 [ 87.243780][ T6138] ? __alloc_skb+0x298/0x480 [ 87.243795][ T6138] ? __pfx__copy_from_iter+0x10/0x10 [ 87.243818][ T6138] ? __pfx___alloc_skb+0x10/0x10 [ 87.243834][ T6138] ? skb_put+0x114/0x1f0 [ 87.243855][ T6138] netlink_sendmsg+0x73c/0xcd0 [ 87.243890][ T6138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.243916][ T6138] ? __import_iovec+0x585/0x830 [ 87.243936][ T6138] ? aa_sock_msg_perm+0x91/0x160 [ 87.243964][ T6138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.243983][ T6138] __sock_sendmsg+0x221/0x270 [ 87.244008][ T6138] ____sys_sendmsg+0x523/0x860 [ 87.244032][ T6138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.244063][ T6138] __sys_sendmsg+0x271/0x360 [ 87.244081][ T6138] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.244140][ T6138] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 87.244158][ T6138] ? lockdep_hardirqs_on+0x9d/0x150 [ 87.244180][ T6138] __do_fast_syscall_32+0xb4/0x110 [ 87.244200][ T6138] ? exc_page_fault+0x5f8/0x920 [ 87.244224][ T6138] do_fast_syscall_32+0x34/0x80 [ 87.244244][ T6138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.244269][ T6138] RIP: 0023:0xf70ed579 [ 87.244286][ T6138] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 87.244299][ T6138] RSP: 002b:00000000f50bc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 87.244316][ T6138] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000180 [ 87.244327][ T6138] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.244337][ T6138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.244346][ T6138] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.244356][ T6138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.244381][ T6138] [ 87.498608][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.519176][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.553725][ T5839] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.733664][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 87.744503][ T5839] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 87.754450][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.762069][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.779525][ T5839] usb 4-1: Product: syz [ 87.787237][ T5839] usb 4-1: Manufacturer: syz [ 87.792525][ T5839] usb 4-1: SerialNumber: syz [ 87.827347][ T5839] usb 4-1: config 0 descriptor?? [ 87.923510][ T24] usb 2-1: device descriptor read/64, error -71 [ 88.056196][ T5839] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 88.070208][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.139013][ T5981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.174091][ T5981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.188449][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.200491][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.223063][ T5981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.261312][ T5981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.308896][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.316490][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.323625][ T5843] Bluetooth: hci0: command tx timeout [ 88.335605][ T24] usb 2-1: device descriptor read/64, error -71 [ 88.358587][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.365750][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.393656][ T5843] Bluetooth: hci3: command tx timeout [ 88.401621][ T5891] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 88.447607][ T5891] usb 5-1: USB disconnect, device number 2 [ 88.463893][ T24] usb usb2-port1: attempt power cycle [ 88.851020][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.943633][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.031573][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.041187][ T24] usb 2-1: device descriptor read/8, error -71 [ 89.078451][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.300004][ T5982] veth0_vlan: entered promiscuous mode [ 89.357429][ T5982] veth1_vlan: entered promiscuous mode [ 89.373605][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.401924][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.409097][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.434397][ T24] usb 2-1: device descriptor read/8, error -71 [ 89.453791][ T5888] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.532867][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.540098][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.623797][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 89.631098][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.642234][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.644119][ T24] usb usb2-port1: unable to enumerate USB device [ 89.658926][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.669317][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.714705][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.725113][ T5982] veth0_macvtap: entered promiscuous mode [ 89.734942][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.749508][ T5982] veth1_macvtap: entered promiscuous mode [ 89.794507][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.805639][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.816946][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.827855][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.840752][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.851354][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.861787][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.872493][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.887766][ T5839] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.890714][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.899425][ T5839] dvbdev: DVB: registering new adapter (Terratec H7) [ 89.922784][ T5839] usb 4-1: media controller created [ 89.931882][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.942506][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.954968][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.966731][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.972336][ T5888] usb 5-1: usb_control_msg returned -32 [ 89.976674][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.976692][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.976703][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.976715][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.978491][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.995008][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 90.020724][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.069488][ T5982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.083148][ T5982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.093833][ T5982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.102596][ T5982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.308942][ T5981] veth0_vlan: entered promiscuous mode [ 90.337104][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.350942][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.360703][ T5981] veth1_vlan: entered promiscuous mode [ 90.422179][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.437876][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.458589][ T5981] veth0_macvtap: entered promiscuous mode [ 90.496049][ T5981] veth1_macvtap: entered promiscuous mode [ 90.512840][ T6178] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 90.561684][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.613117][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.630896][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.661435][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.672286][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.688200][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.700510][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.702564][ T6183] fuse: Bad value for 'fd' [ 90.716039][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.734615][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.750601][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.767386][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.773830][ T10] usb 5-1: USB disconnect, device number 3 [ 90.810073][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.836853][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.866856][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.878232][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.888512][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.899441][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.909695][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.920626][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.936622][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.947437][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.959802][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.991784][ T5981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.012009][ T5981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.034115][ T5981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.054060][ T5981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.265797][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.290208][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.397065][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.417084][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.843721][ T5888] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.245734][ T5839] usb read operation failed. (-71) [ 92.302280][ T5839] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 92.435168][ T5839] usb 4-1: USB disconnect, device number 3 [ 92.543531][ T5893] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.790883][ T5893] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 92.800551][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.833514][ T5893] usb 3-1: Product: syz [ 92.837713][ T5893] usb 3-1: Manufacturer: syz [ 92.890117][ T5893] usb 3-1: SerialNumber: syz [ 92.916513][ T5893] usb 3-1: config 0 descriptor?? [ 93.003983][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.012736][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.520203][ T6237] netlink: 'syz.1.55': attribute type 29 has an invalid length. [ 93.588637][ T6238] netlink: 'syz.1.55': attribute type 29 has an invalid length. [ 93.642232][ T6237] netlink: 600 bytes leftover after parsing attributes in process `syz.1.55'. [ 93.691977][ T6237] unsupported nla_type 58 [ 93.736283][ T6237] kvm: user requested TSC rate below hardware speed [ 94.174466][ T5918] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.324695][ T6259] FAULT_INJECTION: forcing a failure. [ 94.324695][ T6259] name failslab, interval 1, probability 0, space 0, times 1 [ 94.340437][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.1.63 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 94.340459][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.340469][ T6259] Call Trace: [ 94.340475][ T6259] [ 94.340482][ T6259] dump_stack_lvl+0x241/0x360 [ 94.340516][ T6259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.340537][ T6259] ? __pfx__printk+0x10/0x10 [ 94.340562][ T6259] ? __pfx___might_resched+0x10/0x10 [ 94.340587][ T6259] should_fail_ex+0x424/0x570 [ 94.340610][ T6259] should_failslab+0xac/0x100 [ 94.340635][ T6259] __kmalloc_noprof+0xdf/0x4d0 [ 94.340656][ T6259] ? fib6_get_table+0x253/0x270 [ 94.340675][ T6259] ? fib6_info_alloc+0x2e/0xf0 [ 94.340698][ T6259] fib6_info_alloc+0x2e/0xf0 [ 94.340715][ T6259] ip6_route_info_create+0x445/0x12c0 [ 94.340747][ T6259] ip6_route_add+0x28/0x160 [ 94.340766][ T6259] inet6_addr_add+0x854/0xee0 [ 94.340788][ T6259] ? __pfx_inet6_addr_add+0x10/0x10 [ 94.340834][ T6259] addrconf_add_ifaddr+0x364/0x590 [ 94.340859][ T6259] ? __pfx_addrconf_add_ifaddr+0x10/0x10 [ 94.340901][ T6259] inet6_ioctl+0x148/0x280 [ 94.340922][ T6259] ? __pfx_inet6_ioctl+0x10/0x10 [ 94.340938][ T6259] ? lockdep_hardirqs_on+0x9d/0x150 [ 94.340967][ T6259] ? tomoyo_path_number_perm+0x215/0x790 [ 94.340996][ T6259] sock_do_ioctl+0x15a/0x490 [ 94.341022][ T6259] ? __pfx_sock_do_ioctl+0x10/0x10 [ 94.341060][ T6259] compat_sock_ioctl+0xc7c/0xf50 [ 94.341086][ T6259] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 94.341111][ T6259] ? __fget_files+0x2a/0x420 [ 94.341135][ T6259] ? __fget_files+0x2a/0x420 [ 94.341152][ T6259] ? __fget_files+0x2a/0x420 [ 94.341177][ T6259] __se_compat_sys_ioctl+0x50e/0xc30 [ 94.341200][ T6259] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 94.341220][ T6259] ? __fget_files+0x2a/0x420 [ 94.341240][ T6259] ? fput+0x9b/0xd0 [ 94.341255][ T6259] ? ksys_write+0x275/0x2d0 [ 94.341283][ T6259] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 94.341302][ T6259] ? lockdep_hardirqs_on+0x9d/0x150 [ 94.341324][ T6259] __do_fast_syscall_32+0xb4/0x110 [ 94.341343][ T6259] ? exc_page_fault+0x5f8/0x920 [ 94.341366][ T6259] do_fast_syscall_32+0x34/0x80 [ 94.341385][ T6259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.341404][ T6259] RIP: 0023:0xf70ed579 [ 94.341419][ T6259] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 94.341431][ T6259] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 94.341449][ T6259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008916 [ 94.341460][ T6259] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.341469][ T6259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.341478][ T6259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 94.341487][ T6259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.341513][ T6259] [ 94.689497][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 94.703369][ T5893] usb 3-1: Firmware version (0.0) predates our first public release. [ 94.711544][ T5893] usb 3-1: Please update to version 0.2 or newer [ 94.726595][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.736500][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.750585][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.760669][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.773677][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.782714][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.834173][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.974240][ T5888] usb 5-1: device descriptor read/64, error -71 [ 95.003734][ T5891] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.039516][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 95.072945][ T5918] usb 4-1: usb_control_msg returned -32 [ 95.078689][ T5918] usbtmc 4-1:16.0: can't read capabilities [ 95.165669][ T5891] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 95.175221][ T5891] usb 2-1: config 0 has no interface number 0 [ 95.182071][ T5891] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.203441][ T5891] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.214021][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.222270][ T5891] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 95.232427][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.244724][ T5891] usb 2-1: config 0 descriptor?? [ 95.364399][ T5888] usb 5-1: device descriptor read/64, error -71 [ 95.413479][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.441872][ T6249] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 95.485756][ T5888] usb usb5-port1: attempt power cycle [ 95.574474][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 95.582496][ T5918] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.591745][ T5918] usb 1-1: config 0 has no interface number 0 [ 95.598787][ T5918] usb 1-1: config 0 interface 184 has no altsetting 0 [ 95.608378][ T5918] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.617667][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.625721][ T5918] usb 1-1: Product: syz [ 95.629912][ T5918] usb 1-1: Manufacturer: syz [ 95.634582][ T5918] usb 1-1: SerialNumber: syz [ 95.643308][ T5918] usb 1-1: config 0 descriptor?? [ 95.650030][ T9] usb 4-1: USB disconnect, device number 4 [ 95.658566][ T5918] smsc75xx v1.0.0 [ 95.688190][ T5891] uclogic 0003:28BD:0905.0001: Interface probing failed: -22 [ 95.712158][ T5891] uclogic 0003:28BD:0905.0001: interface is invalid, ignoring [ 95.821272][ T5889] usb 3-1: USB disconnect, device number 2 [ 95.864221][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.905763][ T5888] usb 5-1: device descriptor read/8, error -71 [ 96.173732][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.226819][ T5888] usb 5-1: device descriptor read/8, error -71 [ 96.272912][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 96.339387][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.379027][ T5888] usb usb5-port1: unable to enumerate USB device [ 96.522841][ T5891] usb 2-1: USB disconnect, device number 8 [ 96.560366][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 96.572130][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 96.598224][ T5918] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 96.616702][ T5918] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 98.045687][ T5891] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 98.233699][ T5891] usb 5-1: device descriptor read/64, error -71 [ 98.240344][ T5888] usb 1-1: USB disconnect, device number 3 [ 98.473836][ T5891] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 98.663552][ T5891] usb 5-1: device descriptor read/64, error -71 [ 98.793766][ T5891] usb usb5-port1: attempt power cycle [ 99.154464][ T5891] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 99.255952][ T5891] usb 5-1: device descriptor read/8, error -71 [ 99.323894][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.574234][ T5891] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 99.693448][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 99.700766][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.710924][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.724718][ T5891] usb 5-1: device descriptor read/8, error -71 [ 99.735633][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.773444][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.813603][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.023311][ T5891] usb usb5-port1: unable to enumerate USB device [ 100.030283][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.315022][ T9] usb 3-1: usb_control_msg returned -32 [ 100.320730][ T9] usbtmc 3-1:16.0: can't read capabilities [ 100.405484][ T6347] FAULT_INJECTION: forcing a failure. [ 100.405484][ T6347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.447515][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.3.91 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 100.447539][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.447548][ T6347] Call Trace: [ 100.447555][ T6347] [ 100.447562][ T6347] dump_stack_lvl+0x241/0x360 [ 100.447593][ T6347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.447615][ T6347] ? __pfx__printk+0x10/0x10 [ 100.447648][ T6347] should_fail_ex+0x424/0x570 [ 100.447669][ T6347] _copy_from_user+0x2d/0xb0 [ 100.447693][ T6347] video_usercopy+0x3bf/0x1330 [ 100.447719][ T6347] ? __pfx___video_do_ioctl+0x10/0x10 [ 100.447735][ T6347] ? __pfx_video_usercopy+0x10/0x10 [ 100.447775][ T6347] ? __fget_files+0x2a/0x420 [ 100.447793][ T6347] v4l2_ioctl+0x189/0x1e0 [ 100.447821][ T6347] v4l2_compat_ioctl32+0x1d7/0x260 [ 100.447825][ T6349] FAULT_INJECTION: forcing a failure. [ 100.447825][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 100.447847][ T6347] __se_compat_sys_ioctl+0x50e/0xc30 [ 100.447869][ T6347] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 100.447889][ T6347] ? __fget_files+0x2a/0x420 [ 100.447907][ T6347] ? fput+0x9b/0xd0 [ 100.447922][ T6347] ? ksys_write+0x275/0x2d0 [ 100.447945][ T6347] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 100.447961][ T6347] ? lockdep_hardirqs_on+0x9d/0x150 [ 100.447979][ T6347] __do_fast_syscall_32+0xb4/0x110 [ 100.447996][ T6347] ? exc_page_fault+0x5f8/0x920 [ 100.448014][ T6347] do_fast_syscall_32+0x34/0x80 [ 100.448031][ T6347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.448049][ T6347] RIP: 0023:0xf7f34579 [ 100.448064][ T6347] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 100.448076][ T6347] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 100.448093][ T6347] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c008561c [ 100.448104][ T6347] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.448113][ T6347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.448122][ T6347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.448130][ T6347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.448154][ T6347] [ 100.676850][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.1.90 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 100.676873][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.676883][ T6349] Call Trace: [ 100.676889][ T6349] [ 100.676896][ T6349] dump_stack_lvl+0x241/0x360 [ 100.676928][ T6349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.676951][ T6349] ? __pfx__printk+0x10/0x10 [ 100.676978][ T6349] ? __pfx___might_resched+0x10/0x10 [ 100.677004][ T6349] should_fail_ex+0x424/0x570 [ 100.677026][ T6349] should_failslab+0xac/0x100 [ 100.677051][ T6349] __kmalloc_noprof+0xdf/0x4d0 [ 100.677071][ T6349] ? splice_from_pipe_next+0x616/0x670 [ 100.677091][ T6349] ? kernfs_fop_write_iter+0x15a/0x510 [ 100.677117][ T6349] kernfs_fop_write_iter+0x15a/0x510 [ 100.677145][ T6349] iter_file_splice_write+0xbdf/0x1530 [ 100.677193][ T6349] ? __pfx_iter_file_splice_write+0x10/0x10 [ 100.677228][ T6349] ? rcu_read_lock_any_held+0xbb/0x160 [ 100.677263][ T6349] ? __pfx_iter_file_splice_write+0x10/0x10 [ 100.677286][ T6349] direct_splice_actor+0x11b/0x220 [ 100.677312][ T6349] splice_direct_to_actor+0x595/0xc90 [ 100.677370][ T6349] ? __pfx_direct_splice_actor+0x10/0x10 [ 100.677393][ T6349] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 100.677426][ T6349] do_splice_direct+0x281/0x3d0 [ 100.677454][ T6349] ? __pfx_do_splice_direct+0x10/0x10 [ 100.677484][ T6349] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 100.677514][ T6349] ? rw_verify_area+0x246/0x630 [ 100.677536][ T6349] do_sendfile+0x582/0x8c0 [ 100.677569][ T6349] ? __pfx_do_sendfile+0x10/0x10 [ 100.677593][ T6349] ? __fget_files+0x2a/0x420 [ 100.677617][ T6349] __se_compat_sys_sendfile+0x196/0x200 [ 100.677643][ T6349] ? __pfx___se_compat_sys_sendfile+0x10/0x10 [ 100.677670][ T6349] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 100.677689][ T6349] ? lockdep_hardirqs_on+0x9d/0x150 [ 100.677711][ T6349] __do_fast_syscall_32+0xb4/0x110 [ 100.677730][ T6349] ? exc_page_fault+0x5f8/0x920 [ 100.677754][ T6349] do_fast_syscall_32+0x34/0x80 [ 100.677775][ T6349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.677793][ T6349] RIP: 0023:0xf70ed579 [ 100.677808][ T6349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 100.677819][ T6349] RSP: 002b:00000000f50dd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 100.677836][ T6349] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 100.677852][ T6349] RDX: 0000000000000000 RSI: 00000000000052c0 RDI: 0000000000000000 [ 100.677861][ T6349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.677870][ T6349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.677879][ T6349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.677903][ T6349] [ 100.960224][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 101.045066][ T6323] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 101.093515][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.115180][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 101.125241][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.152297][ T9] usb 4-1: config 0 has no interface number 0 [ 101.162222][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 101.174310][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.182325][ T9] usb 4-1: Product: syz [ 101.186742][ T9] usb 4-1: Manufacturer: syz [ 101.191565][ T9] usb 4-1: SerialNumber: syz [ 101.207546][ T9] usb 4-1: config 0 descriptor?? [ 101.220609][ T9] hub 4-1:0.31: bad descriptor, ignoring hub [ 101.226833][ T9] hub 4-1:0.31: probe with driver hub failed with error -5 [ 101.250836][ T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 101.268896][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.285328][ T9] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 101.290443][ T5889] usb 3-1: USB disconnect, device number 3 [ 101.294291][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.333954][ T9] usb 4-1: Failed to create links for entity 6 [ 101.350830][ T9] usb 4-1: Failed to register entities (-22). [ 101.381677][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.417031][ T5891] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.444413][ T9] usb 4-1: USB disconnect, device number 5 [ 101.476915][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.500984][ T5891] usb 1-1: config 0 descriptor?? [ 101.735162][ T5891] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 101.747957][ T5891] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 101.785341][ T5891] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.812376][ T5891] usb 1-1: USB disconnect, device number 4 [ 101.823977][ T5918] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 101.998026][ T5918] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 102.006304][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.020675][ T5918] usb 5-1: config 0 has no interface number 0 [ 102.032663][ T5918] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 102.070943][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.195596][ T5918] usb 5-1: Product: syz [ 102.200865][ T5918] usb 5-1: Manufacturer: syz [ 102.207395][ T5918] usb 5-1: SerialNumber: syz [ 102.216607][ T5918] usb 5-1: config 0 descriptor?? [ 102.228207][ T5918] hub 5-1:0.31: bad descriptor, ignoring hub [ 102.248938][ T5918] hub 5-1:0.31: probe with driver hub failed with error -5 [ 102.290290][ T5918] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 102.386913][ T5918] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 102.449638][ T6366] loop2: detected capacity change from 0 to 7 [ 102.460001][ T6366] Dev loop2: unable to read RDB block 7 [ 102.472991][ T5918] usb 5-1: Failed to create links for entity 6 [ 102.482992][ T6366] loop2: unable to read partition table [ 102.498329][ T5918] usb 5-1: Failed to register entities (-22). [ 102.521203][ T6366] loop2: partition table beyond EOD, truncated [ 102.553473][ T6366] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 102.688323][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.788669][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.802228][ T5213] Dev loop2: unable to read RDB block 7 [ 102.818683][ T5213] loop2: unable to read partition table [ 102.825653][ T6387] bridge_slave_0: left allmulticast mode [ 102.828549][ T6366] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3939452899 (63031246384 ns) > initial count (46017005824 ns). Using initial count to start timer. [ 102.831581][ T5213] loop2: partition table beyond EOD, [ 102.852143][ T6387] bridge_slave_0: left promiscuous mode [ 102.879770][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.893153][ T5213] truncated [ 102.975618][ T6387] bridge_slave_1: left allmulticast mode [ 103.023724][ T5891] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 103.063723][ T9] usb 5-1: USB disconnect, device number 12 [ 103.090139][ T6387] bridge_slave_1: left promiscuous mode [ 103.104728][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.196429][ T5891] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 103.206995][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.230202][ T6387] bond0: (slave bond_slave_0): Releasing backup interface [ 103.273441][ T5891] usb 3-1: config 0 has no interface number 0 [ 103.286135][ T6387] bond0: (slave bond_slave_1): Releasing backup interface [ 103.337406][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 103.365187][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.391918][ T5891] usb 3-1: Product: syz [ 103.401811][ T5891] usb 3-1: Manufacturer: syz [ 103.410986][ T5891] usb 3-1: SerialNumber: syz [ 103.412791][ T6387] team0: Port device team_slave_0 removed [ 103.431132][ T5891] usb 3-1: config 0 descriptor?? [ 103.450801][ T5891] hub 3-1:0.31: bad descriptor, ignoring hub [ 103.466140][ T6387] team0: Port device team_slave_1 removed [ 103.468041][ T5891] hub 3-1:0.31: probe with driver hub failed with error -5 [ 103.497288][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.510015][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.531480][ T5891] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 103.540134][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.547927][ T5891] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 103.576298][ T5891] usb 3-1: Failed to create links for entity 6 [ 103.577475][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.582602][ T5891] usb 3-1: Failed to register entities (-22). [ 103.619692][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.628829][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.834305][ T5918] usb 3-1: USB disconnect, device number 4 [ 104.183510][ T5891] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.350063][ T5891] usb 1-1: config index 0 descriptor too short (expected 671, got 77) [ 104.372048][ T5891] usb 1-1: config 110 has too many interfaces: 194, using maximum allowed: 32 [ 104.553471][ T5891] usb 1-1: config 110 has an invalid descriptor of length 183, skipping remainder of the config [ 104.610227][ T5891] usb 1-1: config 110 has 0 interfaces, different from the descriptor's value: 194 [ 104.668287][ T5891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.678492][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.729381][ T5891] usb 1-1: Product: syz [ 104.764097][ T5891] usb 1-1: Manufacturer: syz [ 104.768744][ T5891] usb 1-1: SerialNumber: syz [ 105.027996][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.038597][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.220443][ T6428] batadv0: entered promiscuous mode [ 105.237739][ T6424] batadv0: left promiscuous mode [ 105.238473][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 105.252510][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 105.499866][ T6431] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 105.506671][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 105.506683][ T6431] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 105.549688][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.121'. [ 105.610861][ T6431] vhci_hcd vhci_hcd.0: Device attached [ 105.792902][ T5839] vhci_hcd: vhci_device speed not set [ 105.873696][ T5839] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 106.043894][ T5918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.063500][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.111805][ T5918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.173645][ T5918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.266299][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.316047][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.334407][ T5918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.372721][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.458219][ T5889] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.483526][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.499943][ T5889] usb 3-1: config 0 descriptor?? [ 106.505326][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.604583][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.670093][ T5918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.754695][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.823912][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.906686][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.107191][ T5889] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 107.137396][ T6462] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 107.179916][ T5889] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 107.181508][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 107.304770][ T5889] usb 3-1: USB disconnect, device number 5 [ 107.312358][ T6432] vhci_hcd: connection reset by peer [ 107.337179][ T5891] usb 1-1: USB disconnect, device number 5 [ 107.344009][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 107.385536][ T36] vhci_hcd: stop threads [ 107.407884][ T36] vhci_hcd: release socket [ 107.425041][ T36] vhci_hcd: disconnect device [ 107.546970][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 107.805779][ T5918] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.822380][ T6433] syz.2.121 (6433) used greatest stack depth: 19352 bytes left [ 107.934110][ T5891] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 107.963810][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 107.981607][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.010816][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.035316][ T5918] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.085658][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.117472][ T5918] usb 2-1: Product: syz [ 108.121688][ T5918] usb 2-1: Manufacturer: syz [ 108.142646][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 108.146650][ T5918] usb 2-1: SerialNumber: syz [ 108.179171][ T5891] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.200296][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.210145][ T5918] usb 2-1: config 0 descriptor?? [ 108.224214][ T5891] usb 5-1: Product: syz [ 108.229152][ T5918] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.233654][ T5891] usb 5-1: Manufacturer: syz [ 108.246643][ T5891] usb 5-1: SerialNumber: syz [ 108.262724][ T5918] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 108.269174][ T5891] usb 5-1: config 0 descriptor?? [ 108.579948][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 108.725829][ T6479] capability: warning: `syz.4.140' uses deprecated v2 capabilities in a way that may be insecure [ 108.742621][ T6499] Zero length message leads to an empty skb [ 108.781400][ T5891] usb 5-1: USB disconnect, device number 13 [ 108.822075][ T5918] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 108.854803][ T5918] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 109.293622][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.459969][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.471711][ T5918] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 109.482183][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 109.511132][ T9] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 109.514804][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 109.522695][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.537057][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 109.557397][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 109.590399][ T9] usb 1-1: config 0 descriptor?? [ 109.603999][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 110.042831][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 110.063496][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.071196][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 110.083671][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 110.170788][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 110.182145][ T9] usb 1-1: USB disconnect, device number 6 [ 110.220200][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 110.483720][ T6533] syz.2.163 (6533) used greatest stack depth: 18312 bytes left [ 110.491867][ T5918] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 110.564115][ T5918] usb 2-1: USB disconnect, device number 9 [ 111.048287][ T5839] vhci_hcd: vhci_device speed not set [ 111.225609][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 111.256330][ T6558] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0%NnyD (pid: 6558 comm: syz.1.174) [ 111.278715][ T6560] FAULT_INJECTION: forcing a failure. [ 111.278715][ T6560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.319920][ T6560] CPU: 1 UID: 0 PID: 6560 Comm: syz.0.175 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 111.319944][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.319954][ T6560] Call Trace: [ 111.319961][ T6560] [ 111.319967][ T6560] dump_stack_lvl+0x241/0x360 [ 111.319999][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.320022][ T6560] ? __pfx__printk+0x10/0x10 [ 111.320056][ T6560] should_fail_ex+0x424/0x570 [ 111.320079][ T6560] _copy_from_user+0x2d/0xb0 [ 111.320103][ T6560] memdup_user+0x5e/0xd0 [ 111.320124][ T6560] strndup_user+0x68/0xd0 [ 111.320145][ T6560] __se_sys_fsconfig+0x765/0xf40 [ 111.320173][ T6560] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 111.320189][ T6560] ? ksys_write+0x275/0x2d0 [ 111.320216][ T6560] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 111.320235][ T6560] ? lockdep_hardirqs_on+0x9d/0x150 [ 111.320252][ T6560] ? __ia32_sys_fsconfig+0x20/0xc0 [ 111.320273][ T6560] __do_fast_syscall_32+0xb4/0x110 [ 111.320292][ T6560] ? exc_page_fault+0x5f8/0x920 [ 111.320316][ T6560] do_fast_syscall_32+0x34/0x80 [ 111.320336][ T6560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.320355][ T6560] RIP: 0023:0xf70cd579 [ 111.320371][ T6560] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 111.320383][ T6560] RSP: 002b:00000000f50bd55c EFLAGS: 00000206 ORIG_RAX: 00000000000001af [ 111.320401][ T6560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 111.320411][ T6560] RDX: 0000000080000000 RSI: 0000000080000180 RDI: 0000000000000000 [ 111.320421][ T6560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.320430][ T6560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.320440][ T6560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.320472][ T6560] [ 111.511589][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.765107][ T30] audit: type=1800 audit(1744745461.187:2): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.174" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=12679 res=0 errno=0 [ 111.800563][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.831903][ T9] usb 5-1: config 0 has no interfaces? [ 111.844316][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 111.868341][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.880707][ T9] usb 5-1: Product: syz [ 111.890245][ T9] usb 5-1: Manufacturer: syz [ 111.908361][ T9] usb 5-1: SerialNumber: syz [ 111.926419][ T9] usb 5-1: config 0 descriptor?? [ 113.934126][ T5888] usb 5-1: USB disconnect, device number 14 [ 114.037302][ T6594] FAULT_INJECTION: forcing a failure. [ 114.037302][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.112722][ T6594] CPU: 0 UID: 0 PID: 6594 Comm: syz.4.184 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 114.112746][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.112756][ T6594] Call Trace: [ 114.112762][ T6594] [ 114.112770][ T6594] dump_stack_lvl+0x241/0x360 [ 114.112799][ T6594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.112821][ T6594] ? __pfx__printk+0x10/0x10 [ 114.112853][ T6594] should_fail_ex+0x424/0x570 [ 114.112876][ T6594] _copy_to_user+0x31/0xb0 [ 114.112899][ T6594] move_addr_to_user+0x138/0x1f0 [ 114.112925][ T6594] ____sys_recvmsg+0x228/0x480 [ 114.112952][ T6594] ? __pfx_____sys_recvmsg+0x10/0x10 [ 114.112968][ T6594] ? get_compat_msghdr+0x45e/0x730 [ 114.113012][ T6594] do_recvmmsg+0x53e/0xab0 [ 114.113040][ T6594] ? __pfx_do_recvmmsg+0x10/0x10 [ 114.113078][ T6594] ? __lock_acquire+0xad5/0xd80 [ 114.113125][ T6594] ? get_old_timespec32+0x18d/0x280 [ 114.113155][ T6594] __sys_recvmmsg+0x140/0x280 [ 114.113185][ T6594] ? __pfx___sys_recvmmsg+0x10/0x10 [ 114.113201][ T6594] ? ksys_write+0x275/0x2d0 [ 114.113228][ T6594] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 114.113248][ T6594] __do_fast_syscall_32+0xb4/0x110 [ 114.113268][ T6594] ? exc_page_fault+0x5f8/0x920 [ 114.113291][ T6594] do_fast_syscall_32+0x34/0x80 [ 114.113311][ T6594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.113330][ T6594] RIP: 0023:0xf7f02579 [ 114.113345][ T6594] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 114.113358][ T6594] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 114.113378][ T6594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 114.113389][ T6594] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 114.113398][ T6594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.113407][ T6594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.113415][ T6594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.113438][ T6594] [ 114.883787][ T975] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.965113][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 115.076302][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 115.094835][ T975] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.123534][ T975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.160118][ T975] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.188752][ T975] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.243350][ T975] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.252504][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.303494][ T5891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 115.540876][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 115.571050][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.579822][ T975] usb 1-1: usb_control_msg returned -32 [ 115.592083][ T975] usbtmc 1-1:16.0: can't read capabilities [ 115.599448][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 115.627244][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 115.667828][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 115.692534][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.704731][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 115.721415][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 115.731719][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 115.741663][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 115.753395][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.787035][ T5891] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 115.806129][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.815833][ T5891] usb 5-1: Product: syz [ 115.820032][ T5891] usb 5-1: Manufacturer: syz [ 115.824737][ T5891] usb 5-1: SerialNumber: syz [ 115.839771][ T5891] usb 5-1: config 0 descriptor?? [ 115.855064][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.003740][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.075036][ T5891] usb 5-1: USB disconnect, device number 15 [ 116.388870][ T6642] netlink: 'syz.3.202': attribute type 16 has an invalid length. [ 116.397236][ T6642] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 116.409127][ T6642] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 116.417536][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.3.202 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 116.429408][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.439449][ T6642] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 116.445073][ T6642] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea fa 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 fa 3a f8 45 31 e4 48 83 7d 00 [ 116.464666][ T6642] RSP: 0018:ffffc9000397ee50 EFLAGS: 00010206 [ 116.470717][ T6642] RAX: 0000000000000055 RBX: ffff88805e690008 RCX: 0000000000080000 [ 116.478668][ T6642] RDX: ffffc9000d32a000 RSI: 0000000000003bea RDI: 0000000000003beb [ 116.486621][ T6642] RBP: 00000000000002a8 R08: ffffffff89f29319 R09: 1ffff9200072fdf6 [ 116.494573][ T6642] R10: dffffc0000000000 R11: fffff5200072fdf7 R12: ffff8880793b2080 [ 116.502527][ T6642] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805e690000 [ 116.510482][ T6642] FS: 0000000000000000(0000) GS:ffff888125093000(0063) knlGS:00000000f5056b40 [ 116.519392][ T6642] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 116.525962][ T6642] CR2: 00000000f5055fc0 CR3: 000000002339a000 CR4: 00000000003526f0 [ 116.533954][ T6642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.541908][ T6642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.549862][ T6642] Call Trace: [ 116.553127][ T6642] [ 116.556056][ T6642] rtnl_newlink_create+0x2f2/0xcb0 [ 116.561152][ T6642] ? __mutex_lock+0x380/0x10c0 [ 116.565916][ T6642] ? __pfx_aa_get_newest_label+0x10/0x10 [ 116.571536][ T6642] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 116.577148][ T6642] ? __pfx___mutex_lock+0x10/0x10 [ 116.582158][ T6642] ? ns_capable+0x8a/0xf0 [ 116.586472][ T6642] rtnl_newlink+0x18b0/0x1fe0 [ 116.591135][ T6642] ? stack_depot_save_flags+0x44/0x940 [ 116.596577][ T6642] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.601584][ T6642] ? __netlink_deliver_tap+0x561/0x7f0 [ 116.607027][ T6642] ? netlink_deliver_tap+0x19d/0x1b0 [ 116.612297][ T6642] ? netlink_unicast+0x7c6/0x9a0 [ 116.617220][ T6642] ? netlink_sendmsg+0x8c3/0xcd0 [ 116.622139][ T6642] ? __sock_sendmsg+0x221/0x270 [ 116.626972][ T6642] ? ____sys_sendmsg+0x523/0x860 [ 116.631893][ T6642] ? __sys_sendmsg+0x271/0x360 [ 116.636637][ T6642] ? __do_fast_syscall_32+0xb4/0x110 [ 116.641906][ T6642] ? do_fast_syscall_32+0x34/0x80 [ 116.646912][ T6642] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.653413][ T6642] ? kasan_quarantine_put+0xdc/0x230 [ 116.658696][ T6642] ? lockdep_hardirqs_on+0x9d/0x150 [ 116.663888][ T6642] ? nlmon_xmit+0xaf/0x100 [ 116.668301][ T6642] ? __local_bh_enable_ip+0x168/0x200 [ 116.673660][ T6642] ? lockdep_hardirqs_on+0x9d/0x150 [ 116.678847][ T6642] ? aa_get_newest_label+0x101/0x6f0 [ 116.684123][ T6642] ? __lock_acquire+0xad5/0xd80 [ 116.688967][ T6642] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.693984][ T6642] rtnetlink_rcv_msg+0x80f/0xd70 [ 116.698911][ T6642] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 116.704026][ T6642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.709478][ T6642] ? ref_tracker_free+0x63e/0x7e0 [ 116.714507][ T6642] netlink_rcv_skb+0x208/0x480 [ 116.719271][ T6642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.724823][ T6642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.730112][ T6642] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.735320][ T6642] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.740521][ T6642] netlink_unicast+0x7f8/0x9a0 [ 116.745282][ T6642] ? __pfx_netlink_unicast+0x10/0x10 [ 116.750561][ T6642] ? skb_put+0x114/0x1f0 [ 116.754797][ T6642] netlink_sendmsg+0x8c3/0xcd0 [ 116.759570][ T6642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.764861][ T6642] ? __import_iovec+0x585/0x830 [ 116.769708][ T6642] ? aa_sock_msg_perm+0x91/0x160 [ 116.774642][ T6642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.779929][ T6642] __sock_sendmsg+0x221/0x270 [ 116.784611][ T6642] ____sys_sendmsg+0x523/0x860 [ 116.789368][ T6642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.794644][ T6642] __sys_sendmsg+0x271/0x360 [ 116.799222][ T6642] ? __pfx_futex_wake+0x10/0x10 [ 116.804061][ T6642] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.809172][ T6642] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 116.815769][ T6642] ? lockdep_hardirqs_on+0x9d/0x150 [ 116.820958][ T6642] __do_fast_syscall_32+0xb4/0x110 [ 116.826061][ T6642] ? exc_page_fault+0x5f8/0x920 [ 116.830912][ T6642] do_fast_syscall_32+0x34/0x80 [ 116.835767][ T6642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.842093][ T6642] RIP: 0023:0xf7f34579 [ 116.846147][ T6642] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 116.865745][ T6642] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 116.874147][ T6642] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0 [ 116.882105][ T6642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.890058][ T6642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.898012][ T6642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 116.905968][ T6642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.913940][ T6642] [ 116.916957][ T6642] Modules linked in: [ 116.920919][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.927679][ T6642] ---[ end trace 0000000000000000 ]--- [ 116.955794][ T6642] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 116.961584][ T6642] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 ea fa 3a f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 c2 fa 3a f8 45 31 e4 48 83 7d 00 [ 116.981661][ T6642] RSP: 0018:ffffc9000397ee50 EFLAGS: 00010206 [ 116.988808][ T6642] RAX: 0000000000000055 RBX: ffff88805e690008 RCX: 0000000000080000 [ 116.996975][ T6642] RDX: ffffc9000d32a000 RSI: 0000000000003bea RDI: 0000000000003beb [ 117.006311][ T6642] RBP: 00000000000002a8 R08: ffffffff89f29319 R09: 1ffff9200072fdf6 [ 117.015550][ T6642] R10: dffffc0000000000 R11: fffff5200072fdf7 R12: ffff8880793b2080 [ 117.025320][ T6643] PM: Image not found (code -6) [ 117.113012][ T6642] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805e690000 [ 117.179025][ T6642] FS: 0000000000000000(0000) GS:ffff888124f93000(0063) knlGS:00000000f5056b40 [ 117.189667][ T6642] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 117.247074][ T6642] CR2: 00000000f73d6048 CR3: 000000002339a000 CR4: 00000000003526f0 [ 117.261468][ T6642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.333517][ T6642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.341634][ T6642] Kernel panic - not syncing: Fatal exception [ 117.347978][ T6642] Kernel Offset: disabled [ 117.352295][ T6642] Rebooting in 86400 seconds..