last executing test programs: 40.565984691s ago: executing program 3 (id=22): socket$netlink(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c0180f78f00000001090212000100000000090400000080829900"], 0x0) r1 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xff, 0x42, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa, 0x95, 0x3e}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x3, 0xf1, 0xff, 0x10, 0xff}, 0x9f, &(0x7f0000000180)={0x5, 0xf, 0x9f, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xd6, 0x6, 0x3, 0x7ff, 0x6}, @generic={0x8f, 0x10, 0x1, "2ef64547d469681cfb5562aeaf1d3d4e81b62aebff0a3c6a7caa2e36aef361ffd73429ffa7e8029fca26d5642a93e9ebb9751edff08502f87274b17ff8a0e060d0c1cbee37779ada7f0b66cb712f6b19a97ab03f3c268d46ecbc90b6de07f62b5312959a7a53b87bd9facfc38c4c6894cae33ccff089e9fbf70b0c5f462331d938d9398f94b4013ad6f10095"}]}, 0x7, [{0xf3, &(0x7f0000000240)=@string={0xf3, 0x3, "4cdb2b4e3a2e7ae6880d2a51ccfc029fbb12ac8765e88a419a03e6e655b3de0b5a3d78bf36c1180b066f8c96b0db8aacb7befee02b8be4c516f7562e26b7e3bd8a87793e0f1318cdb91e8be830ce1904e3655eabd3d823723e34c8b2ac6d0e10e982642f922a7e62e59a0dd89bdc2cd0c09fcd600332a42a5f31be4b722e37c141a28e1320b7669c686e10278b4a274b4211a1c7726a5de51e085d0bbb987e8cde1b2b4a9b16d75ea5ce7867b30433cfd255ac59b2d58021d0dcadf4465d35e3ef34b0fce94f2f6cafc54fe8935b5dabecb3d5aa614d661d5bbadd3af35b3a8f13a678f5ab72d38b06c8b98b700139c3fb"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x441}}, {0x0, 0x0}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_open_dev$sndmidi(&(0x7f0000000640), 0x0, 0x200100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000200)={0x18, 0x0, {0x1, @multicast, 'gre0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000800)={0x60, 0x11, 0x67, "dd35701b59a6d598469f0a1047818cc4eb1f1b4c1502558a97e3d06240e24f43fa0344b870f3c9855624c3a1fe46abc85218041eca3be2cab271607fac381ab17e9c33ccf82723db5e247b6632ccfb81cde9ba97ea9111723a3aab3c566fb6d486de80f277f518"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x10}, 0x0, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x4}}) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) tkill(0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03002a006c8c6f94f90424fc601000127a0a000600093582c137153e37080c18800aac0f0003000000fe943d", 0x33fe0}], 0x10000000000000f4}, 0x0) 38.503854462s ago: executing program 3 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xcc}}, 0x0) 38.135030485s ago: executing program 3 (id=32): lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x0, "fa02c8098000", 0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40045304, &(0x7f0000000700)) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x0, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r5}, {r5}], 0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x924, 0x4) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000180)=0xffffffff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0x40103e05, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x67, &(0x7f0000002340)=""/103) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c00"], 0x94}}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) 36.675354292s ago: executing program 3 (id=36): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000000c0)={0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x14, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) unshare(0x2a020400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000000"], 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) set_mempolicy(0x4003, &(0x7f0000000040)=0x10000000005, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000fdffffff00000000000000000001ffff120003003ead746d61703a69702c6d61000100070000000500010007000000b3f6317134050005000200000005000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x980}, 0x40004) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0xa2040, 0x0) r6 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r6, &(0x7f00000000c0), &(0x7f0000000100)=@v2, 0x14, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x4e00e018e3401e1c}, 0xc) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000300000000"], 0x8) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 12.302135351s ago: executing program 0 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fanotify_init(0x200, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r7, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r9, 0x80047453, &(0x7f0000005280)) fanotify_mark(r1, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x7}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRES32=0x41424344], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e3414040da0b8a8156bf34d8e2000000010903120001000000000904000000ffffff00"], 0x0) 11.895403087s ago: executing program 2 (id=98): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x20044000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x2, 0x101000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = open(0x0, 0x1c5b42, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x6611, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd65e5937200102101fe80000000000000000000000000001efe8800000000000000100000000001014e214e200401907844f314a1084a378339aecb"], 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x42, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000080)={0x0, r7}) dup3(0xffffffffffffffff, r6, 0x80000) 11.168175877s ago: executing program 2 (id=100): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000005f5f14aa00000000000000001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a8, 0x98, 0x230, 0x98, 0x98, 0x2f8, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @remote, 0x0, 0xff, 'team0\x00', 'nr0\x00', {0xff}, {}, 0x89, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'hsr0\x00', '\x00', {}, {}, 0x2, 0x2, 0x1a}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1ff, 0xf, @ipv4=@remote, 0x4e22}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0x40, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0xd2}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x37fd852a, @rand_addr=0x64010101, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xb, 0x2, "19b6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "1576"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x50, 0x0, &(0x7f0000000440)="e5c0ca304a2a7b53a10a2beba492b547df36c0926c71357304fb53ff71c4381e3c952221a37fd23596966b13d4b104fa4b53ec30653382d39d2a7688b4b0b6a647f7b5234ae93f414418636de2e52987"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8.897957053s ago: executing program 0 (id=104): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x900}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 8.775591459s ago: executing program 0 (id=105): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c00000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="5b0b000000000000140012800c000100", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 8.771590359s ago: executing program 1 (id=106): r0 = fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) readahead(r0, 0xffffffffffffc114, 0xf) r1 = socket$inet_udp(0x2, 0x2, 0x0) uname(0x0) close(r1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e00180002800a0009000000000000000000080007000000000008000500", @ANYRES32=r3], 0x50}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x20044000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x2, 0x101000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = open(0x0, 0x1c5b42, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x6611, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd65e5937200102101fe80000000000000000000000000001efe8800000000000000100000000001014e214e200401907844f314a1084a378339aecb"], 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x42, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, 0x0) dup3(0xffffffffffffffff, r6, 0x80000) 7.771047643s ago: executing program 2 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fanotify_init(0x200, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r7, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r9, 0x80047453, &(0x7f0000005280)) fanotify_mark(r1, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x7}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRES32=0x41424344], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e3414040da0b8a8156bf34d8e2000000010903120001000000000904000000ffffff00"], 0x0) 7.474514752s ago: executing program 1 (id=111): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff0001220500090581030008"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x48}}, 0x0) recvmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r8, 0x3, 0x53, &(0x7f0000000180)="8a24caf01d9e5bfd7bb2c4ac9443b2cd78812fc5ac8dc9cd8aeb401a57c6a6f02e7548db0417b2e7a6dd7e53843c3178723852318a622bbeee254aa80d94da2d617ba332987aed1ce4bf78f33209f908c30a9e") ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000002c0)={0x7, 'ip6erspan0\x00', {0x44}, 0xfe01}) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, "9011"}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)='l\t', 0x2}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000770f0084000000050000003000000000000000"], 0x28}], 0x1, 0x4044040) 7.398537147s ago: executing program 4 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000001401004000000000000040"], 0x30}}, 0x0) 7.082014813s ago: executing program 4 (id=113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001080)='bic\x00', 0x4) socket$netlink(0x10, 0x3, 0xa) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 6.514474584s ago: executing program 4 (id=114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffff00}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000001900)=ANY=[@ANYBLOB="b4110000", @ANYRES16=r5, @ANYBLOB="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"], 0x11b4}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006261746164765f736c6176655f31000018003480"], 0x4c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f00000001c0)=0x8, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f500da8bd33bb3e700000a00060008021100000000000400ec000400ff0008009e"], 0xd4}}, 0x0) 6.029595204s ago: executing program 0 (id=115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}]}}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xd}) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)={r6}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}, {{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000a00)=""/92, 0x5c}, 0xf46}, {{&(0x7f0000000a80), 0x80, &(0x7f0000000d00)=[{&(0x7f00000004c0)=""/268, 0x10c}, {&(0x7f0000000c00)=""/208, 0xd0}]}, 0x359}], 0x3, 0x10122, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xfffffffc}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000280)={0x3}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003300)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5f8, 0x318, 0x318, 0x0, 0x120, 0x408, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@mcast1, @private2, [], [], 'vlan0\x00', 'pimreg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 5.831659934s ago: executing program 4 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x921}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2}, 0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000100)={0x0, 0xc5, 0x0, 0x0, 0x101}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, 0x0, 0x20044090) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x85, 0x4a, 0xff, 0x8, 0x424, 0x12c, 0xe2d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x2, 0xfa, 0xdc, 0x6f, 0x0, [], [{{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) 5.796193923s ago: executing program 3 (id=69): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_secret(0x0) socket(0x22, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000300)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.465781001s ago: executing program 1 (id=117): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c00000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="5b0b000000000000140012800c000100", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 2.691609023s ago: executing program 2 (id=118): r0 = fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) readahead(r0, 0xffffffffffffc114, 0xf) r1 = socket$inet_udp(0x2, 0x2, 0x0) uname(0x0) close(r1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e00180002800a0009000000000000000000080007000000000008000500", @ANYRES32=r3], 0x50}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x20044000) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fanotify_init(0x2, 0x101000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = open(0x0, 0x1c5b42, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x6611, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd65e5937200102101fe80000000000000000000000000001efe8800000000000000100000000001014e214e200401907844f314a1084a378339aecb"], 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x42, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, 0x0) dup3(0xffffffffffffffff, r6, 0x80000) 1.503488244s ago: executing program 4 (id=122): r0 = socket$inet6(0xa, 0x2, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8940) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) memfd_create(&(0x7f0000000440)='\xc0\x87:*\x18\xc1k\xad\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x00\x00\x00\x00\xe2\xce:\xb5\xb7\xc4\xde\xae\xb6\x1c\xbf\xa2\x12\xa5\x18\xba[\xc7%\x88 \xeeQR\x9f\xa2\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\b6\x86\xc8\xe9/\x19w4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe7\x8d.\xd1\x00\x01\x00\x00\x00\x00\x00\x00\x1d\xe7_\xde\x87\xdd\xc1\x15\x0e\x00\x00\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\b\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\x05\x00\x00\x00\x84\xf4\"\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xc7\x10\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v(\xb9\xf1\a\x85\xe6\x882\xaa\x83\xb7*}\x042\xc6\xf9\xbe\xfeI\x8b\xd4/`\xabh~\xcb\xb9j\xa1\xfc\xcb\xfd\x8a\x1eW\x87\x06\xcd\xa0\x91\xacJ\xf5.\x14\xe6\xe8F\xbe\xf8A\x9flx\x0e\xeb\xe9\xac9\x7f\x1aII\xdd\xfc1\fP\x05\x8d#\xec\xeb\x92g~&!\x90J\xd0\xe1\xac\xd4\xd6\xd4\b\x90\xed\xca\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\xaaL\xa8@\xf7h\x04\x9a\xb1\xba\xcdm\x9a\xa8\xfdt\xa7\x17\xd4v9\xafA\xfb\xa3R\xf6\x8c!\xc01\xf8\x17\xd5$\xae\x04\x80M\xdc\xe0\x97IHg5\x8e\x1d=\xaf\xe3 \a=\xe8', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000a80)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r4, 0x2cef, 0x8915, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r8 = open_tree(r7, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) fchdir(r8) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x51d829, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB], 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) clock_getres(0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 563.53307ms ago: executing program 2 (id=123): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x1, 0xfffffff9, 0x7}, &(0x7f0000000100)=0x14) (async) unshare(0x100) r2 = accept(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) (async) syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') preadv(r3, &(0x7f0000001780)=[{&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/253, 0xfd}, {&(0x7f0000001600)=""/165, 0xa5}, {&(0x7f00000016c0)=""/100, 0x64}, {&(0x7f0000001740)=""/24, 0x18}], 0x9, 0x1, 0xe0b76c0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x17, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xbe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, @jmp={0x5, 0x1, 0x3, 0x7, 0x1, 0x8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x7f}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}]}, &(0x7f0000001940)='GPL\x00', 0x1d604536, 0xb5, &(0x7f0000001980)=""/181, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001a80)={0x2, 0x2, 0x7f, 0xcc3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001b00)=[{0x4, 0x4, 0xa, 0x1}], 0x10, 0xbc9f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c00)={&(0x7f0000001840)='rss_stat\x00', r4, 0x0, 0xd3}, 0x18) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001c40)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4f, 0x0, "2c29e2631cdf8856a7ae09622c56bd4531720c37170e238d7a4facad28808e505867765253596ccd04dd729551c9aa8edf47d8de8ab33d5afeaae26f918389e06597536704497c55b31d3df70fba5b0f"}, 0xd8) epoll_create1(0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001d40)={r1, 0x2, 0x7, 0x3, 0x25cd, 0x4}, &(0x7f0000001d80)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001dc0)={r6, 0x5, 0x2, 0xf}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e00)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001e40)={0x1d, r7}, 0x10) (async) r8 = open$dir(&(0x7f0000001e80)='./file0\x00', 0x15b040, 0x20) (async) r9 = openat$uhid(0xffffff9c, &(0x7f0000001ec0), 0x802, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x80086601, &(0x7f0000001f00)) (async) r10 = syz_genetlink_get_family_id$auto(&(0x7f0000001f80)='GPL\x00', r2) sendmsg$autorun(r2, &(0x7f0000002040)=@policy339={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfd, {0x8}, [@NFTA_FLOW_TABLE_NAME={0xb, 0x1, 'ns/mnt\x00'}, @NFTA_FLOW_TABLE_NAME={0x4}]}, 0x24}}, 0x20004000) (async) r11 = fspick(r8, &(0x7f0000002080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f00000020c0)='ns/mnt\x00', 0x0, r9) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000002100), 0x4) (async) openat$fb0(0xffffff9c, &(0x7f0000002140), 0x0, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r2) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x44, r12, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x33}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000000) (async) syz_emit_vhci(&(0x7f0000002300)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) bind$can_raw(r2, &(0x7f0000002340), 0x10) 19.230122ms ago: executing program 3 (id=124): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc015, 0x0, 0xfffffcef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81a000000000000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x20000000000001ee, &(0x7f00000000c0)}) 0s ago: executing program 1 (id=125): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/161, 0xa1}], 0x1, 0x4, 0xfffffffc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b14020900000000000109022400010000000009040000010398238a08ffdc8c0c220500090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220510000007b6ac77"], 0x0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x100}}, {{0xa, 0xfffe, 0x80, @empty, 0x3}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x110, 0x6, 0x0, 0x20000000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000000)=0xc871) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_secret(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts. [ 67.560174][ T5219] cgroup: Unknown subsys name 'net' [ 67.715419][ T5219] cgroup: Unknown subsys name 'cpuset' [ 67.726199][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.353889][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.645550][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.655174][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.665097][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.679376][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.688148][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.696579][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.703260][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.705818][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.712735][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.720145][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.726645][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.727274][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.727537][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.729182][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.737113][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.742386][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.750386][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.777337][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.784511][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.792217][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.798123][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.805058][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.812250][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.819836][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.827732][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.841836][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.850888][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.858269][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.866045][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.874168][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.875116][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.883509][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.369863][ T5251] chnl_net:caif_netlink_parms(): no params data found [ 72.387414][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 72.492950][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 72.639388][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.649249][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.661132][ T5251] bridge_slave_0: entered allmulticast mode [ 72.668720][ T5251] bridge_slave_0: entered promiscuous mode [ 72.680369][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 72.715420][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 72.728227][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.739676][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.748317][ T5251] bridge_slave_1: entered allmulticast mode [ 72.756712][ T5251] bridge_slave_1: entered promiscuous mode [ 72.829459][ T5251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.853159][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.866551][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.876486][ T5250] bridge_slave_0: entered allmulticast mode [ 72.884359][ T5250] bridge_slave_0: entered promiscuous mode [ 72.894709][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.903365][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.911319][ T5248] bridge_slave_0: entered allmulticast mode [ 72.918588][ T5248] bridge_slave_0: entered promiscuous mode [ 72.927414][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.935053][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.942701][ T5248] bridge_slave_1: entered allmulticast mode [ 72.949832][ T5248] bridge_slave_1: entered promiscuous mode [ 72.973625][ T5251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.997591][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.005596][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.013941][ T5250] bridge_slave_1: entered allmulticast mode [ 73.021224][ T5250] bridge_slave_1: entered promiscuous mode [ 73.104474][ T5251] team0: Port device team_slave_0 added [ 73.115110][ T5251] team0: Port device team_slave_1 added [ 73.132417][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.164145][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.177372][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.190463][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.209397][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.222292][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.229751][ T5252] bridge_slave_0: entered allmulticast mode [ 73.240613][ T5252] bridge_slave_0: entered promiscuous mode [ 73.294558][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.302955][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.310645][ T5252] bridge_slave_1: entered allmulticast mode [ 73.319148][ T5252] bridge_slave_1: entered promiscuous mode [ 73.335918][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.343485][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.373270][ T5251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.388891][ T5250] team0: Port device team_slave_0 added [ 73.398850][ T5250] team0: Port device team_slave_1 added [ 73.415455][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.430039][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.442453][ T5247] bridge_slave_0: entered allmulticast mode [ 73.449357][ T5247] bridge_slave_0: entered promiscuous mode [ 73.474474][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.483042][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.512348][ T5251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.542278][ T5248] team0: Port device team_slave_0 added [ 73.548523][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.556605][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.571177][ T5247] bridge_slave_1: entered allmulticast mode [ 73.578311][ T5247] bridge_slave_1: entered promiscuous mode [ 73.605350][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.617265][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.638251][ T5248] team0: Port device team_slave_1 added [ 73.656883][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.672403][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.710236][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.717686][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.744327][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.784483][ T5252] team0: Port device team_slave_0 added [ 73.793343][ T5247] team0: Port device team_slave_0 added [ 73.813340][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.821431][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.848700][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.867907][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.875350][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.903868][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.917272][ T5247] team0: Port device team_slave_1 added [ 73.924766][ T5252] team0: Port device team_slave_1 added [ 73.943960][ T5251] hsr_slave_0: entered promiscuous mode [ 73.951012][ T5251] hsr_slave_1: entered promiscuous mode [ 73.962067][ T5233] Bluetooth: hci3: command tx timeout [ 73.967499][ T5243] Bluetooth: hci2: command tx timeout [ 73.968083][ T54] Bluetooth: hci0: command tx timeout [ 73.973864][ T5246] Bluetooth: hci4: command tx timeout [ 73.980291][ T5236] Bluetooth: hci1: command tx timeout [ 73.995141][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.007642][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.041017][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.079784][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.088211][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.116463][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.141414][ T5250] hsr_slave_0: entered promiscuous mode [ 74.148512][ T5250] hsr_slave_1: entered promiscuous mode [ 74.155127][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.163221][ T5250] Cannot create hsr debugfs directory [ 74.179884][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.189448][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.219029][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.257230][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.264645][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.295726][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.346939][ T5248] hsr_slave_0: entered promiscuous mode [ 74.354973][ T5248] hsr_slave_1: entered promiscuous mode [ 74.363185][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.371252][ T5248] Cannot create hsr debugfs directory [ 74.377580][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.386359][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.414879][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.534712][ T5247] hsr_slave_0: entered promiscuous mode [ 74.541773][ T5247] hsr_slave_1: entered promiscuous mode [ 74.548327][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.556839][ T5247] Cannot create hsr debugfs directory [ 74.619557][ T5252] hsr_slave_0: entered promiscuous mode [ 74.627470][ T5252] hsr_slave_1: entered promiscuous mode [ 74.636052][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.645180][ T5252] Cannot create hsr debugfs directory [ 74.929673][ T5251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.954345][ T5251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.964459][ T5251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.978076][ T5251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.036991][ T5250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.070925][ T5250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.097581][ T5250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.108296][ T5250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.154817][ T5248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.167114][ T5248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.209363][ T5248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.232186][ T5248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.306388][ T5252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.332460][ T5252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.362834][ T5251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.370293][ T5252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.383566][ T5252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.430420][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.472798][ T5251] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.493462][ T5247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.518845][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.526907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.538230][ T5247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.567796][ T5247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.584090][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.593565][ T5247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.617927][ T3827] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.625454][ T3827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.679053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.686691][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.731232][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.738781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.758752][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.856128][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.885290][ T5251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.907883][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.915060][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.947339][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.954526][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.041411][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.048465][ T5236] Bluetooth: hci4: command tx timeout [ 76.048477][ T54] Bluetooth: hci2: command tx timeout [ 76.051563][ T54] Bluetooth: hci1: command tx timeout [ 76.054672][ T5246] Bluetooth: hci0: command tx timeout [ 76.059296][ T54] Bluetooth: hci3: command tx timeout [ 76.084628][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.103639][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.126767][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.146506][ T5251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.185940][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.210392][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.230030][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.238328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.257155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.264354][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.293654][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.305749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.313030][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.353008][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.360277][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.388738][ T5250] veth0_vlan: entered promiscuous mode [ 76.450609][ T5250] veth1_vlan: entered promiscuous mode [ 76.474813][ T5251] veth0_vlan: entered promiscuous mode [ 76.533231][ T5251] veth1_vlan: entered promiscuous mode [ 76.592171][ T5248] veth0_vlan: entered promiscuous mode [ 76.605866][ T5250] veth0_macvtap: entered promiscuous mode [ 76.628255][ T5250] veth1_macvtap: entered promiscuous mode [ 76.639694][ T5248] veth1_vlan: entered promiscuous mode [ 76.649155][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.666370][ T5251] veth0_macvtap: entered promiscuous mode [ 76.679996][ T5251] veth1_macvtap: entered promiscuous mode [ 76.707821][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.764032][ T5248] veth0_macvtap: entered promiscuous mode [ 76.775812][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.804096][ T5248] veth1_macvtap: entered promiscuous mode [ 76.816378][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.827573][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.840234][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.855133][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.866353][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.878330][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.892290][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.909354][ T5251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.920446][ T5251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.931300][ T5251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.940170][ T5251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.960161][ T5250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971853][ T5250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.981662][ T5250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.992429][ T5250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.026123][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.037738][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.049533][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.061847][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.075605][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.101575][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.113792][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.125612][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.140411][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.153636][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.188888][ T5252] veth0_vlan: entered promiscuous mode [ 77.202364][ T5248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.212278][ T5248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.221977][ T5248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.231358][ T5248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.309303][ T5247] veth0_vlan: entered promiscuous mode [ 77.330264][ T5252] veth1_vlan: entered promiscuous mode [ 77.384060][ T5247] veth1_vlan: entered promiscuous mode [ 77.439987][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.450037][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.472996][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.500136][ T5252] veth0_macvtap: entered promiscuous mode [ 77.507765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.535401][ T5252] veth1_macvtap: entered promiscuous mode [ 77.572678][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.595913][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.608639][ T5247] veth0_macvtap: entered promiscuous mode [ 77.626446][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.647230][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.659580][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.671129][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.683647][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.695147][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.713150][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.746337][ T5247] veth1_macvtap: entered promiscuous mode [ 77.765575][ T763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.782405][ T763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.796271][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.824529][ T5251] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.825024][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.859136][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.872932][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.887128][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.900030][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.913328][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.939905][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.954581][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.965550][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.977415][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.988327][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.004383][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.016787][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.028358][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.046015][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.075179][ T5252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.085018][ T5252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.096126][ T5252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.107553][ T5252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.121778][ T54] Bluetooth: hci0: command tx timeout [ 78.121832][ T54] Bluetooth: hci4: command tx timeout [ 78.121878][ T54] Bluetooth: hci1: command tx timeout [ 78.136430][ T54] Bluetooth: hci3: command tx timeout [ 78.136495][ T54] Bluetooth: hci2: command tx timeout [ 78.156801][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.176093][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.207420][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.234111][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.247720][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.261487][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.273661][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.288031][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.302206][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.323455][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.339762][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.436575][ T5247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.470210][ T5247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.490699][ T5247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.512779][ T5247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.553186][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.564124][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.697310][ T3827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.725785][ T3827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.748057][ T5283] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.811763][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.819659][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.870232][ T763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.898436][ T763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.926955][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.958197][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.993789][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 79.003702][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.034901][ T5283] usb 5-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 79.065470][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.109670][ T5283] usb 5-1: config 0 descriptor?? [ 79.266909][ T5304] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.391259][ T5304] tipc: Started in network mode [ 79.415436][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.415533][ T5304] tipc: Node identity 5f5f14aa, cluster identity 4711 [ 79.444043][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.470040][ T5306] x_tables: duplicate underflow at hook 1 [ 79.495947][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 79.500429][ T5283] usbhid 5-1:0.0: can't add hid device: -71 [ 79.520132][ T5283] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.558196][ T5311] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 79.565460][ T5283] usb 5-1: USB disconnect, device number 2 [ 79.644334][ T5293] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.731282][ T938] psmouse serio2: Failed to reset mouse on : -5 [ 79.761231][ T5287] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.818307][ T5293] usb 3-1: config 125 has too many interfaces: 144, using maximum allowed: 32 [ 79.838386][ T5293] usb 3-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config [ 79.860449][ T5293] usb 3-1: config 125 has 1 interface, different from the descriptor's value: 144 [ 79.871628][ T5293] usb 3-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 79.881649][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.896902][ T5293] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 79.975715][ T5287] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 79.988377][ T5287] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 80.007606][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.023146][ T5287] usb 2-1: Product: syz [ 80.028588][ T5287] usb 2-1: Manufacturer: syz [ 80.033590][ T5287] usb 2-1: SerialNumber: syz [ 80.045104][ T5287] usb 2-1: config 0 descriptor?? [ 80.061565][ T5283] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.203050][ T54] Bluetooth: hci3: command tx timeout [ 80.214931][ T54] Bluetooth: hci2: command tx timeout [ 80.223464][ T54] Bluetooth: hci1: command tx timeout [ 80.229117][ T54] Bluetooth: hci4: command tx timeout [ 80.252162][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 80.274673][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.362778][ T5283] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 80.426715][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.470251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.554403][ T5283] usb 5-1: config 0 descriptor?? [ 80.634987][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 80.661301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.721476][ T5287] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 80.851970][ T5283] rc_core: IR keymap rc-xbox-dvd not found [ 80.859652][ T5283] Registered IR keymap rc-empty [ 80.882800][ T5283] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 80.902591][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.919188][ T5283] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 80.971820][ T5283] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 81.007083][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.050321][ T5283] input: failed to attach handler kbd to device input6, error: -5 [ 81.059042][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.080034][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.091990][ T4668] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 81.182140][ C0] hrtimer: interrupt took 456566 ns [ 81.183057][ T4668] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 81.213792][ T5284] usb 5-1: USB disconnect, device number 3 [ 81.311170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.311447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.367508][ T5287] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 81.417938][ T5287] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 81.469943][ T5287] asix 2-1:0.0: probe with driver asix failed with error -71 [ 81.496754][ T5287] usb 2-1: USB disconnect, device number 2 [ 82.270999][ T5284] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.283248][ T5337] capability: warning: `syz.1.15' uses 32-bit capabilities (legacy support in use) [ 82.445368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.483236][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.563610][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.607838][ T5284] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 82.650239][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.682169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.730638][ T5284] usb 4-1: config 0 descriptor?? [ 82.998002][ T5334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.215229][ T5343] FAULT_INJECTION: forcing a failure. [ 83.215229][ T5343] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.282625][ T5343] CPU: 1 UID: 0 PID: 5343 Comm: syz.1.18 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 83.295943][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.308049][ T5343] Call Trace: [ 83.311474][ T5343] [ 83.315456][ T5343] dump_stack_lvl+0x241/0x360 [ 83.320568][ T5343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.326776][ T5343] ? __pfx__printk+0x10/0x10 [ 83.333241][ T5343] ? __pfx_lock_release+0x10/0x10 [ 83.338431][ T5343] should_fail_ex+0x3b0/0x4e0 [ 83.345774][ T5343] _copy_from_iter+0x1ed/0x1d60 [ 83.352560][ T5343] ? __virt_addr_valid+0x183/0x530 [ 83.360323][ T5343] ? __pfx_lock_release+0x10/0x10 [ 83.365634][ T5343] ? __alloc_skb+0x28f/0x440 [ 83.371370][ T5343] ? __pfx__copy_from_iter+0x10/0x10 [ 83.378798][ T5343] ? __virt_addr_valid+0x183/0x530 [ 83.384730][ T5343] ? __virt_addr_valid+0x183/0x530 [ 83.391644][ T5343] ? __virt_addr_valid+0x45f/0x530 [ 83.397215][ T5343] ? __check_object_size+0x48e/0x900 [ 83.404131][ T5343] netlink_sendmsg+0x73d/0xcb0 [ 83.410348][ T5343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.416852][ T5343] ? aa_sock_msg_perm+0x91/0x160 [ 83.423096][ T5343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.428911][ T5343] __sock_sendmsg+0x221/0x270 [ 83.434090][ T5343] ____sys_sendmsg+0x52a/0x7e0 [ 83.439540][ T5343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.445101][ T5343] __sys_sendmsg+0x292/0x380 [ 83.450329][ T5343] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.456547][ T5343] ? __pfx_vfs_write+0x10/0x10 [ 83.462447][ T5343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.469312][ T5343] ? do_syscall_64+0x100/0x230 [ 83.475714][ T5343] ? do_syscall_64+0xb6/0x230 [ 83.480880][ T5343] do_syscall_64+0xf3/0x230 [ 83.487023][ T5343] ? clear_bhb_loop+0x35/0x90 [ 83.493415][ T5343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.504202][ T5343] RIP: 0033:0x7feb73b7df39 [ 83.510003][ T5343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.535761][ T5343] RSP: 002b:00007feb7492b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.545299][ T5343] RAX: ffffffffffffffda RBX: 00007feb73d35f80 RCX: 00007feb73b7df39 [ 83.555619][ T5343] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 83.565203][ T5343] RBP: 00007feb7492b090 R08: 0000000000000000 R09: 0000000000000000 [ 83.573827][ T5343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.582589][ T5343] R13: 0000000000000000 R14: 00007feb73d35f80 R15: 00007feb73e5fa28 [ 83.592016][ T5343] [ 83.701278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.807974][ T5334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.818054][ T5293] pwc: send_video_command error -71 [ 83.826110][ T5293] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 83.835032][ T5293] Philips webcam 3-1:125.0: probe with driver Philips webcam failed with error -71 [ 83.930877][ T5315] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.952906][ T5293] usb 3-1: USB disconnect, device number 2 [ 84.062710][ T5334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 84.082529][ T5315] usb 5-1: device descriptor read/64, error -71 [ 84.320870][ T938] misc userio: Buffer overflowed, userio client isn't keeping up [ 84.341479][ T5315] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.443426][ T5283] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.480951][ T5315] usb 5-1: device descriptor read/64, error -71 [ 84.600468][ T5315] usb usb5-port1: attempt power cycle [ 84.616799][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 84.624140][ T5293] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.634981][ T5283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 84.658124][ T5283] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 84.676222][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 84.688119][ T5283] usb 2-1: Product: syz [ 84.698599][ T5283] usb 2-1: Manufacturer: syz [ 84.706514][ T5283] usb 2-1: SerialNumber: syz [ 84.716533][ T5283] usb 2-1: config 0 descriptor?? [ 84.724561][ T5348] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 84.824638][ T5293] usb 3-1: Using ep0 maxpacket: 16 [ 84.852217][ T5293] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 84.868605][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.882060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.917284][ T5293] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 84.932464][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.961454][ T5293] usb 3-1: config 0 descriptor?? [ 84.991079][ T5315] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.024071][ T5315] usb 5-1: device descriptor read/8, error -71 [ 85.207750][ T5350] Zero length message leads to an empty skb [ 85.224416][ T5284] usbhid 4-1:0.0: can't add hid device: -71 [ 85.234506][ T5284] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 85.265945][ T5283] usb 2-1: USB disconnect, device number 3 [ 85.326984][ T5284] usb 4-1: USB disconnect, device number 2 [ 85.375446][ T5293] usb 3-1: string descriptor 0 read error: -71 [ 85.392962][ T5293] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 85.410439][ T5315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 85.429485][ T5293] usb 3-1: USB disconnect, device number 3 [ 85.453090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.479273][ T5315] usb 5-1: device descriptor read/8, error -71 [ 85.487453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 85.591044][ T5315] usb usb5-port1: unable to enumerate USB device [ 85.612933][ T938] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 85.700908][ T5284] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.851086][ T938] psmouse serio2: Failed to enable mouse on [ 85.899071][ T5284] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=8f.f7 [ 85.921061][ T5293] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.937395][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.965228][ T5284] usb 4-1: config 0 descriptor?? [ 85.986241][ T5284] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 86.017651][ T29] audit: type=1326 audit(1727380840.451:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.043026][ T5362] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 86.084040][ T5293] usb 2-1: Using ep0 maxpacket: 32 [ 86.123405][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 86.184285][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.213897][ T5293] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 86.230110][ T29] audit: type=1326 audit(1727380840.451:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.271319][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.282009][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.326831][ T5365] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.334960][ T5362] team0: Port device netdevsim0 added [ 86.344932][ T29] audit: type=1326 audit(1727380840.491:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.360501][ T5293] usb 2-1: Product: syz [ 86.396250][ T29] audit: type=1326 audit(1727380840.491:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.423931][ T29] audit: type=1326 audit(1727380840.491:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.459597][ T5293] usb 2-1: Manufacturer: syz [ 86.459954][ T29] audit: type=1326 audit(1727380840.491:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.481325][ T5293] usb 2-1: SerialNumber: syz [ 86.521906][ T29] audit: type=1326 audit(1727380840.491:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.557368][ T29] audit: type=1326 audit(1727380840.491:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.600551][ T29] audit: type=1326 audit(1727380840.491:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 86.627252][ T5293] usb 2-1: config 0 descriptor?? [ 86.650515][ T5284] gspca_sn9c2028: read1 error -71 [ 86.661485][ T5284] gspca_sn9c2028: read1 error -71 [ 86.670969][ T5284] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 86.693288][ T5284] usb 4-1: USB disconnect, device number 3 [ 86.786934][ T5293] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 86.794128][ T29] audit: type=1326 audit(1727380840.491:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fcf7df39 code=0x7ffc0000 [ 87.043999][ T5373] IPVS: Error connecting to the multicast addr [ 87.105966][ T8] cfg80211: failed to load regulatory.db [ 87.802354][ T1097] usb 2-1: Failed to submit usb control message: -110 [ 87.811334][ T5283] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.841043][ T1097] usb 2-1: unable to send the bmi data to the device: -110 [ 87.860145][ T1097] usb 2-1: unable to get target info from device [ 87.872885][ T1097] usb 2-1: could not get target info (-110) [ 87.888797][ T1097] usb 2-1: could not probe fw (-110) [ 87.933913][ T5388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.32'. [ 87.943926][ T5388] netlink: 64 bytes leftover after parsing attributes in process `syz.3.32'. [ 87.975553][ T5283] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 88.007313][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.046531][ T5283] usb 5-1: Product: syz [ 88.077034][ T5283] usb 5-1: Manufacturer: syz [ 88.093761][ T5283] usb 5-1: SerialNumber: syz [ 88.117797][ T5283] usb 5-1: config 0 descriptor?? [ 88.182251][ T46] usb 2-1: USB disconnect, device number 4 [ 88.234796][ T5393] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 88.323834][ T5393] team0: Port device netdevsim0 added [ 88.629878][ T5283] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 88.735961][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.820944][ T938] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.851284][ T5283] usb 5-1: Read permanent extended address 9a:e3:bb:4e:53:d0:8e:4f from device [ 88.911142][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 88.933754][ T8] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 88.953485][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.972868][ T8] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 88.995773][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.010864][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 89.027628][ T938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.041586][ T8] usb 1-1: config 0 descriptor?? [ 89.078919][ T938] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.094525][ T5283] usb 5-1: USB disconnect, device number 8 [ 89.119470][ T938] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.185752][ T938] usb 2-1: Product: syz [ 89.231022][ T938] usb 2-1: Manufacturer: syz [ 89.288381][ T938] usb 2-1: SerialNumber: syz [ 89.314380][ T8] usb 1-1: string descriptor 0 read error: -71 [ 89.324683][ T938] usb 2-1: config 0 descriptor?? [ 89.353989][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 89.368340][ T5400] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.436209][ T8] usb 1-1: USB disconnect, device number 2 [ 89.688601][ T8] usb 2-1: USB disconnect, device number 5 [ 90.195360][ T5283] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.401816][ T5283] usb 2-1: Using ep0 maxpacket: 32 [ 90.476980][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 90.560405][ T5283] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 90.616461][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.638666][ T5283] usb 2-1: Product: syz [ 90.657792][ T5283] usb 2-1: Manufacturer: syz [ 90.671864][ T5283] usb 2-1: SerialNumber: syz [ 90.723500][ T5283] usb 2-1: config 0 descriptor?? [ 90.783958][ T5283] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 90.801069][ T938] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.937263][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 90.963934][ T938] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=8f.f7 [ 90.997462][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.100104][ T938] usb 5-1: config 0 descriptor?? [ 91.173469][ T938] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 91.336348][ T5422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.381907][ T5422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.661220][ T938] gspca_sn9c2028: read1 error -71 [ 91.668224][ T938] gspca_sn9c2028: read1 error -71 [ 91.682631][ T938] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 91.774112][ T938] usb 5-1: USB disconnect, device number 9 [ 91.802866][ T3827] usb 2-1: Failed to submit usb control message: -110 [ 91.848061][ T3827] usb 2-1: unable to send the bmi data to the device: -110 [ 91.937687][ T3827] usb 2-1: unable to get target info from device [ 91.981618][ T5284] usb 2-1: USB disconnect, device number 6 [ 92.028579][ T3827] usb 2-1: could not get target info (-110) [ 92.074279][ T3827] usb 2-1: could not probe fw (-110) [ 92.151795][ T5315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.391510][ T5315] usb 3-1: Using ep0 maxpacket: 8 [ 92.466282][ T5443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 92.478284][ T5315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.586071][ T5315] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.710887][ T5284] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.717418][ T5315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.845590][ T5315] usb 3-1: config 0 descriptor?? [ 92.860903][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 92.873918][ T5284] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 92.883024][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.896093][ T5284] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 92.905979][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.940208][ T5284] usb 5-1: config 0 descriptor?? [ 93.174850][ T5284] usb 5-1: string descriptor 0 read error: -71 [ 93.183740][ T5284] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 93.183877][ T5315] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 93.205172][ T5284] usb 5-1: USB disconnect, device number 10 [ 93.527296][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 93.527431][ T29] audit: type=1326 audit(1727380847.951:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 93.605027][ T5456] veth1_macvtap: left promiscuous mode [ 93.672617][ T5458] veth1_macvtap: entered promiscuous mode [ 93.705823][ T5458] macsec0: entered allmulticast mode [ 93.728734][ T29] audit: type=1326 audit(1727380847.951:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 93.820363][ T5458] veth1_macvtap: entered allmulticast mode [ 93.948619][ T29] audit: type=1326 audit(1727380848.011:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 93.972448][ T29] audit: type=1326 audit(1727380848.011:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 94.000564][ T29] audit: type=1326 audit(1727380848.011:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 94.028751][ T29] audit: type=1326 audit(1727380848.011:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 94.063310][ T29] audit: type=1326 audit(1727380848.011:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 94.099739][ T5284] usb 3-1: USB disconnect, device number 4 [ 94.111015][ T29] audit: type=1326 audit(1727380848.011:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 94.136400][ T5284] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 94.204623][ T29] audit: type=1326 audit(1727380848.011:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 94.246477][ T5462] Cannot find add_set index 0 as target [ 94.247292][ T29] audit: type=1326 audit(1727380848.021:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5454 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb73b7df39 code=0x7ffc0000 [ 94.623582][ T5284] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 94.781487][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 94.792691][ T5284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.837758][ T5284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.849594][ T5285] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.892417][ T5284] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 94.935260][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.988494][ T5284] usb 5-1: Product: syz [ 95.011234][ T5284] usb 5-1: Manufacturer: syz [ 95.030848][ T5284] usb 5-1: SerialNumber: syz [ 95.041725][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 95.062088][ T5284] usb 5-1: config 0 descriptor?? [ 95.160969][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.351842][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 95.374055][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.409727][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.488698][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 95.650937][ T8] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 95.690217][ T8] usb 3-1: Manufacturer: syz [ 95.719492][ T8] usb 3-1: config 0 descriptor?? [ 95.767967][ T8] appledisplay 3-1:0.0: Could not find int-in endpoint [ 95.779261][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 95.981851][ T5315] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.217143][ T5285] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 96.243048][ T5285] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 96.252377][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 96.261015][ T5285] usb 2-1: Product: syz [ 96.265677][ T5285] usb 2-1: Manufacturer: syz [ 96.270454][ T5285] usb 2-1: SerialNumber: syz [ 96.277443][ T5285] usb 2-1: config 0 descriptor?? [ 96.284161][ T5475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.344386][ T5315] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 96.381626][ T5315] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.458058][ T5315] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 96.484128][ T5315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.647953][ T5285] usb 2-1: USB disconnect, device number 7 [ 96.746450][ T5483] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.62'. [ 96.781214][ T5483] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 97.130662][ T5315] usb 1-1: string descriptor 0 read error: -71 [ 97.138482][ T5315] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 97.152445][ T5315] usb 1-1: USB disconnect, device number 3 [ 97.251443][ T938] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 97.411107][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 97.429244][ T5285] usb 5-1: USB disconnect, device number 11 [ 97.485926][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 97.557254][ T938] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 97.601240][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.640614][ T938] usb 2-1: Product: syz [ 97.659180][ T938] usb 2-1: Manufacturer: syz [ 97.698865][ T938] usb 2-1: SerialNumber: syz [ 97.757994][ T938] usb 2-1: config 0 descriptor?? [ 97.801944][ T938] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 97.864398][ T938] usb 3-1: USB disconnect, device number 5 [ 98.332891][ T5236] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 98.343295][ T5236] Bluetooth: hci4: Injecting HCI hardware error event [ 98.352611][ T5236] Bluetooth: hci4: hardware error 0x00 [ 98.490984][ T5285] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 98.660968][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.679652][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 98.721116][ T5285] usb 5-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 98.744615][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.774749][ T5285] usb 5-1: config 0 descriptor?? [ 98.841110][ T5283] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.926314][ T1097] usb 2-1: Failed to submit usb control message: -110 [ 98.956068][ T1097] usb 2-1: unable to send the bmi data to the device: -110 [ 98.990355][ T5488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.005615][ T1097] usb 2-1: unable to get target info from device [ 99.005666][ T1097] usb 2-1: could not get target info (-110) [ 99.005702][ T1097] usb 2-1: could not probe fw (-110) [ 99.041080][ T5283] usb 1-1: Using ep0 maxpacket: 16 [ 99.066628][ T5283] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 99.076387][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.097829][ T5283] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 99.108475][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.171247][ T5488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.241528][ T5283] usb 1-1: config 0 descriptor?? [ 99.254778][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 99.262778][ T5285] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.293167][ T5285] usb 5-1: USB disconnect, device number 12 [ 99.308359][ T5315] usb 2-1: USB disconnect, device number 8 [ 99.369041][ T5507] tipc: Started in network mode [ 99.381534][ T5507] tipc: Node identity 5f5f14aa, cluster identity 4711 [ 99.436579][ T5507] tipc: Enabling of bearer rejected, failed to enable media [ 99.468961][ T5283] usb 1-1: string descriptor 0 read error: -71 [ 99.483582][ T5507] x_tables: duplicate underflow at hook 1 [ 99.534023][ T5283] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 99.617417][ T5283] usb 1-1: USB disconnect, device number 4 [ 99.741650][ T5293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.811525][ T5285] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.840888][ T5315] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 99.886631][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.899897][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.915869][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.932679][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.955701][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.966049][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.990943][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 100.029374][ T5293] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 100.048208][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.059822][ T5285] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 100.070460][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.085248][ T5285] usb 5-1: config 0 descriptor?? [ 100.101234][ T5315] usb 2-1: Using ep0 maxpacket: 8 [ 100.155706][ T5293] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 100.175902][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.191077][ T5285] rc_core: IR keymap rc-xbox-dvd not found [ 100.197196][ T5285] Registered IR keymap rc-empty [ 100.209298][ T5285] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 100.222791][ T5285] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 100.240013][ T5315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.257298][ T5285] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 100.266462][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.271051][ T5315] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.286674][ T5293] usb 3-1: Product: syz [ 100.291641][ T5293] usb 3-1: Manufacturer: syz [ 100.303500][ T5293] usb 3-1: SerialNumber: syz [ 100.309277][ T5315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.318581][ T5517] netlink: 'syz.0.71': attribute type 9 has an invalid length. [ 100.318951][ T5293] usb 3-1: config 0 descriptor?? [ 100.348033][ T5315] usb 2-1: config 0 descriptor?? [ 100.428649][ T5285] input: failed to attach handler kbd to device input8, error: -5 [ 100.441166][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 100.456050][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.516464][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.548820][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.592151][ T4668] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 100.606142][ T5315] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 100.626127][ T5520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.660066][ T5240] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 100.700533][ T4668] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 100.731237][ T5520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.773676][ T4668] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 100.864486][ T4668] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 100.965566][ T5293] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 101.002899][ T5315] usb 5-1: USB disconnect, device number 13 [ 101.075254][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.168259][ T5507] binder: BINDER_SET_CONTEXT_MGR already set [ 101.175690][ T5507] binder: 5506:5507 ioctl 4018620d 20000040 returned -16 [ 101.390501][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.655312][ T5526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 101.709445][ T5293] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 101.788484][ T5293] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 101.900658][ T5293] asix 3-1:0.0: probe with driver asix failed with error -71 [ 101.986488][ T5293] usb 3-1: USB disconnect, device number 6 [ 102.041180][ T5236] Bluetooth: hci0: command tx timeout [ 102.108419][ T5529] syz.4.73 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.224222][ T5514] chnl_net:caif_netlink_parms(): no params data found [ 102.282871][ T52] bridge_slave_1: left allmulticast mode [ 102.292016][ T8] usb 2-1: USB disconnect, device number 9 [ 102.321083][ T52] bridge_slave_1: left promiscuous mode [ 102.331902][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.347226][ T8] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 102.395963][ T52] bridge_slave_0: left allmulticast mode [ 102.428932][ T52] bridge_slave_0: left promiscuous mode [ 102.464156][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.527326][ T5536] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.811811][ T5285] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.901046][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.028544][ T5285] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.046987][ T5285] usb 1-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 103.085937][ T5285] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.131783][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 103.143059][ T5285] usb 1-1: config 1 interface 0 has no altsetting 0 [ 103.178892][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.183665][ T5285] usb 1-1: New USB device found, idVendor=0525, idProduct=fb40, bcdDevice= 0.40 [ 103.231783][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.244013][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.306041][ T5285] usb 1-1: Product: syz [ 103.310489][ T5285] usb 1-1: Manufacturer: syz [ 103.316206][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 103.332637][ T5285] usb 1-1: SerialNumber: syz [ 103.387342][ T8] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 103.437067][ T8] usb 3-1: Manufacturer: syz [ 103.494321][ T8] usb 3-1: config 0 descriptor?? [ 103.542733][ T8] appledisplay 3-1:0.0: Could not find int-in endpoint [ 103.552164][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 103.612952][ T5285] cdc_ether 1-1:1.0: skipping garbage [ 103.639378][ T5285] usb 1-1: bad CDC descriptors [ 103.725268][ T5285] usb 1-1: USB disconnect, device number 5 [ 104.120914][ T5236] Bluetooth: hci0: command tx timeout [ 104.477955][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.508956][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.554303][ T52] bond0 (unregistering): Released all slaves [ 104.623602][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 104.642262][ T5536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.678149][ T5536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.777567][ T5536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.800934][ T5536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.227746][ T5529] coredump: 37(syz.4.73): interrupted: fatal signal pending [ 105.381094][ T5529] coredump: 37(syz.4.73): written to core: VMAs: 38, size 99508224; core: 28998506 bytes, pos 66392064 [ 105.893507][ T52] hsr_slave_0: left promiscuous mode [ 105.961080][ T52] hsr_slave_1: left promiscuous mode [ 105.988506][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.018350][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.131893][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.168678][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.211006][ T5236] Bluetooth: hci0: command tx timeout [ 106.328701][ T52] veth1_macvtap: left promiscuous mode [ 106.350223][ T52] veth0_macvtap: left promiscuous mode [ 106.431103][ T52] veth1_vlan: left promiscuous mode [ 106.443297][ T938] usb 3-1: USB disconnect, device number 7 [ 106.457610][ T52] veth0_vlan: left promiscuous mode [ 106.540943][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 106.699245][ T5589] FAULT_INJECTION: forcing a failure. [ 106.699245][ T5589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.754500][ T5589] CPU: 1 UID: 0 PID: 5589 Comm: syz.2.83 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 106.765602][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.777001][ T5589] Call Trace: [ 106.781612][ T5589] [ 106.784563][ T5589] dump_stack_lvl+0x241/0x360 [ 106.789458][ T5589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.795473][ T5589] ? __pfx__printk+0x10/0x10 [ 106.800294][ T5589] should_fail_ex+0x3b0/0x4e0 [ 106.805034][ T5589] prepare_alloc_pages+0x1da/0x5d0 [ 106.810418][ T5589] __alloc_pages_noprof+0x166/0x6c0 [ 106.815822][ T5589] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 106.821876][ T5589] alloc_pages_mpol_noprof+0x3e8/0x680 [ 106.827400][ T5589] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 106.834033][ T5589] vma_alloc_folio_noprof+0x12e/0x230 [ 106.839563][ T5589] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 106.845527][ T5589] folio_prealloc+0x31/0x170 [ 106.850610][ T5589] handle_pte_fault+0x24dd/0x6800 [ 106.855925][ T5589] ? mark_lock+0x9a/0x360 [ 106.860312][ T5589] ? mark_lock+0x9a/0x360 [ 106.865064][ T5589] ? __pfx_handle_pte_fault+0x10/0x10 [ 106.870566][ T5589] ? __lock_acquire+0x1384/0x2050 [ 106.876511][ T5589] ? __pfx_lock_acquire+0x10/0x10 [ 106.881657][ T5589] ? count_memcg_event_mm+0x94/0x420 [ 106.886972][ T5589] ? do_raw_spin_lock+0x14f/0x370 [ 106.892240][ T5589] handle_mm_fault+0x1106/0x1bb0 [ 106.897365][ T5589] ? __pfx_handle_mm_fault+0x10/0x10 [ 106.903280][ T5589] ? follow_page_pte+0x9cc/0x2010 [ 106.908519][ T5589] ? __pfx_find_vma+0x10/0x10 [ 106.913312][ T5589] ? vma_is_secretmem+0xd/0x50 [ 106.918107][ T5589] ? check_vma_flags+0x52b/0x5a0 [ 106.923157][ T5589] __get_user_pages+0x1b16/0x48d0 [ 106.928599][ T5589] ? __pfx_validate_chain+0x10/0x10 [ 106.933922][ T5589] ? __pfx___get_user_pages+0x10/0x10 [ 106.939394][ T5589] ? __pfx_down_read_killable+0x10/0x10 [ 106.945041][ T5589] __gup_longterm_locked+0x3ba/0x17d0 [ 106.950805][ T5589] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.957364][ T5589] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.964337][ T5589] gup_fast_fallback+0x2748/0x2b60 [ 106.969973][ T5589] ? __pfx_lock_release+0x10/0x10 [ 106.975277][ T5589] ? __pfx_gup_fast_fallback+0x10/0x10 [ 106.980906][ T5589] ? unwind_next_frame+0x18e6/0x22d0 [ 106.986371][ T5589] ? preempt_count_add+0x93/0x190 [ 106.991452][ T5589] ? is_bpf_text_address+0x26/0x2a0 [ 106.997088][ T5589] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 107.003489][ T5589] ? kernel_text_address+0xa7/0xe0 [ 107.008778][ T5589] ? __kernel_text_address+0xd/0x40 [ 107.014021][ T5589] ? unwind_get_return_address+0x4d/0x90 [ 107.020048][ T5589] ? arch_stack_walk+0xfd/0x150 [ 107.024940][ T5589] ? is_valid_gup_args+0x124/0x200 [ 107.030116][ T5589] pin_user_pages_fast+0xcc/0x160 [ 107.035189][ T5589] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 107.040859][ T5589] ? __pfx_stack_trace_save+0x10/0x10 [ 107.046269][ T5589] pfn_reader_user_pin+0x432/0x850 [ 107.051974][ T5589] iopt_pages_fill_xarray+0x7f2/0x1760 [ 107.057681][ T5589] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 107.063832][ T5589] ? __kasan_kmalloc+0x98/0xb0 [ 107.068660][ T5589] ? iopt_area_add_access+0x20c/0x430 [ 107.074077][ T5589] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 107.079673][ T5589] iopt_area_add_access+0x22a/0x430 [ 107.085121][ T5589] iommufd_access_pin_pages+0x786/0xd40 [ 107.091335][ T5589] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 107.098002][ T5589] ? __kmalloc_node_noprof+0x247/0x440 [ 107.103505][ T5589] ? __kvmalloc_node_noprof+0x72/0x190 [ 107.109028][ T5589] iommufd_test+0x2ce8/0x3e30 [ 107.113788][ T5589] ? __pfx_iommufd_test+0x10/0x10 [ 107.119035][ T5589] ? __pfx___might_resched+0x10/0x10 [ 107.124456][ T5589] ? __might_fault+0xaa/0x120 [ 107.129191][ T5589] ? __pfx_lock_release+0x10/0x10 [ 107.134351][ T5589] ? __might_fault+0xc6/0x120 [ 107.139254][ T5589] iommufd_fops_ioctl+0x4d6/0x5a0 [ 107.144437][ T5589] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 107.150755][ T5589] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 107.156966][ T5589] __se_sys_ioctl+0xf9/0x170 [ 107.162201][ T5589] do_syscall_64+0xf3/0x230 [ 107.166747][ T5589] ? clear_bhb_loop+0x35/0x90 [ 107.171649][ T5589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.177940][ T5589] RIP: 0033:0x7f91fcf7df39 [ 107.182623][ T5589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.204432][ T5589] RSP: 002b:00007f91fde33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.212898][ T5589] RAX: ffffffffffffffda RBX: 00007f91fd135f80 RCX: 00007f91fcf7df39 [ 107.220907][ T5589] RDX: 0000000020000100 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 107.229025][ T5589] RBP: 00007f91fde33090 R08: 0000000000000000 R09: 0000000000000000 [ 107.237206][ T5589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.245226][ T5589] R13: 0000000000000000 R14: 00007f91fd135f80 R15: 00007f91fd25fa28 [ 107.253337][ T5589] [ 107.256407][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.275656][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 107.295611][ T46] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 107.307819][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.317824][ T46] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 107.351011][ T5285] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.368878][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.412085][ T46] usb 5-1: config 0 descriptor?? [ 107.550911][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 107.565558][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.596068][ T5285] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.627842][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.675784][ T46] usb 5-1: string descriptor 0 read error: -71 [ 107.695082][ T46] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 107.725901][ T5285] usb 1-1: config 0 descriptor?? [ 107.744443][ T46] usb 5-1: USB disconnect, device number 14 [ 107.968678][ T5285] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 107.995914][ T5593] x_tables: duplicate underflow at hook 1 [ 108.258863][ T938] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.281413][ T5236] Bluetooth: hci0: command tx timeout [ 108.425045][ T938] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 108.439475][ T938] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 108.460034][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.497849][ T938] usb 3-1: Product: syz [ 108.514513][ T938] usb 3-1: Manufacturer: syz [ 108.544090][ T938] usb 3-1: SerialNumber: syz [ 108.568809][ T938] usb 3-1: config 0 descriptor?? [ 108.677775][ T52] team0 (unregistering): Port device team_slave_1 removed [ 108.947602][ T52] team0 (unregistering): Port device team_slave_0 removed [ 109.126404][ T5285] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.233453][ T938] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 109.344122][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 109.357533][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.400947][ T5285] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.412250][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.435364][ T5593] binder: BINDER_SET_CONTEXT_MGR already set [ 109.445697][ T5593] binder: 5591:5593 ioctl 4018620d 20000040 returned -16 [ 109.461861][ T5285] usb 5-1: config 0 descriptor?? [ 109.716612][ T5285] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 109.750388][ T5315] usb 1-1: USB disconnect, device number 6 [ 109.750438][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 109.898963][ T5315] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 110.914367][ T5285] usb 5-1: USB disconnect, device number 15 [ 110.936171][ T5285] iowarrior 5-1:0.0: I/O-Warror #1 now disconnected [ 111.207050][ T5573] IPv6: Can't replace route, no match found [ 111.215075][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.227474][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.238253][ T5514] bridge_slave_0: entered allmulticast mode [ 111.261196][ T5514] bridge_slave_0: entered promiscuous mode [ 111.295332][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.303421][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.320626][ T5514] bridge_slave_1: entered allmulticast mode [ 111.348358][ T5514] bridge_slave_1: entered promiscuous mode [ 111.435766][ T5592] tipc: Enabling of bearer rejected, failed to enable media [ 111.498354][ T938] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 111.548184][ T938] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 111.589743][ T938] asix 3-1:0.0: probe with driver asix failed with error -71 [ 111.749774][ T938] usb 3-1: USB disconnect, device number 8 [ 111.971878][ T5514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.004441][ T5514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.151378][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 112.275410][ T5514] team0: Port device team_slave_0 added [ 112.291001][ T5514] team0: Port device team_slave_1 added [ 112.550928][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 112.646525][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.657902][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.677987][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 112.689028][ T8] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 112.731111][ T8] usb 5-1: Manufacturer: syz [ 112.745400][ T8] usb 5-1: config 0 descriptor?? [ 112.759703][ T8] appledisplay 5-1:0.0: Could not find int-in endpoint [ 112.771970][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 112.898113][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.940855][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.129373][ T5514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.179777][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.197247][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.272844][ T5514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.330862][ T5288] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.397294][ T5652] IPv6: Can't replace route, no match found [ 113.452042][ T5514] hsr_slave_0: entered promiscuous mode [ 113.460409][ T5514] hsr_slave_1: entered promiscuous mode [ 113.562324][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 113.620867][ T5288] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 113.628546][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.715495][ T5288] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 113.726935][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.778580][ T5288] usb 2-1: config 0 descriptor?? [ 113.996477][ T5288] usb 2-1: string descriptor 0 read error: -71 [ 114.004602][ T5288] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 114.078612][ T5288] usb 2-1: USB disconnect, device number 10 [ 114.227162][ T5665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.631183][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.826961][ T46] usb 1-1: no configurations [ 114.835594][ T5288] usb 5-1: USB disconnect, device number 16 [ 114.874263][ T46] usb 1-1: can't read configurations, error -22 [ 114.944170][ T5679] netlink: 192 bytes leftover after parsing attributes in process `syz.1.99'. [ 114.956695][ T5677] tipc: Enabling of bearer rejected, failed to enable media [ 115.031608][ T5677] x_tables: duplicate underflow at hook 1 [ 115.044174][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.282235][ T46] usb 1-1: no configurations [ 115.288705][ T46] usb 1-1: can't read configurations, error -22 [ 115.307867][ T46] usb usb1-port1: attempt power cycle [ 115.330955][ T2634] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.467297][ T5514] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.495903][ T2634] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 115.513410][ T5514] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.554395][ T5514] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.598089][ T2634] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 115.650933][ T5285] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 115.660645][ T5514] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.734568][ T2634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.771056][ T46] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.780201][ T2634] usb 3-1: Product: syz [ 115.799172][ T2634] usb 3-1: Manufacturer: syz [ 115.817162][ T46] usb 1-1: no configurations [ 115.827346][ T46] usb 1-1: can't read configurations, error -22 [ 115.844136][ T2634] usb 3-1: SerialNumber: syz [ 115.882983][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 115.893547][ T2634] usb 3-1: config 0 descriptor?? [ 115.926599][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.064041][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.122240][ T5285] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.136960][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.153534][ T46] usb 1-1: no configurations [ 116.164373][ T46] usb 1-1: can't read configurations, error -22 [ 116.172222][ T5285] usb 5-1: config 0 descriptor?? [ 116.204251][ T46] usb usb1-port1: unable to enumerate USB device [ 116.390445][ T5514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.429486][ T5285] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.565746][ T2634] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 116.618141][ T5514] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.742779][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.750325][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.782617][ T5677] binder: BINDER_SET_CONTEXT_MGR already set [ 116.826219][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.834254][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.846837][ T5677] binder: 5676:5677 ioctl 4018620d 20000040 returned -16 [ 116.951171][ T2634] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 116.991283][ T2634] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 117.003272][ T2634] asix 3-1:0.0: probe with driver asix failed with error -71 [ 117.021265][ T2634] usb 3-1: USB disconnect, device number 9 [ 117.078266][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 117.099833][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 117.489693][ T5707] netlink: 'syz.1.106': attribute type 9 has an invalid length. [ 117.774652][ T2634] usb 5-1: USB disconnect, device number 17 [ 117.782303][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 117.808569][ T2634] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 117.904529][ T5514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.076998][ T5514] veth0_vlan: entered promiscuous mode [ 118.116077][ T5514] veth1_vlan: entered promiscuous mode [ 118.252086][ T5725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.263784][ T5514] veth0_macvtap: entered promiscuous mode [ 118.290967][ T5293] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 118.303412][ T5514] veth1_macvtap: entered promiscuous mode [ 118.432224][ T5514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.450357][ T5514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.472262][ T5514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.504451][ T5514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.514607][ T5293] usb 1-1: Using ep0 maxpacket: 16 [ 118.516177][ T5514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.547602][ T5514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.572037][ T5293] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 118.576031][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.579950][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.580003][ T5293] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 118.640517][ T5514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.691626][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.698055][ T5514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.713782][ T5514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.730948][ T2634] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.740494][ T5285] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 118.751171][ T5514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.767454][ T5514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.794008][ T5514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.816959][ T5293] usb 1-1: config 0 descriptor?? [ 118.843722][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.895326][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.909672][ T2634] usb 3-1: no configurations [ 118.922305][ T5514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.940947][ T2634] usb 3-1: can't read configurations, error -22 [ 118.968706][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 119.003632][ T5514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.021317][ T5285] usb 2-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 119.037304][ T5514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.056131][ T5293] usb 1-1: string descriptor 0 read error: -71 [ 119.056632][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.082703][ T5514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.100516][ T5293] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 119.115117][ T5733] IPv6: Can't replace route, no match found [ 119.130963][ T2634] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.132612][ T5293] usb 1-1: USB disconnect, device number 11 [ 119.177516][ T5285] usb 2-1: config 0 descriptor?? [ 119.374943][ T2634] usb 3-1: no configurations [ 119.400051][ T2634] usb 3-1: can't read configurations, error -22 [ 119.442595][ T2634] usb usb3-port1: attempt power cycle [ 119.449674][ T5728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.496081][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.507516][ T5728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.527714][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.549874][ T5285] usbhid 2-1:0.0: can't add hid device: -71 [ 119.622324][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.649463][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.698711][ T5285] usb 2-1: USB disconnect, device number 11 [ 119.712474][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.840988][ T2634] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.887918][ T2634] usb 3-1: no configurations [ 119.908384][ T2634] usb 3-1: can't read configurations, error -22 [ 120.071156][ T2634] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.112151][ T5285] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 120.183818][ T2634] usb 3-1: no configurations [ 120.188754][ T2634] usb 3-1: can't read configurations, error -22 [ 120.281733][ T2634] usb usb3-port1: unable to enumerate USB device [ 120.384097][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 120.397593][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.485355][ T5285] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 120.510925][ T5289] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 120.567339][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.120172][ T5289] usb 5-1: Using ep0 maxpacket: 8 [ 121.371610][ T5285] usb 2-1: config 0 descriptor?? [ 122.205935][ T5285] rc_core: IR keymap rc-xbox-dvd not found [ 122.226401][ T5285] Registered IR keymap rc-empty [ 122.246709][ T5289] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 122.297940][ T5285] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 122.420943][ T5289] usb 5-1: config 0 has no interface number 0 [ 122.540956][ T5289] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.897083][ T5285] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 122.962643][ T5289] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 123.165069][ T5285] xbox_remote 2-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 123.198011][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 123.276579][ T5289] usb 5-1: string descriptor 0 read error: -71 [ 123.301609][ T5289] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0 [ 123.321534][ T5285] input: failed to attach handler kbd to device input9, error: -5 [ 123.394673][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.427022][ T5285] usb 2-1: USB disconnect, device number 12 [ 123.508032][ T5289] usb 5-1: config 0 descriptor?? [ 123.585929][ T5289] usb 5-1: can't set config #0, error -71 [ 123.628046][ T5289] usb 5-1: USB disconnect, device number 18 [ 123.651168][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 124.059052][ T5778] IPv6: Can't replace route, no match found [ 124.205113][ T5289] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 124.224183][ T5780] netlink: 'syz.2.118': attribute type 9 has an invalid length. [ 124.414725][ T5289] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 124.468589][ T5289] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.540955][ T5289] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 124.604697][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.018650][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 125.018674][ T29] audit: type=1326 audit(1727380879.451:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.4.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94ca17df39 code=0x0 [ 134.831277][ C1] sched: DL replenish lagged too much [ 145.904243][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.916759][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.079023][ T5801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 231.160715][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 231.176887][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5774/1:b..l [ 231.185250][ C1] rcu: (detected by 1, t=10502 jiffies, g=14885, q=613260 ncpus=2) [ 231.193290][ C1] task:syz.0.120 state:R running task stack:23680 pid:5774 tgid:5773 ppid:5252 flags:0x00000006 [ 231.206186][ C1] Call Trace: [ 231.209550][ C1] [ 231.212525][ C1] __schedule+0x1895/0x4b30 [ 231.217268][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 231.221915][ C1] ? ip_rcv_finish+0x406/0x560 [ 231.226744][ C1] ? __pfx___schedule+0x10/0x10 [ 231.231733][ C1] ? NF_HOOK+0x3a4/0x450 [ 231.236033][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.242104][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 231.247533][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 231.252694][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 231.258463][ C1] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 231.264566][ C1] ? trace_irq_disable+0x2c/0x120 [ 231.269608][ C1] irqentry_exit+0x5e/0x90 [ 231.274133][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.280159][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 231.286297][ C1] Code: 8c e8 24 0f 6d 0a 65 66 8b 05 e4 82 ac 7e 66 85 c0 75 5d bf 01 00 00 00 e8 8d af 0b 00 e8 c8 1f 45 00 fb 65 8b 05 a8 82 ac 7e <85> c0 75 05 e8 47 61 a9 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 231.306047][ C1] RSP: 0018:ffffc90003f37720 EFLAGS: 00000282 [ 231.312202][ C1] RAX: 0000000000000000 RBX: 1ffff920007e6ee8 RCX: ffffffff9a3bf903 [ 231.320232][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aca40 RDI: ffffffff8c6100a0 [ 231.328669][ C1] RBP: ffffc90003f377d0 R08: ffffffff901ce56f R09: 1ffffffff2039cad [ 231.336690][ C1] R10: dffffc0000000000 R11: fffffbfff2039cae R12: dffffc0000000000 [ 231.344704][ C1] R13: 1ffff920007e6eec R14: ffffc90003f37760 R15: 0000000000000200 [ 231.352748][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 231.358269][ C1] ? tun_rx_batched+0x160/0x8f0 [ 231.363160][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 231.368918][ C1] ? tun_rx_batched+0x160/0x8f0 [ 231.373793][ C1] tun_rx_batched+0x732/0x8f0 [ 231.378516][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.385118][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 231.390199][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 231.395548][ C1] tun_get_user+0x3056/0x47e0 [ 231.400276][ C1] ? tun_get_user+0x2b44/0x47e0 [ 231.405182][ C1] ? __lock_acquire+0x1384/0x2050 [ 231.410352][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 231.415424][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 231.420997][ C1] ? tun_get+0x1e/0x2f0 [ 231.425195][ C1] ? __pfx_lock_release+0x10/0x10 [ 231.430408][ C1] ? tun_get+0x1e/0x2f0 [ 231.434603][ C1] ? tun_get+0x27d/0x2f0 [ 231.438890][ C1] tun_chr_write_iter+0x10d/0x1f0 [ 231.443963][ C1] vfs_write+0xa6d/0xc90 [ 231.448271][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 231.453945][ C1] ? __pfx_vfs_write+0x10/0x10 [ 231.458777][ C1] ? fdget_pos+0x19a/0x320 [ 231.463234][ C1] ksys_write+0x183/0x2b0 [ 231.467601][ C1] ? __pfx_ksys_write+0x10/0x10 [ 231.472693][ C1] ? do_syscall_64+0x100/0x230 [ 231.477726][ C1] ? do_syscall_64+0xb6/0x230 [ 231.482447][ C1] do_syscall_64+0xf3/0x230 [ 231.486995][ C1] ? clear_bhb_loop+0x35/0x90 [ 231.491895][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.498003][ C1] RIP: 0033:0x7f8e2557ca1f [ 231.502559][ C1] RSP: 002b:00007f8e263a4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 231.511018][ C1] RAX: ffffffffffffffda RBX: 00007f8e25735f80 RCX: 00007f8e2557ca1f [ 231.519131][ C1] RDX: 000000000000003e RSI: 0000000020000100 RDI: 00000000000000c8 [ 231.527189][ C1] RBP: 00007f8e255f0216 R08: 0000000000000000 R09: 0000000000000000 [ 231.535203][ C1] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000000 [ 231.543212][ C1] R13: 0000000000000000 R14: 00007f8e25735f80 R15: 00007f8e2585fa28 [ 231.551248][ C1] [ 231.554748][ C1] rcu: rcu_preempt kthread starved for 8234 jiffies! g14885 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 231.565882][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 231.575971][ C1] rcu: RCU grace-period kthread stack dump: [ 231.581888][ C1] task:rcu_preempt state:R running task stack:26144 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 231.593697][ C1] Call Trace: [ 231.597006][ C1] [ 231.599976][ C1] __schedule+0x1895/0x4b30 [ 231.604561][ C1] ? __pfx___schedule+0x10/0x10 [ 231.609468][ C1] ? __pfx_lock_release+0x10/0x10 [ 231.614539][ C1] ? __asan_memset+0x23/0x50 [ 231.619152][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 231.624991][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.631469][ C1] ? schedule+0x90/0x320 [ 231.635756][ C1] schedule+0x14b/0x320 [ 231.639955][ C1] schedule_timeout+0x1be/0x310 [ 231.644856][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 231.650283][ C1] ? __pfx_process_timeout+0x10/0x10 [ 231.655623][ C1] ? prepare_to_swait_event+0x330/0x350 [ 231.661234][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 231.666117][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 231.671347][ C1] ? rcu_gp_init+0x1256/0x1630 [ 231.676159][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 231.681152][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 231.687368][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 231.692964][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.698907][ C1] ? finish_swait+0xd4/0x1e0 [ 231.703550][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 231.708186][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.713421][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.719529][ C1] ? __kthread_parkme+0x169/0x1d0 [ 231.724588][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.729824][ C1] kthread+0x2f0/0x390 [ 231.733930][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.739166][ C1] ? __pfx_kthread+0x10/0x10 [ 231.743797][ C1] ret_from_fork+0x4b/0x80 [ 231.748259][ C1] ? __pfx_kthread+0x10/0x10 [ 231.752885][ C1] ret_from_fork_asm+0x1a/0x30 [ 231.757832][ C1] [ 231.760993][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 231.767443][ C1] Sending NMI from CPU 1 to CPUs 0: [ 231.772687][ C0] NMI backtrace for cpu 0 [ 231.772703][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 231.772723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.772733][ C0] RIP: 0010:debug_check_no_obj_freed+0x2cc/0x580 [ 231.772765][ C0] Code: 00 00 49 89 c4 49 89 c5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 4c 89 e7 e8 18 3c 3c fd 49 8b 04 24 <48> 89 44 24 38 49 8d 5c 24 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 [ 231.772780][ C0] RSP: 0018:ffffc90000006f20 EFLAGS: 00000046 [ 231.772796][ C0] RAX: ffff8880a8fc4188 RBX: ffff8880a8fad3d0 RCX: dffffc0000000000 [ 231.772810][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000006e00 [ 231.772822][ C0] RBP: ffffc90000007070 R08: 0000000000000003 R09: fffff52000000dc0 [ 231.772835][ C0] R10: dffffc0000000000 R11: fffff52000000dc0 R12: ffff8880a8fc44d0 [ 231.772848][ C0] R13: 1ffff110151f889a R14: ffff8880a8fcbc50 R15: 0000000000000014 [ 231.772861][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 231.772875][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.772888][ C0] CR2: 00007f8e26382f98 CR3: 00000000307a6000 CR4: 00000000003526f0 [ 231.772904][ C0] Call Trace: [ 231.772910][ C0] [ 231.772917][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 231.772950][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 231.772977][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 231.773003][ C0] ? nmi_handle+0x2a/0x5a0 [ 231.773027][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 231.773050][ C0] ? nmi_handle+0x14f/0x5a0 [ 231.773066][ C0] ? nmi_handle+0x2a/0x5a0 [ 231.773083][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 231.773107][ C0] ? default_do_nmi+0x63/0x160 [ 231.773133][ C0] ? exc_nmi+0x123/0x1f0 [ 231.773159][ C0] ? end_repeat_nmi+0xf/0x53 [ 231.773186][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 231.773210][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 231.773235][ C0] ? debug_check_no_obj_freed+0x2cc/0x580 [ 231.773258][ C0] [ 231.773264][ C0] [ 231.773276][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 231.773305][ C0] ? skb_release_data+0x6a0/0x8a0 [ 231.773330][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 231.773351][ C0] kmem_cache_free+0x11f/0x420 [ 231.773378][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 231.773406][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 231.773427][ C0] ? nf_ip_checksum+0x13a/0x500 [ 231.773450][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 231.773473][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 231.773496][ C0] ? __pfx_validate_chain+0x10/0x10 [ 231.773520][ C0] nft_do_chain+0x4ad/0x1da0 [ 231.773547][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 231.773566][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 231.773603][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 231.773628][ C0] nft_do_chain_inet+0x418/0x6b0 [ 231.773650][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 231.773669][ C0] ? ipt_do_table+0x312/0x1860 [ 231.773697][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 231.773716][ C0] nf_hook_slow+0xc3/0x220 [ 231.773733][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 231.773757][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 231.773782][ C0] NF_HOOK+0x29e/0x450 [ 231.773806][ C0] ? NF_HOOK+0x9a/0x450 [ 231.773829][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 231.773853][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 231.773880][ C0] ? ip_rcv_finish+0x406/0x560 [ 231.773905][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 231.773928][ C0] NF_HOOK+0x3a4/0x450 [ 231.773950][ C0] ? __lock_acquire+0x1384/0x2050 [ 231.773976][ C0] ? NF_HOOK+0x9a/0x450 [ 231.773998][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 231.774029][ C0] ? ip_rcv_core+0x801/0xd10 [ 231.774053][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 231.774081][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 231.774105][ C0] __netif_receive_skb+0x2bf/0x650 [ 231.774134][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 231.774159][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 231.774184][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.774210][ C0] ? __pfx_lock_release+0x10/0x10 [ 231.774235][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 231.774259][ C0] process_backlog+0x662/0x15b0 [ 231.774279][ C0] ? process_backlog+0x33b/0x15b0 [ 231.774300][ C0] ? __pfx_process_backlog+0x10/0x10 [ 231.774317][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.774343][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.774370][ C0] __napi_poll+0xcb/0x490 [ 231.774402][ C0] net_rx_action+0x89b/0x1240 [ 231.774429][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 231.774445][ C0] ? __run_timer_base+0x178/0x8e0 [ 231.774467][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 231.774508][ C0] handle_softirqs+0x2c5/0x980 [ 231.774533][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 231.774556][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 231.774580][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 231.774608][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 231.774630][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 231.774657][ C0] irq_exit_rcu+0x9/0x30 [ 231.774677][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 231.774696][ C0] [ 231.774701][ C0] [ 231.774707][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.774728][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 231.774752][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 95 5b a6 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 231.774766][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 231.774780][ C0] RAX: ffffffff8e694640 RBX: ffff8881442b1864 RCX: 000000000010d5a1 [ 231.774793][ C0] RDX: 0000000000000001 RSI: ffff8881442b1800 RDI: ffff8881442b1864 [ 231.774805][ C0] RBP: 000000000003a9b8 R08: ffff8880b8637e9b R09: 1ffff110170c6fd3 [ 231.774817][ C0] R10: dffffc0000000000 R11: ffffffff8bc477a0 R12: ffff8880217b0000 [ 231.774830][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f12e320 [ 231.774844][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 231.774872][ C0] acpi_idle_enter+0xe4/0x140 [ 231.774897][ C0] cpuidle_enter_state+0x109/0x470 [ 231.774919][ C0] ? __pfx_menu_select+0x10/0x10 [ 231.774939][ C0] cpuidle_enter+0x5d/0xa0 [ 231.774964][ C0] do_idle+0x375/0x5d0 [ 231.774988][ C0] ? __pfx_do_idle+0x10/0x10 [ 231.775009][ C0] ? default_enter_idle+0x10/0x2b [ 231.775038][ C0] ? rest_init+0x31/0x300 [ 231.775061][ C0] cpu_startup_entry+0x42/0x60 [ 231.775082][ C0] rest_init+0x2dc/0x300 [ 231.775104][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 231.775131][ C0] start_kernel+0x47f/0x500 [ 231.775151][ C0] x86_64_start_reservations+0x2a/0x30 [ 231.775174][ C0] x86_64_start_kernel+0x9f/0xa0 [ 231.775195][ C0] common_startup_64+0x13e/0x147 [ 231.775222][ C0] [ 240.785682][ T4683] udevd[4683]: worker [5240] /devices/platform/regulatory.0 is taking a long time