last executing test programs: 5.558940364s ago: executing program 4 (id=371): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0884123, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x800c5012, &(0x7f00000003c0)) 5.336366525s ago: executing program 4 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10108c0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xffffffb5) 5.107414129s ago: executing program 4 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x40000, 0x0}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0x8010aa01, 0x0) userfaultfd(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb502000008000000b7030000000000008500000073000000850000007d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000480)="4a9d1efbc6a78be0b9547ed387db", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(0xffffffffffffffff, 0x0, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b1b, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.936618889s ago: executing program 4 (id=379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x6, 0xe}, {0x3, 0x6, [0xf093, 0x3, 0x4, 0x8, 0x200]}}}}, 0x1b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_usb_control_io(r5, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x5, {0x5, 0x0, "849517"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_clone(0x6329100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="67e3850f20d86635080000000f22d8bad004b8e6f7ef360fc7b74648baf80c66b8bd9acf8b66efbafc0cb081ee66b9c30200000f32b8d8000f00d0ba2100ec0f01190f35", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.901281313s ago: executing program 2 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x1a8, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x30, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, 0x0, 0x0) gettid() ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 3.132014168s ago: executing program 2 (id=387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x48}}, 0x0) 3.083249498s ago: executing program 2 (id=388): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @alu={0x7, 0x0, 0x8, 0xf, 0x6, 0x6, 0x4}, @map_fd={0x18, 0xa}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ldst={0x0, 0x1, 0x6, 0x8, 0xa, 0x18, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000840)=""/196, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5671}, 0x62) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x10001, 0x7ff, 0x4, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xf7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x3, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00000000000000000000000000000000000000000000000000000000000000000000000200"/144]}, 0x108) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xd, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r6, @ANYRES64=r0, @ANYRES16=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffb7, 0x0, 0x0, 0x0}, 0x90) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x4000}, {r9, 0x20}], 0x2, &(0x7f0000000240), 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}]}}}]}, 0x40}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r15, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r17, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)={0x8c, r15, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "08dd68ffb835779ad5387d00a200"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7f2280f30c5706101cff941cdb4ffbda2bd95e9d7bca389c"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xe}]}, 0x8c}}, 0x48008) 3.012749631s ago: executing program 1 (id=390): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.800075424s ago: executing program 1 (id=393): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.579854915s ago: executing program 0 (id=394): r0 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000300)=""/246, 0xf6, 0x0) 2.579408282s ago: executing program 1 (id=395): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x92}}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000]}, 0x45c) 2.575174716s ago: executing program 2 (id=396): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24000cc5}, 0x20000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="a8", 0x1}) fchdir(r0) close(r2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x40) fchdir(r0) r4 = getpgid(0x0) syz_open_procfs(r4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r5) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 2.486376586s ago: executing program 3 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x128, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaf}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004000}, 0x4001) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x9}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x1, 0xb, 0x9}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'bond0\x00'}) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x1ffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000007c0)=[&(0x7f0000000600)='mptcp_pm\x00', &(0x7f0000000640)='mptcp_pm\x00'], 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f0000002940), &(0x7f0000002980)=0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x0) 2.392471391s ago: executing program 0 (id=398): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8992, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x105043, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc}) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004480)=[{0x0}], 0x1}}], 0x2, 0x10080, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) syz_emit_ethernet(0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaae58f09a627fe886c49cac7e39c898baac581cdd9bf51a0ce833fe479c4b59bab0c70c1e4c63c41716d97f4efe33135bc9425c77f3e56376de06d8f6f568872dc7acccc237504682eaaab3484e0770046b9a9e2060132c5c6dc5691b520dc"], &(0x7f0000000180)={0x2000000, 0x2, [0x684, 0x260, 0xaa7]}) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000ac0)={{0x100006, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) keyctl$set_timeout(0xf, r4, 0xa9d) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f0000000000), 0x4) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000040)=0x2a, 0x4) 2.353674619s ago: executing program 1 (id=399): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa0}, 0x15) r1 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r1, 0x20000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000c80)="b9ff060000000000000014f088a8", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.031526472s ago: executing program 3 (id=400): r0 = socket(0x10, 0x0, 0x3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x35e, 0x2, 0x8, 0x804}, 0x10) r1 = socket$inet6(0xa, 0x80000, 0xc0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) setgroups(0x0, 0x0) socket(0x10, 0x2, 0xfffffffe) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000cab000)=0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1.670524502s ago: executing program 3 (id=401): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)={0x5c, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x3a, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="e1295128a64cfd80663b26b5bc9db172f6f2ee8a0b532813682361a3058ded595f40ed36a04635a2adede61be8cc"]}]}, 0x5c}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 1.459928723s ago: executing program 4 (id=402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) set_mempolicy(0x3, 0x0, 0x7) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) mlockall(0x2) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0xe) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000308000/0x2000)=nil, 0x6000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x500}, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 1.247951823s ago: executing program 1 (id=403): syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711000000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) fanotify_init(0x0, 0x40000) syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@mcast2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x100000000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffc, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x0, @in6=@mcast2, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000300"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800900010069706970000000000400028008000300e0000002"], 0x3c}, 0x1, 0x2}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "4a0e832fc4ca2de8", "9a801d3b9d58aa6fa9b75cea7c96ac61e08c7cbf38d447282fc56b8921a92288", "33978cb0", "515a84912da7ec80"}, 0x38) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000003c0)={0x1, @win={{0x23, 0x4a, 0x5c, 0xffff}, 0xe, 0x9, &(0x7f0000000180)={{0xff80000, 0x9, 0x8, 0x8000}}, 0x7, &(0x7f0000000fc0)="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", 0x40}}) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) 1.210011338s ago: executing program 3 (id=404): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="ca", 0x1}, {&(0x7f0000000500), 0xffffff42}], 0x2}}], 0x1, 0x0) 1.190389392s ago: executing program 0 (id=405): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000008500)=[{&(0x7f0000008440)=""/158, 0x9e}], 0x1, 0x0, 0x0) 960.322641ms ago: executing program 0 (id=406): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007110b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 713.673998ms ago: executing program 0 (id=407): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000380)) 616.000076ms ago: executing program 2 (id=408): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x40000001) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x80045005, 0x0) 475.829154ms ago: executing program 0 (id=409): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004058043801000000000001090224000100000000090400000103000000092100050000000000000081030000000000"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) io_setup(0x23, &(0x7f0000000280)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x1, &(0x7f0000000040)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) ioctl$BINDER_WRITE_READ(r9, 0x40046208, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x22c8, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022050000000b5bec236c7df4df9260614b727614854c2d98a8b0b59ab27f2214ca10fb9e1e0132b32540bcd78cdacde9683f36ba17ccb63a9eacaebff85db50c43261b097cdac0e2aff95069fce531c685c4dd26e70da6a2b616851070df3c74c68944c2f437b089a10e16fae083df2957f68504dddb419961950f42b2094fd854c450203f940c68d625a5b7373bef02903e1ffef571efa5ab67d4022afae5e64582b0e2"], 0x0}, 0x0) 365.981259ms ago: executing program 2 (id=410): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xc0, 0x78, 0xa, 0x40, 0x112a, 0x1, 0x9e7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa, 0x6b, 0xc5, 0x0, [], [{{0x9, 0x5, 0x6, 0x22}}]}}]}}]}}, 0x0) 337.848418ms ago: executing program 1 (id=411): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) syz_clone(0x44104380, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r2 = timerfd_create(0x0, 0x0) r3 = epoll_create1(0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080c4}, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x208100, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0xcc, r8, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xa, 0x5c}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "d4046e5af9de81fce9cef0c2ee8660"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1f2c0e6d632463fa445120c886"}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6e1ec4e675b8af08dff9cbdc99"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xb, 0x4, "41d5d83f2ab2e8"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2d0b668ef3"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x4044011) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0xc9d7, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r11, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 227.586148ms ago: executing program 3 (id=412): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0x6, 0x1f) r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername$inet(r0, 0x0, 0x0) 204.006065ms ago: executing program 4 (id=413): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xc, 0x8}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x0, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) setresuid(0x0, 0x0, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xc, {"a2e3ad21ed0d52f91b5d520987f70e06d038e7ff7fc6e5539b3247298b089b0708356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x1fffffffffffffc9, &(0x7f0000000280)=[{0x6, 0x1, 0x1f, 0x11}]}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shutdown(r8, 0x1) epoll_create1(0x80000) 0s ago: executing program 3 (id=414): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201064dbd81"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x96, @string={0x96, 0x3, "62745a5df96bf33c9402c17c5e65f5d90490453157158a59261b8d13ba0b2840b3ef402565eb51dde7793dd5d638733ff66442953dde6e308030d07f83735355e032521dd6ed47abc04ab2080fec874b79f4648129fb72938f2cd7a5efbabcb9c3794291bd2802ffd4c43b4d7109f80b30732d37b635aeb2b40fb0dcaef5d568a9ec9f674e9ac832162303989c4a1febacdb7ade"}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 52.437083][ T5202] cgroup: Unknown subsys name 'net' [ 52.571235][ T5202] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.903163][ T5202] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.246775][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.264317][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.274380][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.281735][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.289610][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.297951][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.305772][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.317771][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.326865][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.328960][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.343251][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.352214][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.352397][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.360214][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.379711][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.381171][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.404534][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.406426][ T5216] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.423707][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.430879][ T5216] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.438750][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.446988][ T5216] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.450661][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.454361][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.461177][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.462062][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.469498][ T5216] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.475966][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.485321][ T5216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.490275][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.002974][ T5213] chnl_net:caif_netlink_parms(): no params data found [ 57.081386][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 57.185800][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 57.222605][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 57.315718][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 57.327295][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.335060][ T5213] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.342324][ T5213] bridge_slave_0: entered allmulticast mode [ 57.349929][ T5213] bridge_slave_0: entered promiscuous mode [ 57.358422][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.366856][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.374382][ T5228] bridge_slave_0: entered allmulticast mode [ 57.381482][ T5228] bridge_slave_0: entered promiscuous mode [ 57.427967][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.438075][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.445532][ T5213] bridge_slave_1: entered allmulticast mode [ 57.452246][ T5213] bridge_slave_1: entered promiscuous mode [ 57.469345][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.476512][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.483819][ T5228] bridge_slave_1: entered allmulticast mode [ 57.490493][ T5228] bridge_slave_1: entered promiscuous mode [ 57.524488][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.531654][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.539328][ T5218] bridge_slave_0: entered allmulticast mode [ 57.546880][ T5218] bridge_slave_0: entered promiscuous mode [ 57.578654][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.616997][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.624269][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.631446][ T5218] bridge_slave_1: entered allmulticast mode [ 57.638522][ T5218] bridge_slave_1: entered promiscuous mode [ 57.648125][ T5213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.664350][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.713012][ T5213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.755049][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.762191][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.770231][ T5222] bridge_slave_0: entered allmulticast mode [ 57.778846][ T5222] bridge_slave_0: entered promiscuous mode [ 57.798866][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.822743][ T5228] team0: Port device team_slave_0 added [ 57.829274][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.836673][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.844350][ T5214] bridge_slave_0: entered allmulticast mode [ 57.851021][ T5214] bridge_slave_0: entered promiscuous mode [ 57.860298][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.867520][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.874738][ T5214] bridge_slave_1: entered allmulticast mode [ 57.881575][ T5214] bridge_slave_1: entered promiscuous mode [ 57.888416][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.895827][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.903349][ T5222] bridge_slave_1: entered allmulticast mode [ 57.910075][ T5222] bridge_slave_1: entered promiscuous mode [ 57.930392][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.949955][ T5228] team0: Port device team_slave_1 added [ 58.002380][ T5213] team0: Port device team_slave_0 added [ 58.037226][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.048288][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.060134][ T5218] team0: Port device team_slave_0 added [ 58.068904][ T5213] team0: Port device team_slave_1 added [ 58.076721][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.084233][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.110204][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.123879][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.130834][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.156937][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.171870][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.183456][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.203729][ T5218] team0: Port device team_slave_1 added [ 58.255731][ T5214] team0: Port device team_slave_0 added [ 58.281738][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.289364][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.316595][ T5213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.330708][ T5222] team0: Port device team_slave_0 added [ 58.339315][ T5222] team0: Port device team_slave_1 added [ 58.347935][ T5214] team0: Port device team_slave_1 added [ 58.375400][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.382360][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.408880][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.421800][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.428866][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.455670][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.467546][ T5213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.474717][ T5213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.501938][ T5231] Bluetooth: hci1: command tx timeout [ 58.507772][ T5213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.563415][ T5231] Bluetooth: hci3: command tx timeout [ 58.563446][ T5233] Bluetooth: hci4: command tx timeout [ 58.563533][ T55] Bluetooth: hci0: command tx timeout [ 58.580339][ T4610] Bluetooth: hci2: command tx timeout [ 58.591251][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.598887][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.625516][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.651786][ T5228] hsr_slave_0: entered promiscuous mode [ 58.658827][ T5228] hsr_slave_1: entered promiscuous mode [ 58.670749][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.677869][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.704421][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.716342][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.723634][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.749759][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.804521][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.811491][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.838469][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.889807][ T5218] hsr_slave_0: entered promiscuous mode [ 58.896954][ T5218] hsr_slave_1: entered promiscuous mode [ 58.903291][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.911025][ T5218] Cannot create hsr debugfs directory [ 58.939791][ T5214] hsr_slave_0: entered promiscuous mode [ 58.946471][ T5214] hsr_slave_1: entered promiscuous mode [ 58.952448][ T5214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.960605][ T5214] Cannot create hsr debugfs directory [ 58.982212][ T5213] hsr_slave_0: entered promiscuous mode [ 58.988896][ T5213] hsr_slave_1: entered promiscuous mode [ 58.995454][ T5213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.003131][ T5213] Cannot create hsr debugfs directory [ 59.018411][ T5222] hsr_slave_0: entered promiscuous mode [ 59.025237][ T5222] hsr_slave_1: entered promiscuous mode [ 59.031312][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.039071][ T5222] Cannot create hsr debugfs directory [ 59.520583][ T5228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.535552][ T5228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.546071][ T5228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.566745][ T5228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.611070][ T5214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.627791][ T5214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.638387][ T5214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.649481][ T5214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.741738][ T5218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.756490][ T5218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.769984][ T5218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.779890][ T5218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.880418][ T5213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.890407][ T5213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.902158][ T5213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.929673][ T5213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.950229][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.014805][ T5222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.040023][ T5222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.060212][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.075189][ T5222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.088618][ T5222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.117146][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.124508][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.170965][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.178110][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.227004][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.294355][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.321702][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.328941][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.344204][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.377502][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.384623][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.445449][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.464034][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.521807][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.529020][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.547321][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.554512][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.569822][ T5231] Bluetooth: hci1: command tx timeout [ 60.644795][ T5231] Bluetooth: hci3: command tx timeout [ 60.648536][ T55] Bluetooth: hci4: command tx timeout [ 60.650223][ T5231] Bluetooth: hci0: command tx timeout [ 60.655712][ T4610] Bluetooth: hci2: command tx timeout [ 60.680603][ T5213] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.712044][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.765139][ T2471] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.772271][ T2471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.782241][ T2471] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.789741][ T2471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.884244][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.924437][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.958741][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.965963][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.020651][ T2503] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.027826][ T2503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.127386][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.311006][ T5214] veth0_vlan: entered promiscuous mode [ 61.371915][ T5214] veth1_vlan: entered promiscuous mode [ 61.406066][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.530682][ T5213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.572443][ T5214] veth0_macvtap: entered promiscuous mode [ 61.587521][ T5214] veth1_macvtap: entered promiscuous mode [ 61.635251][ T5228] veth0_vlan: entered promiscuous mode [ 61.644865][ T5218] veth0_vlan: entered promiscuous mode [ 61.670940][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.688438][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.710167][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.722206][ T5214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.733774][ T5214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.742480][ T5214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.751379][ T5214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.766131][ T5218] veth1_vlan: entered promiscuous mode [ 61.807627][ T5228] veth1_vlan: entered promiscuous mode [ 61.892056][ T5213] veth0_vlan: entered promiscuous mode [ 61.916726][ T5222] veth0_vlan: entered promiscuous mode [ 61.926296][ T5228] veth0_macvtap: entered promiscuous mode [ 61.976943][ T5228] veth1_macvtap: entered promiscuous mode [ 61.993175][ T5218] veth0_macvtap: entered promiscuous mode [ 62.008268][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.019455][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.035405][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.046071][ T5213] veth1_vlan: entered promiscuous mode [ 62.056772][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.069099][ T5218] veth1_macvtap: entered promiscuous mode [ 62.075102][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.089164][ T5222] veth1_vlan: entered promiscuous mode [ 62.108750][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.120273][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.137959][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.197084][ T5228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.205941][ T5228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.215736][ T5228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.224507][ T5228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.237258][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.250773][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.287843][ T5222] veth0_macvtap: entered promiscuous mode [ 62.298563][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.311263][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.322127][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.343086][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.359560][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.382742][ T5222] veth1_macvtap: entered promiscuous mode [ 62.400630][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.412467][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.422455][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.432974][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.444702][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.485774][ T5218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.494681][ T5218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.503838][ T5218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.512542][ T5218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.528602][ T5213] veth0_macvtap: entered promiscuous mode [ 62.567257][ T5213] veth1_macvtap: entered promiscuous mode [ 62.610017][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.620904][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.631508][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.642169][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.653631][ T5231] Bluetooth: hci1: command tx timeout [ 62.659188][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.670517][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.684538][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.708608][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.720137][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.730364][ T5231] Bluetooth: hci4: command tx timeout [ 62.730387][ T5233] Bluetooth: hci2: command tx timeout [ 62.735852][ T5231] Bluetooth: hci3: command tx timeout [ 62.735887][ T5231] Bluetooth: hci0: command tx timeout [ 62.762927][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.776646][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.787240][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.800646][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.811251][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.821839][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.833715][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.872101][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.883320][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.891495][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.895352][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.910345][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.921225][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.931184][ T5213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.941792][ T5213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.955798][ T5213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.965296][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.976894][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.992916][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.008584][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.019768][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.037244][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.049202][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.066410][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.080722][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.127403][ T5222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.140297][ T5222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.151941][ T5222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.173973][ T5222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.197954][ T5213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.208873][ T5213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.219478][ T5213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.228885][ T5213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.741860][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.781604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.920868][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.934972][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.988508][ T5311] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.094658][ T2471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.097329][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.113455][ T2471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.129755][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.192194][ T2471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.208207][ T2471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.268184][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.307922][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.409005][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.443922][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.723812][ T5233] Bluetooth: hci1: command tx timeout [ 64.773535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.832963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.842220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 65.549445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 65.735840][ T5233] Bluetooth: hci2: command tx timeout [ 65.741578][ T5233] Bluetooth: hci0: command tx timeout [ 65.747690][ T55] Bluetooth: hci3: command tx timeout [ 65.754967][ T55] Bluetooth: hci4: command tx timeout [ 65.763143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.515830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.617157][ T47] libceph: connect (1)[c::]:6789 error -101 [ 66.656733][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 66.778516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.983048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 67.013153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.166271][ T25] libceph: connect (1)[c::]:6789 error -101 [ 67.184678][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 67.213558][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.704887][ T5340] ceph: No mds server is up or the cluster is laggy [ 67.720373][ T59] libceph: connect (1)[c::]:6789 error -101 [ 67.736882][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 67.862034][ T47] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 67.911640][ T47] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 67.972100][ T47] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.053456][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.064291][ T5357] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.115153][ T5343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.160098][ T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.539862][ T5366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.925962][ T59] usb 3-1: USB disconnect, device number 2 [ 69.353615][ T5379] veth0_vlan: entered allmulticast mode [ 70.605246][ T5389] ufs: You didn't specify the type of your ufs filesystem [ 70.605246][ T5389] [ 70.605246][ T5389] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 70.605246][ T5389] [ 70.605246][ T5389] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 70.636218][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.642415][ T5389] ufs: ufstype=old is supported read-only [ 70.650218][ T5389] ufs: ufs_fill_super(): bad magic number [ 71.234662][ T5385] veth0_vlan: left promiscuous mode [ 71.264102][ T5385] veth0_vlan: entered promiscuous mode [ 71.294521][ T5400] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.737068][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.748246][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.751500][ T5295] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.953774][ T5295] usb 5-1: Using ep0 maxpacket: 32 [ 72.006623][ T5295] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 72.032730][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.051814][ T5295] usb 5-1: Product: syz [ 72.056811][ T5295] usb 5-1: Manufacturer: syz [ 72.062938][ T5295] usb 5-1: SerialNumber: syz [ 72.073251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.091720][ T5295] usb 5-1: config 0 descriptor?? [ 74.450749][ T5295] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 74.604652][ T5295] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 74.632884][ T5295] usb 5-1: USB disconnect, device number 2 [ 75.895703][ T5441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.080448][ T5446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42'. [ 76.114324][ T5446] VFS: unable to find oldfs superblock on device nullb0 [ 76.820578][ T1184] cfg80211: failed to load regulatory.db [ 76.862943][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.064657][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.089156][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 77.134289][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.174272][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.231919][ T9] usb 5-1: config 0 descriptor?? [ 77.275560][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 79.193966][ T59] usb 5-1: USB disconnect, device number 3 [ 79.211717][ T29] audit: type=1326 audit(1723456585.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5488 comm="syz.3.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e3b3779f9 code=0x0 [ 79.829736][ T5509] veth0_vlan: entered allmulticast mode [ 79.934769][ T5515] veth0_vlan: left promiscuous mode [ 79.972218][ T5515] veth0_vlan: entered promiscuous mode [ 80.077731][ T59] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 80.092962][ T5295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.116999][ T5519] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 80.278960][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.298945][ T5295] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 80.302937][ T59] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 80.331675][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.357311][ T59] usb 3-1: Product: syz [ 80.359277][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.369591][ T59] usb 3-1: Manufacturer: syz [ 80.369618][ T59] usb 3-1: SerialNumber: syz [ 80.401527][ T59] usb 3-1: config 0 descriptor?? [ 80.421494][ T5295] usb 4-1: config 0 descriptor?? [ 80.425797][ T59] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 80.876755][ T5264] usb 3-1: USB disconnect, device number 3 [ 80.927766][ T5295] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 81.142084][ T5295] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 81.201633][ T5532] process 'syz.1.71' launched './file0' with NULL argv: empty string added [ 81.252021][ T5295] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 81.433345][ T5532] trusted_key: syz.1.71 sent an empty control message without MSG_MORE. [ 81.839165][ T5546] Zero length message leads to an empty skb [ 82.937600][ T59] usb 4-1: USB disconnect, device number 2 [ 84.410201][ T5564] tipc: Trying to set illegal importance in message [ 84.428917][ T5295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.245081][ T5295] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.274711][ T5295] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.328197][ T5295] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.354917][ T5570] ======================================================= [ 85.354917][ T5570] WARNING: The mand mount option has been deprecated and [ 85.354917][ T5570] and is ignored by this kernel. Remove the mand [ 85.354917][ T5570] option from the mount to silence this warning. [ 85.354917][ T5570] ======================================================= [ 85.364676][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.446735][ T5553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.477968][ T5295] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.657556][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.863883][ T1184] usb 2-1: USB disconnect, device number 2 [ 85.916942][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.973487][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.031492][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 86.055998][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.068739][ T9] usb 4-1: config 0 descriptor?? [ 86.222939][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.326674][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 86.333710][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.356426][ T5581] netlink: 52 bytes leftover after parsing attributes in process `syz.4.89'. [ 86.366645][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.368176][ T5581] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 86.382059][ T5581] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.89'. [ 86.391299][ T5581] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 86.402577][ T5581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.89'. [ 86.406809][ T47] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 86.432752][ T5214] syz-executor (5214) used greatest stack depth: 19152 bytes left [ 86.452996][ T47] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 86.465520][ T47] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 86.480277][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.519979][ T5577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.572657][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.736306][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.926901][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.996721][ T47] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 87.019362][ T47] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 87.040691][ T5587] netlink: 9 bytes leftover after parsing attributes in process `syz.3.83'. [ 87.087983][ T5587] 0ª: renamed from bond_slave_0 (while UP) [ 87.102170][ T47] usb 1-1: USB disconnect, device number 2 [ 87.108038][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 87.163679][ T5587] 0ª: entered allmulticast mode [ 87.273947][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.572271][ T9] usb 4-1: string descriptor 0 read error: -71 [ 87.596194][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.596948][ T5596] 9p: Unknown access argument clientÅwÑí?Y('„9G©¯즕t’¡¥;ÓËõVŒÄ| qåž ’N=•FÒ†ÙHžP]Ýz\ìçReaH–EÒ: -22 [ 87.606645][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.829273][ T9] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 87.829286][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.830839][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.854415][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.861858][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.906877][ T9] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 87.948468][ T9] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 87.995274][ T9] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 88.023594][ T9] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 88.053456][ T63] bridge_slave_1: left allmulticast mode [ 88.059865][ T63] bridge_slave_1: left promiscuous mode [ 88.097563][ T9] usb 4-1: USB disconnect, device number 3 [ 88.104273][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.235222][ T63] bridge_slave_0: left allmulticast mode [ 88.237029][ T59] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.254914][ T63] bridge_slave_0: left promiscuous mode [ 88.261265][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.443775][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 88.487426][ T59] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 88.513671][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.536269][ T59] usb 5-1: Product: syz [ 88.550229][ T59] usb 5-1: Manufacturer: syz [ 88.561417][ T59] usb 5-1: SerialNumber: syz [ 88.578455][ T59] usb 5-1: config 0 descriptor?? [ 88.590349][ T59] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 88.600854][ T59] usb 5-1: Detected FT232H [ 89.084589][ T59] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 89.121578][ T59] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 89.179247][ T59] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 89.212896][ T59] usb 5-1: USB disconnect, device number 4 [ 89.258592][ T59] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 89.271425][ T59] ftdi_sio 5-1:0.0: device disconnected [ 89.607673][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.623257][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.634564][ T63] bond0 (unregistering): Released all slaves [ 89.653018][ T5630] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 89.975678][ T5233] Bluetooth: hci1: command tx timeout [ 90.703380][ T5642] netlink: 'syz.1.106': attribute type 3 has an invalid length. [ 90.712319][ T5642] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.106'. [ 90.893701][ T5642] Illegal XDP return value 4294967274 on prog (id 24) dev N/A, expect packet loss! [ 90.903757][ T59] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.087713][ T5655] input: syz0 as /devices/virtual/input/input7 [ 91.102299][ T59] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.168874][ T59] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.213722][ T59] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.238642][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.292438][ T5639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 91.316680][ T59] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.951250][ T5233] Bluetooth: hci1: command tx timeout [ 93.272239][ T59] usb 1-1: USB disconnect, device number 3 [ 93.852900][ T63] hsr_slave_0: left promiscuous mode [ 93.928232][ T5233] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 93.928280][ T63] hsr_slave_1: left promiscuous mode [ 94.048831][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.069569][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.133632][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.169479][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.251342][ T63] veth1_macvtap: left promiscuous mode [ 94.259270][ T63] veth0_macvtap: left promiscuous mode [ 94.273174][ T63] veth1_vlan: left promiscuous mode [ 94.278750][ T63] veth0_vlan: left promiscuous mode [ 94.737436][ T63] team0 (unregistering): Port device team_slave_1 removed [ 94.808648][ T63] team0 (unregistering): Port device team_slave_0 removed [ 95.456348][ T5233] Bluetooth: hci1: command tx timeout [ 96.107746][ T5599] chnl_net:caif_netlink_parms(): no params data found [ 96.234040][ T5694] netlink: 393 bytes leftover after parsing attributes in process `syz.1.115'. [ 96.589403][ T5722] netlink: 'syz.3.122': attribute type 9 has an invalid length. [ 96.597770][ T5722] netlink: 'syz.3.122': attribute type 7 has an invalid length. [ 96.605688][ T5722] netlink: 'syz.3.122': attribute type 8 has an invalid length. [ 96.623130][ T5722] ax25_connect(): syz.3.122 uses autobind, please contact jreuter@yaina.de [ 98.320202][ T5719] sched: RT throttling activated [ 98.440190][ T5231] Bluetooth: hci1: command tx timeout [ 101.366194][ T5731] xt_CONNSECMARK: invalid mode: 0 [ 101.827176][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.849267][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.865837][ T5599] bridge_slave_0: entered allmulticast mode [ 101.890810][ T5599] bridge_slave_0: entered promiscuous mode [ 101.921243][ T5751] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.131'. [ 101.938855][ T5751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 102.137062][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.152588][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.161351][ T5599] bridge_slave_1: entered allmulticast mode [ 102.817157][ T5599] bridge_slave_1: entered promiscuous mode [ 103.109501][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.199745][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.222344][ T29] audit: type=1326 audit(1723456609.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5778 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f11779f9 code=0x7ffc0000 [ 103.349759][ T29] audit: type=1326 audit(1723456609.660:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5778 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f11779f9 code=0x7ffc0000 [ 103.432064][ T29] audit: type=1326 audit(1723456609.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5778 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc1f11779f9 code=0x7ffc0000 [ 103.445848][ T5599] team0: Port device team_slave_0 added [ 103.457496][ T29] audit: type=1326 audit(1723456609.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5778 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f11779f9 code=0x7ffc0000 [ 103.492393][ T29] audit: type=1326 audit(1723456609.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5778 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fc1f11779f9 code=0x7ffc0000 [ 103.518178][ T29] audit: type=1326 audit(1723456609.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5778 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f11779f9 code=0x7ffc0000 [ 103.592975][ T5788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 103.617521][ T5788] Bluetooth: MGMT ver 1.23 [ 104.324826][ T5781] veth0_vlan: entered allmulticast mode [ 104.361578][ T29] audit: type=1326 audit(1723456609.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5778 comm="syz.0.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f11779f9 code=0x7ffc0000 [ 104.533006][ T5783] veth0_vlan: left promiscuous mode [ 104.539239][ T5783] veth0_vlan: entered promiscuous mode [ 104.708778][ T5599] team0: Port device team_slave_1 added [ 104.927052][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.942741][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.970723][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.008147][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.032176][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.069590][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.268011][ T5599] hsr_slave_0: entered promiscuous mode [ 105.294725][ T5599] hsr_slave_1: entered promiscuous mode [ 105.347780][ T5599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.389497][ T5599] Cannot create hsr debugfs directory [ 105.812948][ T5811] kvm: kvm [5808]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfe00000000 [ 105.873850][ T5811] kvm: kvm [5808]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xde00000500 [ 105.931992][ T5811] kvm: kvm [5808]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x27d00000500 [ 107.114096][ T5841] input: syz0 as /devices/virtual/input/input8 [ 107.213444][ T5844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.151'. [ 107.259556][ T5844] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 107.392969][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.603084][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 107.614905][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.639171][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.676244][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.701225][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.743812][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.773840][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.952872][ T1184] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.001765][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.027655][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.042970][ T47] usb 5-1: GET_CAPABILITIES returned 0 [ 108.050968][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.062894][ T47] usbtmc 5-1:16.0: can't read capabilities [ 108.092118][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.151567][ T1184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.203377][ T1184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.236162][ T1184] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.283552][ T1184] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.314838][ T1184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.354174][ T1184] usb 4-1: config 0 descriptor?? [ 108.411988][ T47] usb 5-1: USB disconnect, device number 5 [ 108.441683][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.534698][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.594406][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.601589][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.651885][ T2503] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.659195][ T2503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.792583][ T1184] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 108.848305][ T1184] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 108.894993][ T1184] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 109.460100][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.300333][ T5599] veth0_vlan: entered promiscuous mode [ 110.369220][ T5599] veth1_vlan: entered promiscuous mode [ 110.468713][ T5599] veth0_macvtap: entered promiscuous mode [ 110.495500][ T5599] veth1_macvtap: entered promiscuous mode [ 110.539621][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.589738][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.657915][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.713612][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.739879][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.859643][ T5905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.062691][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.232864][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.262081][ T5296] usb 4-1: USB disconnect, device number 4 [ 111.278297][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.359253][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.501497][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.521480][ T5856] syz.1.158: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 111.541019][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.555667][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.574866][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz.1.158 Not tainted 6.11.0-rc3-syzkaller #0 [ 111.583733][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 111.593787][ T5856] Call Trace: [ 111.597053][ T5856] [ 111.599973][ T5856] dump_stack_lvl+0x241/0x360 [ 111.604658][ T5856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.609845][ T5856] ? __pfx__printk+0x10/0x10 [ 111.614426][ T5856] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 111.620827][ T5856] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 111.627331][ T5856] warn_alloc+0x278/0x410 [ 111.631688][ T5856] ? __pfx_warn_alloc+0x10/0x10 [ 111.636533][ T5856] ? vb2_vmalloc_alloc+0xf2/0x340 [ 111.641548][ T5856] ? __get_vm_area_node+0x23d/0x270 [ 111.646738][ T5856] __vmalloc_node_range_noprof+0x69f/0x1460 [ 111.652634][ T5856] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.658948][ T5856] ? vb2_vmalloc_alloc+0xf2/0x340 [ 111.663966][ T5856] ? __get_vm_area_node+0x23d/0x270 [ 111.669156][ T5856] __vmalloc_node_range_noprof+0x5bf/0x1460 [ 111.675039][ T5856] ? vb2_vmalloc_alloc+0xf2/0x340 [ 111.680096][ T5856] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.686446][ T5856] ? __kasan_kmalloc+0x98/0xb0 [ 111.691218][ T5856] ? vb2_vmalloc_alloc+0xb5/0x340 [ 111.696273][ T5856] vmalloc_user_noprof+0x74/0x80 [ 111.701210][ T5856] ? vb2_vmalloc_alloc+0xf2/0x340 [ 111.706232][ T5856] vb2_vmalloc_alloc+0xf2/0x340 [ 111.711082][ T5856] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 111.716532][ T5856] __vb2_queue_alloc+0xa0f/0x16f0 [ 111.721566][ T5856] vb2_core_create_bufs+0x825/0x1040 [ 111.726858][ T5856] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 111.732582][ T5856] ? __pfx___might_resched+0x10/0x10 [ 111.737864][ T5856] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 111.743413][ T5856] vb2_create_bufs+0x60e/0xdd0 [ 111.748178][ T5856] ? __pfx_vb2_create_bufs+0x10/0x10 [ 111.753455][ T5856] ? __mutex_lock+0x2ef/0xd70 [ 111.758132][ T5856] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 111.763675][ T5856] vb2_ioctl_create_bufs+0x2ba/0x400 [ 111.768960][ T5856] v4l_create_bufs+0x18b/0x2a0 [ 111.773731][ T5856] __video_do_ioctl+0xc26/0xde0 [ 111.778589][ T5856] ? __pfx___video_do_ioctl+0x10/0x10 [ 111.783961][ T5856] ? __might_fault+0xc6/0x120 [ 111.788641][ T5856] video_usercopy+0x89b/0x1180 [ 111.793406][ T5856] ? __pfx___video_do_ioctl+0x10/0x10 [ 111.798782][ T5856] ? __pfx_video_usercopy+0x10/0x10 [ 111.803975][ T5856] ? smack_file_ioctl+0x2fa/0x3a0 [ 111.809004][ T5856] ? __fget_files+0x3f6/0x470 [ 111.813671][ T5856] ? __fget_files+0x29/0x470 [ 111.818254][ T5856] v4l2_ioctl+0x18c/0x1e0 [ 111.822576][ T5856] ? __pfx_v4l2_ioctl+0x10/0x10 [ 111.827420][ T5856] __se_sys_ioctl+0xfc/0x170 [ 111.832007][ T5856] do_syscall_64+0xf3/0x230 [ 111.836505][ T5856] ? clear_bhb_loop+0x35/0x90 [ 111.841177][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.847073][ T5856] RIP: 0033:0x7fadafd779f9 [ 111.851486][ T5856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.871091][ T5856] RSP: 002b:00007fadb0b63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.879511][ T5856] RAX: ffffffffffffffda RBX: 00007fadaff05f80 RCX: 00007fadafd779f9 [ 111.887477][ T5856] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 111.895439][ T5856] RBP: 00007fadafde58ee R08: 0000000000000000 R09: 0000000000000000 [ 111.903401][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.911360][ T5856] R13: 0000000000000000 R14: 00007fadaff05f80 R15: 00007fff7c26b0b8 [ 111.919335][ T5856] [ 111.923818][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.934040][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.945724][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.955949][ T5599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.966688][ T5599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.977658][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.987122][ T5599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.998422][ T5599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007478][ T5856] Mem-Info: [ 112.007563][ T5599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.010599][ T5856] active_anon:264 inactive_anon:4212 isolated_anon:0 [ 112.010599][ T5856] active_file:4532 inactive_file:35122 isolated_file:0 [ 112.010599][ T5856] unevictable:768 dirty:370 writeback:0 [ 112.010599][ T5856] slab_reclaimable:8545 slab_unreclaimable:94458 [ 112.010599][ T5856] mapped:22096 shmem:1275 pagetables:807 [ 112.010599][ T5856] sec_pagetables:0 bounce:0 [ 112.010599][ T5856] kernel_misc_reclaimable:0 [ 112.010599][ T5856] free:1354280 free_pcp:4173 free_cma:0 [ 112.084236][ T5856] Node 0 active_anon:1056kB inactive_anon:16848kB active_file:18052kB inactive_file:140488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88384kB dirty:1480kB writeback:0kB shmem:3564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10196kB pagetables:3228kB sec_pagetables:0kB all_unreclaimable? no [ 112.374901][ T5599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.398851][ T5856] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.870552][ T5856] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.916519][ T5856] lowmem_reserve[]: 0 2563 2565 0 0 [ 112.921873][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.164'. [ 112.940101][ T5856] Node 0 DMA32 free:1454712kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:1052kB inactive_anon:28352kB active_file:16568kB inactive_file:140428kB unevictable:1536kB writepending:1504kB present:3129332kB managed:2653296kB mlocked:0kB bounce:0kB free_pcp:2664kB local_pcp:788kB free_cma:0kB [ 113.011966][ T5856] lowmem_reserve[]: 0 0 1 0 0 [ 113.057633][ T5856] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1516kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 113.183150][ T5856] lowmem_reserve[]: 0 0 0 0 0 [ 113.194018][ T5856] Node 1 Normal free:3949724kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.258196][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.604615][ T5856] lowmem_reserve[]: 0 0 0 0 0 [ 113.633092][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.661393][ T5856] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.747961][ T2503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.768649][ T2503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.863490][ T5856] Node 0 DMA32: 58*4kB (ME) 97*8kB (UME) 35*16kB (UME) 61*32kB (UME) 20*64kB (UME) 4*128kB (ME) 14*256kB (UME) 9*512kB (UME) 11*1024kB (UM) 3*2048kB (UM) 348*4096kB (M) = 1456320kB [ 113.949554][ T5856] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 114.018315][ T5856] Node 1 Normal: 1*4kB (U) 3*8kB (U) 6*16kB (U) 15*32kB (U) 5*64kB (UM) 2*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 963*4096kB (M) = 3949724kB [ 114.092981][ T5856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.102542][ T5856] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.378838][ T5856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.570410][ T5856] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.715034][ T5856] 40910 total pagecache pages [ 114.719731][ T5856] 0 pages in swap cache [ 114.757147][ T5856] Free swap = 124984kB [ 114.761353][ T5856] Total swap = 124996kB [ 114.792694][ T5856] 2097051 pages RAM [ 114.802437][ T5856] 0 pages HighMem/MovableOnly [ 115.548228][ T5856] 402197 pages reserved [ 115.555549][ T5856] 0 pages cma reserved [ 116.273123][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.371334][ T5971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.468742][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.832119][ T5980] ufs: You didn't specify the type of your ufs filesystem [ 116.832119][ T5980] [ 116.832119][ T5980] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 116.832119][ T5980] [ 116.832119][ T5980] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 116.864286][ T5980] ufs: ufstype=old is supported read-only [ 116.874045][ T5980] ufs: ufs_fill_super(): bad magic number [ 116.938580][ T5304] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.330826][ T5304] usb 1-1: Using ep0 maxpacket: 16 [ 117.403051][ T5304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.454890][ T5304] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 117.530758][ T5304] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.556121][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 117.575651][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.623867][ T5304] usb 1-1: config 0 descriptor?? [ 117.638335][ T5304] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 117.766680][ T5296] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.966755][ T5296] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 118.002849][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.063449][ T5296] usb 4-1: Product: syz [ 118.067655][ T5296] usb 4-1: Manufacturer: syz [ 118.072256][ T5296] usb 4-1: SerialNumber: syz [ 118.198822][ T5296] usb 4-1: config 0 descriptor?? [ 119.281698][ T5296] usb 4-1: USB disconnect, device number 5 [ 119.416923][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.427623][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.441346][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.455378][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.465818][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.475210][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.646851][ T2503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.817410][ T2503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.922471][ T1184] usb 1-1: USB disconnect, device number 4 [ 120.135763][ T6029] netlink: 72 bytes leftover after parsing attributes in process `syz.4.187'. [ 120.386652][ T2503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.288475][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 121.351451][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.426524][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 121.432045][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.453367][ T6046] netlink: 'syz.2.191': attribute type 15 has an invalid length. [ 121.461867][ T6046] netlink: 'syz.2.191': attribute type 18 has an invalid length. [ 121.505933][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.523941][ T5233] Bluetooth: hci2: command tx timeout [ 121.550393][ T2503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.947355][ T6016] chnl_net:caif_netlink_parms(): no params data found [ 121.996480][ T2503] bridge_slave_1: left allmulticast mode [ 122.002186][ T2503] bridge_slave_1: left promiscuous mode [ 122.027999][ T2503] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.063927][ T2503] bridge_slave_0: left allmulticast mode [ 122.088307][ T2503] bridge_slave_0: left promiscuous mode [ 122.113106][ T2503] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.283771][ T1184] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.637914][ T1184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.928989][ T1184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.979154][ T1184] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 122.996945][ T1184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.024280][ T1184] usb 5-1: config 0 descriptor?? [ 123.333072][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.497255][ T6092] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 123.526046][ T6092] CIFS: Unable to determine destination address [ 123.562900][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 123.600091][ T47] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.612118][ T5233] Bluetooth: hci2: command tx timeout [ 123.628857][ T47] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.656041][ T47] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.674263][ T47] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.714023][ T47] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.739788][ T47] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 123.772033][ T1184] elecom 0003:056E:011C.0003: unknown main item tag 0x0 [ 123.786388][ T1184] elecom 0003:056E:011C.0003: unknown main item tag 0xe [ 123.793637][ T1184] elecom 0003:056E:011C.0003: unknown main item tag 0x5 [ 123.800734][ T1184] elecom 0003:056E:011C.0003: unknown main item tag 0x4 [ 123.837336][ T1184] elecom 0003:056E:011C.0003: ignoring exceeding usage max [ 123.851480][ T1184] elecom 0003:056E:011C.0003: usage index exceeded [ 123.859496][ T1184] elecom 0003:056E:011C.0003: item 0 0 2 0 parsing failed [ 123.872110][ T1184] elecom 0003:056E:011C.0003: probe with driver elecom failed with error -22 [ 124.036550][ T2503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.228080][ T2503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.230096][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.252524][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.260712][ T47] usb 1-1: Product: syz [ 124.267475][ T2503] bond0 (unregistering): Released all slaves [ 124.272923][ T47] usb 1-1: Manufacturer: syz [ 124.278137][ T47] usb 1-1: SerialNumber: syz [ 124.292948][ T5264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.312450][ T1184] usb 5-1: USB disconnect, device number 6 [ 124.513146][ T5264] usb 3-1: Using ep0 maxpacket: 32 [ 124.521056][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.533800][ T5264] usb 3-1: config 5 has an invalid interface number: 19 but max is 0 [ 124.542090][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.549501][ T5264] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 124.561195][ T6016] bridge_slave_0: entered allmulticast mode [ 124.570412][ T6016] bridge_slave_0: entered promiscuous mode [ 124.576890][ T5264] usb 3-1: config 5 has no interface number 0 [ 124.589451][ T5264] usb 3-1: config 5 interface 19 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.604089][ T47] cdc_ncm 1-1:1.0: bind() failure [ 124.627403][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.643862][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.651113][ T6016] bridge_slave_1: entered allmulticast mode [ 124.661657][ T5264] usb 3-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=96.38 [ 124.672711][ T47] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 124.680844][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.689025][ T47] cdc_ncm 1-1:1.1: bind() failure [ 124.695631][ T6016] bridge_slave_1: entered promiscuous mode [ 124.702059][ T5264] usb 3-1: Product: syz [ 124.712875][ T5264] usb 3-1: Manufacturer: syz [ 124.717498][ T5264] usb 3-1: SerialNumber: syz [ 124.737362][ T47] usb 1-1: USB disconnect, device number 5 [ 124.778482][ T5264] hub 3-1:5.19: bad descriptor, ignoring hub [ 124.788952][ T5264] hub 3-1:5.19: probe with driver hub failed with error -5 [ 124.823801][ T5264] sierra 3-1:5.19: Sierra USB modem converter detected [ 124.936184][ T6016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.061213][ T6016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.173064][ T2503] hsr_slave_0: left promiscuous mode [ 125.227596][ T2503] hsr_slave_1: left promiscuous mode [ 125.274880][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.304905][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.321261][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.341837][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.377527][ T2503] veth1_macvtap: left promiscuous mode [ 125.385179][ T2503] veth0_macvtap: left promiscuous mode [ 125.391282][ T2503] veth1_vlan: left promiscuous mode [ 125.397628][ T2503] veth0_vlan: left promiscuous mode [ 125.683569][ T5233] Bluetooth: hci2: command tx timeout [ 126.185017][ T5264] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 126.254683][ T5264] usb 3-1: USB disconnect, device number 4 [ 126.299692][ T5264] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 126.339535][ T5264] sierra 3-1:5.19: device disconnected [ 126.699475][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 127.682326][ T2503] team0 (unregistering): Port device team_slave_1 removed [ 127.758933][ T2503] team0 (unregistering): Port device team_slave_0 removed [ 127.766464][ T5233] Bluetooth: hci2: command tx timeout [ 129.396350][ T6016] team0: Port device team_slave_0 added [ 129.440414][ T6016] team0: Port device team_slave_1 added [ 129.795816][ T6137] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 130.385833][ T6160] capability: warning: `syz.0.216' uses deprecated v2 capabilities in a way that may be insecure [ 130.403937][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.420296][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.291245][ T6016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.306004][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.316456][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.520191][ T6016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.940177][ T6016] hsr_slave_0: entered promiscuous mode [ 131.958023][ T6016] hsr_slave_1: entered promiscuous mode [ 131.978230][ T6016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.822218][ T6016] Cannot create hsr debugfs directory [ 132.929118][ T6179] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 133.051047][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.104366][ T6179] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.134407][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.140764][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.711343][ T6218] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd2": -EINTR [ 134.845674][ T6202] random: crng reseeded on system resumption [ 138.554516][ T6016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 138.618554][ T6016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.675984][ T6016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.780480][ T6016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.290198][ T6016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.670997][ T6284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.426991][ T6016] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.484452][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.491581][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.554427][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.561649][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.615945][ T6289] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 141.072965][ T5264] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.310797][ T6016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.343653][ T5264] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 141.427417][ T6016] veth0_vlan: entered promiscuous mode [ 141.510834][ T6016] veth1_vlan: entered promiscuous mode [ 142.944150][ T6323] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.257'. [ 143.739145][ T5264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.749434][ T5264] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.762432][ T5264] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 143.771630][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.846424][ T5264] usb 5-1: config 0 descriptor?? [ 143.869544][ T5264] usb 5-1: can't set config #0, error -71 [ 143.915144][ T5264] usb 5-1: USB disconnect, device number 7 [ 143.923024][ T6016] veth0_macvtap: entered promiscuous mode [ 143.935598][ T6016] veth1_macvtap: entered promiscuous mode [ 144.005698][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.026511][ T29] audit: type=1326 audit(1723456650.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6332 comm="syz.3.260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e3b3779f9 code=0x0 [ 144.047583][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.072853][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.113702][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.128072][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.244886][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.277948][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.307639][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.347817][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.378492][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.428428][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.455653][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.491865][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.522969][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.562505][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.606917][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.657193][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.672221][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.727710][ T6341] kvm: emulating exchange as write [ 144.742090][ T6016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.778544][ T6016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.812491][ T6016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.844917][ T6016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.001702][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 145.797225][ T2503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.817494][ T6364] macvlan0: entered allmulticast mode [ 145.821602][ T2503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.841984][ T6364] veth1_vlan: entered allmulticast mode [ 145.930813][ T6364] veth1_vlan: left allmulticast mode [ 145.981696][ T6364] macvlan0 (unregistering): left allmulticast mode [ 146.353173][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.564147][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.442357][ T6381] IPv6: sit1: Disabled Multicast RS [ 150.283205][ T5296] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.432969][ T59] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.496774][ T5296] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 150.565665][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.633967][ T5296] usb 4-1: config 0 descriptor?? [ 150.635985][ T59] usb 3-1: Using ep0 maxpacket: 8 [ 150.656097][ T5296] gspca_main: spca508-2.14.0 probing 8086:0110 [ 150.700319][ T59] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 150.727258][ T59] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 150.757879][ T59] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.793122][ T59] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.827444][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.836645][ T59] usb 3-1: Product: syz [ 150.840995][ T59] usb 3-1: Manufacturer: syz [ 150.860493][ T59] usb 3-1: SerialNumber: syz [ 150.973094][ T5271] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.991926][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.123193][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.146158][ T59] usb 3-1: 0:2 : does not exist [ 151.175170][ T5296] gspca_spca508: reg_read err -110 [ 151.202667][ T5296] gspca_spca508: reg_read err -32 [ 151.218803][ T5296] gspca_spca508: reg_read err -32 [ 151.225164][ T59] usb 3-1: USB disconnect, device number 5 [ 151.231220][ T5296] gspca_spca508: reg_read err -32 [ 151.248012][ T5271] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 151.267486][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.288968][ T5296] gspca_spca508: reg_read err -32 [ 151.303461][ T5271] usb 5-1: Product: syz [ 151.309091][ T5296] gspca_spca508: reg write: error -32 [ 151.327882][ T5271] usb 5-1: Manufacturer: syz [ 151.429730][ T5296] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 151.445263][ T5271] usb 5-1: SerialNumber: syz [ 151.467858][ T5271] usb 5-1: config 0 descriptor?? [ 151.523328][ T5271] usb 5-1: selecting invalid altsetting 1 [ 151.551126][ T5271] flexcop_usb: set interface failed. [ 151.569896][ T5271] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 151.746815][ T5296] usb 5-1: USB disconnect, device number 8 [ 151.832682][ T5271] usb 4-1: USB disconnect, device number 6 [ 152.172366][ T6428] bpf: Bad value for 'uid' [ 154.673092][ T59] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.511557][ T59] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 155.523179][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.534805][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.587263][ T59] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 155.628347][ T59] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 155.638160][ T59] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 155.678150][ T59] usb 4-1: Manufacturer: syz [ 155.695312][ T59] usb 4-1: config 0 descriptor?? [ 155.774870][ T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 155.988901][ T25] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 156.000035][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'. [ 156.010641][ T25] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 156.023659][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 156.039410][ T25] usb 3-1: config 1 has no interface number 0 [ 156.048647][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 156.062894][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 35332, setting to 64 [ 156.088126][ T25] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 156.103130][ T25] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 156.112343][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.413429][ T5295] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 156.687717][ T5295] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 156.766296][ T59] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 156.790141][ T6464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.791497][ T5295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.801979][ T59] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 156.830217][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 156.831387][ T5295] usb 2-1: config 0 has no interface number 0 [ 156.848166][ T5295] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 156.861009][ T5295] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 156.861360][ T59] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 156.875267][ T5295] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.888648][ T59] usb 4-1: USB disconnect, device number 7 [ 156.959881][ T5295] usb 2-1: config 0 interface 52 has no altsetting 0 [ 156.975096][ T5295] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 157.008182][ T5295] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 157.032207][ T5295] usb 2-1: Product: syz [ 157.054437][ T5295] usb 2-1: Manufacturer: syz [ 157.059084][ T5295] usb 2-1: SerialNumber: syz [ 157.075621][ T6464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.100283][ T5295] usb 2-1: config 0 descriptor?? [ 157.104233][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 157.344277][ T5295] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 157.369348][ T5295] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 157.453688][ T25] usb 3-1: USB disconnect, device number 6 [ 157.471893][ T25] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 157.567353][ T59] usb 2-1: USB disconnect, device number 3 [ 158.033127][ T5304] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.218756][ T6506] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.315'. [ 158.233041][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 158.247191][ T6506] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 158.250778][ T5304] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.274145][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.405850][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 158.430793][ T5295] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.712978][ T5295] usb 1-1: Using ep0 maxpacket: 16 [ 158.840705][ T5295] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.892272][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 158.974194][ T5304] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 159.007154][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.043979][ T5295] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice= 0.06 [ 159.053122][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.063789][ T5304] usb 4-1: Product: syz [ 159.067470][ T5295] usb 1-1: Product: syz [ 159.072192][ T5295] usb 1-1: Manufacturer: syz [ 159.078505][ T5295] usb 1-1: SerialNumber: syz [ 159.089628][ T5304] usb 4-1: Manufacturer: syz [ 159.095522][ T5295] usb 1-1: config 0 descriptor?? [ 159.100772][ T5304] usb 4-1: SerialNumber: syz [ 159.134213][ T5295] omninet 1-1:0.0: required endpoints missing [ 159.145425][ T5304] usb 4-1: config 0 descriptor?? [ 159.432981][ T6518] netlink: 'syz.1.319': attribute type 10 has an invalid length. [ 159.696838][ T5233] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 159.706858][ T5233] Bluetooth: hci4: Injecting HCI hardware error event [ 159.717776][ T5231] Bluetooth: hci4: hardware error 0x00 [ 160.004532][ T5304] radio-si470x 4-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 160.019880][ T5304] radio-si470x 4-1:0.0: software version 98, hardware version 86 [ 160.042914][ T6520] ufs: You didn't specify the type of your ufs filesystem [ 160.042914][ T6520] [ 160.042914][ T6520] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 160.042914][ T6520] [ 160.042914][ T6520] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 160.105756][ T6520] syz.2.318: attempt to access beyond end of device [ 160.105756][ T6520] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 160.112304][ T5295] usb 1-1: USB disconnect, device number 6 [ 160.126161][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.155959][ T6518] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.164942][ T6522] tipc: Started in network mode [ 160.170197][ T6522] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 160.178997][ T6522] tipc: Enabled bearer , priority 0 [ 160.235714][ T5304] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 160.279302][ T5304] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 160.288396][ T5304] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 160.302462][ T5304] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 160.403338][ T5304] usb 4-1: USB disconnect, device number 8 [ 160.884312][ T59] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.011142][ T6546] syz.3.329 uses obsolete (PF_INET,SOCK_PACKET) [ 161.102884][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 161.109909][ T59] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.133606][ T59] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.156216][ T59] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.175188][ T5296] tipc: Node number set to 10136234 [ 161.183324][ T59] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.195204][ T59] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 161.204881][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.216039][ T59] usb 3-1: config 0 descriptor?? [ 161.332863][ T5296] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.453048][ T5271] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.544078][ T5296] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 161.571471][ T5296] usb 1-1: config 0 has no interface number 0 [ 161.588693][ T5296] usb 1-1: config 0 interface 156 has no altsetting 0 [ 161.602646][ T5296] usb 1-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 161.613967][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.644758][ T5296] usb 1-1: config 0 descriptor?? [ 161.655098][ T59] hid (null): usage index exceeded [ 161.661320][ T5296] hub 1-1:0.156: bad descriptor, ignoring hub [ 161.671660][ T59] hid-generic 0003:045E:05DA.0005: ignoring exceeding usage max [ 161.680252][ T59] hid-generic 0003:045E:05DA.0005: usage index exceeded [ 161.692266][ T59] hid-generic 0003:045E:05DA.0005: item 0 4 2 0 parsing failed [ 161.704610][ T59] hid-generic 0003:045E:05DA.0005: probe with driver hid-generic failed with error -22 [ 161.713224][ T5271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.730182][ T5296] hub 1-1:0.156: probe with driver hub failed with error -5 [ 161.737648][ T5271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.756303][ T5296] option 1-1:0.156: GSM modem (1-port) converter detected [ 161.764457][ T5231] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 161.790767][ T5271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.811803][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.035922][ T6529] kernel profiling enabled (shift: 9) [ 162.089366][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 162.153246][ T5271] usb 4-1: 0:2 : does not exist [ 162.215100][ T5271] usb 4-1: USB disconnect, device number 9 [ 162.322736][ T25] usb 3-1: USB disconnect, device number 7 [ 162.333513][ T5296] usb 1-1: USB disconnect, device number 7 [ 162.353139][ T5296] option 1-1:0.156: device disconnected [ 162.968831][ T6575] mmap: syz.0.339 (6575) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.005933][ T6606] netlink: 60 bytes leftover after parsing attributes in process `syz.2.351'. [ 165.621561][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.298462][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 166.331276][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.387773][ T25] usb 3-1: config 0 descriptor?? [ 166.483014][ T59] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 166.692362][ T59] usb 4-1: config 0 has too many interfaces: 87, using maximum allowed: 32 [ 166.749119][ T59] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.792698][ T59] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 87 [ 166.813518][ T59] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 166.835647][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.845422][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.887137][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.896886][ T59] usb 4-1: config 0 descriptor?? [ 166.964300][ T25] hackrf 3-1:0.0: Board ID: 00 [ 166.994156][ T25] hackrf 3-1:0.0: Firmware version: [ 167.321715][ T6627] evm: overlay not supported [ 167.843039][ T29] audit: type=1804 audit(1723456673.810:11): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.357" name="/newroot/21/bus/file0" dev="overlay" ino=143 res=1 errno=0 [ 167.897475][ T25] hackrf 3-1:0.0: Registered as swradio16 [ 167.930253][ T25] hackrf 3-1:0.0: Registered as swradio17 [ 167.947010][ T25] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 168.001486][ T6611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.352'. [ 168.162463][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.227993][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.652570][ T25] usb 3-1: USB disconnect, device number 8 [ 169.234792][ T6648] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.683363][ T1184] usb 4-1: USB disconnect, device number 10 [ 170.764618][ T6658] bond0: entered promiscuous mode [ 170.764645][ T6658] bond_slave_0: entered promiscuous mode [ 170.764828][ T6658] bond_slave_1: entered promiscuous mode [ 170.798190][ T6657] bond0: left promiscuous mode [ 170.798289][ T6657] bond_slave_0: left promiscuous mode [ 170.798550][ T6657] bond_slave_1: left promiscuous mode [ 171.321954][ T6680] netlink: 'syz.1.374': attribute type 10 has an invalid length. [ 172.804919][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 172.829064][ T6704] 9pnet_fd: Insufficient options for proto=fd [ 173.258637][ T5296] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 173.504524][ T6725] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 173.531159][ T6725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.388'. [ 173.546485][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 173.561500][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.591938][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.623334][ T5296] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 173.632430][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.670688][ T5296] usb 5-1: config 0 descriptor?? [ 173.696864][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 174.120265][ T5296] hid (null): report_id 0 is invalid [ 174.162086][ T5296] logitech-hidpp-device 0003:046D:C086.0006: report_id 0 is invalid [ 174.191819][ T5296] logitech-hidpp-device 0003:046D:C086.0006: item 0 0 1 8 parsing failed [ 174.210632][ T5296] logitech-hidpp-device 0003:046D:C086.0006: hidpp_probe:parse failed [ 174.231382][ T5296] logitech-hidpp-device 0003:046D:C086.0006: probe with driver logitech-hidpp-device failed with error -22 [ 174.281009][ T6746] random: crng reseeded on system resumption [ 174.366072][ T5296] usb 5-1: USB disconnect, device number 9 [ 174.403045][ T5271] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 174.613319][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 174.631119][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 174.676524][ T5271] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.700009][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.725988][ T5271] usb 3-1: Product: syz [ 174.744850][ T5271] usb 3-1: Manufacturer: syz [ 174.758702][ T5271] usb 3-1: SerialNumber: syz [ 174.780672][ T5271] usb 3-1: config 0 descriptor?? [ 174.808590][ T5271] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 174.841915][ T5271] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 175.144453][ T5271] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 175.296951][ T5271] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 175.350290][ T5271] em28xx 3-1:0.0: board has no eeprom [ 175.515416][ T5271] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 175.538649][ T5271] em28xx 3-1:0.0: dvb set to bulk mode. [ 175.553520][ T5296] em28xx 3-1:0.0: Binding DVB extension [ 175.582080][ T5271] usb 3-1: USB disconnect, device number 9 [ 175.617337][ T5271] em28xx 3-1:0.0: Disconnecting em28xx [ 175.830480][ T5296] em28xx 3-1:0.0: Registering input extension [ 175.865701][ T5271] em28xx 3-1:0.0: Closing input extension [ 176.042381][ T5271] em28xx 3-1:0.0: Freeing device [ 176.426761][ T1184] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.503000][ T5271] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 281.622730][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 281.629796][ C0] rcu: 1-...!: (1 GPs behind) idle=01c4/1/0x4000000000000000 softirq=14054/14055 fqs=1 [ 281.640565][ C0] rcu: (detected by 0, t=10506 jiffies, g=16941, q=315 ncpus=2) [ 281.648376][ C0] Sending NMI from CPU 0 to CPUs 1: [ 281.653599][ C1] NMI backtrace for cpu 1 [ 281.653658][ C1] CPU: 1 UID: 0 PID: 6816 Comm: cmp Not tainted 6.11.0-rc3-syzkaller #0 [ 281.653676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 281.653688][ C1] RIP: 0010:mark_lock+0x3/0x350 [ 281.653728][ C1] Code: 04 ff ff ff e8 8e 4b 3d 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 10 49 89 f7 48 89 3c 24 49 bd 00 00 [ 281.653741][ C1] RSP: 0018:ffffc90000a18938 EFLAGS: 00000006 [ 281.653756][ C1] RAX: 00000000000c4001 RBX: 1ffff110041118ea RCX: ffffffff81702e6a [ 281.653767][ C1] RDX: 0000000000000008 RSI: ffff88802088c730 RDI: ffff88802088bc00 [ 281.653778][ C1] RBP: ffff88802088c730 R08: ffffffff934f1847 R09: 1ffffffff269e308 [ 281.653790][ C1] R10: dffffc0000000000 R11: fffffbfff269e309 R12: ffff88802088bc00 [ 281.653801][ C1] R13: ffff88802088c6d8 R14: 0000000000000000 R15: ffff88802088c750 [ 281.653812][ C1] FS: 00007f5f2b4ea380(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 281.653826][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.653837][ C1] CR2: 000055ecc6b7aaf8 CR3: 000000005c3ec000 CR4: 00000000003506f0 [ 281.653851][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.653860][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.653869][ C1] Call Trace: [ 281.653876][ C1] [ 281.653884][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 281.653908][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 281.653928][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 281.653952][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 281.653970][ C1] ? nmi_handle+0x14f/0x5a0 [ 281.653985][ C1] ? nmi_handle+0x2a/0x5a0 [ 281.654000][ C1] ? mark_lock+0x3/0x350 [ 281.654018][ C1] ? default_do_nmi+0x63/0x160 [ 281.654036][ C1] ? exc_nmi+0x123/0x1f0 [ 281.654051][ C1] ? end_repeat_nmi+0xf/0x53 [ 281.654071][ C1] ? mark_lock+0x9a/0x350 [ 281.654090][ C1] ? mark_lock+0x3/0x350 [ 281.654109][ C1] ? mark_lock+0x3/0x350 [ 281.654133][ C1] ? mark_lock+0x3/0x350 [ 281.654151][ C1] [ 281.654156][ C1] [ 281.654162][ C1] __lock_acquire+0xc35/0x2040 [ 281.654188][ C1] lock_acquire+0x1ed/0x550 [ 281.654206][ C1] ? debug_object_deactivate+0x158/0x390 [ 281.654226][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 281.654247][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 281.654266][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 281.654286][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 281.654303][ C1] ? debug_object_deactivate+0x158/0x390 [ 281.654319][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 281.654341][ C1] debug_object_deactivate+0x158/0x390 [ 281.654359][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 281.654376][ C1] ? timerqueue_add+0x260/0x290 [ 281.654391][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 281.654412][ C1] debug_deactivate+0x1b/0x220 [ 281.654429][ C1] __hrtimer_run_queues+0x305/0xd50 [ 281.654445][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 281.654471][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 281.654487][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 281.654508][ C1] hrtimer_interrupt+0x396/0x990 [ 281.654534][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 281.654556][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 281.654575][ C1] [ 281.654580][ C1] [ 281.654586][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.654602][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 281.654620][ C1] Code: 2b 00 74 08 4c 89 f7 e8 7a da 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 281.654632][ C1] RSP: 0018:ffffc9000e607980 EFLAGS: 00000206 [ 281.654645][ C1] RAX: 0000000000000001 RBX: 1ffff92001cc0f3c RCX: aaf2f50c2f94d000 [ 281.654656][ C1] RDX: dffffc0000000000 RSI: ffffffff8beae6c0 RDI: ffffffff8c3f9000 [ 281.654667][ C1] RBP: ffffc9000e607ae0 R08: ffffffff934f18ef R09: 1ffffffff269e31d [ 281.654679][ C1] R10: dffffc0000000000 R11: fffffbfff269e31e R12: 1ffff92001cc0f38 [ 281.654690][ C1] R13: dffffc0000000000 R14: ffffc9000e6079e0 R15: 0000000000000246 [ 281.654709][ C1] ? ktime_get_coarse_real_ts64+0x10b/0x120 [ 281.654729][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 281.654746][ C1] ? current_time+0x1be/0x2b0 [ 281.654769][ C1] ? rcu_read_lock_any_held+0xb7/0x160 [ 281.654789][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 281.654811][ C1] ? shmem_file_read_iter+0x8af/0xa50 [ 281.654831][ C1] touch_atime+0x1c1/0x690 [ 281.654848][ C1] ? shmem_file_read_iter+0x8af/0xa50 [ 281.654867][ C1] ? copy_page_to_iter+0x11f/0x160 [ 281.654886][ C1] shmem_file_read_iter+0x8af/0xa50 [ 281.654905][ C1] ? __lock_acquire+0x137a/0x2040 [ 281.654929][ C1] ? __pfx_shmem_file_read_iter+0x10/0x10 [ 281.654952][ C1] vfs_read+0x9bd/0xbc0 [ 281.654975][ C1] ? __pfx_vfs_read+0x10/0x10 [ 281.655004][ C1] ksys_read+0x1a0/0x2c0 [ 281.655020][ C1] ? __pfx_ksys_read+0x10/0x10 [ 281.655035][ C1] ? exc_page_fault+0x590/0x8c0 [ 281.655055][ C1] ? do_syscall_64+0xb6/0x230 [ 281.655070][ C1] do_syscall_64+0xf3/0x230 [ 281.655084][ C1] ? clear_bhb_loop+0x35/0x90 [ 281.655100][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.655120][ C1] RIP: 0033:0x7f5f2b63eb6a [ 281.655162][ C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 281.655174][ C1] RSP: 002b:00007ffc5afb4218 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.655189][ C1] RAX: ffffffffffffffda RBX: 000055ecc6b792a0 RCX: 00007f5f2b63eb6a [ 281.655200][ C1] RDX: 0000000000001000 RSI: 000055ecc6b79af0 RDI: 0000000000000003 [ 281.655210][ C1] RBP: 000055ecc6b792a0 R08: 0000000000000003 R09: 0000000000000001 [ 281.655220][ C1] R10: 000000000000010f R11: 0000000000000246 R12: 000055ecc6b79910 [ 281.655230][ C1] R13: 0000000000000000 R14: 00007ffc5afb4e73 R15: 00007ffc5afb4e62 [ 281.655248][ C1] [ 281.655589][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g16941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 282.252105][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 282.262075][ C0] rcu: RCU grace-period kthread stack dump: [ 282.267990][ C0] task:rcu_preempt state:R running task stack:24176 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 282.279734][ C0] Call Trace: [ 282.283015][ C0] [ 282.285955][ C0] __schedule+0x17ae/0x4a10 [ 282.290495][ C0] ? __pfx___schedule+0x10/0x10 [ 282.295356][ C0] ? __pfx_lock_release+0x10/0x10 [ 282.300432][ C0] ? __asan_memset+0x23/0x50 [ 282.305033][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 282.310849][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.317186][ C0] ? schedule+0x90/0x320 [ 282.321433][ C0] schedule+0x14b/0x320 [ 282.325600][ C0] schedule_timeout+0x1be/0x310 [ 282.330455][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 282.335832][ C0] ? __pfx_process_timeout+0x10/0x10 [ 282.341131][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 282.346709][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 282.351563][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 282.356781][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 282.363294][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 282.368598][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 282.373200][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 282.378402][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 282.384318][ C0] ? __kthread_parkme+0x169/0x1d0 [ 282.389356][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 282.394559][ C0] kthread+0x2f0/0x390 [ 282.398634][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 282.403836][ C0] ? __pfx_kthread+0x10/0x10 [ 282.408434][ C0] ret_from_fork+0x4b/0x80 [ 282.412862][ C0] ? __pfx_kthread+0x10/0x10 [ 282.417460][ C0] ret_from_fork_asm+0x1a/0x30 [ 282.422248][ C0] [ 282.425276][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 282.431601][ C0] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.11.0-rc3-syzkaller #0 [ 282.440552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 282.450631][ C0] Workqueue: events_unbound toggle_allocation_gate [ 282.457161][ C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 282.463959][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 79 14 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 24 10 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 08 10 [ 282.483573][ C0] RSP: 0000:ffffc900015e7700 EFLAGS: 00000293 [ 282.489652][ C0] RAX: ffffffff818766e8 RBX: 1ffff110172688f1 RCX: ffff888017793c00 [ 282.497628][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 282.505599][ C0] RBP: ffffc900015e78e0 R08: ffffffff818766b7 R09: 1ffffffff269e308 [ 282.513573][ C0] R10: dffffc0000000000 R11: fffffbfff269e309 R12: dffffc0000000000 [ 282.521545][ C0] R13: ffff8880b9344788 R14: ffff8880b923fb40 R15: 0000000000000001 [ 282.529519][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 282.538452][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.545036][ C0] CR2: ffffffffffffffe8 CR3: 000000000e534000 CR4: 00000000003506f0 [ 282.553027][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.561001][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.568974][ C0] Call Trace: [ 282.572266][ C0] [ 282.575115][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 282.581464][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 282.587120][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 282.592933][ C0] ? __pfx_lock_release+0x10/0x10 [ 282.597977][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 282.604227][ C0] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 282.609615][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 282.615257][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 282.620464][ C0] ? acct_account_cputime+0x207/0x210 [ 282.625845][ C0] ? update_process_times+0x1ce/0x230 [ 282.631224][ C0] ? tick_nohz_handler+0x37c/0x500 [ 282.636341][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 282.641808][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 282.647183][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 282.653196][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 282.658920][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 282.665009][ C0] ? hrtimer_interrupt+0x396/0x990 [ 282.670149][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 282.676313][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 282.682126][ C0] [ 282.685059][ C0] [ 282.688001][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.694168][ C0] ? smp_call_function_many_cond+0x1847/0x29d0 [ 282.700328][ C0] ? smp_call_function_many_cond+0x1878/0x29d0 [ 282.706488][ C0] ? smp_call_function_many_cond+0x1860/0x29d0 [ 282.712651][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 282.718730][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 282.723778][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 282.729867][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 282.736211][ C0] ? __pfx___might_resched+0x10/0x10 [ 282.741500][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 282.747049][ C0] ? __pfx___might_resched+0x10/0x10 [ 282.752346][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 282.757378][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 282.762496][ C0] text_poke_bp_batch+0x352/0xb30 [ 282.767625][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 282.773183][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 282.778223][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 282.784569][ C0] text_poke_finish+0x30/0x50 [ 282.789249][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 282.795234][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 282.801137][ C0] static_key_enable+0x1a/0x20 [ 282.805932][ C0] toggle_allocation_gate+0xb5/0x250 [ 282.811224][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 282.817121][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.823468][ C0] ? process_scheduled_works+0x945/0x1830 [ 282.829195][ C0] process_scheduled_works+0xa2c/0x1830 [ 282.834779][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.840779][ C0] ? assign_work+0x364/0x3d0 [ 282.845385][ C0] worker_thread+0x86d/0xd40 [ 282.849997][ C0] ? __kthread_parkme+0x169/0x1d0 [ 282.855032][ C0] ? __pfx_worker_thread+0x10/0x10 [ 282.860151][ C0] kthread+0x2f0/0x390 [ 282.864227][ C0] ? __pfx_worker_thread+0x10/0x10 [ 282.869342][ C0] ? __pfx_kthread+0x10/0x10 [ 282.873943][ C0] ret_from_fork+0x4b/0x80 [ 282.878366][ C0] ? __pfx_kthread+0x10/0x10 [ 282.882966][ C0] ret_from_fork_asm+0x1a/0x30 [ 282.887756][ C0]