last executing test programs: 12.638095739s ago: executing program 0 (id=82): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket(0x11, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [@printk={@lld, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x168f, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0]}) 9.290470003s ago: executing program 0 (id=100): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt(r0, 0x0, 0x7, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x3a, 0x62, 0xdb, 0x10, 0xa2c, 0x8, 0xb425, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x1, 0x96, 0x76, 0x0, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x1d, 0x7}}]}}]}}]}}, 0x0) 6.040117422s ago: executing program 0 (id=116): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0xa0}, {@in6=@mcast2, 0x0, 0x32}, @in=@local, {0x0, 0x3, 0x0, 0x400000000000, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffe, 0x0, 0x9}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x40) (fail_nth: 5) 5.823541973s ago: executing program 0 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x54, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_SSID={0x24, 0x34, @random="c42a074697994b9513fcae3e302f48714f1632399a2ca5a8855f351007865fa6"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}]]}, 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 5.703277063s ago: executing program 0 (id=119): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x2}}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x50201, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new$default user:s'], 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x5, 0x2a, 0xfffffffe, 0x4000, 0x2, 0xf, 0xfffffffffffffffe, 0x2003}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, &(0x7f00000001c0)='id_resolver\x00', 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x89fe3719ac50b348, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x9d, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) syz_usb_connect(0x4, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) copy_file_range(r7, &(0x7f0000000100)=0xf0, r7, 0x0, 0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000006", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="fdffffff", @ANYRES32, @ANYBLOB], 0x50) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000002c00010026bd7000fcdbdf250400000044001180043e5a6355d81deed1c38b1595828eb92bd575b58eea0621def7089c3813a6b0374ad9ca56fa3f7a6c49e8838618477821a7581398e7d21b1c7c4423e56b2fed754e361523b2c3dc1f841279e485746b3d8294de24faa8b092a813272e0b0ff029450853a44021203c05f7f21d41e6ce604e944aeed60692cab6523a3bbdddfd65c0f12d3294e9423352f8d85735016087be47c40d749013cccb3d1bde"], 0x58}, 0x1, 0x0, 0x0, 0x20048420}, 0x20000090) 4.662306791s ago: executing program 3 (id=130): pipe(&(0x7f00000001c0)) r0 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x5, 0xd03, 0x80000000, {}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x21, 0x3, 0x0, 0x0, "ecf8e8a8437c0b323d3884310e2eb6ec3080157dd99ac49221b1c8d82d1c6b338a16356bbf9760c94b503c38bcb6c2e7ff17e983ad91d68ac0d4aa459771e884"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0) 4.366449516s ago: executing program 4 (id=132): ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x201, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 4.238768494s ago: executing program 4 (id=133): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x143e81, 0x0) r3 = dup(r2) fallocate(r3, 0x11, 0x73000000, 0x74000) 4.05483432s ago: executing program 4 (id=134): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010060000904000000010100000a240100000002010205240506000904010000010200000904010101010200000e240201000000009290d2199a5a09050109000000040007250180000000090402000001020000090402010101021b00082402010000000007240100000000090582090002"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000200cc2d"], 0x1c}}, 0x4000000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8}) 3.740537515s ago: executing program 3 (id=138): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x2, 0x3}) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x20200, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) (async) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9, 0xf0, 0x32, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x80, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x22}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xd0, 0x9a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x4, 0xa5}}}}}}}]}}, 0x0) close_range(r2, r2, 0x0) 3.214578499s ago: executing program 1 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b9fd0900000f32f4660f5f6c0ab88a000f00d80fc7fb3e660f3835440066b9361001c066b8e600000066ba000000000f30baf80c66b83fe2ae8b66efbafc0cb0d6eebaf80c66b87cd4d48766efbafc0c66b80000008066eff30fc774f9", 0x5e}], 0x1, 0x69, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) 2.938607151s ago: executing program 1 (id=141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12000000, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x700, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) socket$inet6(0xa, 0xa, 0x5) 2.641296765s ago: executing program 0 (id=144): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0) syz_usb_disconnect(r0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r7 = dup3(r1, r6, 0x80000) write$char_usb(r7, &(0x7f0000000300)='a', 0x1) 2.431005411s ago: executing program 4 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x22, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xd8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xb0, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x78, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x44, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3f, 0x1, "5d150f44dff43c28f295ed8ee588db5ac328624e9685e353850d17319df25cd92c5e17ce12e4af525660c567dd61629b0d990b0263513f5ac2d4c3"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x14c}}, 0x0) 2.356306194s ago: executing program 4 (id=148): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) syz_usb_connect$uac1(0x2, 0xba, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a800030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c24020203ec0250800009010f240605020407002e130a004ef1000924030102020505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\x\xacK-^{', 0x3a, './file1'}, 0x3d) r6 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source\xa8n\x91\x9c\xd1\xc0\x02n\xd6\xecB\xc7\xae\xe4\xc3\x80\xb2_\xb7|\xb2H=)', &(0x7f00000005c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x77e, 0x0, 0x0, 0x0) (fail_nth: 46) 1.69287301s ago: executing program 3 (id=153): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020"], 0x80}}, 0x4814) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x1000000, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 1.516132186s ago: executing program 1 (id=154): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x2}}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x50201, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new$default user:s'], 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x5, 0x2a, 0xfffffffe, 0x4000, 0x2, 0xf, 0xfffffffffffffffe, 0x2003}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, &(0x7f00000001c0)='id_resolver\x00', 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x89fe3719ac50b348, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x9d, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) syz_usb_connect(0x4, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) copy_file_range(r7, &(0x7f0000000100)=0xf0, r7, 0x0, 0x9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000006", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="fdffffff", @ANYRES32, @ANYBLOB], 0x50) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000002c00010026bd7000fcdbdf250400000044001180043e5a6355d81deed1c38b1595828eb92bd575b58eea0621def7089c3813a6b0374ad9ca56fa3f7a6c49e8838618477821a7581398e7d21b1c7c4423e56b2fed754e361523b2c3dc1f841279e485746b3d8294de24faa8b092a813272e0b0ff029450853a44021203c05f7f21d41e6ce604e944aeed60692cab6523a3bbdddfd65c0f12d3294e9423352f8d85735016087be47c40d749013cccb3d1bde"], 0x58}, 0x1, 0x0, 0x0, 0x20048420}, 0x20000090) 1.334717117s ago: executing program 2 (id=155): r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x201, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 1.137269692s ago: executing program 2 (id=156): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x3e1, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x51) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000000)=0x7) (async, rerun: 32) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) (async, rerun: 32) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async, rerun: 32) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f00000008c0)=0x2, 0x0, 0x4) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r10, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r11 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r11, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x20, 0x24, 0x15, {0x15, 0x9, "11916f2f8d9e36bb0dc53d6ff0bbe8115f48f5"}}, &(0x7f0000000880)=ANY=[@ANYBLOB="0003040000000c03280877f4e270551451f9b047"], &(0x7f0000000140)=ANY=[@ANYBLOB="000f0c000000050f0c00010710021819010040f635cfb15370590c967fb2b10efa19316ae858f0a71d"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x81, 0x7, "cf7227b3", "c5188b95"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x9, 0xf3, 0x0, 0x7833, 0xc0}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x40, 0x10, 0x20, "b3563ceea29233502feacf646e433d1878e93fa128817b2e475cc42377aecf52"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x0, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1c00, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "8c50"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f76b"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xd6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x10}}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) 965.136055ms ago: executing program 3 (id=157): pipe(&(0x7f00000001c0)) r0 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x5, 0xd03, 0x80000000, {}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x21, 0x3, 0x0, 0x0, "ecf8e8a8437c0b323d3884310e2eb6ec3080157dd99ac49221b1c8d82d1c6b338a16356bbf9760c94b503c38bcb6c2e7ff17e983ad91d68ac0d4aa459771e884"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x1) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0) 833.338843ms ago: executing program 2 (id=158): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x0, 0x989, 0x7, 0xd4}, 0x9c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x3e, 0x0) 666.366869ms ago: executing program 2 (id=159): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000dffff6c32000000001000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() 658.776762ms ago: executing program 4 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x2, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fcf000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x281c3f462abf2bd2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0xdddd1000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r8 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r9 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050006"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_disconnect(r8) unshare(0x20400) ppoll(&(0x7f0000000080)=[{r9, 0x2044}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000000100)=0x4, 0x50) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x100000000) 307.840873ms ago: executing program 2 (id=161): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2200) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000200)) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 150.426154ms ago: executing program 2 (id=162): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000240)=0xffffffff, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x7f, {0x6, 0x7ff, 0x3, 0x2, 0x8}}) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1d0, 0x290, 0x290, 0x390, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x8000000, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xff, 'netdevsim0\x00', '\x00', {0xff}, {0xff}, 0xb8, 0x0, 0x40}, 0x0, 0x70, 0x428}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="81b035711ec5", 0xfc00, 0xe, [0xa, 0x27, 0x1b, 0x3d, 0x1e, 0xb, 0x2b, 0x0, 0x30, 0x1a, 0x23, 0x6, 0x31, 0x33, 0x36, 0x18], 0x2, 0x4, 0x9}}}, {{@ip={@local, @local, 0xff, 0xffffff00, 'netpci0\x00', 'wg1\x00', {}, {}, 0xc, 0x1, 0xa}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff000000, 0xff000000, 'wg1\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x11e, 0x6, 0x4b}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xdc}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'ipvlan1\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x6c, 0x0, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x3, 0xc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9b, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = userfaultfd(0x1) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x9b5c0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) poll(&(0x7f0000000840)=[{r5, 0x8}], 0x1, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000000c0)={0x3707, 0x401, 0x0, 'queue0\x00', 0x5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d30303030303030302030303030303030303034303030302c757365725f69643fcdbd880e4ff8a8e45de2210f74a29bb2eb8271527faa63a81b66de66987943bfd17f806a8c466994767562a24e49f84389ec1c6cd3ce0639235f3a591302f8260843c1b2e8efe448b1b522dd648f99c649339cb9a47ffbe8b6df6ce125f47f75fc6f5902c40b298f09c67138", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0xfffc}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) 83.307721ms ago: executing program 3 (id=163): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000001030108"], 0x20}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f00000010c0)='\xd1\xeb\x95\x0e\x0e\xb6\x11\xc2@e\xf6>\xae\x17\\]\x10\xab\x1fs\xa6\x89\x88\x94o\xb9\".%c-\xf9\x8f\x873\x9f\x8a\xfd~\x19\xb9]~\x14\a\x80\x0e\xb3\xa5\x89\xa9\xee\'\xea\xa5\xd9\xaa\xbd<\x9b\x12\xe78x+\\\xd7\x18 \x8d\xa1<\xbe+\xd2&\xc0\xean\xa9Z\xe6\xc9.\xc9h\x92\xae*\x1dx\x06\xf9\xac\xae\xb9\x87*\xbb\xdb\xa7\xd8\x8a\xd3\x1b\xc0`p\"\t]\xd2d\x16\xdcK\xc6z\x17\x12\xa94\xd1\xff\x81\xdao\xdf\xf7\xad\xb8{\xcb\n\x8a\xd7\xa8\xc63\xd9ktbK\xb0\x1d\xdc\xc88\x13\xe2Z\x93r\'\x04\xda\x81\xcaI\xd0!\x8e\xd8\x10KG&\x8a@\xe3(~a\x10\x1cT\xc8m\xe3\xb5M\xa8 \x8a\xf9\xdfKabw\xd3\xc7\xa12\x87\xa9\xc6-}\xddr\xfb\xabW\xce\x90\xd8\x7fK\xebm\x1fUW\xbaXS\xaf\xcfz%_vw\xdc\x13v14L\xd3<\x18n\xbb\x1a\x1d\xf7A\xf2i\xed\xb9H\x9d\xbdqi\xd3\x90OB\x03\x88\xde\x1b0m\xa6\xcc\xf5', &(0x7f00000001c0)='[\x8b\xa4[\x13\x9b\x04\x00#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x95\xba\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=164): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x8000, 0x10003}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1bbd3b3eb838c6ea}) (fail_nth: 22) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 64.015557][ T5832] cgroup: Unknown subsys name 'net' [ 64.147781][ T5832] cgroup: Unknown subsys name 'cpuset' [ 64.156390][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.513951][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.415192][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.423941][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.432163][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.440375][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.454831][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.466663][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.475073][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.484554][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.495765][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.504595][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.513443][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.515217][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.527750][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.527911][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.543925][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.549425][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.551712][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.558528][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.573724][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.574721][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.594479][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.594704][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.602054][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.618732][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.644744][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.195056][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 70.297758][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 70.390899][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 70.531996][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.539266][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.547971][ T5865] bridge_slave_0: entered allmulticast mode [ 70.555202][ T5865] bridge_slave_0: entered promiscuous mode [ 70.563049][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 70.574701][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 70.611802][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.619072][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.626521][ T5865] bridge_slave_1: entered allmulticast mode [ 70.633537][ T5865] bridge_slave_1: entered promiscuous mode [ 70.658044][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.665225][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.672378][ T5861] bridge_slave_0: entered allmulticast mode [ 70.679525][ T5861] bridge_slave_0: entered promiscuous mode [ 70.734387][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.741608][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.749370][ T5861] bridge_slave_1: entered allmulticast mode [ 70.756718][ T5861] bridge_slave_1: entered promiscuous mode [ 70.832119][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.845309][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.896361][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.909047][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.938146][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.945328][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.952413][ T5862] bridge_slave_0: entered allmulticast mode [ 70.960698][ T5862] bridge_slave_0: entered promiscuous mode [ 71.009969][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.017267][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.024682][ T5862] bridge_slave_1: entered allmulticast mode [ 71.031606][ T5862] bridge_slave_1: entered promiscuous mode [ 71.053499][ T5865] team0: Port device team_slave_0 added [ 71.113201][ T5861] team0: Port device team_slave_0 added [ 71.121200][ T5865] team0: Port device team_slave_1 added [ 71.147668][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.155055][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.162765][ T5860] bridge_slave_0: entered allmulticast mode [ 71.171183][ T5860] bridge_slave_0: entered promiscuous mode [ 71.178443][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.186365][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.193456][ T5863] bridge_slave_0: entered allmulticast mode [ 71.201611][ T5863] bridge_slave_0: entered promiscuous mode [ 71.222563][ T5861] team0: Port device team_slave_1 added [ 71.253600][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.261094][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.268763][ T5860] bridge_slave_1: entered allmulticast mode [ 71.276320][ T5860] bridge_slave_1: entered promiscuous mode [ 71.282938][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.290294][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.297554][ T5863] bridge_slave_1: entered allmulticast mode [ 71.304684][ T5863] bridge_slave_1: entered promiscuous mode [ 71.313407][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.326198][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.348542][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.355655][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.381711][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.400525][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.406964][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439859][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.447240][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.473232][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.487200][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.494157][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.520069][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.531857][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.538837][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.565321][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.625136][ T5848] Bluetooth: hci3: command tx timeout [ 71.630858][ T5847] Bluetooth: hci0: command tx timeout [ 71.637347][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.649874][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.661678][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.674805][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.688088][ T5862] team0: Port device team_slave_0 added [ 71.696715][ T5862] team0: Port device team_slave_1 added [ 71.704537][ T5848] Bluetooth: hci2: command tx timeout [ 71.704789][ T5858] Bluetooth: hci1: command tx timeout [ 71.710134][ T5847] Bluetooth: hci4: command tx timeout [ 71.744053][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.751260][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.777546][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.837988][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.845791][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.872080][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.915787][ T5863] team0: Port device team_slave_0 added [ 71.937944][ T5861] hsr_slave_0: entered promiscuous mode [ 71.944173][ T5861] hsr_slave_1: entered promiscuous mode [ 71.953912][ T5860] team0: Port device team_slave_0 added [ 71.964078][ T5860] team0: Port device team_slave_1 added [ 71.981990][ T5863] team0: Port device team_slave_1 added [ 72.018330][ T5865] hsr_slave_0: entered promiscuous mode [ 72.025042][ T5865] hsr_slave_1: entered promiscuous mode [ 72.031181][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.039752][ T5865] Cannot create hsr debugfs directory [ 72.093956][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.101027][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.128129][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.154936][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.161902][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.188540][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.202059][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.209722][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.235779][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.251890][ T5862] hsr_slave_0: entered promiscuous mode [ 72.258300][ T5862] hsr_slave_1: entered promiscuous mode [ 72.264281][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.271841][ T5862] Cannot create hsr debugfs directory [ 72.278720][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.285885][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.312133][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.403471][ T5863] hsr_slave_0: entered promiscuous mode [ 72.409999][ T5863] hsr_slave_1: entered promiscuous mode [ 72.416825][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.424702][ T5863] Cannot create hsr debugfs directory [ 72.606638][ T5860] hsr_slave_0: entered promiscuous mode [ 72.613031][ T5860] hsr_slave_1: entered promiscuous mode [ 72.619369][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.627204][ T5860] Cannot create hsr debugfs directory [ 73.019794][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.040781][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.050592][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.068596][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.128791][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.138786][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.167723][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.178636][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.240473][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.252168][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.262711][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.273793][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.390505][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.408754][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.419072][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.432602][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.491615][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.549771][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.561285][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.572224][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.590586][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.602143][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.640082][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.647336][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.678705][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.685821][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.705131][ T5847] Bluetooth: hci0: command tx timeout [ 73.705139][ T5858] Bluetooth: hci3: command tx timeout [ 73.719045][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.784436][ T5858] Bluetooth: hci1: command tx timeout [ 73.784500][ T5848] Bluetooth: hci2: command tx timeout [ 73.795322][ T5847] Bluetooth: hci4: command tx timeout [ 73.828535][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.844929][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.909231][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.916409][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.930175][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.937278][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.966671][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.998731][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.005883][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.030258][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.058686][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.076164][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.101613][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.108776][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.148952][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.159727][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.177345][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.184497][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.214302][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.221423][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.231807][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.238932][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.265098][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.272195][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.306037][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.339176][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.440209][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.489884][ T5865] veth0_vlan: entered promiscuous mode [ 74.507088][ T5865] veth1_vlan: entered promiscuous mode [ 74.559563][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.584122][ T5865] veth0_macvtap: entered promiscuous mode [ 74.600157][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.622231][ T5865] veth1_macvtap: entered promiscuous mode [ 74.675342][ T5861] veth0_vlan: entered promiscuous mode [ 74.694005][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.715531][ T5862] veth0_vlan: entered promiscuous mode [ 74.728520][ T5861] veth1_vlan: entered promiscuous mode [ 74.742254][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.761272][ T5862] veth1_vlan: entered promiscuous mode [ 74.772840][ T5865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782208][ T5865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.792331][ T5865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.801422][ T5865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.817990][ T5863] veth0_vlan: entered promiscuous mode [ 74.838229][ T5860] veth0_vlan: entered promiscuous mode [ 74.872983][ T5863] veth1_vlan: entered promiscuous mode [ 74.900862][ T5860] veth1_vlan: entered promiscuous mode [ 74.909403][ T5861] veth0_macvtap: entered promiscuous mode [ 74.920011][ T5861] veth1_macvtap: entered promiscuous mode [ 74.949592][ T5862] veth0_macvtap: entered promiscuous mode [ 74.968467][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.986198][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.998380][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.019553][ T5862] veth1_macvtap: entered promiscuous mode [ 75.051622][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.063941][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.076493][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.101609][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.110675][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.120090][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.129551][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.159044][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.167761][ T5863] veth0_macvtap: entered promiscuous mode [ 75.180728][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.191706][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.199509][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.209492][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.220020][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.232383][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.249524][ T5863] veth1_macvtap: entered promiscuous mode [ 75.268512][ T5860] veth0_macvtap: entered promiscuous mode [ 75.291326][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.302446][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.313072][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.323901][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.335677][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.367774][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.379251][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.390051][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.398782][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.411024][ T5860] veth1_macvtap: entered promiscuous mode [ 75.440692][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.451329][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.461817][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.472780][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.482828][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.493347][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.506672][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.519345][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.524564][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.537715][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.540941][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.557042][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.568087][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.578000][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.588489][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.598708][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.609244][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.623500][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.651590][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.654566][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.668076][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.671545][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.681144][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.698088][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.708732][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.720612][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.731791][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.747811][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.757665][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.766735][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.775520][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784377][ T5848] Bluetooth: hci3: command tx timeout [ 75.795134][ T5848] Bluetooth: hci0: command tx timeout [ 75.803068][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.813621][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.824776][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.836256][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.846124][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.857195][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.868130][ T5848] Bluetooth: hci1: command tx timeout [ 75.873576][ T5847] Bluetooth: hci2: command tx timeout [ 75.873718][ T5858] Bluetooth: hci4: command tx timeout [ 75.879127][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.895042][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.906752][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.930811][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.003557][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.028304][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.039755][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.067514][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.086512][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.099238][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.149829][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.168238][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.268927][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.286662][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.324719][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.360316][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.384555][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.428165][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.454474][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.471522][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.492137][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.524331][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 76.532730][ T5899] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 76.548860][ T5899] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.572929][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.584130][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.610766][ T5899] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.644491][ T5899] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.664934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.680920][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.699211][ T5917] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 76.747071][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.756847][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.816838][ T5913] syzkaller1: entered promiscuous mode [ 76.826557][ T5913] syzkaller1: entered allmulticast mode [ 77.152316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.190739][ T5899] usb 4-1: usb_control_msg returned -32 [ 77.197763][ T5899] usbtmc 4-1:16.0: can't read capabilities [ 77.255355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.391686][ T5925] input: syz0 as /devices/virtual/input/input5 [ 77.426452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.435143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.522433][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 77.653536][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.766931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.845728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.874325][ T5858] Bluetooth: hci0: command tx timeout [ 77.884318][ T5858] Bluetooth: hci3: command tx timeout [ 77.945077][ T5858] Bluetooth: hci2: command tx timeout [ 77.950517][ T5858] Bluetooth: hci1: command tx timeout [ 77.956060][ T5858] Bluetooth: hci4: command tx timeout [ 78.175746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.264522][ T5916] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.307920][ T5916] random: crng reseeded on system resumption [ 78.376538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.385544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 78.405792][ T5937] veth1_macvtap: left promiscuous mode [ 78.412346][ T5937] macsec0: entered promiscuous mode [ 78.843638][ T5941] veth1_macvtap: entered promiscuous mode [ 78.850180][ T5941] macsec0: left promiscuous mode [ 79.663247][ T5950] dccp_invalid_packet: P.Data Offset(0) too small [ 79.729090][ T5950] program syz.2.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.892545][ T5953] tipc: Started in network mode [ 79.907195][ T5953] tipc: Node identity ac1414aa, cluster identity 4711 [ 79.907775][ T5957] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:0 [ 79.925852][ T5953] tipc: Enabled bearer , priority 10 [ 80.334412][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.491493][ T5899] usb 4-1: USB disconnect, device number 2 [ 80.584881][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 80.647856][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.776602][ T5972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.787609][ T24] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 80.841749][ T24] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 80.871380][ T24] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 80.882154][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.907751][ T24] usb 3-1: Product: syz [ 80.912037][ T24] usb 3-1: Manufacturer: syz [ 81.011826][ T24] usb 3-1: SerialNumber: syz [ 81.061854][ T5919] tipc: Node number set to 2886997162 [ 81.321619][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.333387][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.706515][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.896955][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 83.921462][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.004889][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 84.073131][ T10] usb 5-1: config 1 has no interface number 1 [ 84.115743][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 84.129543][ T24] usb 3-1: USB disconnect, device number 2 [ 84.208779][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.278081][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.308860][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.318375][ T5992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 84.340784][ T10] usb 5-1: Product: syz [ 84.346663][ T10] usb 5-1: Manufacturer: syz [ 84.361483][ T10] usb 5-1: SerialNumber: syz [ 84.384072][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 84.406145][ T5998] random: crng reseeded on system resumption [ 84.598853][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.657231][ T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 84.666441][ T10] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 84.676537][ T10] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 84.743827][ T10] usb 5-1: USB disconnect, device number 2 [ 85.026005][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.069393][ T5998] Zero length message leads to an empty skb [ 85.266560][ T6020] syzkaller1: entered promiscuous mode [ 85.272097][ T6020] syzkaller1: entered allmulticast mode [ 86.326397][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.536464][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.554335][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 86.563118][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 86.572761][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.590569][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.603250][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.613714][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.627293][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.637762][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.724275][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 86.733526][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 86.742089][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.811202][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.838573][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.849402][ T120] cfg80211: failed to load regulatory.db [ 86.897662][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.933940][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.943794][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.405425][ T1218] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 87.619588][ T1218] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 87.640601][ T1218] usb 3-1: config 0 has no interface number 0 [ 87.664412][ T1218] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.675734][ T1218] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 87.694419][ T1218] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 87.707993][ T1218] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 87.719585][ T1218] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 87.740014][ T1218] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 87.753648][ T1218] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 87.763319][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.794541][ T1218] usb 3-1: config 0 descriptor?? [ 87.803534][ T6037] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 87.811383][ T6037] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 87.852240][ T1218] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 87.888934][ T24] usb 4-1: usb_control_msg returned -32 [ 87.942174][ T24] usbtmc 4-1:16.0: can't read capabilities [ 88.105570][ T5903] usb 3-1: USB disconnect, device number 3 [ 88.120502][ T5903] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 88.209111][ T6053] netem: incorrect ge model size [ 88.221657][ T6053] netem: change failed [ 88.326689][ T10] usb 5-1: usb_control_msg returned -32 [ 88.352866][ T10] usbtmc 5-1:16.0: can't read capabilities [ 88.436002][ T6058] trusted_key: encrypted_key: keylen parameter is missing [ 88.444552][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 88.552469][ T30] audit: type=1326 audit(1744328568.033:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.0.35" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1ecf8d169 code=0x0 [ 88.665600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.316884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.503811][ T6039] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 89.728462][ T120] usb 5-1: USB disconnect, device number 3 [ 89.739246][ T6080] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 90.027990][ T10] usb 4-1: USB disconnect, device number 3 [ 90.766721][ T6094] syzkaller0: entered promiscuous mode [ 90.774298][ T6094] syzkaller0: entered allmulticast mode [ 90.864351][ T120] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.934459][ T10] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 91.036091][ T120] usb 4-1: config 0 has no interfaces? [ 91.044175][ T120] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.069562][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.101122][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.113613][ T10] usb 5-1: config index 0 descriptor too short (expected 32595, got 27) [ 91.124798][ T120] usb 4-1: Product: syz [ 91.136234][ T120] usb 4-1: Manufacturer: syz [ 91.137777][ T10] usb 5-1: config 60 has too many interfaces: 59, using maximum allowed: 32 [ 91.141722][ T120] usb 4-1: SerialNumber: syz [ 91.167096][ T10] usb 5-1: config 60 has an invalid descriptor of length 188, skipping remainder of the config [ 91.167500][ T120] usb 4-1: config 0 descriptor?? [ 91.185736][ T10] usb 5-1: config 60 has 0 interfaces, different from the descriptor's value: 59 [ 91.222708][ T10] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 91.249079][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.257894][ T10] usb 5-1: Product: 㯑 [ 91.884315][ T120] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.056637][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 92.075014][ T120] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 92.086372][ T120] usb 2-1: config 1 interface 0 has no altsetting 0 [ 92.099412][ T120] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 92.114461][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.122749][ T120] usb 2-1: Product: syz [ 92.131823][ T120] usb 2-1: Manufacturer: syz [ 92.140968][ T120] usb 2-1: SerialNumber: syz [ 92.730425][ T6103] xt_TCPMSS: Only works on TCP SYN packets [ 93.051098][ T10] usb 5-1: USB disconnect, device number 4 [ 93.149582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.344711][ T5900] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 93.472730][ T10] usb 4-1: USB disconnect, device number 4 [ 93.946560][ T5900] usb 3-1: no configurations [ 93.951189][ T5900] usb 3-1: can't read configurations, error -22 [ 94.284957][ T5900] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 94.414336][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 94.460515][ T5900] usb 3-1: no configurations [ 94.471623][ T5900] usb 3-1: can't read configurations, error -22 [ 94.499100][ T5900] usb usb3-port1: attempt power cycle [ 94.664355][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.689101][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.713986][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 94.723493][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.734564][ T10] usb 4-1: Product: syz [ 94.738902][ T10] usb 4-1: Manufacturer: syz [ 94.752963][ T10] usb 4-1: SerialNumber: syz [ 94.776516][ T10] usb 4-1: config 0 descriptor?? [ 95.015404][ T5900] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 95.027914][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'. [ 95.036889][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'. [ 95.053607][ T6115] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 95.059714][ T5900] usb 3-1: no configurations [ 95.069566][ T5900] usb 3-1: can't read configurations, error -22 [ 95.090752][ T6115] ip6gretap0: entered promiscuous mode [ 95.213441][ T24] usb 4-1: USB disconnect, device number 5 [ 95.246417][ T5900] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 95.278425][ T5900] usb 3-1: no configurations [ 95.283133][ T5900] usb 3-1: can't read configurations, error -22 [ 95.290402][ T5900] usb usb3-port1: unable to enumerate USB device [ 95.446476][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.704452][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 95.791293][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.813210][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.874352][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.906459][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.981759][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.086513][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.119322][ T120] usbhid 2-1:1.0: can't add hid device: -71 [ 96.171016][ T120] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 96.230183][ T120] usb 2-1: USB disconnect, device number 2 [ 96.433941][ T6135] netlink: 452 bytes leftover after parsing attributes in process `syz.0.54'. [ 96.495264][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 96.503934][ T10] usbtmc 5-1:16.0: can't read capabilities [ 96.718814][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.729584][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.746407][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.830960][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.975382][ T6122] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 97.994289][ T5903] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.180621][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.233899][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.270764][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.319490][ T5903] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.360529][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.396658][ T5903] usb 3-1: config 0 descriptor?? [ 98.615396][ T5899] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.786801][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 98.815666][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.832962][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.833568][ T5899] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 98.850578][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.871199][ T6162] vlan2: entered allmulticast mode [ 98.878732][ T6162] hsr0: entered allmulticast mode [ 98.883908][ T6162] hsr_slave_0: entered allmulticast mode [ 98.891973][ T6162] hsr_slave_1: entered allmulticast mode [ 98.900130][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.927664][ T5899] usb 2-1: config 0 descriptor?? [ 99.087377][ T5903] usbhid 3-1:0.0: can't add hid device: -71 [ 99.097488][ T5903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.156646][ T5903] usb 3-1: USB disconnect, device number 8 [ 99.202826][ T6185] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.213221][ T6185] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.370464][ T5899] aquacomputer_d5next 0003:0C70:F00E.0001: unknown main item tag 0x0 [ 99.381972][ T5899] aquacomputer_d5next 0003:0C70:F00E.0001: unknown main item tag 0x0 [ 99.401280][ T5899] aquacomputer_d5next 0003:0C70:F00E.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 99.661804][ T5899] usb 2-1: USB disconnect, device number 3 [ 99.768792][ T10] IPVS: starting estimator thread 0... [ 99.778421][ T6189] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 99.875267][ T6190] IPVS: using max 32 ests per chain, 76800 per kthread [ 100.030401][ T6199] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 100.092139][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 100.262773][ T6208] netlink: 452 bytes leftover after parsing attributes in process `syz.1.83'. [ 100.493541][ T6212] process 'syz.0.82' launched './file0' with NULL argv: empty string added [ 101.089604][ T6223] loop2: detected capacity change from 0 to 7 [ 101.109931][ T6223] Dev loop2: unable to read RDB block 7 [ 101.122162][ T6223] loop2: unable to read partition table [ 101.136192][ T6223] loop2: partition table beyond EOD, truncated [ 101.142532][ T6223] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 101.337824][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 101.646913][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 101.800773][ T6229] ipvlan2: entered promiscuous mode [ 101.808028][ T6229] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 102.059932][ T6232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.90'. [ 102.071310][ T6232] syz_tun: entered promiscuous mode [ 102.375150][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.506247][ T6132] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 102.528757][ T5903] usb 5-1: USB disconnect, device number 5 [ 102.534767][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 102.621135][ T6241] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.732772][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.747673][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.769311][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 102.779046][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.797869][ T10] usb 2-1: config 0 descriptor?? [ 102.865152][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.918023][ T6246] trusted_key: encrypted_key: keylen parameter is missing [ 102.926654][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 103.094451][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 103.101880][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 103.130907][ T24] usb 3-1: config 0 has no interface number 0 [ 103.150308][ T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 103.182093][ T24] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 103.198396][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 103.220018][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 103.236359][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.238755][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.258592][ T24] usb 3-1: Product: syz [ 103.262859][ T24] usb 3-1: Manufacturer: syz [ 103.269761][ T24] usb 3-1: SerialNumber: syz [ 103.441388][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.560319][ T24] usb 3-1: config 0 descriptor?? [ 103.576399][ T10] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 103.705498][ T6243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.728198][ T10] isku 0003:1E7D:319C.0002: couldn't init struct isku_device [ 103.733377][ T6243] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.742795][ T10] isku 0003:1E7D:319C.0002: couldn't install keyboard [ 103.763718][ T10] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -71 [ 103.788468][ T10] usb 2-1: USB disconnect, device number 4 [ 103.944535][ T5903] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 104.142549][ T5903] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 104.153677][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.170518][ T5903] usb 5-1: config 0 has no interface number 0 [ 104.176806][ T5903] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.191733][ T5903] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.201763][ T5903] usb 5-1: config 0 interface 202 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 104.292126][ T5903] usb 5-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 104.301866][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.315531][ T5903] usb 5-1: Product: syz [ 104.320272][ T5903] usb 5-1: Manufacturer: syz [ 104.325241][ T5903] usb 5-1: SerialNumber: syz [ 104.338673][ T5903] usb 5-1: config 0 descriptor?? [ 104.354350][ T5903] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 104.362703][ T5903] dw2102: su3000_power_ctrl: 1, initialized 0 [ 104.378914][ T5903] dvb-usb: bulk message failed: -8 (2/0) [ 104.397447][ T5903] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 104.415576][ T5903] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 104.675438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.307444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.723874][ T24] dm9601 3-1:0.41: probe with driver dm9601 failed with error -71 [ 105.743531][ T24] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 105.779572][ T24] usb 3-1: USB disconnect, device number 9 [ 106.216145][ T5899] usb 5-1: USB disconnect, device number 6 [ 106.255820][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.394968][ T6297] [U] J [ 106.889957][ T6307] dump_stack_lvl+0x241/0x360 [ 106.889988][ T6307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.890010][ T6307] ? __pfx__printk+0x10/0x10 [ 106.890032][ T6307] ? __lock_acquire+0xad5/0xd80 [ 106.890061][ T6307] should_fail_ex+0x424/0x570 [ 106.890084][ T6307] should_failslab+0xac/0x100 [ 106.890109][ T6307] kmem_cache_alloc_noprof+0x78/0x390 [ 106.890131][ T6307] ? skb_clone+0x20c/0x390 [ 106.890155][ T6307] skb_clone+0x20c/0x390 [ 106.890175][ T6307] __netlink_deliver_tap+0x3c4/0x7f0 [ 106.890210][ T6307] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.890231][ T6307] netlink_deliver_tap+0x19d/0x1b0 [ 106.890255][ T6307] netlink_unicast+0x7c6/0x9a0 [ 106.890284][ T6307] ? __pfx_netlink_unicast+0x10/0x10 [ 106.890305][ T6307] ? skb_put+0x114/0x1f0 [ 106.890325][ T6307] netlink_sendmsg+0x8c3/0xcd0 [ 106.890361][ T6307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.890388][ T6307] ? aa_sock_msg_perm+0x91/0x160 [ 106.890417][ T6307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.890438][ T6307] __sock_sendmsg+0x221/0x270 [ 106.890463][ T6307] ____sys_sendmsg+0x523/0x860 [ 106.890490][ T6307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.890506][ T6307] ? __fget_files+0x2a/0x420 [ 106.890525][ T6307] ? __fget_files+0x2a/0x420 [ 106.890550][ T6307] __sys_sendmsg+0x271/0x360 [ 106.890573][ T6307] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.890645][ T6307] ? do_syscall_64+0xb6/0x230 [ 106.890669][ T6307] do_syscall_64+0xf3/0x230 [ 106.890689][ T6307] ? clear_bhb_loop+0x45/0xa0 [ 106.890709][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.890730][ T6307] RIP: 0033:0x7fc1ecf8d169 [ 106.890748][ T6307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.890762][ T6307] RSP: 002b:00007fc1edd3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.890781][ T6307] RAX: ffffffffffffffda RBX: 00007fc1ed1a5fa0 RCX: 00007fc1ecf8d169 [ 106.890793][ T6307] RDX: 0000000000000040 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 106.890803][ T6307] RBP: 00007fc1edd3e090 R08: 0000000000000000 R09: 0000000000000000 [ 106.890813][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.890828][ T6307] R13: 0000000000000000 R14: 00007fc1ed1a5fa0 R15: 00007fc1ed2cfa28 [ 106.890856][ T6307] [ 106.894181][ T5900] hid (null): unknown global tag 0xe [ 107.169704][ T24] usb 4-1: USB disconnect, device number 6 [ 107.175977][ T5900] hid (null): global environment stack underflow [ 107.201913][ T6315] trusted_key: encrypted_key: keylen parameter is missing [ 107.206733][ T5900] hid-generic 0080:7FFF:000E.0003: unknown global tag 0xe [ 107.220396][ T5900] hid-generic 0080:7FFF:000E.0003: item 0 1 1 14 parsing failed [ 107.233749][ T5900] hid-generic 0080:7FFF:000E.0003: probe with driver hid-generic failed with error -22 [ 107.385779][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.029109][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 109.044383][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.181056][ T6370] fuse: Bad value for 'fd' [ 109.190728][ T6370] random: crng reseeded on system resumption [ 109.204455][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 109.218486][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.256584][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.280830][ T24] usb 5-1: config 1 has no interface number 1 [ 109.287546][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 109.349345][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.417219][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.444471][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.468966][ T24] usb 5-1: Product: syz [ 109.482152][ T24] usb 5-1: Manufacturer: syz [ 109.496975][ T24] usb 5-1: SerialNumber: syz [ 109.745597][ T6360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.793145][ T24] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 109.822134][ T24] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 109.859458][ T24] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 109.900701][ T24] usb 5-1: USB disconnect, device number 7 [ 110.074715][ T5900] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.116561][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.244884][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 110.256419][ T5900] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.276472][ T5900] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 110.289352][ T5900] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 110.315311][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.331506][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.339884][ T5900] usb 4-1: Product: syz [ 110.345005][ T5900] usb 4-1: Manufacturer: syz [ 110.349939][ T5900] usb 4-1: SerialNumber: syz [ 110.424628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.574830][ T5900] cdc_ncm 4-1:1.0: bind() failure [ 110.582931][ T5900] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 110.589957][ T5900] cdc_ncm 4-1:1.1: bind() failure [ 110.604798][ T5900] usb 4-1: USB disconnect, device number 7 [ 110.724438][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 110.880859][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.889663][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 110.902998][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.916054][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.931344][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.941054][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.960524][ T10] usb 5-1: Product: syz [ 110.965912][ T10] usb 5-1: Manufacturer: syz [ 110.970587][ T10] usb 5-1: SerialNumber: syz [ 111.183438][ T6412] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 111.202212][ T6409] delete_channel: no stack [ 111.212897][ T6409] delete_channel: no stack [ 111.423900][ T6420] trusted_key: encrypted_key: keylen parameter is missing [ 111.627979][ T10] usb 5-1: 0:2 : does not exist [ 111.647117][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 111.688490][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 111.730808][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 111.754090][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 111.773218][ T10] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 111.826599][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 111.883039][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 111.929345][ T10] usb 5-1: USB disconnect, device number 8 [ 112.161247][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.199088][ T30] audit: type=1326 audit(1744328591.683:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457b8d169 code=0x7ffc0000 [ 112.272789][ T30] audit: type=1326 audit(1744328591.713:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2457b8d169 code=0x7ffc0000 [ 112.339567][ T30] audit: type=1326 audit(1744328591.713:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457b8d169 code=0x7ffc0000 [ 112.388595][ T30] audit: type=1326 audit(1744328591.713:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457b8d169 code=0x7ffc0000 [ 112.507275][ T30] audit: type=1326 audit(1744328591.713:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2457b8d169 code=0x7ffc0000 [ 112.580691][ T30] audit: type=1326 audit(1744328591.903:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457b8d169 code=0x7ffc0000 [ 112.630482][ T30] audit: type=1326 audit(1744328591.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2457b8d169 code=0x7ffc0000 [ 112.674601][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.858999][ T6449] FAULT_INJECTION: forcing a failure. [ 112.858999][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 112.877494][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.895933][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.3.164 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 112.895957][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.895966][ T6449] Call Trace: [ 112.895973][ T6449] [ 112.895980][ T6449] dump_stack_lvl+0x241/0x360 [ 112.896012][ T6449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.896035][ T6449] ? __pfx__printk+0x10/0x10 [ 112.896062][ T6449] ? __pfx___might_resched+0x10/0x10 [ 112.896087][ T6449] should_fail_ex+0x424/0x570 [ 112.896117][ T6449] should_failslab+0xac/0x100 [ 112.896141][ T6449] kmem_cache_alloc_noprof+0x78/0x390 [ 112.896167][ T6449] ? __kernfs_new_node+0xdf/0x890 [ 112.896189][ T6449] __kernfs_new_node+0xdf/0x890 [ 112.896206][ T6449] ? __lock_acquire+0xad5/0xd80 [ 112.896230][ T6449] ? __pfx___kernfs_new_node+0x10/0x10 [ 112.896256][ T6449] ? kernfs_root+0x1c/0x230 [ 112.896274][ T6449] ? kernfs_root+0x1c/0x230 [ 112.896293][ T6449] kernfs_new_node+0x114/0x220 [ 112.896316][ T6449] kernfs_create_link+0xa5/0x1f0 [ 112.896341][ T6449] sysfs_do_create_link_sd+0x85/0x110 [ 112.896360][ T6449] software_node_notify+0xd9/0x1b0 [ 112.896381][ T6449] device_add+0x513/0xbf0 [ 112.896401][ T6449] ? iommufd_test+0x2efb/0x56a0 [ 112.896421][ T6449] iommufd_test+0x3350/0x56a0 [ 112.896450][ T6449] ? __pfx_iommufd_test+0x10/0x10 [ 112.896479][ T6449] ? __lock_acquire+0xad5/0xd80 [ 112.896528][ T6449] iommufd_fops_ioctl+0x4fc/0x610 [ 112.896554][ T6449] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 112.896580][ T6449] ? __fget_files+0x2a/0x420 [ 112.896601][ T6449] ? __fget_files+0x2a/0x420 [ 112.896620][ T6449] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 112.896644][ T6449] __se_sys_ioctl+0xf1/0x160 [ 112.896665][ T6449] do_syscall_64+0xf3/0x230 [ 112.896693][ T6449] ? clear_bhb_loop+0x45/0xa0 [ 112.896711][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.896733][ T6449] RIP: 0033:0x7f9a6398d169 [ 112.896748][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.896761][ T6449] RSP: 002b:00007f9a647da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.896780][ T6449] RAX: ffffffffffffffda RBX: 00007f9a63ba5fa0 RCX: 00007f9a6398d169 [ 112.896791][ T6449] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 112.896802][ T6449] RBP: 00007f9a647da090 R08: 0000000000000000 R09: 0000000000000000 [ 112.896812][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.896821][ T6449] R13: 0000000000000000 R14: 00007f9a63ba5fa0 R15: 00007f9a63ccfa28 [ 112.896848][ T6449] [ 112.896929][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 113.053540][ T6449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.065778][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.188740][ T6449] ================================================================== [ 113.196822][ T6449] BUG: KASAN: slab-use-after-free in software_node_notify_remove+0x1bc/0x1c0 [ 113.205599][ T6449] Read of size 1 at addr ffff88807cd94108 by task syz.3.164/6449 [ 113.213315][ T6449] [ 113.215641][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.3.164 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 113.215661][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.215670][ T6449] Call Trace: [ 113.215678][ T6449] [ 113.215684][ T6449] dump_stack_lvl+0x241/0x360 [ 113.215711][ T6449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.215731][ T6449] ? rcu_is_watching+0x15/0xb0 [ 113.215749][ T6449] ? __virt_addr_valid+0x183/0x530 [ 113.215770][ T6449] ? lock_release+0x4e/0x3e0 [ 113.215786][ T6449] ? __virt_addr_valid+0x183/0x530 [ 113.215803][ T6449] ? __virt_addr_valid+0x183/0x530 [ 113.215824][ T6449] print_report+0x16e/0x5b0 [ 113.215843][ T6449] ? __virt_addr_valid+0x183/0x530 [ 113.215863][ T6449] ? __virt_addr_valid+0x183/0x530 [ 113.215883][ T6449] ? __virt_addr_valid+0x45f/0x530 [ 113.215903][ T6449] ? __phys_addr+0xba/0x170 [ 113.215923][ T6449] ? software_node_notify_remove+0x1bc/0x1c0 [ 113.215942][ T6449] kasan_report+0x143/0x180 [ 113.215963][ T6449] ? software_node_notify_remove+0x1bc/0x1c0 [ 113.215983][ T6449] software_node_notify_remove+0x1bc/0x1c0 [ 113.216002][ T6449] device_del+0x594/0x9b0 [ 113.216023][ T6449] ? __pfx_iommufd_object_remove+0x10/0x10 [ 113.216047][ T6449] ? __pfx_device_del+0x10/0x10 [ 113.216069][ T6449] device_unregister+0x20/0xc0 [ 113.216087][ T6449] iommufd_test+0x3715/0x56a0 [ 113.216110][ T6449] ? __pfx_iommufd_test+0x10/0x10 [ 113.216130][ T6449] ? __lock_acquire+0xad5/0xd80 [ 113.216160][ T6449] iommufd_fops_ioctl+0x4fc/0x610 [ 113.216182][ T6449] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.216205][ T6449] ? __fget_files+0x2a/0x420 [ 113.216222][ T6449] ? __fget_files+0x2a/0x420 [ 113.216237][ T6449] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 113.216259][ T6449] __se_sys_ioctl+0xf1/0x160 [ 113.216278][ T6449] do_syscall_64+0xf3/0x230 [ 113.216298][ T6449] ? clear_bhb_loop+0x45/0xa0 [ 113.216316][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.216339][ T6449] RIP: 0033:0x7f9a6398d169 [ 113.216354][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.216367][ T6449] RSP: 002b:00007f9a647da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.216385][ T6449] RAX: ffffffffffffffda RBX: 00007f9a63ba5fa0 RCX: 00007f9a6398d169 [ 113.216397][ T6449] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 113.216408][ T6449] RBP: 00007f9a647da090 R08: 0000000000000000 R09: 0000000000000000 [ 113.216418][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.216428][ T6449] R13: 0000000000000000 R14: 00007f9a63ba5fa0 R15: 00007f9a63ccfa28 [ 113.216446][ T6449] [ 113.216452][ T6449] [ 113.481541][ T6449] Allocated by task 6449: [ 113.485855][ T6449] kasan_save_track+0x3f/0x80 [ 113.490522][ T6449] __kasan_kmalloc+0x9d/0xb0 [ 113.495104][ T6449] __kmalloc_cache_noprof+0x236/0x370 [ 113.500464][ T6449] swnode_register+0x5a/0x540 [ 113.505127][ T6449] fwnode_create_software_node+0x199/0x1f0 [ 113.511096][ T6449] device_create_managed_software_node+0xd5/0x1f0 [ 113.517497][ T6449] iommufd_test+0x3335/0x56a0 [ 113.522159][ T6449] iommufd_fops_ioctl+0x4fc/0x610 [ 113.527171][ T6449] __se_sys_ioctl+0xf1/0x160 [ 113.531746][ T6449] do_syscall_64+0xf3/0x230 [ 113.536236][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.542111][ T6449] [ 113.544417][ T6449] Freed by task 6449: [ 113.548375][ T6449] kasan_save_track+0x3f/0x80 [ 113.553035][ T6449] kasan_save_free_info+0x40/0x50 [ 113.558128][ T6449] __kasan_slab_free+0x59/0x70 [ 113.562879][ T6449] kfree+0x198/0x430 [ 113.566848][ T6449] kobject_put+0x22f/0x480 [ 113.571250][ T6449] software_node_notify_remove+0x159/0x1c0 [ 113.577042][ T6449] device_del+0x594/0x9b0 [ 113.581359][ T6449] device_unregister+0x20/0xc0 [ 113.586109][ T6449] iommufd_test+0x3715/0x56a0 [ 113.590770][ T6449] iommufd_fops_ioctl+0x4fc/0x610 [ 113.595781][ T6449] __se_sys_ioctl+0xf1/0x160 [ 113.600443][ T6449] do_syscall_64+0xf3/0x230 [ 113.604931][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.610808][ T6449] [ 113.613126][ T6449] The buggy address belongs to the object at ffff88807cd94000 [ 113.613126][ T6449] which belongs to the cache kmalloc-512 of size 512 [ 113.627167][ T6449] The buggy address is located 264 bytes inside of [ 113.627167][ T6449] freed 512-byte region [ffff88807cd94000, ffff88807cd94200) [ 113.640947][ T6449] [ 113.643263][ T6449] The buggy address belongs to the physical page: [ 113.649669][ T6449] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cd94 [ 113.658416][ T6449] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.666895][ T6449] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 113.674429][ T6449] page_type: f5(slab) [ 113.678400][ T6449] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 113.686963][ T6449] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 113.695530][ T6449] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 113.704184][ T6449] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 113.712847][ T6449] head: 00fff00000000002 ffffea0001f36501 00000000ffffffff 00000000ffffffff [ 113.721508][ T6449] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 113.730161][ T6449] page dumped because: kasan: bad access detected [ 113.736582][ T6449] page_owner tracks the page as allocated [ 113.742280][ T6449] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5898, tgid 5898 (udevd), ts 80124855785, free_ts 80047590891 [ 113.763018][ T6449] post_alloc_hook+0x1f4/0x240 [ 113.767777][ T6449] get_page_from_freelist+0x352b/0x36c0 [ 113.773307][ T6449] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 113.779097][ T6449] alloc_pages_mpol+0x339/0x690 [ 113.783934][ T6449] allocate_slab+0x8f/0x3a0 [ 113.788419][ T6449] ___slab_alloc+0xc3b/0x1500 [ 113.793078][ T6449] __slab_alloc+0x58/0xa0 [ 113.797390][ T6449] __kmalloc_cache_noprof+0x26a/0x370 [ 113.802748][ T6449] kernfs_fop_open+0x3a3/0xdf0 [ 113.807497][ T6449] do_dentry_open+0xdec/0x1960 [ 113.812251][ T6449] vfs_open+0x3b/0x370 [ 113.816309][ T6449] path_openat+0x2caf/0x35d0 [ 113.820884][ T6449] do_filp_open+0x284/0x4e0 [ 113.825373][ T6449] do_sys_openat2+0x12b/0x1d0 [ 113.830037][ T6449] __x64_sys_openat+0x249/0x2a0 [ 113.834883][ T6449] do_syscall_64+0xf3/0x230 [ 113.839375][ T6449] page last free pid 5953 tgid 5952 stack trace: [ 113.845681][ T6449] __free_frozen_pages+0xde8/0x10a0 [ 113.850863][ T6449] stack_depot_save_flags+0x45b/0x940 [ 113.856231][ T6449] kasan_save_track+0x51/0x80 [ 113.860894][ T6449] __kasan_kmalloc+0x9d/0xb0 [ 113.865558][ T6449] __kmalloc_node_track_caller_noprof+0x295/0x4d0 [ 113.871960][ T6449] memdup_user+0x2b/0xd0 [ 113.876188][ T6449] strndup_user+0x68/0xd0 [ 113.880504][ T6449] __se_sys_fsopen+0x3f/0x2c0 [ 113.885166][ T6449] do_syscall_64+0xf3/0x230 [ 113.889655][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.895533][ T6449] [ 113.897843][ T6449] Memory state around the buggy address: [ 113.903453][ T6449] ffff88807cd94000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.911496][ T6449] ffff88807cd94080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.919543][ T6449] >ffff88807cd94100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.927588][ T6449] ^ [ 113.931896][ T6449] ffff88807cd94180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.939940][ T6449] ffff88807cd94200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.948070][ T6449] ================================================================== [ 114.041056][ T6449] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.048289][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.3.164 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 114.060190][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.070244][ T6449] Call Trace: [ 114.073504][ T6449] [ 114.076414][ T6449] dump_stack_lvl+0x241/0x360 [ 114.081164][ T6449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.086355][ T6449] ? __pfx__printk+0x10/0x10 [ 114.090961][ T6449] ? vscnprintf+0x5d/0x90 [ 114.095292][ T6449] panic+0x349/0x880 [ 114.099207][ T6449] ? check_panic_on_warn+0x21/0xb0 [ 114.104312][ T6449] ? __pfx_panic+0x10/0x10 [ 114.108717][ T6449] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 114.114682][ T6449] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.120997][ T6449] ? print_report+0x519/0x5b0 [ 114.125668][ T6449] check_panic_on_warn+0x86/0xb0 [ 114.130596][ T6449] ? software_node_notify_remove+0x1bc/0x1c0 [ 114.136564][ T6449] end_report+0x77/0x160 [ 114.140794][ T6449] kasan_report+0x154/0x180 [ 114.145286][ T6449] ? software_node_notify_remove+0x1bc/0x1c0 [ 114.151256][ T6449] software_node_notify_remove+0x1bc/0x1c0 [ 114.157057][ T6449] device_del+0x594/0x9b0 [ 114.161379][ T6449] ? __pfx_iommufd_object_remove+0x10/0x10 [ 114.167177][ T6449] ? __pfx_device_del+0x10/0x10 [ 114.172034][ T6449] device_unregister+0x20/0xc0 [ 114.176786][ T6449] iommufd_test+0x3715/0x56a0 [ 114.181450][ T6449] ? __pfx_iommufd_test+0x10/0x10 [ 114.186465][ T6449] ? __lock_acquire+0xad5/0xd80 [ 114.191319][ T6449] iommufd_fops_ioctl+0x4fc/0x610 [ 114.196332][ T6449] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 114.201869][ T6449] ? __fget_files+0x2a/0x420 [ 114.206443][ T6449] ? __fget_files+0x2a/0x420 [ 114.211021][ T6449] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 114.216558][ T6449] __se_sys_ioctl+0xf1/0x160 [ 114.221138][ T6449] do_syscall_64+0xf3/0x230 [ 114.225637][ T6449] ? clear_bhb_loop+0x45/0xa0 [ 114.230307][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.236189][ T6449] RIP: 0033:0x7f9a6398d169 [ 114.240593][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.260186][ T6449] RSP: 002b:00007f9a647da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.268598][ T6449] RAX: ffffffffffffffda RBX: 00007f9a63ba5fa0 RCX: 00007f9a6398d169 [ 114.276559][ T6449] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 114.284521][ T6449] RBP: 00007f9a647da090 R08: 0000000000000000 R09: 0000000000000000 [ 114.292484][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.300439][ T6449] R13: 0000000000000000 R14: 00007f9a63ba5fa0 R15: 00007f9a63ccfa28 [ 114.308401][ T6449] [ 114.311648][ T6449] Kernel Offset: disabled [ 114.315962][ T6449] Rebooting in 86400 seconds..