last executing test programs: 33.608433823s ago: executing program 4 (id=1930): write$smackfs_ptrace(0xffffffffffffffff, 0x0, 0x0) 33.332888595s ago: executing program 4 (id=1933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, 0x0) 32.930345193s ago: executing program 4 (id=1936): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0x6) 30.413123311s ago: executing program 4 (id=1950): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) unshare(0x2a020400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 29.888581987s ago: executing program 4 (id=1954): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 29.685106733s ago: executing program 4 (id=1957): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)={0x2f, 0x0, 0x2}, 0x8) 26.029166826s ago: executing program 3 (id=1982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000280)="e43d04fd2170bd50125ffa6d1e179f98984b2c72ca3bffd4871a112972963a9b524958b63a1619122acc32a1e1c81a85946afe97ce9f9eab19a50a064bc493e2b6c24003d95690fbace66d0980d197d179e8c532362e5d53f54a8aac2f829783e0ac68562caf8e9136b42578261106af0ab0517e02abb1adbda430a8ec06", 0x7e}, {&(0x7f0000000480)="149d044c07e578f48f6e7fb65172a61b0316e20d92e71c834e31de4335c697b4f63ff06e8ef72792bc9e4d188015c40f05384741eea7303566305add", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001140)="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", 0x804}, {&(0x7f0000000a00)="7053a99273fb9e98810d1c6cec92d6d0c327439b78b7cfeec17d482ecbb314498dd1ec00f67b7feb06367bf3ea0c26b9d93a65eac01c316e34619579172e6b9de2260b183f8b41e3fb7fbee319041d70f317b44453f29783c437fef16a3ac04d9a3374ae20a740616d43ee53837c7c8d557eb7e84159ccb67245def3f0642e697a39cb4a989f61dc300fd5622c18bd4644945a7cd0fedd", 0x97}, {&(0x7f0000000180)="e1ab", 0x2}, {&(0x7f0000000900)="f67a15fccceeedaf1357c25606dc378a695a64dd6f08cd2f71c131a53d1bce3d3b9fc9ac21fdeaea5d4afdc5e1a97abb5ab266606b047244e4df7e0395a96711d1b9bd414185da0ce2c042ae9e58a8128549113d20e8c5468e7aeb744e725564f6edd0d682345d99820bd06fda220b99c9af2073f958f09acae154027a6ddf3361e31991a77fbfe7df1843afa74fefba1c1a6ad6f87f486ef8e8abbcb47f6935706f8ce337180c4ae6c427afdf0024822fe66550cf4289bb2a11bd628e9d326343527806bfd246a6c2c07484c20b5153", 0xd0}], 0x4}}], 0x2, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000740)=ANY=[], 0x18c}}, 0x4000841) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) 25.787527354s ago: executing program 3 (id=1985): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xb82e336200000000) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 25.626350536s ago: executing program 3 (id=1987): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmmsg$sock(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x9}]}, 0x1c}}, 0x0) 25.505405957s ago: executing program 3 (id=1989): r0 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$xdp(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="9b", 0x1}], 0x1}, 0x0) 25.324750188s ago: executing program 3 (id=1991): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) signalfd4(r0, &(0x7f0000000000)={[0x859]}, 0x8, 0x800) io_uring_setup(0x177f, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x10007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x202, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1b4f, 0x101, 0x4, 0x20, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x82}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8e412e02bc36cb7637d7002bdcaa8dd125c123da1d", @ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r5, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r8, 0x3, r7, 0x5}) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKALIGNOFF(r9, 0x127a, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 23.320662136s ago: executing program 3 (id=1997): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r1 = dup(r0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24040840) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, 0x0) 7.504918406s ago: executing program 0 (id=2052): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x9, 0x4396}) 7.016796967s ago: executing program 0 (id=2054): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x400c000) 6.756635203s ago: executing program 0 (id=2056): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x130, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x7}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0xf4, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x7c, 0x4, [@m_simple={0x78, 0x0, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, ':*&\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'skbmod\x00'}]}, {0x36, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c79"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x130}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.345029502s ago: executing program 1 (id=2064): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) listen(r1, 0xfffffffe) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, 0x0) 5.127107566s ago: executing program 1 (id=2067): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 4.964723861s ago: executing program 1 (id=2068): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[]) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x8905, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1de) getpgrp(0x0) syz_open_dev$loop(0x0, 0x4000000000, 0x96fb82) 4.707247049s ago: executing program 1 (id=2071): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x82f, 0x9, 0x2200, 0xffffffffffffffff, 0x66a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xe}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xa, 0x7fff, 0x6, 0x20, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0xf}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001180)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200100001800000128bd7000fd00300000060015000300000008000f00bf04000008000300dc3739c2d0d2dd039213cb6dbf465c7dc3cf40bce7b7f42f79c3652be43faa718cb1c47465e2267be474ca36fdb432a512d9308cf4", @ANYRES32=0x0, @ANYBLOB="08000b007409000006001c004e20000008000500640101000c00090005002040", @ANYRES32=0x0, @ANYBLOB="0c00168008000400e0000001bb000880aafa4a531f4880cb7d0c16565cd848585c17ac2bab56abb60e729451431b70066f99f26f2fe6e6be4e97e2566671ba44592bf002aa4ef295ad79754f554b0e2f3ac583ce4d395b269154d5dc25ffd3cec1b8625c9b037a0c00606569a4688a05172f7f7596b4c3ecffd3a573bc57c23ec3f8e544b5f0cce6bac1f127d42889de4579ffe3b510dd934a868f4f782166cb4138a3dce20ee25e1e2315ee35776b9cb1c94bfee2ebbbc7e38c34d87128c9e986461cac47bd9100"], 0x120}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) unshare(0x60600) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.644671375s ago: executing program 2 (id=2072): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x24004800) syz_io_uring_setup(0x6493, &(0x7f00000004c0)={0x0, 0x50ee, 0x80, 0x3, 0x3e5, 0x0, r8}, &(0x7f0000000540), &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) 3.639743749s ago: executing program 1 (id=2073): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) 2.667648675s ago: executing program 2 (id=2074): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$802154_dgram(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 1.58509286s ago: executing program 2 (id=2075): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup3(r1, r0, 0x0) r4 = accept$inet(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) 1.445419544s ago: executing program 2 (id=2076): r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) chdir(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0xce0, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 1.09980379s ago: executing program 0 (id=2077): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) 532.814535ms ago: executing program 0 (id=2078): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt(r1, 0x1, 0x5, &(0x7f0000000140)="2805cca9", 0x4) 380.111458ms ago: executing program 2 (id=2079): r0 = socket(0x11, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 289.949286ms ago: executing program 0 (id=2080): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)=""/207, 0xcf}, {&(0x7f0000000440)=""/252, 0xfc}], 0x3) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) syz_emit_ethernet(0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000012bbbbbbbbbbbb0800450000350037744cc8651fe700000000019078ac1e0001ac1414aa030490781200183f2500000008000000000100007f0000017f00"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) tkill(r1, 0x1b) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) read$snapshot(r4, &(0x7f0000001200)=""/104, 0x68) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) fstat(r3, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r0, 0x0, 0x4, 0x0) 188.562712ms ago: executing program 2 (id=2081): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000014c0)}], 0x1}}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) r3 = syz_io_uring_setup(0x57aa, &(0x7f0000000080)={0x0, 0x4ec6, 0x80, 0x3, 0x6e}, &(0x7f0000000140), &(0x7f0000000200)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4010ae68, &(0x7f0000000080)={0xc1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000002640)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)=""/171, 0xab}, {&(0x7f0000000d40)=""/179, 0xb3}, {&(0x7f0000000e00)=""/241, 0xf1}], &(0x7f0000000f40)=[0x100000000, 0x0, 0x8000, 0x0]}, {0x0, 0x0, 0x0, &(0x7f0000000fc0), &(0x7f0000001000)=[0x0, 0x8]}, {0x3, 0x0, 0x0, &(0x7f0000001180)=[{0x0}, {&(0x7f0000001080)=""/64, 0x40}, {&(0x7f00000010c0)=""/173, 0xad}], &(0x7f00000011c0)=[0x1, 0x7, 0x2, 0x0, 0x0, 0xfff, 0x0]}, {0x4, 0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/122, 0x7a}, {&(0x7f00000012c0)=""/142, 0x8e}, {&(0x7f0000002500)=""/217, 0xd9}, {&(0x7f0000001380)=""/3, 0x3}], &(0x7f0000002600)=[0x8]}], 0x5) timer_create(0x2, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 0s ago: executing program 1 (id=2082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2], 0x64}}, 0x0) kernel console output (not intermixed with test programs): speed USB device number 14 using dummy_hcd [ 412.774766][ T9864] syz.0.1008[9864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.774914][ T9864] syz.0.1008[9864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.823033][ T9851] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1008'. [ 412.922790][ T5261] usb 5-1: device descriptor read/64, error -71 [ 412.933039][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 413.338881][ T9869] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1012'. [ 413.862370][ T5261] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 414.094053][ T5261] usb 5-1: device descriptor read/64, error -71 [ 414.263312][ T5261] usb usb5-port1: attempt power cycle [ 414.732722][ T5261] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 415.409775][ T5261] usb 5-1: device descriptor read/8, error -71 [ 415.487872][ T9883] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1020'. [ 415.521395][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1020'. [ 415.765891][ T9897] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1022'. [ 415.775069][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 416.600636][ T9903] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 416.650842][ T9901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1025'. [ 416.807672][ T9901] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1025'. [ 416.834404][ T9901] bridge_slave_1: left allmulticast mode [ 416.867983][ T9901] bridge_slave_1: left promiscuous mode [ 416.886397][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.935913][ T9901] bridge_slave_0: left allmulticast mode [ 416.989185][ T9901] bridge_slave_0: left promiscuous mode [ 417.018366][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.432449][ T9919] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 418.335874][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1033'. [ 418.383780][ T9923] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 418.694927][ T9935] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1037'. [ 418.721207][ T9935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1037'. [ 422.927271][ T9999] pimreg: entered allmulticast mode [ 428.016140][T10066] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 429.657996][T10074] input: syz0 as /devices/virtual/input/input40 [ 433.322978][T10101] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 433.592927][T10113] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1100'. [ 433.979354][ T5223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.009674][ T5223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.017481][ T5223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.025878][ T5223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.033797][ T5223] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 434.041039][ T5223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.922572][T10138] kvm: pic: non byte read [ 435.980607][T10120] chnl_net:caif_netlink_parms(): no params data found [ 436.073113][ T5223] Bluetooth: hci6: command tx timeout [ 436.093043][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 436.305330][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.358417][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.369220][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.389442][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.396784][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 436.422896][T10120] bridge_slave_0: entered allmulticast mode [ 436.430190][T10120] bridge_slave_0: entered promiscuous mode [ 436.442813][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.472070][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.487076][ T25] usb 5-1: config 0 descriptor?? [ 436.501621][T10120] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.532882][T10120] bridge_slave_1: entered allmulticast mode [ 436.553984][T10120] bridge_slave_1: entered promiscuous mode [ 436.603755][ T5262] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 436.694829][T10120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.776669][T10120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.812801][ T5262] usb 3-1: Using ep0 maxpacket: 32 [ 436.822400][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 436.851021][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 436.867230][ T5262] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 436.897169][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.918380][ T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 436.938299][ T5262] usb 3-1: config 0 descriptor?? [ 436.947789][ T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 436.963950][T10145] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 436.973791][T10120] team0: Port device team_slave_0 added [ 436.980584][ T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 436.990765][ T5262] hub 3-1:0.0: USB hub found [ 437.003003][ T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 437.022860][ T5264] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 437.026571][T10120] team0: Port device team_slave_1 added [ 437.041148][ T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 437.071007][ T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 437.110508][ T25] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 437.166758][ T25] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 437.191273][ T5262] hub 3-1:0.0: 2 ports detected [ 437.214181][T10120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.218823][ T5264] usb 1-1: Using ep0 maxpacket: 32 [ 437.221239][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.265333][ T25] cp2112 0003:10C4:EA90.000D: error requesting version [ 437.273167][ T5264] usb 1-1: descriptor type invalid, skip [ 437.278815][ T5264] usb 1-1: descriptor type invalid, skip [ 437.305909][ T25] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -32 [ 437.321031][ T5264] usb 1-1: descriptor type invalid, skip [ 437.368604][ T5264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 437.401448][T10120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.401713][ T25] usb 5-1: USB disconnect, device number 18 [ 437.420557][ T5264] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 437.452755][ T5264] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 437.455833][T10120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.493336][ T5264] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.504166][ T5264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.512152][ T5264] usb 1-1: Product: syz [ 437.516472][ T5264] usb 1-1: Manufacturer: syz [ 437.521060][ T5264] usb 1-1: SerialNumber: syz [ 437.555126][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.699543][T10120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.818740][ T5264] cdc_ncm 1-1:1.0: bind() failure [ 437.841548][ T5264] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 437.879086][ T5264] cdc_ncm 1-1:1.1: bind() failure [ 437.934477][ T5264] usb 1-1: USB disconnect, device number 11 [ 437.956493][T10120] hsr_slave_0: entered promiscuous mode [ 438.164376][ T5223] Bluetooth: hci6: command tx timeout [ 438.804476][T10120] hsr_slave_1: entered promiscuous mode [ 438.872985][T10120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.881183][T10120] Cannot create hsr debugfs directory [ 439.418607][T10120] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.470245][ T25] usb 3-1: USB disconnect, device number 16 [ 439.532689][ T5261] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 439.579912][T10120] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.733794][T10120] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.744463][ T5261] usb 5-1: Using ep0 maxpacket: 8 [ 439.757203][ T5261] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 439.775906][ T5261] usb 5-1: config 8 has no interface number 0 [ 439.782135][ T5261] usb 5-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 439.806969][ T5261] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 439.819826][ T5261] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 439.874932][ T5261] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 439.893692][T10120] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.895589][ T5261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.942772][ T5261] usb 5-1: Product: syz [ 439.947159][ T5261] usb 5-1: Manufacturer: syz [ 440.011418][ T5261] usb 5-1: SerialNumber: syz [ 440.231637][T10120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 440.246260][ T5223] Bluetooth: hci6: command tx timeout [ 440.252064][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.262756][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.344584][ T5261] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 440.350438][T10120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 440.364947][ T5261] vmk80xx 5-1:8.188: probe with driver vmk80xx failed with error -22 [ 440.414775][ T5261] usb 5-1: USB disconnect, device number 19 [ 440.463984][T10120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 440.558648][T10120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 440.969177][T10120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.132196][T10120] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.177600][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.184779][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.220638][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.227827][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.336245][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 441.386158][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 441.392657][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 441.399165][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.407051][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.414985][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.422854][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.430685][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.438515][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.446366][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.454179][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.462008][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.469836][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.477787][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.485612][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.493533][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.501324][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.509183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 441.517008][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 441.559992][ T29] audit: type=1326 audit(1724590360.178:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987b779e79 code=0x7ffc0000 [ 441.582820][ T5335] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 441.602469][ T29] audit: type=1326 audit(1724590360.208:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987b779e79 code=0x7ffc0000 [ 441.664772][ T29] audit: type=1326 audit(1724590360.208:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f987b779e79 code=0x7ffc0000 [ 441.740877][ T29] audit: type=1326 audit(1724590360.208:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987b779e79 code=0x7ffc0000 [ 441.831920][ T29] audit: type=1326 audit(1724590360.208:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987b779e79 code=0x7ffc0000 [ 441.904990][ T5335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 235, changing to 11 [ 441.928941][ T29] audit: type=1326 audit(1724590360.208:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f987b779e79 code=0x7ffc0000 [ 441.946078][ T5335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17992, setting to 1024 [ 442.012158][ T5335] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 442.036975][ T29] audit: type=1326 audit(1724590360.208:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f987b770e27 code=0x7ffc0000 [ 442.070802][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.110247][ T5335] usb 4-1: config 0 descriptor?? [ 442.132246][T10192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 442.187725][ T29] audit: type=1326 audit(1724590360.208:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f987b7157e9 code=0x7ffc0000 [ 442.284582][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.304821][ T29] audit: type=1326 audit(1724590360.208:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f987b770e27 code=0x7ffc0000 [ 442.333846][ T5220] Bluetooth: hci6: command tx timeout [ 442.438136][ T29] audit: type=1326 audit(1724590360.208:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10197 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f987b7157e9 code=0x7ffc0000 [ 442.475773][T10120] veth0_vlan: entered promiscuous mode [ 442.558459][T10120] veth1_vlan: entered promiscuous mode [ 442.689473][T10120] veth0_macvtap: entered promiscuous mode [ 442.757840][T10120] veth1_macvtap: entered promiscuous mode [ 442.766526][ T5335] usb 4-1: language id specifier not provided by device, defaulting to English [ 442.857284][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.928699][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.983762][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.018805][ T5335] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 443.038761][ T5335] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 443.055577][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.075991][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.086539][ T5335] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 443.095847][ T5335] usb 4-1: USB disconnect, device number 21 [ 443.165643][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.202739][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.248949][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.279738][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.330167][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.360074][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.412769][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.470009][T10120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.589414][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.678023][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.738920][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.791709][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.842943][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.891501][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.939451][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.981212][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.029822][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.093129][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.135093][T10120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.178838][T10120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.220521][T10120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.278749][T10120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.332740][T10120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.356162][T10120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.400321][T10120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.703560][ T7706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.757491][ T7706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.854935][ T7706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.893403][ T7706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.006816][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1149'. [ 445.654954][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 445.893405][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1162'. [ 446.858552][ T5220] Bluetooth: hci0: unexpected event for opcode 0x203b [ 447.520525][T10308] blktrace: Concurrent blktraces are not allowed on loop5 [ 447.655269][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 447.782041][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 447.963170][ T5262] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 448.106423][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 448.167861][ T5262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 448.187497][ T5262] usb 5-1: not running at top speed; connect to a high speed hub [ 448.214213][ T5262] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 448.234507][ T5262] usb 5-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 448.252437][ T5262] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 448.267492][ T5262] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0301, bcdDevice= 0.40 [ 448.280341][ T5262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.289971][ T5262] usb 5-1: Product: syz [ 448.302726][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 448.311158][ T5262] usb 5-1: Manufacturer: syz [ 448.320035][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.339898][ T5262] usb 5-1: SerialNumber: syz [ 448.345957][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.371456][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 448.398748][ T25] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 448.415877][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.444667][ T25] usb 1-1: Product: syz [ 448.453127][ T25] usb 1-1: Manufacturer: syz [ 448.456950][ T29] kauditd_printk_skb: 1821 callbacks suppressed [ 448.456963][ T29] audit: type=1326 audit(1724590367.078:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10328 comm="syz.2.1181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c60d79e79 code=0x0 [ 448.464493][ T25] usb 1-1: SerialNumber: syz [ 448.569964][ T5262] usb 5-1: USB disconnect, device number 20 [ 448.613611][ T25] usb 1-1: config 0 descriptor?? [ 448.644227][ T25] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 448.973291][ T25] usb 1-1: USB disconnect, device number 12 [ 452.759748][ T5220] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 458.375679][T10433] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 458.467618][T10439] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1219'. [ 460.322519][T10485] blktrace: Concurrent blktraces are not allowed on loop5 [ 460.580053][T10493] netlink: 'syz.0.1242': attribute type 11 has an invalid length. [ 460.846877][T10498] dvmrp5: entered allmulticast mode [ 461.613108][ T5335] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 462.383605][ T5335] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 462.392669][ T5335] usb 4-1: config 0 has no interface number 0 [ 462.398795][ T5335] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 462.450611][ T5335] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 462.463124][ T5335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.479583][ T5335] usb 4-1: Product: syz [ 462.486560][ T5335] usb 4-1: Manufacturer: syz [ 462.491169][ T5335] usb 4-1: SerialNumber: syz [ 462.519398][ T5335] usb 4-1: config 0 descriptor?? [ 462.563003][T10500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 462.600838][ T5335] usb-storage 4-1:0.20: USB Mass Storage device detected [ 462.668828][ T5335] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 463.045742][ T5223] Bluetooth: hci5: command 0x0406 tx timeout [ 463.524153][ T5335] scsi host1: usb-storage 4-1:0.20 [ 464.842754][ T5264] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 465.064128][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.108963][T10541] netlink: 'syz.1.1255': attribute type 21 has an invalid length. [ 465.122738][ T5264] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.172743][ T5264] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.192307][T10541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1255'. [ 465.213064][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.245930][ T5264] usb 3-1: config 0 descriptor?? [ 465.560056][ T5335] usb 4-1: USB disconnect, device number 22 [ 465.571634][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 465.612776][ T5262] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 465.680565][ T5264] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 465.763768][ T5264] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 465.923256][ T5262] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 465.932331][ T5262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.006921][ T5262] usb 1-1: Product: syz [ 466.032910][ T5262] usb 1-1: Manufacturer: syz [ 466.092795][ T5262] usb 1-1: SerialNumber: syz [ 466.143725][ T5262] usb 1-1: config 0 descriptor?? [ 466.188738][ T5262] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 466.249371][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 466.279692][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 466.332841][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 466.391309][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 466.444481][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 466.471240][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 466.507266][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 466.514386][T10544] dummy0: entered promiscuous mode [ 466.565639][ T5262] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 466.614211][ T5264] usb 3-1: USB disconnect, device number 17 [ 466.625839][ T5262] usb 1-1: USB disconnect, device number 13 [ 466.707354][ T5262] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 466.717372][ T58] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 466.769188][ T5262] keyspan 1-1:0.0: device disconnected [ 466.912929][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 466.924154][ T58] usb 4-1: New USB device found, idVendor=2001, idProduct=3c1a, bcdDevice=62.2f [ 466.941748][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.959767][ T58] usb 4-1: Product: syz [ 466.974706][ T58] usb 4-1: Manufacturer: syz [ 466.979318][ T58] usb 4-1: SerialNumber: syz [ 467.006983][ T58] usb 4-1: config 0 descriptor?? [ 467.254521][ T5262] usb 4-1: USB disconnect, device number 23 [ 467.340631][T10565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1263'. [ 467.429579][T10565] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.755582][ T58] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 467.998801][ T58] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 468.045695][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.087155][ T58] usb 4-1: Product: syz [ 468.091382][ T58] usb 4-1: Manufacturer: syz [ 468.117831][ T58] usb 4-1: SerialNumber: syz [ 468.196893][ T58] usb 4-1: config 0 descriptor?? [ 468.442391][ T58] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22 [ 468.648681][ T941] usb 4-1: USB disconnect, device number 24 [ 469.134919][T10586] ======================================================= [ 469.134919][T10586] WARNING: The mand mount option has been deprecated and [ 469.134919][T10586] and is ignored by this kernel. Remove the mand [ 469.134919][T10586] option from the mount to silence this warning. [ 469.134919][T10586] ======================================================= [ 469.402722][ T5261] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 469.613775][ T5261] usb 2-1: Using ep0 maxpacket: 8 [ 469.643623][ T5261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.682674][ T5261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.734744][ T5261] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.752896][ T5261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.781294][ T5261] usb 2-1: Product: syz [ 469.792663][ T5261] usb 2-1: Manufacturer: syz [ 469.807976][ T5261] usb 2-1: SerialNumber: syz [ 470.712283][T10601] Invalid ELF header magic: != ELF [ 470.744557][T10601] syz.2.1275: attempt to access beyond end of device [ 470.744557][T10601] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 470.757789][T10601] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 472.021998][ T5223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 472.031660][ T5223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 472.039729][ T5223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 472.076599][ T5223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 472.086330][ T5223] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 472.096443][ T5223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 472.364427][ T5261] usb 2-1: USB disconnect, device number 15 [ 472.908182][T10607] chnl_net:caif_netlink_parms(): no params data found [ 474.114426][ T5261] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 474.166191][ T5223] Bluetooth: hci7: command tx timeout [ 475.102724][ T5261] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 475.241470][ T5261] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 475.322831][T10637] input: syz0 as /devices/virtual/input/input41 [ 475.686613][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.727178][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.753163][T10607] bridge_slave_0: entered allmulticast mode [ 475.778544][T10607] bridge_slave_0: entered promiscuous mode [ 475.832841][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.887463][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.947763][T10607] bridge_slave_1: entered allmulticast mode [ 476.011124][T10607] bridge_slave_1: entered promiscuous mode [ 476.233575][ T5220] Bluetooth: hci7: command tx timeout [ 476.966696][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.024676][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.299935][T10607] team0: Port device team_slave_0 added [ 477.358776][T10607] team0: Port device team_slave_1 added [ 477.606242][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.644180][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.760104][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.935897][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.105705][ T5220] Bluetooth: hci7: command tx timeout [ 480.495689][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.607690][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.808216][T10607] hsr_slave_0: entered promiscuous mode [ 481.984416][T10607] hsr_slave_1: entered promiscuous mode [ 482.057123][T10607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.091349][T10607] Cannot create hsr debugfs directory [ 482.166552][ T5220] Bluetooth: hci7: command tx timeout [ 482.554259][T10607] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.756406][T10607] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.945301][T10607] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.126621][T10607] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.732130][T10607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 483.804960][T10607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 483.856163][T10607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 483.922268][T10607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 484.436639][T10607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.536745][T10607] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.591798][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.599077][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.697380][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.704487][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.341306][T10607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.463985][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1316'. [ 486.655430][T10607] veth0_vlan: entered promiscuous mode [ 486.716927][T10607] veth1_vlan: entered promiscuous mode [ 486.854175][T10607] veth0_macvtap: entered promiscuous mode [ 486.916428][T10607] veth1_macvtap: entered promiscuous mode [ 487.010648][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.069955][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.119086][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.202707][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.286200][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.341341][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.367353][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.412843][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.458228][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.488600][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.539561][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.596325][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.641769][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.702692][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.742563][T10607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.881830][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.901456][T10770] Cannot find add_set index 0 as target [ 487.953277][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.992894][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.062756][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.126986][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.181461][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.214012][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.290573][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.374030][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.425402][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.507466][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.563462][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.621510][T10607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.679954][T10607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.744365][T10607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.782927][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 488.815684][T10607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.846658][T10607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.875250][T10607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.903070][T10607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.257214][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.285318][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.440605][ T7693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.478957][ T7693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.914011][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 491.302970][ T941] IPVS: starting estimator thread 0... [ 491.403064][T10810] IPVS: using max 17 ests per chain, 40800 per kthread [ 491.554768][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'. [ 492.119328][ T5335] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 492.327160][ T5335] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 492.371304][ T5335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.432653][ T5335] usb 4-1: Product: syz [ 492.436853][ T5335] usb 4-1: Manufacturer: syz [ 492.441460][ T5335] usb 4-1: SerialNumber: syz [ 492.518316][ T5335] usb 4-1: config 0 descriptor?? [ 492.577354][ T5335] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 025 [ 492.632079][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 493.283831][ T5335] i2c i2c-1: failure reading functionality [ 493.976865][ T5335] i2c i2c-1: connected i2c-tiny-usb device [ 493.985044][ T5335] usb 4-1: USB disconnect, device number 25 [ 494.234618][T10855] syz.4.1353[10855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.234762][T10855] syz.4.1353[10855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.161402][T10864] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 495.263617][T10864] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1356'. [ 495.452762][ T5335] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 495.675960][ T5335] usb 3-1: Using ep0 maxpacket: 16 [ 495.806380][ T5335] usb 3-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 495.923607][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.931636][ T5335] usb 3-1: Product: syz [ 496.004120][ T5335] usb 3-1: Manufacturer: syz [ 496.026746][ T5335] usb 3-1: SerialNumber: syz [ 496.063877][ T5335] usb 3-1: config 0 descriptor?? [ 496.094190][ T5335] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 496.446036][T10877] syzkaller0: entered promiscuous mode [ 496.460421][ T5335] usb 3-1: USB disconnect, device number 18 [ 496.478791][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 496.500108][T10877] syzkaller0: entered allmulticast mode [ 497.730503][T10899] ptrace attach of "./syz-executor exec"[10120] was attempted by "./syz-executor exec"[10899] [ 497.903987][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 498.718076][T10906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1368'. [ 500.873191][T10908] af_packet: tpacket_rcv: packet too big, clamped from 84 to 4294967272. macoff=96 [ 501.676820][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.692131][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.652719][ T5264] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 502.862732][ T5264] usb 2-1: Using ep0 maxpacket: 32 [ 502.884200][ T5264] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.938676][ T5264] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.031340][ T5264] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.060841][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.086512][ T5264] usb 2-1: Product: syz [ 503.090698][ T5264] usb 2-1: Manufacturer: syz [ 503.128468][ T5264] usb 2-1: SerialNumber: syz [ 503.158771][ T5264] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 503.171340][ T5264] cdc_ncm 2-1:1.0: bind() failure [ 503.202548][ T5264] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 503.258497][ T5264] cdc_ncm 2-1:1.1: bind() failure [ 503.911774][ T5264] usb 2-1: USB disconnect, device number 16 [ 504.090539][T10919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.097886][T10919] IPv6: NLM_F_CREATE should be set when creating new route [ 504.182930][ T5262] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 504.401899][ T5262] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 504.472962][ T5262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.480992][ T5262] usb 5-1: Product: syz [ 504.524813][ T5262] usb 5-1: Manufacturer: syz [ 504.529437][ T5262] usb 5-1: SerialNumber: syz [ 504.570162][ T5262] usb 5-1: config 0 descriptor?? [ 504.840683][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1372'. [ 506.621265][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.655494][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.687783][ T52] bond0 (unregistering): Released all slaves [ 506.721179][ T52] bond1 (unregistering): Released all slaves [ 506.948917][T10916] netlink: 'syz.4.1372': attribute type 10 has an invalid length. [ 507.590028][T10916] team0: Failed to send options change via netlink (err -105) [ 507.613724][T10916] team0: Port device netdevsim0 added [ 507.691112][ T7717] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 507.827660][T10961] ptrace attach of "./syz-executor exec"[6892] was attempted by "./syz-executor exec"[10961] [ 507.977255][ T5262] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 507.977368][ T5262] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 507.991384][ T5262] usb 5-1: USB disconnect, device number 21 [ 508.173593][ T5335] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 508.275705][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 508.322750][ T5335] usb 1-1: device descriptor read/64, error -71 [ 508.442240][T10976] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 509.113055][ T5335] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 509.320801][T10981] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1392'. [ 509.452946][ T5335] usb 1-1: device descriptor read/64, error -71 [ 509.536744][T10965] vlan2: entered promiscuous mode [ 509.547914][T10965] team0: entered promiscuous mode [ 509.574119][T10965] team_slave_0: entered promiscuous mode [ 509.580063][T10965] team_slave_1: entered promiscuous mode [ 509.599614][T10965] vlan2: entered allmulticast mode [ 509.623259][T10965] team0: entered allmulticast mode [ 509.623517][ T5335] usb usb1-port1: attempt power cycle [ 509.651225][T10965] team_slave_0: entered allmulticast mode [ 509.667770][T10965] team_slave_1: entered allmulticast mode [ 509.698370][T10965] team0: left allmulticast mode [ 509.711435][T10965] team_slave_0: left allmulticast mode [ 509.717155][T10965] team_slave_1: left allmulticast mode [ 509.723121][T10965] team0: left promiscuous mode [ 509.728036][T10965] team_slave_0: left promiscuous mode [ 509.735120][T10965] team_slave_1: left promiscuous mode [ 509.866695][ T5264] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 509.880894][ T52] hsr_slave_0: left promiscuous mode [ 509.901222][ T52] hsr_slave_1: left promiscuous mode [ 509.921262][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.934651][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.960445][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.977707][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.039020][ T52] veth1_macvtap: left promiscuous mode [ 510.052778][ T5335] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 510.062041][ T52] veth0_macvtap: left promiscuous mode [ 510.073252][ T5264] usb 2-1: Using ep0 maxpacket: 8 [ 510.089489][ T52] veth1_vlan: left promiscuous mode [ 510.102984][ T5264] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.103462][ T5335] usb 1-1: device descriptor read/8, error -71 [ 510.116974][ T52] veth0_vlan: left promiscuous mode [ 510.135445][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.204241][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 510.290958][ T5264] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 510.328676][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.352530][ T5264] usb 2-1: Product: syz [ 510.361639][ T5264] usb 2-1: Manufacturer: syz [ 510.378924][ T5264] usb 2-1: SerialNumber: syz [ 510.412866][ T5335] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 510.414019][ T5264] usb 2-1: config 0 descriptor?? [ 510.457903][ T5335] usb 1-1: device descriptor read/8, error -71 [ 510.472485][ T5264] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 510.595761][ T5335] usb usb1-port1: unable to enumerate USB device [ 510.739458][ T5904] usb 2-1: USB disconnect, device number 17 [ 510.991323][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 512.319790][ T52] team0 (unregistering): Port device team_slave_1 removed [ 512.396974][ T52] team0 (unregistering): Port device team_slave_0 removed [ 513.178412][T11004] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 514.903285][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 515.402094][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 515.417178][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 515.444844][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 515.466118][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 515.477196][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.545054][ T5904] usb 2-1: config 0 descriptor?? [ 515.569936][T11036] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.674687][ T5904] hub 2-1:0.0: USB hub found [ 515.864615][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1411'. [ 515.889461][ T5904] hub 2-1:0.0: 2 ports detected [ 516.387064][T11052] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 517.024254][T11060] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 517.495962][ T5264] usb 2-1: USB disconnect, device number 18 [ 518.274932][ T5264] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 518.476850][ T5264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.492330][ T5264] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.510018][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.536016][ T5264] usb 1-1: config 0 descriptor?? [ 518.550995][ T5264] pwc: Askey VC010 type 2 USB webcam detected. [ 518.880364][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1425'. [ 520.562768][ T5261] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 520.622933][ T941] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 520.788118][ T5261] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 520.964964][ T5261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.032202][ T5261] usb 5-1: config 0 descriptor?? [ 521.050746][ T941] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 521.170632][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.211861][ T941] usb 2-1: config 0 descriptor?? [ 521.315914][T11091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.381591][T11091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.596033][ T5264] pwc: send_video_command error -71 [ 521.601271][ T5264] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 521.645504][ T5264] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 521.681586][ T5264] usb 1-1: USB disconnect, device number 18 [ 521.701618][ T941] [drm:udl_init] *ERROR* Selecting channel failed [ 521.819169][ T941] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 521.850843][ T941] [drm] Initialized udl on minor 2 [ 521.882843][ T941] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 521.907744][ T941] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 521.933544][ T5335] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 521.958758][ T941] usb 2-1: USB disconnect, device number 19 [ 521.973710][ T5335] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 522.042011][ T29] audit: type=1326 audit(1724590440.658:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704d79e79 code=0x7ffc0000 [ 522.089785][ T5261] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 522.113682][ T5261] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 522.144497][ T29] audit: type=1326 audit(1724590440.688:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0704d79e79 code=0x7ffc0000 [ 522.257120][ T29] audit: type=1326 audit(1724590440.688:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704d79e79 code=0x7ffc0000 [ 522.309499][ T29] audit: type=1326 audit(1724590440.688:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0704d79e79 code=0x7ffc0000 [ 522.360420][ T29] audit: type=1326 audit(1724590440.708:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0704d79e79 code=0x7ffc0000 [ 522.426456][ T29] audit: type=1326 audit(1724590440.708:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0704d70e27 code=0x7ffc0000 [ 522.606683][ T29] audit: type=1326 audit(1724590440.708:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0704d157e9 code=0x7ffc0000 [ 523.522847][ T29] audit: type=1326 audit(1724590440.708:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0704d70e27 code=0x7ffc0000 [ 523.614900][ T5261] usb 5-1: USB disconnect, device number 22 [ 523.642793][ T29] audit: type=1326 audit(1724590440.708:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0704d157e9 code=0x7ffc0000 [ 523.762664][ T29] audit: type=1326 audit(1724590440.708:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11095 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0704d70e27 code=0x7ffc0000 [ 524.092757][ T58] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 524.314001][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.392346][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.423195][ T58] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 524.448384][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.489860][ T58] usb 2-1: config 0 descriptor?? [ 524.612771][ T5261] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 524.679493][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.703545][ T5223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.721315][ T5223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.732168][ T5223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.747269][ T5223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 524.754961][ T5223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.845954][ T5261] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 524.902697][ T5261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.950522][ T5261] usb 1-1: Product: syz [ 524.962638][ T5261] usb 1-1: Manufacturer: syz [ 524.977455][ T5261] usb 1-1: SerialNumber: syz [ 524.999822][ T58] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0011/input/input43 [ 525.003523][ T5261] usb 1-1: config 0 descriptor?? [ 525.063152][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1440'. [ 525.076472][ T5261] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 525.143326][ T58] uclogic 0003:28BD:0933.0011: input,hidraw0: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 525.320355][ T58] usb 2-1: USB disconnect, device number 20 [ 525.485673][ T5261] gspca_sunplus: reg_w_riv err -71 [ 525.503482][ T5261] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 525.642720][ T5223] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 525.652866][ T5223] Bluetooth: hci7: Injecting HCI hardware error event [ 525.662691][ T5220] Bluetooth: hci7: hardware error 0x00 [ 525.675956][ T5261] usb 1-1: USB disconnect, device number 19 [ 526.805359][T11116] chnl_net:caif_netlink_parms(): no params data found [ 526.904993][ T5223] Bluetooth: hci1: command tx timeout [ 527.769926][ T5220] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 528.058757][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.097474][T11116] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.142999][T11116] bridge_slave_0: entered allmulticast mode [ 528.154347][T11116] bridge_slave_0: entered promiscuous mode [ 528.205680][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.235139][T11116] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.268655][T11116] bridge_slave_1: entered allmulticast mode [ 528.293029][T11157] binder: 11156:11157 ioctl c0306201 0 returned -14 [ 528.298414][T11116] bridge_slave_1: entered promiscuous mode [ 528.430411][T11116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.485550][T11116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.624814][T11116] team0: Port device team_slave_0 added [ 528.638485][ T58] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 528.673630][T11116] team0: Port device team_slave_1 added [ 528.862695][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 528.883171][ T58] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.927939][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.953167][ T5220] Bluetooth: hci1: command tx timeout [ 528.974410][T11116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.000734][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 529.006202][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.064953][ T58] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 529.074377][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.097084][ T58] usb 4-1: Product: syz [ 529.101281][ T58] usb 4-1: Manufacturer: syz [ 529.137629][ T58] usb 4-1: SerialNumber: syz [ 529.153904][ T58] usb 4-1: config 0 descriptor?? [ 529.162326][ T58] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 529.179952][T11162] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 529.189537][T11116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.215333][T11116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.242897][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.274630][T11163] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1453'. [ 529.325073][T11116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.390109][ T25] usb 4-1: USB disconnect, device number 26 [ 529.572252][T11116] hsr_slave_0: entered promiscuous mode [ 529.620654][T11116] hsr_slave_1: entered promiscuous mode [ 529.674564][T11116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.682156][T11116] Cannot create hsr debugfs directory [ 530.603228][T11173] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 531.045222][ T5220] Bluetooth: hci1: command tx timeout [ 531.997452][T11116] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.023191][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 532.237292][T11116] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.359457][T11116] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.541455][T11116] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.723809][ T5264] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 532.760136][T11193] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1463'. [ 532.922785][ T5264] usb 5-1: Using ep0 maxpacket: 32 [ 532.960313][ T5264] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 532.994777][ T5264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.012702][ T5264] usb 5-1: Product: syz [ 533.016931][ T5264] usb 5-1: Manufacturer: syz [ 533.021533][ T5264] usb 5-1: SerialNumber: syz [ 533.068670][ T5264] usb 5-1: config 0 descriptor?? [ 533.115804][ T5220] Bluetooth: hci1: command tx timeout [ 533.144569][T11116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 533.156301][T11116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 533.181976][T11116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 533.252899][ T58] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 533.429771][T11116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 533.452785][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 533.472441][ T58] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 533.489975][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.505552][ T58] usb 4-1: config 0 has no interface number 0 [ 533.556494][ T58] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 533.568631][ T58] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 533.578566][ T58] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.786342][ T58] usb 4-1: config 0 interface 52 has no altsetting 0 [ 533.798178][ T58] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 533.827228][ T58] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 533.845545][ T5264] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 533.867177][ T58] usb 4-1: Manufacturer: syz [ 533.913247][ T5264] eb 9a 47 80 9b f8 7a f0 [ 533.923528][ T58] usb 4-1: config 0 descriptor?? [ 533.972852][ T5264] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 534.068602][ T5261] usb 5-1: USB disconnect, device number 23 [ 534.246415][ T58] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 534.287201][ T58] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 534.290395][T11116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.374324][T11211] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 534.457773][T11212] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1469'. [ 534.470043][T11116] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.489563][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.496692][ T7706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.508267][ T5261] usb 4-1: USB disconnect, device number 27 [ 534.548173][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.555414][ T7706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.683859][T11116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.766834][T11217] sctp: [Deprecated]: syz.4.1470 (pid 11217) Use of int in max_burst socket option deprecated. [ 534.766834][T11217] Use struct sctp_assoc_value instead [ 535.363955][T11116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.540624][T11116] veth0_vlan: entered promiscuous mode [ 535.554076][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 535.587005][T11116] veth1_vlan: entered promiscuous mode [ 536.510072][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 536.587648][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 536.661883][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.760263][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.812851][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.823736][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.836991][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.860804][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.988468][T11116] veth0_macvtap: entered promiscuous mode [ 537.191680][ T25] usb 1-1: usb_control_msg returned -32 [ 537.198216][ T25] usbtmc 1-1:16.0: can't read capabilities [ 537.214870][T11116] veth1_macvtap: entered promiscuous mode [ 537.251006][T11249] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 537.303669][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.314351][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.340941][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.386814][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.420789][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.456322][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.467087][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 537.467101][ T29] audit: type=1326 audit(1724590456.088:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11252 comm="syz.4.1482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e1a579e79 code=0x0 [ 537.508289][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.544903][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.615925][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.630543][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.641946][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.660692][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.672142][T11257] binder: 11255:11257 ioctl c0306201 0 returned -14 [ 537.685810][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.715261][T11226] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 537.725770][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.759427][T11116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.790038][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.817548][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.838774][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.883124][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.911219][ T46] usb 1-1: USB disconnect, device number 20 [ 537.932688][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.958492][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.994603][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.028503][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.054198][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.149274][T11264] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 538.322687][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.324943][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.330189][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.453485][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.461294][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.477890][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.487831][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.504081][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.521295][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.546137][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.603417][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.611079][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.622996][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.630518][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.643323][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.650839][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.661540][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.671210][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.680813][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.692242][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.702150][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.714642][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.742701][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.762674][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.772724][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.775089][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.781237][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.808137][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.827272][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.856219][T11116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.882043][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.900557][T11116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.927941][T11116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.936892][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.945573][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.953793][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.961280][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.969022][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 538.981521][T11116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.995227][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 539.004882][T11116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.013810][ T46] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 539.074834][ T46] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 539.093295][ T5261] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 539.263351][ T5261] usb 2-1: device descriptor read/64, error -71 [ 539.341257][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.375289][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.467604][ T1840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.512815][ T1840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.563418][ T5261] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 539.773511][ T5261] usb 2-1: device descriptor read/64, error -71 [ 539.903623][ T5261] usb usb2-port1: attempt power cycle [ 540.026305][T11287] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 540.412684][ T5261] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 540.493956][ T5261] usb 2-1: device descriptor read/8, error -71 [ 540.794590][ T5261] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 540.924625][ T5261] usb 2-1: device descriptor read/8, error -71 [ 541.083073][ T5261] usb usb2-port1: unable to enumerate USB device [ 541.473011][T11297] binder: 11296:11297 ioctl c0306201 0 returned -14 [ 543.265921][T11316] sctp: [Deprecated]: syz.2.1505 (pid 11316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.265921][T11316] Use struct sctp_sack_info instead [ 543.923716][ T5904] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 544.008356][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 544.212832][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 544.237130][ T5904] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 544.260923][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.306215][ T5904] usb 3-1: config 0 has no interface number 0 [ 544.342255][ T5904] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 544.370026][T11329] "syz.3.1510" (11329) uses obsolete ecb(arc4) skcipher [ 544.373786][ T5904] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 544.412572][ T5904] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.453366][T11338] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 544.461028][ T5904] usb 3-1: config 0 interface 52 has no altsetting 0 [ 544.476241][ T5904] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 544.487726][ T5904] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 544.517475][ T5904] usb 3-1: Manufacturer: syz [ 544.542855][T11339] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1512'. [ 544.543331][ T5904] usb 3-1: config 0 descriptor?? [ 544.843334][ T5904] usb 3-1: Can not set alternate setting to 1, error: -71 [ 544.856964][ T5904] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 544.911566][ T5904] usb 3-1: USB disconnect, device number 19 [ 545.172732][ T941] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 545.392971][ T941] usb 4-1: Using ep0 maxpacket: 32 [ 545.420563][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 545.469564][ T941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 545.542936][ T941] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 545.571608][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.601931][ T941] usb 4-1: config 0 descriptor?? [ 545.610844][T11345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.647815][ T941] hub 4-1:0.0: USB hub found [ 545.847733][ T941] hub 4-1:0.0: 2 ports detected [ 547.053071][T11365] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 547.467998][ T5904] usb 4-1: USB disconnect, device number 28 [ 548.151808][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'. [ 548.752816][T11393] sctp: [Deprecated]: syz.2.1531 (pid 11393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.752816][T11393] Use struct sctp_sack_info instead [ 551.673058][ T941] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 551.893001][ T941] usb 2-1: Using ep0 maxpacket: 32 [ 552.012709][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 552.142833][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 552.273632][ T941] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 552.342693][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.393710][ T941] usb 2-1: config 0 descriptor?? [ 552.433123][T11409] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 552.474660][ T941] hub 2-1:0.0: USB hub found [ 552.603665][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.622288][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.648556][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.666639][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.692050][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 552.702227][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 552.720407][ T941] hub 2-1:0.0: 2 ports detected [ 553.509838][T11425] sctp: [Deprecated]: syz.3.1542 (pid 11425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.509838][T11425] Use struct sctp_sack_info instead [ 553.511636][ T1840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.835280][ T1840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.029839][ T1840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.090103][T11420] chnl_net:caif_netlink_parms(): no params data found [ 554.209823][ T1840] team0: Port device netdevsim0 removed [ 554.240884][ T1840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.557257][ T5262] usb 2-1: USB disconnect, device number 25 [ 554.794151][ T5220] Bluetooth: hci0: command tx timeout [ 554.913894][T11435] netlink: 'syz.3.1545': attribute type 2 has an invalid length. [ 554.945602][T11435] netlink: 'syz.3.1545': attribute type 8 has an invalid length. [ 554.965459][T11435] netlink: 'syz.3.1545': attribute type 2 has an invalid length. [ 554.992829][T11435] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 555.014129][T11435] netlink: 'syz.3.1545': attribute type 3 has an invalid length. [ 555.032088][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 555.072073][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.092219][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.117223][T11420] bridge_slave_0: entered allmulticast mode [ 555.166096][T11420] bridge_slave_0: entered promiscuous mode [ 555.212103][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.232816][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.255369][T11420] bridge_slave_1: entered allmulticast mode [ 555.282887][T11420] bridge_slave_1: entered promiscuous mode [ 555.498753][ T1840] bridge_slave_1: left allmulticast mode [ 555.508014][ T1840] bridge_slave_1: left promiscuous mode [ 555.527471][ T1840] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.563755][ T1840] bridge_slave_0: left allmulticast mode [ 555.592216][ T1840] bridge_slave_0: left promiscuous mode [ 555.613762][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.705955][T11455] ptrace attach of "./syz-executor exec"[6892] was attempted by "./syz-executor exec"[11455] [ 556.706111][T11454] sctp: [Deprecated]: syz.3.1552 (pid 11454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.706111][T11454] Use struct sctp_sack_info instead [ 556.883026][ T5220] Bluetooth: hci0: command tx timeout [ 556.921733][T11457] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 557.566559][T11457] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1554'. [ 558.746651][ T1840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.809985][ T1840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.847133][ T1840] bond0 (unregistering): Released all slaves [ 559.123475][ T5220] Bluetooth: hci0: command tx timeout [ 559.622809][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.861538][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.094707][ T5220] Bluetooth: hci6: command 0x0406 tx timeout [ 561.193090][ T5223] Bluetooth: hci0: command tx timeout [ 561.757802][T11420] team0: Port device team_slave_0 added [ 562.935365][T11420] team0: Port device team_slave_1 added [ 563.083846][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.099936][T11538] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 563.111466][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.132940][ T5262] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 563.175943][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.185414][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.211749][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.250466][T11540] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1578'. [ 563.363605][ T5262] usb 3-1: Using ep0 maxpacket: 32 [ 563.403804][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 563.433460][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 563.455134][ T5262] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 563.478626][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.485692][T11543] sctp: [Deprecated]: syz.1.1579 (pid 11543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.485692][T11543] Use struct sctp_sack_info instead [ 563.515444][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.533924][ T5262] usb 3-1: config 0 descriptor?? [ 563.549251][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.583299][T11529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.603560][ T5262] hub 3-1:0.0: USB hub found [ 563.643651][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.815929][ T5262] hub 3-1:0.0: 2 ports detected [ 563.870941][ T1840] hsr_slave_0: left promiscuous mode [ 563.919554][ T1840] hsr_slave_1: left promiscuous mode [ 563.930977][ T1840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.957832][ T1840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.987121][ T1840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.013010][ T1840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.132820][ T1840] veth1_macvtap: left promiscuous mode [ 564.169266][ T1840] veth0_macvtap: left promiscuous mode [ 564.179668][ T1840] veth1_vlan: left promiscuous mode [ 564.196762][ T1840] veth0_vlan: left promiscuous mode [ 564.248282][T11549] binder: 11548:11549 ioctl c0306201 0 returned -14 [ 565.486714][ T5335] usb 3-1: USB disconnect, device number 20 [ 565.766825][ T1840] team0 (unregistering): Port device team_slave_1 removed [ 565.843363][T11575] sctp: [Deprecated]: syz.0.1589 (pid 11575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.843363][T11575] Use struct sctp_sack_info instead [ 565.907379][ T1840] team0 (unregistering): Port device team_slave_0 removed [ 566.500163][T11583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1593'. [ 568.765493][T11420] hsr_slave_0: entered promiscuous mode [ 568.827370][T11420] hsr_slave_1: entered promiscuous mode [ 568.946157][T11420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.971999][T11420] Cannot create hsr debugfs directory [ 569.212044][T11616] syz.2.1602: attempt to access beyond end of device [ 569.212044][T11616] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 569.225559][T11616] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 572.047103][T11661] sctp: [Deprecated]: syz.0.1616 (pid 11661) Use of int in maxseg socket option. [ 572.047103][T11661] Use struct sctp_assoc_value instead [ 572.357350][T11420] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 572.421665][T11420] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 572.435696][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 572.462761][T11420] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 572.503698][T11420] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 572.889007][T11683] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 573.018881][T11684] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1623'. [ 573.340860][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.501807][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.597113][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.604395][ T7693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.676374][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.683529][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.916361][T11420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.402746][ T5262] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 574.450549][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.574042][ T5262] usb 1-1: device descriptor read/64, error -71 [ 574.862895][ T5262] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 575.093178][ T5262] usb 1-1: device descriptor read/64, error -71 [ 575.223515][ T5262] usb usb1-port1: attempt power cycle [ 575.363734][T11420] veth0_vlan: entered promiscuous mode [ 575.606087][T11420] veth1_vlan: entered promiscuous mode [ 575.663202][ T5262] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 575.693438][ T5262] usb 1-1: device descriptor read/8, error -71 [ 575.715975][T11420] veth0_macvtap: entered promiscuous mode [ 575.735169][T11420] veth1_macvtap: entered promiscuous mode [ 575.766107][T11747] fuse: Bad value for 'fd' [ 575.772489][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.913043][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.966015][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.976522][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.986430][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.993730][ T5262] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 576.016280][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.042321][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.072950][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.084874][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 576.095555][ T5262] usb 1-1: device descriptor read/8, error -71 [ 576.102842][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.131814][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 576.141612][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.175343][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.197133][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.211900][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.215262][ T5262] usb usb1-port1: unable to enumerate USB device [ 576.224954][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.266953][T11420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.324363][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.349225][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.368690][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.381872][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.411978][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.431392][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.441617][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.453881][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.473091][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.498007][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.527306][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.546852][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.559675][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.597544][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.626757][T11420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.650952][T11420] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.659811][T11420] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.674023][T11420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.691301][T11420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.918955][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.950955][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.072878][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.096051][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.432032][T11782] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 577.747627][T11798] fuse: Bad value for 'fd' [ 578.245769][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 579.848625][T11833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1662'. [ 580.120865][T11840] fuse: Bad value for 'fd' [ 580.627624][T11859] binder: 11857:11859 ioctl c0306201 0 returned -14 [ 580.852522][T11867] sctp: [Deprecated]: syz.2.1678 (pid 11867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.852522][T11867] Use struct sctp_sack_info instead [ 581.960488][T11882] serio: Serial port pts0 [ 584.294813][T11915] binder: 11914:11915 ioctl c0306201 0 returned -14 [ 584.613970][T11921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1697'. [ 584.987478][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 585.035385][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 585.549901][ T5904] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 585.793005][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 585.818697][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 586.182716][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 586.196309][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 586.205662][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.216471][ T5904] usb 2-1: config 0 descriptor?? [ 586.222152][T11928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 586.236475][ T5904] hub 2-1:0.0: USB hub found [ 586.557942][ T5904] hub 2-1:0.0: 2 ports detected [ 586.667269][T11951] netlink: 'syz.0.1710': attribute type 72 has an invalid length. [ 586.695797][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1710'. [ 586.808541][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1711'. [ 586.911778][T11961] binder: 11959:11961 ioctl c0306201 0 returned -14 [ 586.935751][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 589.218163][T11989] netlink: 'syz.2.1723': attribute type 72 has an invalid length. [ 589.232834][T11989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'. [ 589.618363][ T58] usb 2-1: USB disconnect, device number 26 [ 590.449838][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1728'. [ 590.483256][T12002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1728'. [ 590.683669][T12013] binder: 12012:12013 ioctl c0306201 0 returned -14 [ 590.692975][T12015] sctp: [Deprecated]: syz.0.1733 (pid 12015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 590.692975][T12015] Use struct sctp_sack_info instead [ 591.979594][T12042] syz.1.1740: attempt to access beyond end of device [ 591.979594][T12042] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 591.992872][T12042] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 592.904317][T12052] sctp: [Deprecated]: syz.0.1746 (pid 12052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.904317][T12052] Use struct sctp_sack_info instead [ 594.962401][T12086] syz.2.1756: attempt to access beyond end of device [ 594.962401][T12086] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 594.975489][T12086] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 595.995550][T12098] binder: 12097:12098 ioctl c0306201 0 returned -14 [ 596.032869][T12099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1763'. [ 596.072891][ T5264] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 596.242792][ T5264] usb 1-1: device descriptor read/64, error -71 [ 596.496968][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'. [ 596.587181][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'. [ 596.652703][ T5264] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 597.218482][ T5264] usb 1-1: device descriptor read/64, error -71 [ 597.409726][ T5264] usb usb1-port1: attempt power cycle [ 597.501531][T12119] sctp: [Deprecated]: syz.2.1769 (pid 12119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.501531][T12119] Use struct sctp_sack_info instead [ 597.853266][ T5264] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 597.906211][ T5264] usb 1-1: device descriptor read/8, error -71 [ 598.872703][ T5264] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 599.183899][ T5264] usb 1-1: device not accepting address 28, error -71 [ 599.212962][ T5264] usb usb1-port1: unable to enumerate USB device [ 599.331703][T12157] binder: 12156:12157 ioctl c0306201 0 returned -14 [ 599.589848][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 599.618039][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 601.072779][ T5264] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 601.242705][ T5264] usb 4-1: device descriptor read/64, error -71 [ 601.528886][ T5264] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 601.812951][ T5264] usb 4-1: device descriptor read/64, error -71 [ 601.982853][ T5264] usb usb4-port1: attempt power cycle [ 602.416749][ T5264] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 602.455458][ T5264] usb 4-1: device descriptor read/8, error -71 [ 602.752755][ T5264] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 602.841995][ T5264] usb 4-1: device descriptor read/8, error -71 [ 602.973348][ T5264] usb usb4-port1: unable to enumerate USB device [ 604.749680][T12231] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 605.582850][ T5264] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 605.802764][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 605.857008][T12239] syz.1.1814: attempt to access beyond end of device [ 605.857008][T12239] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 605.869956][T12239] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 605.970558][ T5264] usb 3-1: config 0 has no interfaces? [ 606.083289][ T5264] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 606.163326][ T5264] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 606.181027][ T5264] usb 3-1: Manufacturer: syz [ 606.243793][ T5264] usb 3-1: config 0 descriptor?? [ 607.572676][T12262] binder: 12261:12262 ioctl c0306201 0 returned -14 [ 607.594716][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1822'. [ 608.895747][ T5262] usb 3-1: USB disconnect, device number 21 [ 610.732187][T12317] binder: 12316:12317 ioctl c0306201 0 returned -14 [ 611.992799][ T5264] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 612.172854][ T5264] usb 1-1: device descriptor read/64, error -71 [ 612.493025][ T5264] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 612.672852][ T5264] usb 1-1: device descriptor read/64, error -71 [ 612.803150][ T5264] usb usb1-port1: attempt power cycle [ 613.243659][ T5264] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 613.330672][ T5264] usb 1-1: device descriptor read/8, error -71 [ 613.623752][ T5264] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 613.653646][ T5264] usb 1-1: device descriptor read/8, error -71 [ 613.787048][ T5264] usb usb1-port1: unable to enumerate USB device [ 614.036475][T12370] binder: 12369:12370 ioctl c0306201 0 returned -14 [ 615.147921][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 617.723903][T12417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1876'. [ 618.091365][T12426] binder: 12425:12426 ioctl c0306201 0 returned -14 [ 618.946083][T12435] "syz.4.1885" (12435) uses obsolete ecb(arc4) skcipher [ 622.410818][T12491] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 622.497044][T12493] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1907'. [ 624.557494][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.564390][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.610089][T12537] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 625.701456][T12540] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1923'. [ 627.956262][T12594] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.064680][T12597] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1943'. [ 629.833043][T12619] binder: 12618:12619 ioctl c0306201 0 returned -14 [ 630.359397][T12635] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 630.482884][T12635] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1958'. [ 631.053792][T12641] syz.2.1959: attempt to access beyond end of device [ 631.053792][T12641] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 631.066571][T12641] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 631.519826][T12646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1961'. [ 632.527121][T12668] binder: 12667:12668 ioctl c0306201 0 returned -14 [ 632.850195][T12680] syz.0.1975: attempt to access beyond end of device [ 632.850195][T12680] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 632.863063][T12680] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 633.216086][T12685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1976'. [ 633.703920][T12692] serio: Serial port pts0 [ 634.513231][T12716] binder: 12714:12716 ioctl c0306201 0 returned -14 [ 634.725833][T12723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1993'. [ 635.052735][ T58] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 635.302789][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 635.349755][ T58] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 635.982738][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.012693][ T58] usb 2-1: config 0 has no interface number 0 [ 636.019357][ T58] usb 2-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 636.048340][ T58] usb 2-1: config 0 interface 52 has no altsetting 0 [ 636.089622][ T58] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 636.127713][ T58] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 636.169687][ T58] usb 2-1: Manufacturer: syz [ 636.199599][ T58] usb 2-1: config 0 descriptor?? [ 636.698746][ T58] usb 2-1: USB disconnect, device number 27 [ 636.750668][T12631] syz.4.1957: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 636.826273][T12631] CPU: 0 UID: 0 PID: 12631 Comm: syz.4.1957 Not tainted 6.11.0-rc4-syzkaller-00268-g48fb4b3d9b43 #0 [ 636.837058][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 636.847102][T12631] Call Trace: [ 636.850381][T12631] [ 636.853302][T12631] dump_stack_lvl+0x241/0x360 [ 636.857975][T12631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.863159][T12631] ? __pfx__printk+0x10/0x10 [ 636.867741][T12631] ? __rcu_read_unlock+0xa1/0x110 [ 636.872755][T12631] warn_alloc+0x278/0x410 [ 636.877075][T12631] ? __pfx_warn_alloc+0x10/0x10 [ 636.881913][T12631] ? translate_table+0x174/0x2260 [ 636.886940][T12631] ? __get_vm_area_node+0x23d/0x270 [ 636.892131][T12631] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 636.898054][T12631] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 636.904405][T12631] ? rcu_is_watching+0x15/0xb0 [ 636.909196][T12631] ? trace_kmalloc+0x1f/0xd0 [ 636.913805][T12631] ? __kmalloc_node_noprof+0x247/0x440 [ 636.919281][T12631] ? __kvmalloc_node_noprof+0x72/0x190 [ 636.924760][T12631] __kvmalloc_node_noprof+0x142/0x190 [ 636.930146][T12631] ? translate_table+0x174/0x2260 [ 636.935192][T12631] translate_table+0x174/0x2260 [ 636.940095][T12631] ? __pfx_translate_table+0x10/0x10 [ 636.945401][T12631] ? __might_fault+0xaa/0x120 [ 636.950094][T12631] ? __pfx_lock_release+0x10/0x10 [ 636.955147][T12631] ? __might_fault+0xaa/0x120 [ 636.959841][T12631] ? __might_fault+0xc6/0x120 [ 636.964544][T12631] ? _copy_from_user+0xa6/0xe0 [ 636.969336][T12631] ? copy_from_sockptr_offset+0x6b/0xb0 [ 636.974921][T12631] do_ipt_set_ctl+0xe3d/0x1250 [ 636.979716][T12631] ? __pfx___might_resched+0x10/0x10 [ 636.985020][T12631] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 636.990249][T12631] ? __pfx_lock_release+0x10/0x10 [ 636.995317][T12631] ? __mutex_unlock_slowpath+0x21d/0x750 [ 637.000971][T12631] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 637.006365][T12631] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 637.012386][T12631] ? __pfx___mutex_lock+0x10/0x10 [ 637.017431][T12631] ? module_put+0x13a/0x2d0 [ 637.021962][T12631] nf_setsockopt+0x295/0x2c0 [ 637.026581][T12631] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 637.032491][T12631] smc_setsockopt+0x275/0xe50 [ 637.037196][T12631] ? __pfx_smc_setsockopt+0x10/0x10 [ 637.042419][T12631] ? __pfx_lock_release+0x10/0x10 [ 637.047463][T12631] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 637.053032][T12631] ? security_socket_setsockopt+0x87/0xb0 [ 637.058771][T12631] ? __pfx_smc_setsockopt+0x10/0x10 [ 637.063984][T12631] do_sock_setsockopt+0x3af/0x720 [ 637.069023][T12631] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 637.074581][T12631] ? __fget_files+0x29/0x470 [ 637.079177][T12631] ? __fget_files+0x3f6/0x470 [ 637.083851][T12631] __sys_setsockopt+0x1ae/0x250 [ 637.088691][T12631] __x64_sys_setsockopt+0xb5/0xd0 [ 637.093703][T12631] do_syscall_64+0xf3/0x230 [ 637.098191][T12631] ? clear_bhb_loop+0x35/0x90 [ 637.102859][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.108740][T12631] RIP: 0033:0x7f575d979e79 [ 637.113163][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.132782][T12631] RSP: 002b:00007f575e672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 637.141214][T12631] RAX: ffffffffffffffda RBX: 00007f575db15f80 RCX: 00007f575d979e79 [ 637.149184][T12631] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 637.157138][T12631] RBP: 00007f575d9e793e R08: 0000000000000298 R09: 0000000000000000 [ 637.165093][T12631] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 637.173051][T12631] R13: 0000000000000000 R14: 00007f575db15f80 R15: 00007ffee4a52608 [ 637.181045][T12631] [ 637.279904][T12631] Mem-Info: [ 637.287724][T12631] active_anon:264 inactive_anon:9158 isolated_anon:0 [ 637.287724][T12631] active_file:17832 inactive_file:38499 isolated_file:0 [ 637.287724][T12631] unevictable:1868 dirty:38 writeback:0 [ 637.287724][T12631] slab_reclaimable:9426 slab_unreclaimable:105372 [ 637.287724][T12631] mapped:29756 shmem:4421 pagetables:859 [ 637.287724][T12631] sec_pagetables:0 bounce:0 [ 637.287724][T12631] kernel_misc_reclaimable:0 [ 637.287724][T12631] free:1310834 free_pcp:3803 free_cma:0 [ 637.547137][T12631] Node 0 active_anon:1056kB inactive_anon:24032kB active_file:71220kB inactive_file:153996kB unevictable:9236kB isolated(anon):0kB isolated(file):0kB mapped:118992kB dirty:152kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10624kB pagetables:3636kB sec_pagetables:0kB all_unreclaimable? no [ 637.702869][T12631] Node 1 active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 637.801017][T12631] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.887113][T12631] lowmem_reserve[]: 0 2563 2565 0 0 [ 637.917216][T12631] Node 0 DMA32 free:1260964kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:1052kB inactive_anon:23788kB active_file:69716kB inactive_file:153932kB unevictable:18236kB writepending:152kB present:3129332kB managed:2653284kB mlocked:16700kB bounce:0kB free_pcp:1604kB local_pcp:804kB free_cma:0kB [ 638.023077][T12631] lowmem_reserve[]: 0 0 1 0 0 [ 638.047890][T12631] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1504kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 638.120113][T12631] lowmem_reserve[]: 0 0 0 0 0 [ 638.136506][T12631] Node 1 Normal free:3953792kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.272852][T12631] lowmem_reserve[]: 0 0 0 0 0 [ 638.277634][T12631] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 638.334808][T12631] Node 0 DMA32: 2*4kB (E) 22*8kB (UME) 284*16kB (ME) 553*32kB (UME) 292*64kB (UME) 48*128kB (UME) 21*256kB (UME) 12*512kB (M) 22*1024kB (UM) 4*2048kB (ME) 265*4096kB (M) = 1174936kB [ 638.417529][T12631] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 638.456889][T12631] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 9*16kB (UM) 10*32kB (U) 6*64kB (U) 4*128kB (U) 5*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (U) 963*4096kB (UM) = 3953792kB [ 638.512802][T12631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.553375][T12631] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 638.568476][T12631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.580532][T12631] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 640.431804][T12631] 60959 total pagecache pages [ 640.507089][T12631] 0 pages in swap cache [ 640.511281][T12631] Free swap = 124584kB [ 640.554122][T12631] Total swap = 124996kB [ 640.558309][T12631] 2097051 pages RAM [ 640.562124][T12631] 0 pages HighMem/MovableOnly [ 640.637884][T12631] 402200 pages reserved [ 640.642073][T12631] 0 pages cma reserved [ 640.661220][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2005'. [ 641.373499][ T5220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 641.401789][ T5220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 641.409951][ T5220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 641.426053][ T5220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 641.434232][ T5220] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 641.442060][ T5220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 643.532823][ T5220] Bluetooth: hci7: command tx timeout [ 644.011654][T12766] chnl_net:caif_netlink_parms(): no params data found [ 644.695478][T11876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.821529][T12766] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.840311][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.888635][T12766] bridge_slave_0: entered allmulticast mode [ 644.904138][T12766] bridge_slave_0: entered promiscuous mode [ 645.075548][T11876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.111452][T12766] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.147448][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.312911][T12766] bridge_slave_1: entered allmulticast mode [ 645.338306][T12766] bridge_slave_1: entered promiscuous mode [ 645.413729][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 645.490924][T11876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.593739][ T5223] Bluetooth: hci7: command tx timeout [ 645.671730][T11876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.748049][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.801120][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.899075][T12817] syz.2.2028: attempt to access beyond end of device [ 645.899075][T12817] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 645.911841][T12817] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 645.992181][T12766] team0: Port device team_slave_0 added [ 646.186121][T12766] team0: Port device team_slave_1 added [ 646.698109][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.724108][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.788413][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.832018][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.882010][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.981712][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.115946][ T5223] Bluetooth: hci1: command 0x0406 tx timeout [ 647.608373][T12766] hsr_slave_0: entered promiscuous mode [ 647.673082][ T5220] Bluetooth: hci7: command tx timeout [ 647.681118][T12766] hsr_slave_1: entered promiscuous mode [ 647.734424][T12766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.751950][T12766] Cannot create hsr debugfs directory [ 647.775178][T11876] bridge_slave_1: left allmulticast mode [ 647.789032][T11876] bridge_slave_1: left promiscuous mode [ 647.790586][T12731] syz.3.1997: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 647.820725][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.823079][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.872472][T12731] ,cpuset=syz3,mems_allowed=0-1 [ 647.878151][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.889574][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.901027][T12731] CPU: 1 UID: 0 PID: 12731 Comm: syz.3.1997 Not tainted 6.11.0-rc4-syzkaller-00268-g48fb4b3d9b43 #0 [ 647.911802][T12731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 647.921843][T12731] Call Trace: [ 647.925109][T12731] [ 647.928028][T12731] dump_stack_lvl+0x241/0x360 [ 647.932704][T12731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.937895][T12731] ? __pfx__printk+0x10/0x10 [ 647.942482][T12731] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 647.948891][T12731] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 647.955401][T12731] warn_alloc+0x278/0x410 [ 647.959729][T12731] ? __pfx_warn_alloc+0x10/0x10 [ 647.964568][T12731] ? translate_table+0x174/0x2260 [ 647.969583][T12731] ? __get_vm_area_node+0x23d/0x270 [ 647.974773][T12731] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 647.980674][T12731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 647.986992][T12731] ? rcu_is_watching+0x15/0xb0 [ 647.991746][T12731] ? trace_kmalloc+0x1f/0xd0 [ 647.996321][T12731] ? __kmalloc_node_noprof+0x247/0x440 [ 648.001767][T12731] ? __kvmalloc_node_noprof+0x72/0x190 [ 648.007224][T12731] __kvmalloc_node_noprof+0x142/0x190 [ 648.012605][T12731] ? translate_table+0x174/0x2260 [ 648.017631][T12731] translate_table+0x174/0x2260 [ 648.022500][T12731] ? __pfx_translate_table+0x10/0x10 [ 648.027785][T12731] ? __might_fault+0xaa/0x120 [ 648.032453][T12731] ? __pfx_lock_release+0x10/0x10 [ 648.037481][T12731] ? __might_fault+0xaa/0x120 [ 648.042150][T12731] ? __might_fault+0xc6/0x120 [ 648.046820][T12731] ? _copy_from_user+0xa6/0xe0 [ 648.051583][T12731] ? copy_from_sockptr_offset+0x6b/0xb0 [ 648.057129][T12731] do_ipt_set_ctl+0xe3d/0x1250 [ 648.061898][T12731] ? __pfx___might_resched+0x10/0x10 [ 648.067177][T12731] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 648.072371][T12731] ? __pfx_lock_release+0x10/0x10 [ 648.077407][T12731] ? __mutex_unlock_slowpath+0x21d/0x750 [ 648.083049][T12731] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 648.088434][T12731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.094418][T12731] ? __pfx___mutex_lock+0x10/0x10 [ 648.099436][T12731] ? module_put+0x13a/0x2d0 [ 648.103940][T12731] nf_setsockopt+0x295/0x2c0 [ 648.108534][T12731] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 648.114424][T12731] smc_setsockopt+0x275/0xe50 [ 648.119099][T12731] ? __pfx_smc_setsockopt+0x10/0x10 [ 648.124291][T12731] ? __pfx_lock_release+0x10/0x10 [ 648.129310][T12731] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 648.134849][T12731] ? security_socket_setsockopt+0x87/0xb0 [ 648.140563][T12731] ? __pfx_smc_setsockopt+0x10/0x10 [ 648.145752][T12731] do_sock_setsockopt+0x3af/0x720 [ 648.150776][T12731] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 648.156315][T12731] ? __fget_files+0x29/0x470 [ 648.160900][T12731] ? __fget_files+0x3f6/0x470 [ 648.165601][T12731] __sys_setsockopt+0x1ae/0x250 [ 648.170451][T12731] __x64_sys_setsockopt+0xb5/0xd0 [ 648.175473][T12731] do_syscall_64+0xf3/0x230 [ 648.179969][T12731] ? clear_bhb_loop+0x35/0x90 [ 648.184649][T12731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.190536][T12731] RIP: 0033:0x7f09fc379e79 [ 648.194944][T12731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.214544][T12731] RSP: 002b:00007f09fd19e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 648.222952][T12731] RAX: ffffffffffffffda RBX: 00007f09fc515f80 RCX: 00007f09fc379e79 [ 648.230914][T12731] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 648.238873][T12731] RBP: 00007f09fc3e793e R08: 0000000000000298 R09: 0000000000000000 [ 648.246836][T12731] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000000 [ 648.254797][T12731] R13: 0000000000000000 R14: 00007f09fc515f80 R15: 00007ffe981202b8 [ 648.262772][T12731] [ 648.275660][T12731] Mem-Info: [ 648.281298][T12731] active_anon:292 inactive_anon:7113 isolated_anon:0 [ 648.281298][T12731] active_file:9576 inactive_file:47261 isolated_file:0 [ 648.281298][T12731] unevictable:768 dirty:70 writeback:0 [ 648.281298][T12731] slab_reclaimable:9391 slab_unreclaimable:105224 [ 648.281298][T12731] mapped:33376 shmem:1287 pagetables:915 [ 648.281298][T12731] sec_pagetables:0 bounce:0 [ 648.281298][T12731] kernel_misc_reclaimable:0 [ 648.281298][T12731] free:1315792 free_pcp:660 free_cma:0 [ 648.344836][ T46] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 648.362871][T11876] bridge_slave_0: left allmulticast mode [ 648.368513][T11876] bridge_slave_0: left promiscuous mode [ 648.434940][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.467020][T12731] Node 0 active_anon:1088kB inactive_anon:28720kB active_file:38196kB inactive_file:189044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133464kB dirty:276kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no [ 648.501250][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.533121][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 648.547507][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.613068][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 648.622321][T12731] Node 1 active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 648.726100][ T46] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 648.734305][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.752730][ T46] usb 2-1: config 0 has no interface number 0 [ 648.767276][ T46] usb 2-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 648.798662][ T46] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.821704][T12731] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 648.856489][ T46] usb 2-1: config 0 interface 52 has no altsetting 0 [ 648.874663][ T46] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 648.892916][ T46] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 648.906838][T12731] lowmem_reserve[]: 0 2563 2565 0 0 [ 648.922798][ T46] usb 2-1: Manufacturer: syz [ 648.927506][T12731] Node 0 DMA32 free:1294836kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:26876kB active_file:36692kB inactive_file:188980kB unevictable:1536kB writepending:272kB present:3129332kB managed:2653284kB mlocked:0kB bounce:0kB free_pcp:4444kB local_pcp:920kB free_cma:0kB [ 648.988847][ T46] usb 2-1: config 0 descriptor?? [ 649.039508][T12731] lowmem_reserve[]: 0 0 1 0 0 [ 649.055430][T12731] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1504kB inactive_file:64kB unevictable:0kB writepending:4kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 649.212780][T12731] lowmem_reserve[]: 0 0 0 0 0 [ 649.217555][T12731] Node 1 Normal free:3953540kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 649.409385][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 649.420579][T12731] lowmem_reserve[]: 0 0 0 0 0 [ 649.435569][T12731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 649.455958][T12731] Node 0 DMA32: 2*4kB (UE) 21*8kB (ME) 620*16kB (UME) 558*32kB (UME) 288*64kB (UME) 118*128kB (UME) 204*256kB (UME) 114*512kB (UM) 63*1024kB (UM) 25*2048kB (UME) 244*4096kB (UM) = 1287216kB [ 649.481513][T12731] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 649.500605][T12731] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 7*32kB (U) 6*64kB (U) 4*128kB (U) 5*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (U) 963*4096kB (UM) = 3953540kB [ 649.525234][ T5904] usb 2-1: USB disconnect, device number 28 [ 649.534679][T12731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 649.545081][T12731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 649.556879][T12731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 649.566571][T12731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 649.576518][T12731] 60978 total pagecache pages [ 649.581844][T12731] 0 pages in swap cache [ 649.587038][T12731] Free swap = 124584kB [ 649.591187][T12731] Total swap = 124996kB [ 649.595457][T12731] 2097051 pages RAM [ 649.599266][T12731] 0 pages HighMem/MovableOnly [ 649.604735][T12731] 402200 pages reserved [ 649.608882][T12731] 0 pages cma reserved [ 649.753405][ T5223] Bluetooth: hci7: command tx timeout [ 650.226941][T11876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.290690][T11876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.365558][T11876] bond0 (unregistering): Released all slaves [ 650.665054][ T5223] Bluetooth: hci0: command tx timeout [ 652.074188][T11876] hsr_slave_0: left promiscuous mode [ 652.104679][T11876] hsr_slave_1: left promiscuous mode [ 652.117287][T11876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.145230][T11876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.168089][T11876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.472831][T11876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.614079][T11876] veth1_macvtap: left promiscuous mode [ 652.622854][T11876] veth0_macvtap: left promiscuous mode [ 652.641244][T11876] veth1_vlan: left promiscuous mode [ 652.658829][T11876] veth0_vlan: left promiscuous mode [ 652.715203][ T5223] Bluetooth: hci0: command tx timeout [ 654.086683][T11876] team0 (unregistering): Port device team_slave_1 removed [ 654.170996][T11876] team0 (unregistering): Port device team_slave_0 removed [ 654.794979][ T5220] Bluetooth: hci0: command tx timeout [ 656.882876][ T5220] Bluetooth: hci0: command tx timeout [ 685.999795][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.006165][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 764.792617][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 764.799584][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12996/1:b..l [ 764.808008][ C1] rcu: (detected by 1, t=10502 jiffies, g=57745, q=246 ncpus=2) [ 764.815716][ C1] task:dhcpcd-run-hook state:R running task stack:26816 pid:12996 tgid:12996 ppid:12974 flags:0x00004002 [ 764.828586][ C1] Call Trace: [ 764.831851][ C1] [ 764.834768][ C1] __schedule+0x17ae/0x4a10 [ 764.839286][ C1] ? arch_stack_walk+0x16d/0x1b0 [ 764.844204][ C1] ? __pfx___schedule+0x10/0x10 [ 764.849040][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 764.855005][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 764.860269][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 764.865360][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 764.871058][ C1] ? save_stack+0x11f/0x1f0 [ 764.875547][ C1] irqentry_exit+0x5e/0x90 [ 764.879941][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.885902][ C1] RIP: 0010:__reset_page_owner+0x136/0x430 [ 764.891688][ C1] Code: 1f 0f 87 a1 01 00 00 e8 48 66 92 ff 44 89 e7 8b 5c 24 24 89 de e8 fa 67 92 ff 44 39 e3 0f 84 a5 01 00 00 4c 8b 35 8a d6 84 0c <4d> 01 fe 83 7c 24 0c 00 74 41 e8 1b 66 92 ff 4c 89 ff be 08 00 00 [ 764.911284][ C1] RSP: 0018:ffffc900098bf4e8 EFLAGS: 00000202 [ 764.917360][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88807b300000 [ 764.925326][ C1] RDX: ffff88807b300000 RSI: 0000000000000001 RDI: 0000000000000000 [ 764.933303][ C1] RBP: 0000000000000000 R08: ffffffff82012746 R09: 000000000000000e [ 764.941273][ C1] R10: dffffc0000000000 R11: fffffbfff1fed90e R12: 0000000000000000 [ 764.949226][ C1] R13: dffffc0000000000 R14: 0000000000000008 R15: ffff888018043760 [ 764.957186][ C1] ? __reset_page_owner+0x126/0x430 [ 764.962377][ C1] ? __reset_page_owner+0x126/0x430 [ 764.967560][ C1] free_unref_folios+0x100f/0x1ac0 [ 764.972683][ C1] folios_put_refs+0x76e/0x860 [ 764.977463][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 764.982736][ C1] ? free_swap_cache+0xb3/0x880 [ 764.987568][ C1] free_pages_and_swap_cache+0x2ea/0x690 [ 764.993183][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 764.999334][ C1] ? tlb_table_flush+0x143/0x410 [ 765.004260][ C1] tlb_flush_mmu+0x3a3/0x680 [ 765.008831][ C1] ? __pfx_down_write+0x10/0x10 [ 765.013664][ C1] tlb_finish_mmu+0xd4/0x200 [ 765.018256][ C1] exit_mmap+0x44f/0xc80 [ 765.022501][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 765.027259][ C1] ? __asan_memset+0x23/0x50 [ 765.031841][ C1] ? uprobe_clear_state+0x277/0x290 [ 765.037043][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 765.042307][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 765.047490][ C1] __mmput+0x115/0x380 [ 765.051543][ C1] exit_mm+0x220/0x310 [ 765.055598][ C1] ? __pfx_exit_mm+0x10/0x10 [ 765.060165][ C1] ? taskstats_exit+0x326/0xa60 [ 765.065002][ C1] do_exit+0x9b2/0x27f0 [ 765.069140][ C1] ? __pfx_do_exit+0x10/0x10 [ 765.073707][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 765.079671][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 765.085983][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 765.091163][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 765.096347][ C1] do_group_exit+0x207/0x2c0 [ 765.100921][ C1] __x64_sys_exit_group+0x3f/0x40 [ 765.105924][ C1] x64_sys_call+0x2634/0x2640 [ 765.110585][ C1] do_syscall_64+0xf3/0x230 [ 765.115069][ C1] ? clear_bhb_loop+0x35/0x90 [ 765.119730][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.125607][ C1] RIP: 0033:0x7f3ea7912a90 [ 765.130004][ C1] RSP: 002b:00007ffebef14188 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 765.138399][ C1] RAX: ffffffffffffffda RBX: 000055b2be56be04 RCX: 00007f3ea7912a90 [ 765.146353][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 765.154304][ C1] RBP: 0000000000000003 R08: 00007ffebef14280 R09: 0000000000000002 [ 765.162252][ C1] R10: 0000000000000010 R11: 0000000000000202 R12: 00007ffebef144a8 [ 765.170202][ C1] R13: 00007ffebef144c0 R14: 000055b283fb5169 R15: 00007f3ea7b10a80 [ 765.178164][ C1] [ 765.181164][ C1] rcu: rcu_preempt kthread starved for 10535 jiffies! g57745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 765.192330][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 765.202276][ C1] rcu: RCU grace-period kthread stack dump: [ 765.208140][ C1] task:rcu_preempt state:R running task stack:26544 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 765.219845][ C1] Call Trace: [ 765.223105][ C1] [ 765.226034][ C1] __schedule+0x17ae/0x4a10 [ 765.230556][ C1] ? __pfx___schedule+0x10/0x10 [ 765.235397][ C1] ? __pfx_lock_release+0x10/0x10 [ 765.240400][ C1] ? __asan_memset+0x23/0x50 [ 765.244969][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 765.250755][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 765.257064][ C1] ? schedule+0x90/0x320 [ 765.261285][ C1] schedule+0x14b/0x320 [ 765.265421][ C1] schedule_timeout+0x1be/0x310 [ 765.270250][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 765.275600][ C1] ? __pfx_process_timeout+0x10/0x10 [ 765.280870][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 765.286398][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 765.291226][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 765.296412][ C1] ? rcu_gp_init+0x1256/0x1630 [ 765.301159][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 765.306077][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 765.312556][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 765.317850][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 765.323728][ C1] ? finish_swait+0xd4/0x1e0 [ 765.328316][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 765.332913][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 765.338091][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 765.343968][ C1] ? __kthread_parkme+0x169/0x1d0 [ 765.348976][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 765.354155][ C1] kthread+0x2f0/0x390 [ 765.358206][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 765.363383][ C1] ? __pfx_kthread+0x10/0x10 [ 765.367975][ C1] ret_from_fork+0x4b/0x80 [ 765.372372][ C1] ? __pfx_kthread+0x10/0x10 [ 765.376946][ C1] ret_from_fork_asm+0x1a/0x30 [ 765.381702][ C1] [ 765.384702][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 765.391019][ C1] Sending NMI from CPU 1 to CPUs 0: [ 765.396223][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30