last executing test programs: 1m3.425911223s ago: executing program 1 (id=5301): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x101301) r9 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f00000002c0)={0xf0f044}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000300)="0504368ef587b0e76b53c39658d5780ebd453214343f2b8b62edd4f798eda278e57579541f19aba4c65ab4bfdc6db72190f8ab00d88b2ee5b2c58aa543d01cabfc6c9109c7f8cfb851c6d5602e8cdac809e7d0012f20d26e0ae6bc09787b451204482ca842bc2e274fd8fdf9c98d480aabff9928150f0fb3b0e62f27aa355326706821ca1ce04dda0eea6e188bebf85e0187e232055fdd06acdfeb3e83e7491eba175d92edce70fba83e45345bb621e2e49b9620585e0c5e967c", &(0x7f0000000580)=""/238, 0x4}, 0x20) poll(&(0x7f0000000140)=[{r9, 0x19f23}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x4c}}, 0x0) 56.739087093s ago: executing program 3 (id=5309): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x0, 0x1, 0xd60, 0x3, 0x9, 0x3, 0x0, 0x7f}) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 55.415527251s ago: executing program 3 (id=5317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x408c4}, 0x20000090) (fail_nth: 6) 53.422256219s ago: executing program 3 (id=5322): socket$igmp(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x10001, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x70000000, 0xfffffffffffffee1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c0180600064000000000080004"], 0x7c}}, 0x0) 53.138374274s ago: executing program 3 (id=5326): r0 = socket$netlink(0x10, 0x3, 0xc) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4) 52.831861592s ago: executing program 3 (id=5330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) unshare(0x6a040000) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r4, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) listen(r0, 0x4) 26.287572249s ago: executing program 4 (id=5395): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001040)=@get={0x1, &(0x7f0000000040)=""/4085, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001100), 0x2) r2 = memfd_create(&(0x7f0000001140)='\xaa\xaa\xaa\xaa\xaa', 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000001180)={r2, 0x1, 0x100000000, 0x1000}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000003300)=@mmap={0xfffffff8, 0x9, 0x4, 0x4, 0x9, {}, {0x5, 0x1, 0x9, 0x8d, 0xa, 0xf, "0600"}, 0x3, 0x1, {}, 0xfffffe85}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r3, 0x4004af77, &(0x7f00000010c0)=0x5) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000001280)={0x14, &(0x7f0000001200)={0x0, 0x10, 0x14, {0x14, 0x23, "ead3e3f424a241ba19b731c45ca81d5afd11"}}, &(0x7f0000001240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001540)={0x44, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001400)={0x20, 0x80, 0x1c, {0x8, 0x3, 0x1af, 0x3, 0x5, 0x7, 0xfffd, 0x1, 0x4, 0x7, 0x8, 0x8000}}, &(0x7f0000001440)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001480)={0x20, 0x83, 0x2}, &(0x7f00000014c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000001500)={0x20, 0x89, 0x2}}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4048aec9, &(0x7f0000000080)={0x6, 0xffffffffffffffff, 0x20000000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x64}}, 0x20000040) socket$nl_xfrm(0x10, 0x3, 0x6) 22.522380817s ago: executing program 4 (id=5401): syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x5}, 0x8) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f0100000000000000000009058103400000000009058202080000000009058302"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 20.881300314s ago: executing program 0 (id=5403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) r1 = syz_socket_connect_nvme_tcp() ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x248, 0x1170, 0x1170, 0x248, 0x1170, 0x360, 0x1398, 0x1398, 0x360, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'syz_tun\x00'}, 0x0, 0x228, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x7, 0x0, 0x0, 0x87}}}, @common=@unspec=@pkttype={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x3, 0x0) mkdir(0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x0, 0x2}]}) write$ppp(r4, &(0x7f0000000900)='\x00', 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x4}, 0x10}, 0x90) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000200)='./file0\x00', r0, 0x4000, r1}, 0x18) fchmodat(r6, &(0x7f0000000000)='./file0\x00', 0xea) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r7, 0x4, 0x0) 16.610375226s ago: executing program 4 (id=5404): set_mempolicy(0x3, &(0x7f0000000040)=0xfffffffffffffffb, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000009500000000000000dfc1d8000000dbb5a29f5b4b9c64ee7e83c8d21c544343f0fa55bb81954226a756"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0xf900c973b32d4046, 0xa, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x0, 0xc8, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) r7 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) sendfile(r7, r4, 0x0, 0x4) sendfile(r4, r7, 0x0, 0x3) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') readv(r8, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000300)=""/41, 0x29}], 0x2) getpgrp(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002980), r1) 15.713088198s ago: executing program 2 (id=5405): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_connect(0x0, 0x3d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd6, 0x95, 0x8d, 0x20, 0x12d1, 0x5922, 0x181d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x98, 0x0, 0x2, 0xff, 0x1, 0x36, 0x0, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x1, 0x9, 0xeb, [@generic={0x7, 0x5, "b17f3e1789"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xeb, 0x9, 0x6}}]}}]}}]}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90c2", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="07dc2b", 0x3}, {0x0}], 0x2}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 15.670890521s ago: executing program 4 (id=5406): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x24054810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="000828bd7000fcdbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="0c00990007000000530000000a001800030303030303000005005300000000000800050008000000080005000900000005005300010000000a00e80008021100000000000ae70025f40794611cf0f65b964c8ecca34a3dc035196f1fcef55f1c00e700504e31354960888acb2cbf8092982c477b6fdb44677e4e6a2bc8f666d9578915935f61e01c00e7005522c207d3e7253c44d3b7303997204b8070dca0eca282c70800178004000500"/184], 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x4040041) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000000a40)=""/102368, 0x18fe0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900020073797a310000ecff07000340000021010900010073797a3000000000"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000deff000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000540004802c0001800e000100696d6d6564696174650000001800028008000140000000010c000280050001004c000000240001"], 0x104}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x3}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0xe, 0x0, @buffer={0x0, 0x2d, &(0x7f0000000380)=""/45}, &(0x7f0000000300)="438dbdaafb299030cdc87acda0b2", 0x0, 0xffffbfff, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 15.450205187s ago: executing program 0 (id=5407): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0xa2ff, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x8, 0x10}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) 14.51219903s ago: executing program 0 (id=5408): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xc8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000003380)=ANY=[@ANYRES32=r1], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000040)=""/183, 0x41000, 0x12, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r6, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000001c0)={r7, r5}) write(r6, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, &(0x7f0000001140)={0x24, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.205247167s ago: executing program 1 (id=5323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000005000)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x2, 0x20000) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0), 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x100, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x100000}, @L2TP_ATTR_OFFSET={0x0, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004846}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0xc}}]}, 0x30}}, 0x0) close(r6) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r9, 0xc08c5114, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 13.490876798s ago: executing program 2 (id=5409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x0, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r3, 0x0, 0x1, 0x4}, 0xfffffffffffffeb6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d000000000006a1", 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08002600851600000a001800000000"], 0x4c}}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)={0x14, r7, 0x1}, 0x14}}, 0x0) 13.154913599s ago: executing program 4 (id=5410): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000001c0), 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc531, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfc, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x30, {0x9, 0x21, 0x3, 0x7f, 0x1, {0x22, 0x42c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x3, 0x95}}}}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000180140005"], 0x38}}, 0x0) setreuid(0x0, r1) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x3, &(0x7f0000000000), 0x4) 12.182677065s ago: executing program 3 (id=5356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000000c0)=0x71, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) syz_io_uring_setup(0x27f3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x4, 0x269}, &(0x7f0000000300), &(0x7f0000000100)) io_uring_setup(0x7058, 0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x9, 0x6, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 11.403569822s ago: executing program 0 (id=5411): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(0x0) 10.647513836s ago: executing program 1 (id=5412): pipe(0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f00000004c0)={0x200001000, &(0x7f0000000180), 0x0, 0x0, {}, &(0x7f0000000740)=""/238, 0xee, &(0x7f0000000100)=""/54, 0x0}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x1a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm], 0x1) creat(&(0x7f0000000400)='./bus\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = memfd_secret(0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000012c0)='system.posix_acl_access\x00', &(0x7f0000001800)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="0400000000000020100000000000e402a6d5000000000000"], 0x2c, 0x0) 9.699370148s ago: executing program 0 (id=5413): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05150300000000000109022400010000000009040000010300060009210000000122070009058103"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), 0x0) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x1e, 0x1e5, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000000)=""/128, 0x4e, 0x80, 0x1}, 0x20) 9.597334267s ago: executing program 2 (id=5414): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000014c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$isdn(0x22, 0x2, 0x26) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000ff000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a"], 0x104}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0x7fffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r4, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200776732000000000000000000000000001400020063616966300000000000000000000000080003000000000014000200697036746e6c3000000000000000000008000100", @ANYBLOB="ee416e31cb9c527a7f1c5a62bc26fce8bda7e1adec3308032ce4c63e0c8738fa6cfc1640d7c347f18133939382c6c089c2251fd9cc8a02d860b1a1150903ff7010c9074e41efd76e60a489f93131ae2b727d9b6b8568b441480ba87902584bc5642578d3e69aed8d1967a0df5633f43b95700c5c9eb1826dc1", @ANYBLOB="140002006970766c616e30000000000000000000c0000380bc0003801c000180040003000c0002006e6c3802323131000800010000000000140001800800010000000000080001f8c3c9652670563680050002000000000004000300080001000000000007000200f7a5000008000100000000000c0002005c2d5c215e282b26100001800c0002006e6c3830323131001c0001800c0002006e6c3830323131000c0002006e6c383032313100100001800c000200252e5c2e2a2d2e001800018008000100000000000c00fd"], 0x43c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x3, 0x10) prctl$PR_CAPBSET_READ(0x17, 0xcf) 9.378331264s ago: executing program 4 (id=5415): socket$kcm(0x2, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x5, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]}, 0x78) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500eaffffff0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000001940)=""/90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r7, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r8) 9.377812781s ago: executing program 1 (id=5416): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/150, 0x96, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x0, 0x1, 0xd60, 0x3, 0x9, 0x3, 0x0, 0x7f}) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 8.267769784s ago: executing program 1 (id=5417): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_connect(0x0, 0x3d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd6, 0x95, 0x8d, 0x20, 0x12d1, 0x5922, 0x181d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x98, 0x0, 0x2, 0xff, 0x1, 0x36, 0x0, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x1, 0x9, 0xeb, [@generic={0x7, 0x5, "b17f3e1789"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xeb, 0x9, 0x6}}]}}]}}]}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90c2", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="07dc2b", 0x3}, {0x0}], 0x2}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 8.159982396s ago: executing program 2 (id=5418): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semop(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, 0x0) ioctl$TCFLSH(r2, 0x40384708, 0x20000000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtaction={0x80, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 6.990347695s ago: executing program 2 (id=5419): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0) write(r1, &(0x7f0000000000)='#', 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0xff02, 0x0, 0x0, 0xffff, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x5f) 6.823913537s ago: executing program 2 (id=5420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8000000) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) unshare(0x6a040000) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0), 0x0) listen(r0, 0x4) 10.405892ms ago: executing program 0 (id=5422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="c5", 0x1, 0x4080, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100), 0x4) 0s ago: executing program 1 (id=5423): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_delete(0x0) kernel console output (not intermixed with test programs): added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2523.152028][T25180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2523.162515][T25180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2523.173280][T25180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2523.183557][T25180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2523.194507][T25180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2523.209583][T25180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2523.224163][T21595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.232365][T20086] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2523.243358][T25327] Invalid ELF section header size [ 2523.250540][T21595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.280086][T25180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.295510][T25180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.308045][T25180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.317016][T25180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2523.395166][T17721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.422057][T17721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2523.453586][T20086] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 2523.462941][T20086] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2523.473660][T20086] usb 1-1: config 0 has no interface number 0 [ 2523.480524][T20086] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2523.491852][T20086] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2523.554099][T20086] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2523.564561][T20086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.572748][T20086] usb 1-1: Product: syz [ 2523.578318][T20086] usb 1-1: Manufacturer: syz [ 2523.618757][T20086] usb 1-1: SerialNumber: syz [ 2523.679830][T20086] usb 1-1: config 0 descriptor?? [ 2523.742931][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2523.891452][T21597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2523.913485][T21597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2524.175674][T21595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2524.202388][T21595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2526.196028][T20089] usb 1-1: USB disconnect, device number 33 [ 2529.364345][T14200] IPVS: starting estimator thread 0... [ 2529.400071][T25368] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 2529.457967][ T29] audit: type=1326 audit(2987.419:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25367 comm="syz.0.5041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efedab79e79 code=0x0 [ 2529.497099][T25369] IPVS: using max 17 ests per chain, 40800 per kthread [ 2529.619265][T25379] Invalid ELF section header size [ 2530.165660][T25391] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2530.172219][T25391] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2530.181669][T14200] IPVS: starting estimator thread 0... [ 2530.203226][T25391] vhci_hcd vhci_hcd.0: Device attached [ 2530.277749][T25393] vhci_hcd: connection closed [ 2530.281393][ T9064] vhci_hcd: stop threads [ 2530.307256][T25395] IPVS: using max 19 ests per chain, 45600 per kthread [ 2530.320387][ T9064] vhci_hcd: release socket [ 2530.339557][ T9064] vhci_hcd: disconnect device [ 2530.397433][T20089] vhci_hcd: vhci_device speed not set [ 2530.593552][T25400] netlink: 'syz.1.5050': attribute type 4 has an invalid length. [ 2531.381816][T25409] netlink: 'syz.1.5050': attribute type 4 has an invalid length. [ 2532.900733][T20097] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2533.107947][T14200] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 2535.374018][T20097] usb 4-1: Using ep0 maxpacket: 32 [ 2541.232214][T20097] usb 4-1: device descriptor read/all, error -110 [ 2541.426060][T14200] usb 1-1: device descriptor read/all, error -110 [ 2541.628388][T20097] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2542.147218][ T29] audit: type=1326 audit(3000.109:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25432 comm="syz.0.5061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efedab79e79 code=0x0 [ 2542.334418][T25437] Invalid ELF section header size [ 2543.150378][ T29] audit: type=1326 audit(3001.119:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25448 comm="syz.0.5066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efedab79e79 code=0x0 [ 2543.158493][T22781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2543.185040][T22781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2543.254788][T22781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2543.269364][T22781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2543.283026][T23925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2543.293006][T22781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2543.307933][T23925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2543.321984][T23925] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2543.329500][T22781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2543.337589][T23925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2543.410067][T22781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2543.910792][T22781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2544.163753][T25459] binder: 25457:25459 ioctl c0306201 0 returned -14 [ 2544.175389][T25459] netlink: 'syz.4.5067': attribute type 1 has an invalid length. [ 2544.183312][T25459] netlink: 'syz.4.5067': attribute type 3 has an invalid length. [ 2544.193843][T25459] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5067'. [ 2545.024846][T17721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2546.069820][T22781] Bluetooth: hci0: command tx timeout [ 2546.078762][T17685] Bluetooth: hci4: command tx timeout [ 2546.119728][T17721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2547.072188][T17721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2547.250832][T17721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2547.627297][T20089] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2547.868904][T20089] usb 2-1: Using ep0 maxpacket: 8 [ 2547.908579][T20089] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2547.941973][T25449] chnl_net:caif_netlink_parms(): no params data found [ 2547.949662][T20089] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2547.980120][T17721] bridge_slave_1: left allmulticast mode [ 2547.987926][T20089] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2548.005137][T17721] bridge_slave_1: left promiscuous mode [ 2548.013068][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 2548.021282][T20089] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2548.033212][T20089] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2548.044272][T17721] bridge_slave_0: left allmulticast mode [ 2548.050112][T17721] bridge_slave_0: left promiscuous mode [ 2548.055778][T20089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.064678][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2548.103048][T20089] hub 2-1:1.0: bad descriptor, ignoring hub [ 2548.133432][T20089] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2548.142262][T17685] Bluetooth: hci4: command tx timeout [ 2548.147849][T17685] Bluetooth: hci0: command tx timeout [ 2548.159977][T20089] cdc_wdm 2-1:1.0: skipping garbage [ 2548.165370][T20089] cdc_wdm 2-1:1.0: skipping garbage [ 2548.173052][T20089] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2548.179946][T20089] cdc_wdm 2-1:1.0: Unknown control protocol [ 2548.330925][T25486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2548.350777][T25486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2549.027666][T20089] usb 2-1: USB disconnect, device number 24 [ 2549.320196][T25502] binder: 25500:25502 ioctl c0306201 0 returned -14 [ 2549.333526][T25502] netlink: 'syz.1.5077': attribute type 1 has an invalid length. [ 2549.341517][T25502] netlink: 'syz.1.5077': attribute type 3 has an invalid length. [ 2549.349465][T25502] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5077'. [ 2550.217612][T17685] Bluetooth: hci0: command tx timeout [ 2550.223097][T22781] Bluetooth: hci4: command tx timeout [ 2550.583457][T17721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2550.624721][T17721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2550.634263][T20097] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 2550.674763][T17721] bond0 (unregistering): Released all slaves [ 2550.876651][T25445] chnl_net:caif_netlink_parms(): no params data found [ 2550.958831][T20097] usb 2-1: not running at top speed; connect to a high speed hub [ 2550.972255][T20097] usb 2-1: config 1 has an invalid interface number: 35 but max is 0 [ 2550.981853][T20097] usb 2-1: config 1 has no interface number 0 [ 2550.988288][T20097] usb 2-1: config 1 interface 35 has no altsetting 0 [ 2551.006451][T20097] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bf.ea [ 2551.020708][T20097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2551.029257][T20097] usb 2-1: Product: у [ 2551.033861][T20097] usb 2-1: Manufacturer: 쓪 [ 2551.067465][T20097] usb 2-1: SerialNumber: 擥㌑娝覦盐螝ᴳ蟦钄纝邛ᗢ꭯綡왎扚쒣帺蘱 [ 2551.342161][T20097] usb_ehset_test 2-1:1.35: probe with driver usb_ehset_test failed with error -32 [ 2551.362127][T20097] usb 2-1: USB disconnect, device number 25 [ 2552.347481][T17685] Bluetooth: hci0: command tx timeout [ 2552.353561][T17685] Bluetooth: hci4: command tx timeout [ 2552.749015][T25445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2552.785024][T25445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2552.813872][T25445] bridge_slave_0: entered allmulticast mode [ 2552.843125][T25445] bridge_slave_0: entered promiscuous mode [ 2552.868938][T25445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2552.893544][T25445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.353993][T25530] erofs: Unknown parameter '/dev/vga_arbiter' [ 2553.544430][T25445] bridge_slave_1: entered allmulticast mode [ 2553.599098][T25445] bridge_slave_1: entered promiscuous mode [ 2553.666857][T17721] hsr_slave_0: left promiscuous mode [ 2553.867767][T17721] hsr_slave_1: left promiscuous mode [ 2553.874872][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2554.387147][T17721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2554.463993][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2554.900015][T17721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2554.966989][T20089] IPVS: starting estimator thread 0... [ 2554.978710][T17721] veth1_macvtap: left promiscuous mode [ 2554.984347][T17721] veth0_macvtap: left promiscuous mode [ 2555.004390][T17721] veth1_vlan: left promiscuous mode [ 2555.071303][T25542] binder: 25539:25542 ioctl c0306201 0 returned -14 [ 2555.085026][T25542] netlink: 'syz.0.5087': attribute type 1 has an invalid length. [ 2555.093010][T25542] netlink: 'syz.0.5087': attribute type 3 has an invalid length. [ 2555.101523][T25542] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5087'. [ 2555.817799][T17721] veth0_vlan: left promiscuous mode [ 2555.877292][T25541] IPVS: using max 16 ests per chain, 38400 per kthread [ 2556.546356][ T29] audit: type=1400 audit(3014.509:4398): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25544 comm="syz.0.5088" daddr=fc02:: [ 2557.087793][ T29] audit: type=1400 audit(3015.049:4399): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25549 comm="syz.4.5090" daddr=fe80::bb dest=20000 [ 2559.166082][T25570] rdma_rxe: rxe_newlink: failed to add lo [ 2559.482962][ T29] audit: type=1400 audit(3017.409:4400): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25562 comm="syz.1.5093" daddr=fc02:: [ 2560.614382][T17721] team0 (unregistering): Port device team_slave_1 removed [ 2560.729564][T17721] team0 (unregistering): Port device team_slave_0 removed [ 2560.977150][T25579] netlink: 'syz.4.5096': attribute type 1 has an invalid length. [ 2560.989674][T25579] netlink: 'syz.4.5096': attribute type 3 has an invalid length. [ 2560.999119][T25579] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5096'. [ 2562.272126][T25449] bridge0: port 1(bridge_slave_0) entered blocking state [ 2562.279668][T25449] bridge0: port 1(bridge_slave_0) entered disabled state [ 2562.286895][T25449] bridge_slave_0: entered allmulticast mode [ 2562.295385][T25449] bridge_slave_0: entered promiscuous mode [ 2562.304707][T25449] bridge0: port 2(bridge_slave_1) entered blocking state [ 2562.314644][T25449] bridge0: port 2(bridge_slave_1) entered disabled state [ 2562.322190][T25449] bridge_slave_1: entered allmulticast mode [ 2562.329996][T25449] bridge_slave_1: entered promiscuous mode [ 2562.359430][T25553] lo speed is unknown, defaulting to 1000 [ 2562.371464][T25553] lo speed is unknown, defaulting to 1000 [ 2562.490703][T25445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2562.694262][T25553] lo speed is unknown, defaulting to 1000 [ 2562.710327][T25449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2562.751311][T25445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2562.940809][T25445] team0: Port device team_slave_0 added [ 2562.959653][T25449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2563.213705][T25445] team0: Port device team_slave_1 added [ 2563.269146][T25553] infiniband syz0: set active [ 2563.282108][T25553] infiniband syz0: added lo [ 2563.307994][T25553] syz0: rxe_create_cq: returned err = -12 [ 2563.313876][T25553] infiniband syz0: Couldn't create ib_mad CQ [ 2563.355049][T25449] team0: Port device team_slave_0 added [ 2563.372357][T25553] infiniband syz0: Couldn't open port 1 [ 2563.434606][T25553] RDS/IB: syz0: added [ 2563.444545][T25553] smc: adding ib device syz0 with port count 1 [ 2563.458684][T25553] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 2563.466455][T20095] lo speed is unknown, defaulting to 1000 [ 2563.495729][T25445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2563.503093][T25445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2563.529924][T25445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2563.554566][T25449] team0: Port device team_slave_1 added [ 2563.615735][T20095] lo speed is unknown, defaulting to 1000 [ 2563.623893][T25553] lo speed is unknown, defaulting to 1000 [ 2563.639583][T25445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2563.657454][T25445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2563.696636][T25445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2564.015587][T25445] hsr_slave_0: entered promiscuous mode [ 2564.025031][T25445] hsr_slave_1: entered promiscuous mode [ 2564.035009][T25449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2564.045606][T25449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2564.170257][T25449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2564.768884][T25449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2564.855124][T25449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2564.967235][T25449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2564.988136][T25553] lo speed is unknown, defaulting to 1000 [ 2567.070650][T25449] hsr_slave_0: entered promiscuous mode [ 2567.248055][T25449] hsr_slave_1: entered promiscuous mode [ 2567.977881][T25449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2568.016140][T25449] Cannot create hsr debugfs directory [ 2569.147563][T17721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2569.686065][T25553] lo speed is unknown, defaulting to 1000 [ 2569.748140][T17685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2569.760555][T17685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2569.768970][T17685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2570.260069][T17685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2570.315776][T17685] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2570.325717][T17685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2570.584539][T17721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2570.615034][T25640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5113'. [ 2570.662098][T25553] lo speed is unknown, defaulting to 1000 [ 2570.745939][T25640] veth1_macvtap: left promiscuous mode [ 2570.979959][T17721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2571.066242][T25553] lo speed is unknown, defaulting to 1000 [ 2571.178789][T17721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2571.968869][T17721] bridge_slave_1: left allmulticast mode [ 2572.006995][T17721] bridge_slave_1: left promiscuous mode [ 2572.457391][T22781] Bluetooth: hci5: command tx timeout [ 2572.511479][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 2572.540528][T17721] bridge_slave_0: left allmulticast mode [ 2572.546240][T17721] bridge_slave_0: left promiscuous mode [ 2572.553539][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2573.212689][T25656] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2573.221852][T25656] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2574.031336][T17721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2574.059158][T17721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2574.079763][T17721] bond0 (unregistering): Released all slaves [ 2574.105743][T25631] lo speed is unknown, defaulting to 1000 [ 2574.539510][T22781] Bluetooth: hci5: command tx timeout [ 2575.953672][ T29] audit: type=1400 audit(3033.919:4401): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25664 comm="syz.1.5120" daddr=fe80::bb dest=20000 [ 2576.219188][T25553] lo speed is unknown, defaulting to 1000 [ 2576.255926][T25673] IPv6: Can't replace route, no match found [ 2576.620568][T22781] Bluetooth: hci5: command tx timeout [ 2577.762674][T25631] chnl_net:caif_netlink_parms(): no params data found [ 2577.880241][T17721] hsr_slave_0: left promiscuous mode [ 2577.896068][T17721] hsr_slave_1: left promiscuous mode [ 2577.907624][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2577.993977][T17721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2578.046251][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2578.079053][T17721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2578.169977][T17721] veth1_macvtap: left promiscuous mode [ 2578.190837][T17721] veth0_macvtap: left promiscuous mode [ 2578.196908][T17721] veth1_vlan: left promiscuous mode [ 2578.215466][T17721] veth0_vlan: left promiscuous mode [ 2578.268370][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.275946][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.283673][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.295717][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.303512][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.332419][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.340376][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.348302][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.355909][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.363557][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.383704][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.396985][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.405074][T20086] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2578.425931][T20086] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2578.697395][T22781] Bluetooth: hci5: command tx timeout [ 2580.716635][T17721] team0 (unregistering): Port device team_slave_1 removed [ 2580.789917][T17721] team0 (unregistering): Port device team_slave_0 removed [ 2581.433677][T25689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5126'. [ 2581.452109][T25689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5126'. [ 2581.765734][T25445] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2582.209103][T25445] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2582.511016][T25445] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2582.573055][T25445] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2582.637651][T25631] bridge0: port 1(bridge_slave_0) entered blocking state [ 2582.645082][T25631] bridge0: port 1(bridge_slave_0) entered disabled state [ 2582.653863][T25631] bridge_slave_0: entered allmulticast mode [ 2582.662772][T25631] bridge_slave_0: entered promiscuous mode [ 2582.672606][T25631] bridge0: port 2(bridge_slave_1) entered blocking state [ 2582.704409][T25631] bridge0: port 2(bridge_slave_1) entered disabled state [ 2582.712023][T25631] bridge_slave_1: entered allmulticast mode [ 2582.737041][T25631] bridge_slave_1: entered promiscuous mode [ 2583.050243][T25631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2583.450966][T25631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2584.070282][T25449] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2584.093094][T25449] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2584.150890][T25449] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2584.216508][T25631] team0: Port device team_slave_0 added [ 2584.238961][T25449] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2584.255672][T17721] IPVS: stop unused estimator thread 0... [ 2584.276309][T25631] team0: Port device team_slave_1 added [ 2586.084276][T25732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5137'. [ 2586.097589][T25732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5137'. [ 2586.120018][T25631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2586.135948][T25631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2586.216183][T25631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2586.243674][T25631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2586.254394][T25631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2586.285755][T25631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2588.104017][T17721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2588.201801][T25743] lo speed is unknown, defaulting to 1000 [ 2588.310573][T17721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2588.401951][T25631] hsr_slave_0: entered promiscuous mode [ 2588.430980][T25631] hsr_slave_1: entered promiscuous mode [ 2588.447699][T25631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2588.476848][T25631] Cannot create hsr debugfs directory [ 2588.520881][T25445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2588.555429][T17721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2588.595092][T25445] 8021q: adding VLAN 0 to HW filter on device team0 [ 2588.669571][T21608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.676759][T21608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2588.736925][T17721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2588.769818][T21608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2588.777015][T21608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2589.956747][T17721] bridge_slave_1: left allmulticast mode [ 2589.973076][T17721] bridge_slave_1: left promiscuous mode [ 2589.979381][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.989691][T17721] bridge_slave_0: left allmulticast mode [ 2589.995381][T17721] bridge_slave_0: left promiscuous mode [ 2590.001411][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2590.524208][T17721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2590.535818][T17721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2590.547969][T17721] bond0 (unregistering): Released all slaves [ 2590.602635][T25449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2590.634161][T25449] 8021q: adding VLAN 0 to HW filter on device team0 [ 2590.856993][T21605] bridge0: port 1(bridge_slave_0) entered blocking state [ 2590.864291][T21605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2590.997863][T21603] bridge0: port 2(bridge_slave_1) entered blocking state [ 2591.005013][T21603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2591.293133][T25445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2591.455206][T17721] hsr_slave_0: left promiscuous mode [ 2591.464721][T17721] hsr_slave_1: left promiscuous mode [ 2591.473604][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2591.490023][T17721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2591.518446][T17721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2591.528525][T17721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2591.769715][T17721] veth1_macvtap: left promiscuous mode [ 2591.808493][T17721] veth0_macvtap: left promiscuous mode [ 2591.812679][T25774] rdma_rxe: rxe_newlink: failed to add lo [ 2591.814412][T17721] veth1_vlan: left promiscuous mode [ 2591.844196][T17721] veth0_vlan: left promiscuous mode [ 2592.136190][ T29] audit: type=1400 audit(3049.959:4402): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25769 comm="syz.4.5145" daddr=fc02:: [ 2592.649707][T17721] infiniband syz0: set down [ 2593.165342][T17721] team0 (unregistering): Port device team_slave_1 removed [ 2593.233138][T17721] team0 (unregistering): Port device team_slave_0 removed [ 2593.824612][T21593] smc: removing ib device syz0 [ 2593.998944][T25779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5146'. [ 2594.029814][T25779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5146'. [ 2594.055451][T20086] lo speed is unknown, defaulting to 1000 [ 2594.181700][T25631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2594.268318][T25631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2594.314137][T25445] veth0_vlan: entered promiscuous mode [ 2594.363893][T25631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2594.478375][T25631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2594.545351][T25786] IPv6: Can't replace route, no match found [ 2594.578758][T25445] veth1_vlan: entered promiscuous mode [ 2594.711016][T25449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2595.939253][T25445] veth0_macvtap: entered promiscuous mode [ 2596.014967][T25449] veth0_vlan: entered promiscuous mode [ 2596.045337][T25445] veth1_macvtap: entered promiscuous mode [ 2596.067724][T25449] veth1_vlan: entered promiscuous mode [ 2596.205225][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2596.228197][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2596.244069][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2596.254850][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2596.271372][T25445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2596.314872][T25449] veth0_macvtap: entered promiscuous mode [ 2596.371157][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2596.391248][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2596.405524][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2596.419587][ T5274] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2596.433810][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2596.447820][T25445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2596.470311][T25449] veth1_macvtap: entered promiscuous mode [ 2596.762449][T25445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.766661][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2596.773040][T25445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2596.887313][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2598.027298][ T5274] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 2599.591236][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.630421][T25800] input: syz1 as /devices/virtual/input/input123 [ 2600.685270][T25445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.193994][T25445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.302348][T25805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5149'. [ 2601.343445][T25631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2601.375436][T25449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2601.420939][T25449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.463441][T25449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2601.485100][T25449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.496976][T25449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2601.519466][T25449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.540690][T25449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2601.679382][T25631] 8021q: adding VLAN 0 to HW filter on device team0 [ 2601.728192][T25449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.788723][T25449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.963130][ T5274] usb 2-1: config 0 descriptor?? [ 2601.979917][T25449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.990651][T25449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.997514][ T5274] usb 2-1: can't set config #0, error -71 [ 2602.000525][T25449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2602.020152][T25449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2602.289280][ T5274] usb 2-1: USB disconnect, device number 26 [ 2602.291212][T25449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2602.837696][T21593] bridge0: port 1(bridge_slave_0) entered blocking state [ 2602.844938][T21593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2602.887694][T21593] bridge0: port 2(bridge_slave_1) entered blocking state [ 2602.894945][T21593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2603.579503][T17685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2603.813582][T17685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2603.822578][T17685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2603.831827][T17685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2603.844805][T17685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2603.847041][T23925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2603.854027][T17685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2603.919390][T23925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2604.373464][T17685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2604.384058][T17685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2604.417262][T17685] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2604.424701][T17685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2604.741488][T21590] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2605.682222][T21590] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2605.762273][T25631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2605.903336][T21590] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2606.000621][T25848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5160'. [ 2606.062592][T21590] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2606.226957][T25856] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5162'. [ 2606.366673][T25824] chnl_net:caif_netlink_parms(): no params data found [ 2606.377609][T17685] Bluetooth: hci0: command tx timeout [ 2606.633038][T17685] Bluetooth: hci1: command tx timeout [ 2606.645795][T25631] veth0_vlan: entered promiscuous mode [ 2607.890038][T25821] chnl_net:caif_netlink_parms(): no params data found [ 2608.078567][T25631] veth1_vlan: entered promiscuous mode [ 2608.188247][T21590] bridge_slave_1: left allmulticast mode [ 2608.197516][T21590] bridge_slave_1: left promiscuous mode [ 2608.204766][T21590] bridge0: port 2(bridge_slave_1) entered disabled state [ 2608.215351][T21590] bridge_slave_0: left allmulticast mode [ 2608.221390][T21590] bridge_slave_0: left promiscuous mode [ 2608.227258][T21590] bridge0: port 1(bridge_slave_0) entered disabled state [ 2608.462746][T17685] Bluetooth: hci0: command tx timeout [ 2608.706301][T21590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2608.708377][T17685] Bluetooth: hci1: command tx timeout [ 2608.729567][T21590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2608.745231][T21590] bond0 (unregistering): Released all slaves [ 2608.773462][T25824] bridge0: port 1(bridge_slave_0) entered blocking state [ 2608.780899][T25824] bridge0: port 1(bridge_slave_0) entered disabled state [ 2608.796523][T25824] bridge_slave_0: entered allmulticast mode [ 2608.805756][T25824] bridge_slave_0: entered promiscuous mode [ 2608.908101][T25824] bridge0: port 2(bridge_slave_1) entered blocking state [ 2608.917937][T25824] bridge0: port 2(bridge_slave_1) entered disabled state [ 2608.925188][T25824] bridge_slave_1: entered allmulticast mode [ 2608.942321][T25824] bridge_slave_1: entered promiscuous mode [ 2609.023942][T21590] hsr_slave_0: left promiscuous mode [ 2609.032330][T21590] hsr_slave_1: left promiscuous mode [ 2609.038821][T21590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2609.046491][T21590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2609.548965][T21590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2609.927376][T21590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2610.003791][T21590] veth1_macvtap: left promiscuous mode [ 2610.017266][T21590] veth0_macvtap: left promiscuous mode [ 2610.023006][T21590] veth1_vlan: left promiscuous mode [ 2610.039222][T21590] veth0_vlan: left promiscuous mode [ 2610.547697][T17685] Bluetooth: hci0: command tx timeout [ 2610.684019][T21590] team0 (unregistering): Port device team_slave_1 removed [ 2610.753575][T21590] team0 (unregistering): Port device team_slave_0 removed [ 2610.794933][T17685] Bluetooth: hci1: command tx timeout [ 2611.486141][T25821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2611.502727][T25821] bridge0: port 1(bridge_slave_0) entered disabled state [ 2611.510453][T25821] bridge_slave_0: entered allmulticast mode [ 2611.521425][T25821] bridge_slave_0: entered promiscuous mode [ 2611.588880][T25631] veth0_macvtap: entered promiscuous mode [ 2611.614729][T25824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2611.640950][T25824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2611.669634][T25821] bridge0: port 2(bridge_slave_1) entered blocking state [ 2611.676967][T25821] bridge0: port 2(bridge_slave_1) entered disabled state [ 2611.720148][T25821] bridge_slave_1: entered allmulticast mode [ 2611.741687][T25821] bridge_slave_1: entered promiscuous mode [ 2611.818840][T25821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2611.881412][T25895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5169'. [ 2611.940310][T25631] veth1_macvtap: entered promiscuous mode [ 2611.970802][T25821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2612.052616][ T29] audit: type=1400 audit(3070.019:4403): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25899 comm="syz.1.5171" daddr=fe80::bb dest=20000 [ 2612.204794][T25824] team0: Port device team_slave_0 added [ 2612.219865][T25824] team0: Port device team_slave_1 added [ 2612.243035][T25821] team0: Port device team_slave_0 added [ 2612.313435][T25821] team0: Port device team_slave_1 added [ 2612.356241][T25824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2612.364414][T25824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.400048][T25824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2612.429945][T25631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.441774][T25631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.451930][T25631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.462751][T25631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.473048][T25631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2612.483591][T25631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.495557][T25631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2612.504255][T25824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2612.512209][T25824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.540244][T25824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2612.552500][T25821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2612.559879][T25821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.585912][T25821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2612.600635][T25821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2612.607770][T25821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.634391][T17685] Bluetooth: hci0: command tx timeout [ 2612.640084][T25821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2612.688592][T25631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.700837][T25631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.710798][T25631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.721631][T25631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.731595][T25631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2612.755303][T25631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2612.769926][T25631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2612.865819][T17685] Bluetooth: hci1: command tx timeout [ 2612.900325][T25821] hsr_slave_0: entered promiscuous mode [ 2612.915057][T25821] hsr_slave_1: entered promiscuous mode [ 2612.924696][T25631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.942412][T25631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.953516][T25631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.968975][T25631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2613.016603][T25824] hsr_slave_0: entered promiscuous mode [ 2613.039627][T25824] hsr_slave_1: entered promiscuous mode [ 2613.046489][T25824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2613.057124][T25824] Cannot create hsr debugfs directory [ 2613.659210][T21593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2613.678537][T21593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2613.892471][ T9649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2613.935324][ T9649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2614.174677][T25913] netlink: 'syz.0.5105': attribute type 1 has an invalid length. [ 2614.182684][T25913] netlink: 'syz.0.5105': attribute type 3 has an invalid length. [ 2614.190771][T25913] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5105'. [ 2615.709494][T21601] bridge_slave_1: left allmulticast mode [ 2615.988844][T21601] bridge_slave_1: left promiscuous mode [ 2615.994796][T21601] bridge0: port 2(bridge_slave_1) entered disabled state [ 2616.119012][T21601] bridge_slave_0: left allmulticast mode [ 2616.124783][T21601] bridge_slave_0: left promiscuous mode [ 2616.139867][T21601] bridge0: port 1(bridge_slave_0) entered disabled state [ 2616.691611][T25928] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2618.801978][T23925] Bluetooth: hci3: command 0x0406 tx timeout [ 2618.808125][T23925] Bluetooth: hci2: command 0x0406 tx timeout [ 2619.365591][T21601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2619.385966][T21601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2619.404241][T21601] bond0 (unregistering): Released all slaves [ 2619.449120][T25935] IPv6: Can't replace route, no match found [ 2619.750765][ T29] audit: type=1400 audit(3077.719:4404): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25936 comm="syz.0.5181" daddr=fe80::bb dest=20000 [ 2620.477309][T21601] hsr_slave_0: left promiscuous mode [ 2620.522383][T21601] hsr_slave_1: left promiscuous mode [ 2620.581178][T21601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2620.603774][T21601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2620.627942][T21601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2620.649839][T21601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2620.687700][T21601] veth1_macvtap: left promiscuous mode [ 2620.693806][T21601] veth0_macvtap: left promiscuous mode [ 2620.707611][T21601] veth1_vlan: left promiscuous mode [ 2620.758900][T21601] veth0_vlan: left promiscuous mode [ 2620.775607][T25946] netlink: 'syz.0.5183': attribute type 1 has an invalid length. [ 2620.785101][T25946] netlink: 'syz.0.5183': attribute type 3 has an invalid length. [ 2620.793034][T25946] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5183'. [ 2622.661954][T21601] team0 (unregistering): Port device team_slave_1 removed [ 2622.773331][T21601] team0 (unregistering): Port device team_slave_0 removed [ 2623.477599][T25426] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2623.656047][T25426] usb 2-1: device descriptor read/64, error -71 [ 2623.967501][T25426] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2624.127277][T25426] usb 2-1: device descriptor read/64, error -71 [ 2624.189317][T25956] vlan2: entered promiscuous mode [ 2624.194404][T25956] vlan2: entered allmulticast mode [ 2624.248864][T25426] usb usb2-port1: attempt power cycle [ 2624.336599][ T29] audit: type=1400 audit(3082.299:4405): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=25966 comm="syz.4.5189" daddr=224.0.0.2 [ 2624.375664][T25968] binder: 25966:25968 unknown command 1969368878 [ 2624.406066][T25968] binder: 25966:25968 ioctl c0306201 200001c0 returned -22 [ 2624.727277][T25426] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2624.863076][T25426] usb 2-1: device descriptor read/8, error -71 [ 2625.721136][ T29] audit: type=1400 audit(3083.549:4406): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25972 comm="syz.4.5191" daddr=fe80::bb dest=20000 [ 2625.755431][T25824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2626.186203][T25824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2626.255920][T25824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2626.326746][T25980] netlink: 'syz.0.5192': attribute type 1 has an invalid length. [ 2626.334801][T25980] netlink: 'syz.0.5192': attribute type 3 has an invalid length. [ 2626.342823][T25980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5192'. [ 2627.064409][T25824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2627.214065][T25984] IPv6: Can't replace route, no match found [ 2627.328578][T25821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2627.347881][T25821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2627.562354][T25426] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 2627.588016][T25821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2627.611756][T25821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2627.807798][T25426] usb 2-1: device descriptor read/64, error -71 [ 2627.824307][ T29] audit: type=1400 audit(3085.649:4407): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25985 comm="syz.0.5195" daddr=fc02:: [ 2628.143688][T25990] lo speed is unknown, defaulting to 1000 [ 2628.160654][T25426] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 2628.194030][T25990] lo speed is unknown, defaulting to 1000 [ 2628.218450][T25990] lo speed is unknown, defaulting to 1000 [ 2628.360734][T25426] usb 2-1: device descriptor read/64, error -71 [ 2628.491084][T25824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2628.499113][T25426] usb usb2-port1: attempt power cycle [ 2628.652872][T25824] 8021q: adding VLAN 0 to HW filter on device team0 [ 2628.689474][T21608] bridge0: port 1(bridge_slave_0) entered blocking state [ 2628.696642][T21608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2628.741769][T25821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2628.784352][T25990] infiniband syz0: set active [ 2628.789509][T20095] lo speed is unknown, defaulting to 1000 [ 2628.807288][T25990] infiniband syz0: added lo [ 2628.813825][T25990] syz0: rxe_create_cq: returned err = -12 [ 2628.824770][T25990] infiniband syz0: Couldn't create ib_mad CQ [ 2628.833876][T25990] infiniband syz0: Couldn't open port 1 [ 2628.839203][T21608] bridge0: port 2(bridge_slave_1) entered blocking state [ 2628.846611][T21608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2628.894391][T25990] RDS/IB: syz0: added [ 2628.903090][T25821] 8021q: adding VLAN 0 to HW filter on device team0 [ 2628.907893][T25990] smc: adding ib device syz0 with port count 1 [ 2628.918201][T25990] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 2628.926491][T20089] lo speed is unknown, defaulting to 1000 [ 2628.935361][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2628.942530][ T9649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2628.955955][T25426] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 2628.982686][T25990] lo speed is unknown, defaulting to 1000 [ 2629.001021][T25426] usb 2-1: device descriptor read/8, error -71 [ 2629.040949][T21605] bridge0: port 2(bridge_slave_1) entered blocking state [ 2629.048161][T21605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2629.279317][T25426] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 2629.378370][T25426] usb 2-1: device descriptor read/8, error -71 [ 2629.466830][T25990] lo speed is unknown, defaulting to 1000 [ 2629.528008][T25426] usb usb2-port1: unable to enumerate USB device [ 2630.085175][ T29] audit: type=1400 audit(3088.009:4408): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=25996 comm="syz.4.5196" daddr=fc02:: [ 2630.564373][T25824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2630.614528][T25821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2630.762956][T25990] lo speed is unknown, defaulting to 1000 [ 2630.782861][T25824] veth0_vlan: entered promiscuous mode [ 2630.853732][T25824] veth1_vlan: entered promiscuous mode [ 2630.890951][T25821] veth0_vlan: entered promiscuous mode [ 2630.936802][T25821] veth1_vlan: entered promiscuous mode [ 2631.182700][T25824] veth0_macvtap: entered promiscuous mode [ 2631.230467][T25824] veth1_macvtap: entered promiscuous mode [ 2631.489302][T25824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2631.501602][T25824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2631.512007][T25824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2631.523220][T25824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2631.533666][T25824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2631.545359][T25824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2631.930599][T25824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2631.983705][T25824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2632.004353][T25824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2632.021090][T25824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2632.033219][T25824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2632.043405][T25824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2632.062112][T25824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2632.113941][T25824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2632.141785][T25824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2632.151632][T25824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2632.170282][T25824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2632.180408][T25824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2632.921912][T25821] veth0_macvtap: entered promiscuous mode [ 2632.954876][T25990] lo speed is unknown, defaulting to 1000 [ 2632.967873][T25426] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2633.000630][T25821] veth1_macvtap: entered promiscuous mode [ 2633.176629][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2633.210860][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.217866][T25426] usb 2-1: Using ep0 maxpacket: 32 [ 2633.220954][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2633.242264][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.254556][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2633.265570][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.267761][T25426] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 2633.282473][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2633.294722][T25426] usb 2-1: config 0 has no interface number 0 [ 2633.300933][T25426] usb 2-1: config 0 interface 152 altsetting 0 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 2633.306020][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.312848][T25426] usb 2-1: config 0 interface 152 altsetting 0 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 2633.331033][T25821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2633.334366][T25426] usb 2-1: config 0 interface 152 altsetting 0 endpoint 0x81 has invalid maxpacket 1854, setting to 1024 [ 2633.357928][T25426] usb 2-1: config 0 interface 152 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2633.375893][T25426] usb 2-1: New USB device found, idVendor=12d1, idProduct=5922, bcdDevice=18.1d [ 2633.382389][T25990] lo speed is unknown, defaulting to 1000 [ 2633.396038][T25426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2633.399706][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2633.404581][T25426] usb 2-1: Product: syz [ 2633.427787][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.441470][T25426] usb 2-1: Manufacturer: syz [ 2633.446082][T25426] usb 2-1: SerialNumber: syz [ 2633.451632][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2633.469268][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.480927][T25426] usb 2-1: config 0 descriptor?? [ 2633.486970][T26018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2633.501330][T25426] option 2-1:0.152: GSM modem (1-port) converter detected [ 2633.517355][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2633.539209][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.549367][T25821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2633.568023][T25821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2633.584533][T25821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2633.608253][T17721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2633.624315][T17721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2633.646581][T25821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2633.661971][T25821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2633.677437][T25821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2633.690596][T25821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2633.754486][T17721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2633.769794][T17721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2633.925072][T17721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2633.965779][T17721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2634.044040][T26003] lo speed is unknown, defaulting to 1000 [ 2634.107396][T21605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2634.144211][T21605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2634.452753][ T29] audit: type=1400 audit(3092.369:4409): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26025 comm="syz.0.5201" daddr=fe80::bb dest=20000 [ 2635.001124][T14200] usb 2-1: USB disconnect, device number 35 [ 2635.010738][T14200] option 2-1:0.152: device disconnected [ 2635.229982][T26001] rdma_rxe: rxe_newlink: failed to add lo [ 2637.989279][T26040] netlink: 'syz.0.5203': attribute type 1 has an invalid length. [ 2640.087245][T26040] netlink: 'syz.0.5203': attribute type 3 has an invalid length. [ 2640.095207][T26040] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5203'. [ 2641.428000][T26039] can: request_module (can-proto-4) failed. [ 2642.797293][ T29] audit: type=1326 audit(3100.719:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26052 comm="syz.0.5209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f878d379e79 code=0x0 [ 2642.989707][T26059] Invalid ELF section header size [ 2643.082552][T26061] rdma_rxe: rxe_newlink: failed to add lo [ 2643.747354][ T29] audit: type=1400 audit(3101.259:4411): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26056 comm="syz.3.5210" daddr=fc02:: [ 2643.956986][T26061] lo speed is unknown, defaulting to 1000 [ 2644.015858][T17685] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 2644.207262][ T5274] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2644.368508][T22781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2644.416688][T22781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2644.431068][T22781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2644.441341][T22781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2644.449929][T22781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2644.457819][T22781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2644.548028][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2644.637840][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2644.677974][T26069] lo speed is unknown, defaulting to 1000 [ 2644.712262][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2644.763862][ T5274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2645.839498][ T29] audit: type=1400 audit(3103.789:4412): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26073 comm="syz.0.5214" daddr=fe80::bb dest=20000 [ 2645.969182][ T5274] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2646.057733][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2646.073195][ T5274] usb 3-1: config 0 descriptor?? [ 2646.081502][T16051] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2646.108896][T26065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2646.275698][T21590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2646.301875][T16051] usb 2-1: Using ep0 maxpacket: 32 [ 2646.544235][T22781] Bluetooth: hci4: command tx timeout [ 2646.563447][T16051] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 2646.580395][T16051] usb 2-1: config 0 has no interface number 0 [ 2646.591524][T16051] usb 2-1: config 0 interface 152 altsetting 0 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 2647.226517][T16051] usb 2-1: config 0 interface 152 altsetting 0 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 2647.247117][T16051] usb 2-1: config 0 interface 152 altsetting 0 endpoint 0x81 has invalid maxpacket 1854, setting to 1024 [ 2647.260534][T16051] usb 2-1: config 0 interface 152 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2647.279848][ T5274] plantronics 0003:047F:FFFF.0041: unknown main item tag 0xd [ 2647.312693][ T5274] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2647.343879][T16051] usb 2-1: New USB device found, idVendor=12d1, idProduct=5922, bcdDevice=18.1d [ 2647.363351][ T5274] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2647.371639][T16051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.388045][ T5274] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 2647.396043][T16051] usb 2-1: Product: syz [ 2647.410589][T16051] usb 2-1: Manufacturer: syz [ 2647.434944][T16051] usb 2-1: SerialNumber: syz [ 2647.444903][T21590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2647.455402][ T5274] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2647.459900][T16051] usb 2-1: config 0 descriptor?? [ 2647.494555][T26077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2647.556732][T16051] option 2-1:0.152: GSM modem (1-port) converter detected [ 2647.592232][T26087] bond0: entered promiscuous mode [ 2647.598822][T26087] bond_slave_0: entered promiscuous mode [ 2647.603929][T16051] usb 3-1: USB disconnect, device number 113 [ 2647.604847][T26087] bond_slave_1: entered promiscuous mode [ 2647.620909][T26087] bond0: left promiscuous mode [ 2647.625818][T26087] bond_slave_0: left promiscuous mode [ 2647.632177][T26087] bond_slave_1: left promiscuous mode [ 2647.673663][T21590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2647.721051][ T5274] usb 2-1: USB disconnect, device number 36 [ 2647.731512][ T5274] option 2-1:0.152: device disconnected [ 2648.617325][T22781] Bluetooth: hci4: command tx timeout [ 2648.659988][T21590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2648.947533][ T29] audit: type=1400 audit(3106.909:4413): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26094 comm="syz.0.5220" daddr=ff02::1 [ 2649.450305][T26099] overlayfs: failed to resolve './file1': -2 [ 2650.416100][T21590] bridge_slave_1: left allmulticast mode [ 2650.444708][T21590] bridge_slave_1: left promiscuous mode [ 2650.471539][T21590] bridge0: port 2(bridge_slave_1) entered disabled state [ 2650.519078][T21590] bridge_slave_0: left allmulticast mode [ 2650.542235][T21590] bridge_slave_0: left promiscuous mode [ 2650.557804][T21590] bridge0: port 1(bridge_slave_0) entered disabled state [ 2650.704887][ T29] audit: type=1326 audit(3108.669:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26103 comm="syz.2.5221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf73779e79 code=0x0 [ 2650.727246][T22781] Bluetooth: hci4: command tx timeout [ 2650.909355][T26115] Invalid ELF section header size [ 2651.165470][ T29] audit: type=1400 audit(3109.069:4415): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26112 comm="syz.1.5224" daddr=fe80::bb dest=20000 [ 2652.253601][T21590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2652.275840][T21590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2652.298072][T21590] bond0 (unregistering): Released all slaves [ 2652.446670][T26113] ip6tnl1: entered allmulticast mode [ 2652.512657][T26069] chnl_net:caif_netlink_parms(): no params data found [ 2652.777285][T22781] Bluetooth: hci4: command tx timeout [ 2654.199407][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2655.475796][T26154] rdma_rxe: rxe_newlink: failed to add lo [ 2655.536703][ T29] audit: type=1400 audit(3113.499:4416): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26147 comm="syz.3.5231" daddr=fc02:: [ 2656.186672][T26160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5232'. [ 2656.197496][T26160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5232'. [ 2656.215753][T26154] lo speed is unknown, defaulting to 1000 [ 2656.319198][T26069] bridge0: port 1(bridge_slave_0) entered blocking state [ 2656.329367][T26069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2656.336643][T26069] bridge_slave_0: entered allmulticast mode [ 2656.396290][T26069] bridge_slave_0: entered promiscuous mode [ 2656.429041][T26069] bridge0: port 2(bridge_slave_1) entered blocking state [ 2656.477205][T25426] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2656.495152][T26069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2656.515685][T26069] bridge_slave_1: entered allmulticast mode [ 2656.550009][T26069] bridge_slave_1: entered promiscuous mode [ 2656.677412][T25426] usb 3-1: Using ep0 maxpacket: 32 [ 2656.702986][T25426] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 2656.732621][T25426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.802840][T26069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2656.813690][T25426] usb 3-1: Product: syz [ 2656.859277][T25426] usb 3-1: Manufacturer: syz [ 2656.871839][T26069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2656.908020][T25426] usb 3-1: SerialNumber: syz [ 2656.960817][T25426] usb 3-1: config 0 descriptor?? [ 2657.181654][T21590] hsr_slave_0: left promiscuous mode [ 2657.196973][T21590] hsr_slave_1: left promiscuous mode [ 2657.215034][T21590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2657.234346][T21590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2657.274647][T21590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2657.298795][T21590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2657.392909][T21590] veth0_macvtap: left promiscuous mode [ 2657.417579][T21590] veth1_vlan: left promiscuous mode [ 2657.454386][T21590] veth0_vlan: left promiscuous mode [ 2658.127256][T20086] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2658.331062][T20086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2658.377279][T20086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2658.395075][T14200] usb 3-1: USB disconnect, device number 114 [ 2658.397199][T20086] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2658.442626][T20086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2658.489782][T20086] usb 2-1: config 0 descriptor?? [ 2658.945581][T20086] cp2112 0003:10C4:EA90.0042: unknown main item tag 0x0 [ 2658.994581][T20086] cp2112 0003:10C4:EA90.0042: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2659.154508][T20086] cp2112 0003:10C4:EA90.0042: Part Number: 0x82 Device Version: 0xFE [ 2659.684784][T21590] team0 (unregistering): Port device team_slave_1 removed [ 2659.714181][T20086] cp2112 0003:10C4:EA90.0042: error setting SMBus config [ 2659.725157][T20086] cp2112 0003:10C4:EA90.0042: probe with driver cp2112 failed with error -71 [ 2659.776104][T20086] usb 2-1: USB disconnect, device number 37 [ 2659.996412][T21590] team0 (unregistering): Port device team_slave_0 removed [ 2660.316362][T26186] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 2660.323948][T20086] IPVS: starting estimator thread 0... [ 2660.467701][T26187] IPVS: using max 25 ests per chain, 60000 per kthread [ 2660.837418][T26193] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2662.475079][T26069] team0: Port device team_slave_0 added [ 2662.512498][T26069] team0: Port device team_slave_1 added [ 2662.525138][T26176] netlink: 'syz.2.5237': attribute type 5 has an invalid length. [ 2662.533450][T26176] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5237'. [ 2662.551517][T26191] netlink: 'syz.1.5240': attribute type 1 has an invalid length. [ 2662.568828][T26191] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2663.437574][T26069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2663.459459][T25426] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2663.653609][T26069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2663.692151][T26069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2663.747681][T26069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2663.777410][T26069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2663.846341][T26069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2663.897283][T25426] usb 3-1: Using ep0 maxpacket: 32 [ 2663.909557][T25426] usb 3-1: config 0 has an invalid interface number: 152 but max is 0 [ 2663.927122][T25426] usb 3-1: config 0 has no interface number 0 [ 2663.943672][T25426] usb 3-1: config 0 interface 152 altsetting 0 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 2663.997404][T25426] usb 3-1: config 0 interface 152 altsetting 0 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 2664.084774][T25426] usb 3-1: config 0 interface 152 altsetting 0 endpoint 0x81 has invalid maxpacket 1854, setting to 1024 [ 2664.140970][T25426] usb 3-1: config 0 interface 152 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2664.161350][T26069] hsr_slave_0: entered promiscuous mode [ 2664.169933][T25426] usb 3-1: New USB device found, idVendor=12d1, idProduct=5922, bcdDevice=18.1d [ 2664.184902][T25426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.187699][T26069] hsr_slave_1: entered promiscuous mode [ 2664.197381][T25426] usb 3-1: Product: syz [ 2664.204146][T25426] usb 3-1: Manufacturer: syz [ 2664.211317][T25426] usb 3-1: SerialNumber: syz [ 2664.226898][T25426] usb 3-1: config 0 descriptor?? [ 2664.236571][T26211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2664.247436][T25426] option 3-1:0.152: GSM modem (1-port) converter detected [ 2664.256656][T26069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2664.271224][T26069] Cannot create hsr debugfs directory [ 2664.403064][T21590] IPVS: stop unused estimator thread 0... [ 2664.487254][T20088] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2664.687308][T20088] usb 1-1: Using ep0 maxpacket: 32 [ 2664.737374][T20088] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 2664.987406][T20088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2665.166496][T20088] usb 1-1: Product: syz [ 2665.238089][T20088] usb 1-1: Manufacturer: syz [ 2665.356159][T20088] usb 1-1: SerialNumber: syz [ 2665.521174][T20088] usb 1-1: config 0 descriptor?? [ 2665.618826][T26222] Device name cannot be null; rc = [-22] [ 2665.750098][T20086] usb 3-1: USB disconnect, device number 115 [ 2665.759322][T20086] option 3-1:0.152: device disconnected [ 2665.972610][T26224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5249'. [ 2666.367302][T20088] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2666.381993][T26069] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2666.419189][T26069] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2666.450293][T26069] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2666.497840][T26069] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2666.559326][T20088] usb 3-1: device descriptor read/64, error -71 [ 2666.867258][T20088] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2666.910456][T26069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2666.975461][T25426] usb 1-1: USB disconnect, device number 36 [ 2666.979346][T26069] 8021q: adding VLAN 0 to HW filter on device team0 [ 2667.037223][T20088] usb 3-1: device descriptor read/64, error -71 [ 2667.044090][T21590] bridge0: port 1(bridge_slave_0) entered blocking state [ 2667.051267][T21590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2667.114035][T21616] bridge0: port 2(bridge_slave_1) entered blocking state [ 2667.121255][T21616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2667.198369][T20088] usb usb3-port1: attempt power cycle [ 2667.617719][T20088] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2667.668056][T20088] usb 3-1: device descriptor read/8, error -71 [ 2667.703756][T26069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2667.947443][T20088] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2668.008571][T20088] usb 3-1: device descriptor read/8, error -71 [ 2668.147798][T20088] usb usb3-port1: unable to enumerate USB device [ 2668.541210][T26069] veth0_vlan: entered promiscuous mode [ 2668.589228][T26069] veth1_vlan: entered promiscuous mode [ 2668.715158][T26069] veth0_macvtap: entered promiscuous mode [ 2668.819160][T26069] veth1_macvtap: entered promiscuous mode [ 2669.086951][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2669.165534][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2669.697902][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2669.727364][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2669.770564][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2669.790859][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2669.801092][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2669.821641][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2669.843801][T26069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2669.896181][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2669.945796][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2669.967287][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2669.999752][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.012039][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2670.044214][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.071500][T26069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2670.327349][T26069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2670.524129][ T29] audit: type=1400 audit(3128.119:4417): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26268 comm="syz.1.5259" daddr=fe80::bb dest=20000 [ 2670.529867][T26069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2670.732940][T26069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2670.747186][T26069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2670.762937][T26069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2670.771970][T26069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2672.499694][T21593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2672.540535][T21593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2672.838235][T21601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2672.882827][T21601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2673.059930][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5265'. [ 2674.185183][T26295] IPv6: sit1: Disabled Multicast RS [ 2680.903615][T26317] FAULT_INJECTION: forcing a failure. [ 2680.903615][T26317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2680.917399][T26317] CPU: 0 UID: 0 PID: 26317 Comm: syz.2.5271 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 2680.928216][T26317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2680.938274][T26317] Call Trace: [ 2680.941588][T26317] [ 2680.944539][T26317] dump_stack_lvl+0x241/0x360 [ 2680.949254][T26317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2680.954456][T26317] ? __pfx__printk+0x10/0x10 [ 2680.959130][T26317] should_fail_ex+0x3b0/0x4e0 [ 2680.963924][T26317] prepare_alloc_pages+0x1da/0x5d0 [ 2680.969070][T26317] __alloc_pages_noprof+0x166/0x6c0 [ 2680.974291][T26317] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 2680.980012][T26317] ? __alloc_pages_noprof+0x30a/0x6c0 [ 2680.985390][T26317] ? _raw_read_unlock+0x28/0x50 [ 2680.990250][T26317] ? __walk_iomem_res_desc+0x4de/0x560 [ 2680.995923][T26317] alloc_pages_mpol_noprof+0x3e8/0x680 [ 2681.001398][T26317] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 2681.007415][T26317] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 2681.013422][T26317] ? alloc_pages_noprof+0xef/0x170 [ 2681.018562][T26317] get_zeroed_page_noprof+0x17/0x40 [ 2681.023766][T26317] machine_kexec_prepare+0xa61/0xe50 [ 2681.029090][T26317] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 2681.034926][T26317] ? kimage_alloc_control_pages+0xb10/0xbf0 [ 2681.040836][T26317] ? __pfx_alloc_pgt_page+0x10/0x10 [ 2681.046065][T26317] ? sanity_check_segment_list+0x82b/0xa10 [ 2681.051895][T26317] do_kexec_load+0x483/0x6a0 [ 2681.056490][T26317] __se_sys_kexec_load+0x12b/0x160 [ 2681.061628][T26317] do_syscall_64+0xf3/0x230 [ 2681.066149][T26317] ? clear_bhb_loop+0x35/0x90 [ 2681.070835][T26317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2681.076751][T26317] RIP: 0033:0x7fcf73779e79 [ 2681.081190][T26317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2681.100809][T26317] RSP: 002b:00007fcf74579038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 2681.109230][T26317] RAX: ffffffffffffffda RBX: 00007fcf73915f80 RCX: 00007fcf73779e79 [ 2681.117220][T26317] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 2681.125205][T26317] RBP: 00007fcf74579090 R08: 0000000000000000 R09: 0000000000000000 [ 2681.133212][T26317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2681.141229][T26317] R13: 0000000000000001 R14: 00007fcf73915f80 R15: 00007ffeb682bd78 [ 2681.149226][T26317] [ 2683.336200][T26334] xt_socket: unknown flags 0xc [ 2684.601744][T26343] netlink: 'syz.3.5280': attribute type 1 has an invalid length. [ 2684.612249][T26343] netlink: 'syz.3.5280': attribute type 3 has an invalid length. [ 2684.620438][T26343] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5280'. [ 2686.706004][ T29] audit: type=1326 audit(3144.669:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26346 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb872379e79 code=0x7fc00000 [ 2687.347731][T20088] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2687.404095][ T29] audit: type=1326 audit(3145.369:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26346 comm="syz.4.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb872379e79 code=0x7fc00000 [ 2687.560557][T20088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2687.575221][T20088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2687.596302][T20088] usb 3-1: New USB device found, idVendor=10cf, idProduct=ea90, bcdDevice= 0.00 [ 2687.620586][T20088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2687.656991][ T29] audit: type=1400 audit(3145.619:4420): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26368 comm="syz.3.5288" daddr=::ffff:172.20.20.187 [ 2687.680035][T20088] usb 3-1: config 0 descriptor?? [ 2689.273950][T20088] usbhid 3-1:0.0: can't add hid device: -71 [ 2689.296373][T20088] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2689.308374][T20088] usb 3-1: USB disconnect, device number 120 [ 2689.481135][T26385] netlink: 'syz.3.5293': attribute type 1 has an invalid length. [ 2689.489143][T26385] netlink: 'syz.3.5293': attribute type 3 has an invalid length. [ 2689.500033][T26385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5293'. [ 2690.079083][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5294'. [ 2690.338277][T26386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5294'. [ 2690.351717][ T5274] IPVS: starting estimator thread 0... [ 2690.366575][T26389] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 2690.388372][T26386] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5294'. [ 2691.268087][T26391] IPVS: using max 24 ests per chain, 57600 per kthread [ 2691.746195][ T29] audit: type=1326 audit(3149.699:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26398 comm="syz.2.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf73779e79 code=0x7fc00000 [ 2692.737212][ T29] audit: type=1326 audit(3150.699:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26398 comm="syz.2.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcf73779e79 code=0x7fc00000 [ 2695.195420][T22781] Bluetooth: hci5: command 0x0406 tx timeout [ 2695.756506][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 2695.756762][T26431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 2698.198791][T26441] netlink: 'syz.0.5306': attribute type 1 has an invalid length. [ 2698.206813][T26441] netlink: 'syz.0.5306': attribute type 3 has an invalid length. [ 2698.214990][T26441] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5306'. [ 2698.506319][T26443] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 2698.604136][ T29] audit: type=1400 audit(3156.569:4423): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26444 comm="syz.3.5309" daddr=fe80::bb dest=20000 [ 2700.036659][T26469] FAULT_INJECTION: forcing a failure. [ 2700.036659][T26469] name failslab, interval 1, probability 0, space 0, times 0 [ 2700.174122][T26469] CPU: 1 UID: 0 PID: 26469 Comm: syz.3.5317 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 2700.184971][T26469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2700.195075][T26469] Call Trace: [ 2700.198391][T26469] [ 2700.201349][T26469] dump_stack_lvl+0x241/0x360 [ 2700.206082][T26469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2700.211335][T26469] ? __pfx__printk+0x10/0x10 [ 2700.215991][T26469] ? __kmalloc_noprof+0xb0/0x400 [ 2700.220981][T26469] ? __pfx___might_resched+0x10/0x10 [ 2700.226304][T26469] ? __mutex_lock+0x2ef/0xd70 [ 2700.231063][T26469] should_fail_ex+0x3b0/0x4e0 [ 2700.235782][T26469] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 2700.242075][T26469] should_failslab+0xac/0x100 [ 2700.246801][T26469] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 2700.253087][T26469] __kmalloc_noprof+0xd8/0x400 [ 2700.257892][T26469] ? safesetid_security_capable+0xb2/0x1d0 [ 2700.263743][T26469] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 2700.269866][T26469] genl_rcv_msg+0x802/0xec0 [ 2700.274435][T26469] ? mark_lock+0x9a/0x350 [ 2700.278816][T26469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2700.283999][T26469] ? __pfx_lock_acquire+0x10/0x10 [ 2700.289063][T26469] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 2700.294926][T26469] ? __pfx___might_resched+0x10/0x10 [ 2700.300298][T26469] netlink_rcv_skb+0x1e3/0x430 [ 2700.305098][T26469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2700.310248][T26469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2700.315679][T26469] ? __netlink_deliver_tap+0x77e/0x7c0 [ 2700.321202][T26469] genl_rcv+0x28/0x40 [ 2700.325239][T26469] netlink_unicast+0x7f6/0x990 [ 2700.330058][T26469] ? __pfx_netlink_unicast+0x10/0x10 [ 2700.335391][T26469] ? __virt_addr_valid+0x183/0x530 [ 2700.340537][T26469] ? __check_object_size+0x49c/0x900 [ 2700.345866][T26469] ? bpf_lsm_netlink_send+0x9/0x10 [ 2700.351287][T26469] netlink_sendmsg+0x8e4/0xcb0 [ 2700.356102][T26469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2700.361423][T26469] ? __import_iovec+0x536/0x820 [ 2700.366320][T26469] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2700.371643][T26469] ? security_socket_sendmsg+0x87/0xb0 [ 2700.377144][T26469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2700.382469][T26469] __sock_sendmsg+0x221/0x270 [ 2700.387196][T26469] ____sys_sendmsg+0x525/0x7d0 [ 2700.392008][T26469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2700.397352][T26469] __sys_sendmsg+0x2b0/0x3a0 [ 2700.402076][T26469] ? __pfx___sys_sendmsg+0x10/0x10 [ 2700.407224][T26469] ? vfs_write+0x7c4/0xc90 [ 2700.411720][T26469] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2700.418090][T26469] ? do_syscall_64+0x100/0x230 [ 2700.422889][T26469] ? do_syscall_64+0xb6/0x230 [ 2700.427604][T26469] do_syscall_64+0xf3/0x230 [ 2700.432135][T26469] ? clear_bhb_loop+0x35/0x90 [ 2700.437372][T26469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2700.443295][T26469] RIP: 0033:0x7f8b11d79e79 [ 2700.447766][T26469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2700.467413][T26469] RSP: 002b:00007f8b12a6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2700.475953][T26469] RAX: ffffffffffffffda RBX: 00007f8b11f15f80 RCX: 00007f8b11d79e79 [ 2700.483957][T26469] RDX: 0000000020000090 RSI: 0000000020000200 RDI: 0000000000000003 [ 2700.491957][T26469] RBP: 00007f8b12a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 2700.499959][T26469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2700.507959][T26469] R13: 0000000000000000 R14: 00007f8b11f15f80 R15: 00007ffd6ed89fd8 [ 2700.516064][T26469] [ 2700.941062][T26478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2701.487251][ T29] audit: type=1400 audit(3158.899:4424): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=26471 comm="syz.0.5318" [ 2701.878668][T26487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5322'. [ 2701.979087][T26491] netlink: 'syz.0.5325': attribute type 1 has an invalid length. [ 2702.007525][T26491] netlink: 9320 bytes leftover after parsing attributes in process `syz.0.5325'. [ 2702.047353][T26491] netlink: 'syz.0.5325': attribute type 1 has an invalid length. [ 2702.067204][T26491] netlink: 'syz.0.5325': attribute type 2 has an invalid length. [ 2702.282971][ T29] audit: type=1400 audit(3160.249:4425): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26498 comm="syz.4.5327" daddr=fe80::bb dest=20000 [ 2702.814193][T26512] rdma_rxe: rxe_newlink: failed to add lo [ 2704.202107][T26512] lo speed is unknown, defaulting to 1000 [ 2704.295917][T26518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5329'. [ 2704.535945][T22781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2704.593591][T22781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2704.607451][T22781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2704.618764][T22781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2704.628580][T22781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2704.636870][T22781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2704.670356][ T9064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.088969][ T9064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.175506][T26534] random: crng reseeded on system resumption [ 2706.650654][T26533] netlink: 'syz.2.5334': attribute type 4 has an invalid length. [ 2706.747356][T22781] Bluetooth: hci2: command tx timeout [ 2706.813408][T26537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5335'. [ 2706.992589][ T9064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2707.051523][T26527] lo speed is unknown, defaulting to 1000 [ 2707.209000][ T29] audit: type=1400 audit(3165.179:4426): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26553 comm="syz.4.5341" daddr=fe80::bb dest=20000 [ 2707.304501][ T9064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2708.850305][T22781] Bluetooth: hci2: command tx timeout [ 2709.056473][ T9064] bridge_slave_1: left allmulticast mode [ 2709.135435][ T9064] bridge_slave_1: left promiscuous mode [ 2709.169190][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state [ 2709.189230][ T9064] bridge_slave_0: left allmulticast mode [ 2709.194927][ T9064] bridge_slave_0: left promiscuous mode [ 2709.204882][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state [ 2709.277171][T14200] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2709.477189][T14200] usb 1-1: Using ep0 maxpacket: 32 [ 2709.515027][T14200] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 2709.529940][T14200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2709.540065][T14200] usb 1-1: Product: syz [ 2709.544702][T14200] usb 1-1: Manufacturer: syz [ 2709.549467][T14200] usb 1-1: SerialNumber: syz [ 2709.559956][T14200] usb 1-1: config 0 descriptor?? [ 2710.217103][T26576] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5347'. [ 2710.715150][ T9064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2710.738819][ T9064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2710.752321][ T9064] bond0 (unregistering): Released all slaves [ 2710.822168][T26584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5350'. [ 2710.857292][T22781] Bluetooth: hci2: command tx timeout [ 2712.189317][T20088] usb 1-1: USB disconnect, device number 37 [ 2712.639630][T26527] chnl_net:caif_netlink_parms(): no params data found [ 2712.701310][T26625] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 2712.939394][T22781] Bluetooth: hci2: command tx timeout [ 2713.076509][T26631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5358'. [ 2713.348358][T17685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2713.376788][T17685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2713.392393][T17685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2713.405860][T17685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2713.420869][T17685] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2713.433670][T17685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2713.564050][T26645] ebtables: ebtables: counters copy to user failed while replacing table [ 2713.607984][ T9064] hsr_slave_0: left promiscuous mode [ 2713.624548][ T9064] hsr_slave_1: left promiscuous mode [ 2713.632935][ T9064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2713.652373][ T9064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2713.668898][ T9064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2713.677002][ T9064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2713.689138][T26652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5362'. [ 2713.754864][T26654] input: syz0 as /devices/virtual/input/input125 [ 2713.763767][ T9064] veth1_macvtap: left promiscuous mode [ 2713.769896][ T9064] veth0_macvtap: left promiscuous mode [ 2713.775635][ T9064] veth1_vlan: left promiscuous mode [ 2713.788790][ T9064] veth0_vlan: left promiscuous mode [ 2714.145223][T20086] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2714.360521][T20086] usb 1-1: Using ep0 maxpacket: 32 [ 2714.385509][T20086] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 2714.415319][T20086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.423767][T20086] usb 1-1: Product: syz [ 2714.434685][T20086] usb 1-1: Manufacturer: syz [ 2714.439601][T20086] usb 1-1: SerialNumber: syz [ 2714.455371][T20086] usb 1-1: config 0 descriptor?? [ 2714.925509][ T9064] team0 (unregistering): Port device team_slave_1 removed [ 2715.045651][ T9064] team0 (unregistering): Port device team_slave_0 removed [ 2715.497513][T22781] Bluetooth: hci1: command tx timeout [ 2715.982278][T26642] netlink: 'syz.2.5360': attribute type 4 has an invalid length. [ 2716.058145][T26646] netlink: 'syz.2.5360': attribute type 4 has an invalid length. [ 2716.094428][T26527] bridge0: port 1(bridge_slave_0) entered blocking state [ 2716.118509][T26527] bridge0: port 1(bridge_slave_0) entered disabled state [ 2716.133416][T26527] bridge_slave_0: entered allmulticast mode [ 2716.149487][T26527] bridge_slave_0: entered promiscuous mode [ 2716.179615][T26527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2716.207438][T26527] bridge0: port 2(bridge_slave_1) entered disabled state [ 2716.230830][T26527] bridge_slave_1: entered allmulticast mode [ 2716.254378][T26527] bridge_slave_1: entered promiscuous mode [ 2716.314654][T26633] lo speed is unknown, defaulting to 1000 [ 2716.328063][T26658] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2716.470768][T26527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2716.525441][T26527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2716.658538][ T9064] IPVS: stop unused estimator thread 0... [ 2716.677623][T26527] team0: Port device team_slave_0 added [ 2716.707153][ T5274] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2716.720286][T26527] team0: Port device team_slave_1 added [ 2716.752788][T14200] usb 1-1: USB disconnect, device number 38 [ 2716.861628][T26666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5367'. [ 2716.873365][T26527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2716.880651][T26527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2716.908038][T26527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2716.921426][T26527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2716.929595][T26527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2716.961037][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 2716.966672][T26527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2716.979584][ T5274] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2716.988096][ T5274] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2717.003608][ T5274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2717.023361][ T5274] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2717.045050][ T5274] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2717.058678][ T5274] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2717.070826][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.093393][ T9064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2717.287430][ T9064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2717.287764][ T5274] usb 3-1: GET_CAPABILITIES returned 0 [ 2717.308731][ T5274] usbtmc 3-1:16.0: can't read capabilities [ 2717.382284][T26527] hsr_slave_0: entered promiscuous mode [ 2717.398260][T26527] hsr_slave_1: entered promiscuous mode [ 2717.404570][T26527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2717.427380][T26527] Cannot create hsr debugfs directory [ 2717.481833][ T9064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2717.531893][T26679] overlayfs: failed to resolve './file0': -2 [ 2717.547984][T17685] Bluetooth: hci3: sending frame failed (-49) [ 2717.559367][T22781] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 2717.577300][T22781] Bluetooth: hci1: command tx timeout [ 2717.628527][T25264] usb 3-1: USB disconnect, device number 121 [ 2717.648043][ T9064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2717.734741][T26684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5373'. [ 2717.830128][ T29] audit: type=1400 audit(3175.799:4427): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=26685 comm="syz.0.5374" saddr=fe80::aa daddr=fe80::aa dest=20002 [ 2719.027297][T26633] chnl_net:caif_netlink_parms(): no params data found [ 2719.090064][ T9064] bridge_slave_1: left allmulticast mode [ 2719.096166][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state [ 2719.120459][ T9064] bridge_slave_0: left allmulticast mode [ 2719.126169][ T9064] bridge_slave_0: left promiscuous mode [ 2719.139904][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state [ 2719.609404][ T5274] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2719.657519][T22781] Bluetooth: hci1: command tx timeout [ 2719.677171][T25264] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2719.807753][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 2719.857978][T25264] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 2719.864972][ T5274] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 2719.885159][T25264] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2719.892565][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2719.900760][T25264] usb 1-1: can't read configurations, error -61 [ 2719.919632][ T5274] usb 3-1: Product: syz [ 2719.923854][ T5274] usb 3-1: Manufacturer: syz [ 2719.928824][ T5274] usb 3-1: SerialNumber: syz [ 2719.939935][ T5274] usb 3-1: config 0 descriptor?? [ 2720.005588][ T9064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2720.028788][ T9064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2720.040769][ T9064] bond0 (unregistering): Released all slaves [ 2720.077359][T25264] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2720.281648][T25264] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 2720.304982][T25264] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2720.322084][T25264] usb 1-1: can't read configurations, error -61 [ 2720.339976][T25264] usb usb1-port1: attempt power cycle [ 2720.522581][T26633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2720.530129][T26633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.541440][T26633] bridge_slave_0: entered allmulticast mode [ 2720.550353][T26633] bridge_slave_0: entered promiscuous mode [ 2720.573941][T26633] bridge0: port 2(bridge_slave_1) entered blocking state [ 2720.602775][T26633] bridge0: port 2(bridge_slave_1) entered disabled state [ 2720.611516][T26633] bridge_slave_1: entered allmulticast mode [ 2720.620790][T26633] bridge_slave_1: entered promiscuous mode [ 2720.741616][T26633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2720.769855][T25264] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2720.782539][T26633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2720.869310][T25264] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 2720.905819][T25264] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2720.923967][T25264] usb 1-1: can't read configurations, error -61 [ 2721.101443][ T9064] hsr_slave_0: left promiscuous mode [ 2721.107100][ T29] audit: type=1400 audit(3179.069:4428): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26712 comm="syz.4.5380" daddr=fe80::bb dest=20000 [ 2721.127237][ T9064] hsr_slave_1: left promiscuous mode [ 2721.136922][ T9064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2721.145641][T25264] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2721.145796][ T9064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2721.163442][ T9064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2721.180752][ T9064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2721.199150][T25264] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 2721.217865][ T9064] veth1_macvtap: left promiscuous mode [ 2721.223694][ T9064] veth0_macvtap: left promiscuous mode [ 2721.229688][ T9064] veth1_vlan: left promiscuous mode [ 2721.235269][ T9064] veth0_vlan: left promiscuous mode [ 2721.277496][T25264] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2721.356821][T25264] usb 1-1: can't read configurations, error -61 [ 2721.389199][T25264] usb usb1-port1: unable to enumerate USB device [ 2721.748049][T22781] Bluetooth: hci1: command tx timeout [ 2722.145691][T25264] usb 3-1: USB disconnect, device number 122 [ 2722.253671][ T29] audit: type=1400 audit(3180.219:4429): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26720 comm="syz.2.5382" daddr=fe88::3 [ 2722.281996][ T29] audit: type=1400 audit(3180.219:4430): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26720 comm="syz.2.5382" daddr=::ffff:224.0.0.2 dest=20005 [ 2722.356047][ T9064] team0 (unregistering): Port device team_slave_1 removed [ 2722.424912][ T9064] team0 (unregistering): Port device team_slave_0 removed [ 2722.530588][T26727] FAULT_INJECTION: forcing a failure. [ 2722.530588][T26727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2722.545677][T26727] CPU: 0 UID: 0 PID: 26727 Comm: syz.0.5383 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 2722.556526][T26727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2722.566697][T26727] Call Trace: [ 2722.569987][T26727] [ 2722.572942][T26727] dump_stack_lvl+0x241/0x360 [ 2722.577724][T26727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2722.582944][T26727] ? __pfx__printk+0x10/0x10 [ 2722.587597][T26727] ? __pfx_lock_release+0x10/0x10 [ 2722.592648][T26727] should_fail_ex+0x3b0/0x4e0 [ 2722.597434][T26727] _copy_from_user+0x2f/0xe0 [ 2722.602050][T26727] restore_altstack+0x99/0x150 [ 2722.606855][T26727] ? __pfx_restore_altstack+0x10/0x10 [ 2722.612258][T26727] ? __task_pid_nr_ns+0x28/0x450 [ 2722.617227][T26727] ? restore_signal_shadow_stack+0x392/0x450 [ 2722.623339][T26727] __do_sys_rt_sigreturn+0x20d/0x270 [ 2722.628694][T26727] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 2722.634722][T26727] ? do_syscall_64+0x100/0x230 [ 2722.639514][T26727] ? do_syscall_64+0xb6/0x230 [ 2722.644215][T26727] do_syscall_64+0xf3/0x230 [ 2722.648727][T26727] ? clear_bhb_loop+0x35/0x90 [ 2722.653414][T26727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2722.659314][T26727] RIP: 0033:0x7f878d379e77 [ 2722.663744][T26727] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 2722.683553][T26727] RSP: 002b:00007f878e087038 EFLAGS: 00000246 [ 2722.689669][T26727] RAX: 000000000000002f RBX: 00007f878d515f80 RCX: 00007f878d379e79 [ 2722.697649][T26727] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000003 [ 2722.705624][T26727] RBP: 00007f878e087090 R08: 0000000000000000 R09: 0000000000000000 [ 2722.713691][T26727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2722.721677][T26727] R13: 0000000000000000 R14: 00007f878d515f80 R15: 00007ffe12966ea8 [ 2722.729675][T26727] [ 2723.726337][T26633] team0: Port device team_slave_0 added [ 2723.744316][T26633] team0: Port device team_slave_1 added [ 2723.793006][T26723] netlink: 'syz.2.5382': attribute type 4 has an invalid length. [ 2723.833987][T26724] netlink: 'syz.2.5382': attribute type 4 has an invalid length. [ 2723.866647][T26733] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2723.875845][T26733] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2723.884823][T26733] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2723.893601][T26733] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2724.048891][T26633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2724.079989][T26633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2724.166408][T26633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2724.208629][T26633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2724.215812][T26633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2724.242143][T26633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2724.280692][T26527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2724.295603][ T29] audit: type=1326 audit(3182.259:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26741 comm="syz.0.5389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f878d379e79 code=0x0 [ 2724.325884][T26737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5386'. [ 2724.335558][T26737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5386'. [ 2724.361616][T26527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2724.397538][T26527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2724.613478][T26527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2725.848534][T26748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5391'. [ 2725.849551][T26633] hsr_slave_0: entered promiscuous mode [ 2725.880762][T26755] rdma_rxe: rxe_newlink: failed to add lo [ 2725.958035][T26633] hsr_slave_1: entered promiscuous mode [ 2725.964937][T26633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2725.984994][T26633] Cannot create hsr debugfs directory [ 2726.057167][ T29] audit: type=1400 audit(3183.999:4432): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26749 comm="syz.2.5390" daddr=fc02:: [ 2726.607764][T26755] lo speed is unknown, defaulting to 1000 [ 2727.371512][T26527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2727.746319][T26527] 8021q: adding VLAN 0 to HW filter on device team0 [ 2727.930321][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 2727.937610][ T9649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2728.026412][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 2728.033696][ T9649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2729.190832][T26770] x_tables: ip_tables: TTL.0 target: invalid size 8 (kernel) != (user) 0 [ 2729.766179][T26772] FAULT_INJECTION: forcing a failure. [ 2729.766179][T26772] name failslab, interval 1, probability 0, space 0, times 0 [ 2729.781715][T26772] CPU: 0 UID: 0 PID: 26772 Comm: syz.0.5396 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 2729.792546][T26772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2729.802635][T26772] Call Trace: [ 2729.805931][T26772] [ 2729.808884][T26772] dump_stack_lvl+0x241/0x360 [ 2729.813610][T26772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2729.818851][T26772] ? __pfx__printk+0x10/0x10 [ 2729.823485][T26772] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 2729.828974][T26772] ? __pfx___might_resched+0x10/0x10 [ 2729.834314][T26772] should_fail_ex+0x3b0/0x4e0 [ 2729.839044][T26772] should_failslab+0xac/0x100 [ 2729.843770][T26772] ? get_mountpoint+0x20b/0x440 [ 2729.848650][T26772] __kmalloc_cache_noprof+0x6c/0x2c0 [ 2729.853981][T26772] get_mountpoint+0x20b/0x440 [ 2729.858682][T26772] do_lock_mount+0x2cf/0x3a0 [ 2729.863295][T26772] do_loopback+0x2be/0x520 [ 2729.867736][T26772] ? __pfx_do_loopback+0x10/0x10 [ 2729.872711][T26772] __se_sys_mount+0x2d6/0x3c0 [ 2729.877412][T26772] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2729.883455][T26772] ? __pfx___se_sys_mount+0x10/0x10 [ 2729.888677][T26772] ? do_syscall_64+0x100/0x230 [ 2729.893470][T26772] ? __x64_sys_mount+0x20/0xc0 [ 2729.898260][T26772] do_syscall_64+0xf3/0x230 [ 2729.902792][T26772] ? clear_bhb_loop+0x35/0x90 [ 2729.907536][T26772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2729.913503][T26772] RIP: 0033:0x7f878d379e79 [ 2729.917948][T26772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2729.937609][T26772] RSP: 002b:00007f878e087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2729.946064][T26772] RAX: ffffffffffffffda RBX: 00007f878d515f80 RCX: 00007f878d379e79 [ 2729.954079][T26772] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 00000000200002c0 [ 2729.962063][T26772] RBP: 00007f878e087090 R08: 0000000000000000 R09: 0000000000000000 [ 2729.970055][T26772] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000002 [ 2729.978059][T26772] R13: 0000000000000000 R14: 00007f878d515f80 R15: 00007ffe12966ea8 [ 2729.986077][T26772] [ 2730.062600][T26527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2730.255585][T26776] program syz.0.5397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2730.569463][T26633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2730.597122][T26633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2730.620837][T26633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2730.665378][T26633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2730.685870][T26527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2731.040314][T17685] Bluetooth: hci0: command 0x0406 tx timeout [ 2732.020236][T26527] veth0_vlan: entered promiscuous mode [ 2732.580892][T26527] veth1_vlan: entered promiscuous mode [ 2732.713836][T26527] veth0_macvtap: entered promiscuous mode [ 2732.776674][T26633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2732.999889][T26527] veth1_macvtap: entered promiscuous mode [ 2733.234576][T26633] 8021q: adding VLAN 0 to HW filter on device team0 [ 2733.283338][T21605] bridge0: port 1(bridge_slave_0) entered blocking state [ 2733.290547][T21605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2733.301673][T21605] bridge0: port 2(bridge_slave_1) entered blocking state [ 2733.308913][T21605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2733.799010][T26527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2733.828343][T26527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.196547][T26527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2734.283141][T26527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.313413][T26527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2734.333939][T26527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2734.353099][T26527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2734.369526][T26527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2737.292782][T26527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2738.399561][T26527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2738.421782][T26527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2738.442185][T26527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2738.467632][T26527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2738.495694][T26527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2739.440379][T26527] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2739.477219][T26527] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2739.485994][T26527] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2739.527959][T26527] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2739.867138][T25426] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2740.468893][T25426] usb 3-1: Using ep0 maxpacket: 32 [ 2740.487066][ T9064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2740.513214][ T9064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2740.518974][T25426] usb 3-1: config 0 has an invalid interface number: 152 but max is 0 [ 2740.523200][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5406'. [ 2740.534964][T25426] usb 3-1: config 0 has no interface number 0 [ 2740.557958][T25426] usb 3-1: config 0 interface 152 altsetting 0 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 2740.585553][T25426] usb 3-1: config 0 interface 152 altsetting 0 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 2740.597708][T25426] usb 3-1: config 0 interface 152 altsetting 0 endpoint 0x81 has invalid maxpacket 1854, setting to 1024 [ 2740.612151][T25426] usb 3-1: config 0 interface 152 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2740.691101][T26816] netlink: 'syz.4.5406': attribute type 3 has an invalid length. [ 2740.700419][ T9064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2740.712093][T25426] usb 3-1: New USB device found, idVendor=12d1, idProduct=5922, bcdDevice=18.1d [ 2740.738665][ T9064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2740.802972][T25426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.837363][T25426] usb 3-1: Product: syz [ 2740.843385][T25426] usb 3-1: Manufacturer: syz [ 2740.847683][T26816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5406'. [ 2740.857377][T25426] usb 3-1: SerialNumber: syz [ 2740.877293][T25426] usb 3-1: config 0 descriptor?? [ 2740.882796][T26816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5406'. [ 2740.895768][T26815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2740.909193][T25426] option 3-1:0.152: GSM modem (1-port) converter detected [ 2740.994432][T26633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2741.011812][ T29] audit: type=1400 audit(3198.979:4433): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=26823 comm="syz.0.5408" [ 2741.129721][T20086] usb 3-1: USB disconnect, device number 123 [ 2741.153052][T20086] option 3-1:0.152: device disconnected [ 2741.192745][T26633] veth0_vlan: entered promiscuous mode [ 2741.240369][T26633] veth1_vlan: entered promiscuous mode [ 2741.415481][T26633] veth0_macvtap: entered promiscuous mode [ 2741.478476][T26633] veth1_macvtap: entered promiscuous mode [ 2741.539120][T25426] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2741.567503][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.620579][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.677153][T20098] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2741.693912][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.725351][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.756065][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.768696][T25426] usb 2-1: device descriptor read/64, error -71 [ 2741.772935][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.785399][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2741.808630][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.866504][T26633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2741.886703][T20098] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2741.930460][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2741.951415][T20098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2741.966917][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2741.986642][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2741.991480][T20098] usb 1-1: config 0 descriptor?? [ 2742.047159][T25426] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2742.047166][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.047203][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2742.047224][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.047244][T26633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2742.103365][T26633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2742.119068][T26633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2742.209709][T26633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2742.227514][T26633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2742.267702][T26633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2742.277317][T25426] usb 2-1: device descriptor read/64, error -71 [ 2742.285384][T26633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2742.437722][ T5274] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2742.461475][T25426] usb usb2-port1: attempt power cycle [ 2742.522393][ T9064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2742.545521][ T9064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2742.635147][ T5274] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2742.677356][T21605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2742.685415][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2742.705576][T21605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2742.725963][T20098] [drm:udl_init] *ERROR* Selecting channel failed [ 2742.726570][ T5274] usb 3-1: Product: syz [ 2742.757404][ T5274] usb 3-1: Manufacturer: syz [ 2742.785989][ T5274] usb 3-1: SerialNumber: syz [ 2742.814301][T20098] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 2742.816225][ T5274] usb 3-1: config 0 descriptor?? [ 2742.821412][T20098] [drm] Initialized udl on minor 2 [ 2742.854745][T20098] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2742.894203][T20098] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2742.901826][T25426] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2742.923866][T14200] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2742.949355][T25426] usb 2-1: device descriptor read/8, error -71 [ 2742.958054][T20098] usb 1-1: USB disconnect, device number 43 [ 2742.985365][T14200] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 2743.238955][T25426] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2743.288047][T25426] usb 2-1: device descriptor read/8, error -71 [ 2743.420415][T25426] usb usb2-port1: unable to enumerate USB device [ 2745.538274][ T5274] mos7840 3-1:0.0: required endpoints missing [ 2745.573336][ T5274] usb 3-1: USB disconnect, device number 124 [ 2745.927173][T25426] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2746.475508][T26856] delete_channel: no stack [ 2746.499309][T25426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2746.515783][T25426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2746.571661][ T29] audit: type=1400 audit(3204.529:4434): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26862 comm="syz.1.5416" daddr=fe80::bb dest=20000 [ 2746.596257][T25426] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 2746.631215][T25426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2746.676415][T25426] usb 1-1: config 0 descriptor?? [ 2747.327878][T26873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5413'. [ 2748.054070][T26874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5418'. [ 2748.079996][T26874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5418'. [ 2748.147299][T20086] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2748.347340][T20086] usb 2-1: Using ep0 maxpacket: 32 [ 2748.366165][T20086] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 2748.406064][T20086] usb 2-1: config 0 has no interface number 0 [ 2748.427166][T20086] usb 2-1: config 0 interface 152 altsetting 0 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 2748.589892][T26880] rdma_rxe: rxe_newlink: failed to add lo [ 2748.633092][T26880] lo speed is unknown, defaulting to 1000 [ 2748.675677][T20086] usb 2-1: config 0 interface 152 altsetting 0 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 2751.717135][T25426] usbhid 1-1:0.0: can't add hid device: -71 [ 2751.754346][T25426] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2752.404485][T25426] usb 1-1: USB disconnect, device number 44 [ 2754.857324][T20086] usb 2-1: config 0 interface 152 altsetting 0 endpoint 0x81 has invalid maxpacket 1854, setting to 1024 [ 2754.867377][ T29] audit: type=1400 audit(3206.959:4435): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=26877 comm="syz.2.5420" daddr=fc02:: [ 2755.007819][T20086] usb 2-1: config 0 interface 152 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2755.040057][T20086] usb 2-1: string descriptor 0 read error: -71 [ 2755.058534][T20086] usb 2-1: New USB device found, idVendor=12d1, idProduct=5922, bcdDevice=18.1d [ 2755.069972][T20086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.100360][T20086] usb 2-1: config 0 descriptor?? [ 2755.106082][T20086] usb 2-1: can't set config #0, error -71 [ 2755.116408][T20086] usb 2-1: USB disconnect, device number 42 [ 2860.237022][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2860.244045][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26633/1:b..l P21616/1:b..l P25631/1:b..l [ 2860.255445][ C1] rcu: (detected by 1, t=10502 jiffies, g=246957, q=680 ncpus=2) [ 2860.263279][ C1] task:syz-executor state:R running task stack:20992 pid:25631 tgid:25631 ppid:25607 flags:0x00004000 [ 2860.277196][ C1] Call Trace: [ 2860.280509][ C1] [ 2860.283469][ C1] __schedule+0x17ae/0x4a10 [ 2860.288044][ C1] ? __pfx___schedule+0x10/0x10 [ 2860.292949][ C1] ? mark_lock+0x9a/0x350 [ 2860.297331][ C1] ? copy_pmd_range+0x7a7a/0x8500 [ 2860.302414][ C1] ? preempt_schedule+0xe1/0xf0 [ 2860.307319][ C1] preempt_schedule_common+0x84/0xd0 [ 2860.312661][ C1] preempt_schedule+0xe1/0xf0 [ 2860.317397][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 2860.322818][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2860.328761][ C1] ? __page_table_check_ptes_set+0x30f/0x410 [ 2860.334796][ C1] ? copy_pmd_range+0x7a7a/0x8500 [ 2860.339861][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2860.345118][ C1] _raw_spin_unlock+0x3e/0x50 [ 2860.349946][ C1] copy_pmd_range+0x7ad5/0x8500 [ 2860.354878][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 2860.360218][ C1] ? look_up_lock_class+0x77/0x160 [ 2860.365464][ C1] ? register_lock_class+0x102/0x980 [ 2860.370814][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 2860.376518][ C1] ? mark_lock+0x9a/0x350 [ 2860.380903][ C1] ? __lock_acquire+0x137a/0x2040 [ 2860.386013][ C1] copy_page_range+0x99f/0xe90 [ 2860.390862][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 2860.396198][ C1] ? __pfx_up_write+0x10/0x10 [ 2860.400913][ C1] ? __asan_memset+0x23/0x50 [ 2860.405535][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 2860.412343][ C1] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 2860.418635][ C1] copy_mm+0x11ea/0x1f30 [ 2860.422947][ C1] ? __pfx_copy_mm+0x10/0x10 [ 2860.427586][ C1] ? __init_rwsem+0x122/0x160 [ 2860.432293][ C1] ? copy_signal+0x549/0x670 [ 2860.436928][ C1] copy_process+0x187c/0x3e10 [ 2860.441657][ C1] ? copy_process+0x9fa/0x3e10 [ 2860.446477][ C1] ? __pfx_copy_process+0x10/0x10 [ 2860.451556][ C1] kernel_clone+0x223/0x880 [ 2860.456105][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 2860.461193][ C1] __x64_sys_clone+0x258/0x2a0 [ 2860.466002][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 2860.471411][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2860.477441][ C1] ? exc_page_fault+0x590/0x8c0 [ 2860.482423][ C1] ? do_syscall_64+0xb6/0x230 [ 2860.487137][ C1] do_syscall_64+0xf3/0x230 [ 2860.491670][ C1] ? clear_bhb_loop+0x35/0x90 [ 2860.496411][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2860.502340][ C1] RIP: 0033:0x7f878d3706d3 [ 2860.506790][ C1] RSP: 002b:00007ffe12967128 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2860.515240][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f878d3706d3 [ 2860.523244][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2860.531246][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2860.539243][ C1] R10: 00005555805387d0 R11: 0000000000000246 R12: 0000000000000000 [ 2860.547242][ C1] R13: 000055558054b590 R14: 000000000029e496 R15: 00007ffe129672b0 [ 2860.555786][ C1] [ 2860.558832][ C1] task:kworker/u8:23 state:R running task stack:21008 pid:21616 tgid:21616 ppid:2 flags:0x00004000 [ 2860.570647][ C1] Workqueue: bat_events batadv_nc_worker [ 2860.576337][ C1] Call Trace: [ 2860.579638][ C1] [ 2860.582603][ C1] __schedule+0x17ae/0x4a10 [ 2860.587184][ C1] ? __pfx___schedule+0x10/0x10 [ 2860.592083][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2860.598119][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 2860.603452][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 2860.608611][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2860.614399][ C1] irqentry_exit+0x5e/0x90 [ 2860.618863][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2860.624380][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 2860.629722][ C1] Code: 2b 00 74 08 4c 89 f7 e8 fa d9 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 2860.649379][ C1] RSP: 0018:ffffc90004af79e0 EFLAGS: 00000206 [ 2860.655495][ C1] RAX: 0000000000000001 RBX: 1ffff9200095ef48 RCX: 9faf07fd69866f00 [ 2860.663501][ C1] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f99c0 [ 2860.671679][ C1] RBP: ffffc90004af7b40 R08: ffffffff934f4847 R09: 1ffffffff269e908 [ 2860.679683][ C1] R10: dffffc0000000000 R11: fffffbfff269e909 R12: 1ffff9200095ef44 [ 2860.687697][ C1] R13: dffffc0000000000 R14: ffffc90004af7a40 R15: 0000000000000246 [ 2860.695820][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2860.700898][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2860.705969][ C1] ? __pfx_lock_release+0x10/0x10 [ 2860.711041][ C1] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 2860.717172][ C1] batadv_nc_worker+0xec/0x610 [ 2860.721976][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2860.726950][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2860.731958][ C1] ? process_scheduled_works+0x945/0x1830 [ 2860.737725][ C1] process_scheduled_works+0xa2c/0x1830 [ 2860.743362][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2860.749391][ C1] ? assign_work+0x364/0x3d0 [ 2860.754023][ C1] worker_thread+0x86d/0xd10 [ 2860.758663][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2860.764607][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2860.769688][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2860.774837][ C1] kthread+0x2f0/0x390 [ 2860.778945][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2860.784093][ C1] ? __pfx_kthread+0x10/0x10 [ 2860.788736][ C1] ret_from_fork+0x4b/0x80 [ 2860.793192][ C1] ? __pfx_kthread+0x10/0x10 [ 2860.797823][ C1] ret_from_fork_asm+0x1a/0x30 [ 2860.802656][ C1] [ 2860.805788][ C1] task:syz-executor state:R running task stack:20432 pid:26633 tgid:26633 ppid:1 flags:0x00004006 [ 2860.817570][ C1] Call Trace: [ 2860.820894][ C1] [ 2860.823947][ C1] __schedule+0x17ae/0x4a10 [ 2860.828516][ C1] ? __pfx___schedule+0x10/0x10 [ 2860.833400][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 2860.838735][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2860.844842][ C1] ? kernel_text_address+0xa7/0xe0 [ 2860.850082][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 2860.855408][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 2860.860560][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2860.866336][ C1] irqentry_exit+0x5e/0x90 [ 2860.870779][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2860.876792][ C1] RIP: 0010:lock_release+0x658/0xa30 [ 2860.882118][ C1] Code: 3c 3b 00 74 08 4c 89 f7 e8 05 af 87 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 2860.901756][ C1] RSP: 0018:ffffc900040ff720 EFLAGS: 00000206 [ 2860.907859][ C1] RAX: 0000000000000001 RBX: 1ffff9200081fef6 RCX: ffffc900040ff703 [ 2860.915864][ C1] RDX: 0000000000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f99c0 [ 2860.923878][ C1] RBP: ffffc900040ff858 R08: ffffffff8ff6c86f R09: 1ffffffff1fed90d [ 2860.931890][ C1] R10: dffffc0000000000 R11: fffffbfff1fed90e R12: 1ffff9200081fef0 [ 2860.939887][ C1] R13: 0000000000000246 R14: ffffc900040ff7b0 R15: dffffc0000000000 [ 2860.947918][ C1] ? page_ext_put+0x97/0xc0 [ 2860.952461][ C1] ? __pfx_lock_release+0x10/0x10 [ 2860.957530][ C1] ? page_ext_get+0x20/0x2a0 [ 2860.962167][ C1] page_ext_put+0xa3/0xc0 [ 2860.966537][ C1] free_unref_page+0xd2d/0xea0 [ 2860.971341][ C1] vfree+0x186/0x2e0 [ 2860.975274][ C1] kcov_close+0x2b/0x50 [ 2860.979467][ C1] ? __pfx_kcov_close+0x10/0x10 [ 2860.984351][ C1] __fput+0x24a/0x8a0 [ 2860.988388][ C1] task_work_run+0x24f/0x310 [ 2860.993040][ C1] ? __pfx_task_work_run+0x10/0x10 [ 2860.998188][ C1] ? do_exit+0xa2a/0x27f0 [ 2861.002543][ C1] ? kmem_cache_free+0x145/0x350 [ 2861.007526][ C1] do_exit+0xa2f/0x27f0 [ 2861.011723][ C1] ? __pfx_do_exit+0x10/0x10 [ 2861.016345][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2861.021761][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2861.027785][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2861.034150][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 2861.039305][ C1] do_group_exit+0x207/0x2c0 [ 2861.043923][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2861.049159][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2861.054403][ C1] get_signal+0x1695/0x1730 [ 2861.058952][ C1] ? __pfx_vfs_read+0x10/0x10 [ 2861.063688][ C1] ? __pfx_get_signal+0x10/0x10 [ 2861.068589][ C1] arch_do_signal_or_restart+0x96/0x860 [ 2861.074180][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2861.080370][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2861.086405][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2861.092170][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 2861.097852][ C1] do_syscall_64+0x100/0x230 [ 2861.102474][ C1] ? clear_bhb_loop+0x35/0x90 [ 2861.107217][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2861.113148][ C1] RIP: 0033:0x7fbf855788bc [ 2861.117596][ C1] RSP: 002b:00007ffcd192ad80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2861.126053][ C1] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fbf855788bc [ 2861.134070][ C1] RDX: 0000000000000028 RSI: 00007ffcd192ae30 RDI: 00000000000000f9 [ 2861.142089][ C1] RBP: 00007ffcd192addc R08: 0000000000000000 R09: 0079746972756365 [ 2861.150097][ C1] R10: 00007fbf856e87e0 R11: 0000000000000246 R12: 000055555ee115eb [ 2861.158098][ C1] R13: 000055555ee11590 R14: 000000000029dae1 R15: 00007ffcd192ae30 [ 2861.166124][ C1] [ 2861.169170][ C1] rcu: rcu_preempt kthread starved for 10593 jiffies! g246957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2861.180478][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2861.190486][ C1] rcu: RCU grace-period kthread stack dump: [ 2861.196404][ C1] task:rcu_preempt state:R running task stack:26128 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2861.208186][ C1] Call Trace: [ 2861.211495][ C1] [ 2861.214458][ C1] __schedule+0x17ae/0x4a10 [ 2861.219037][ C1] ? __pfx___schedule+0x10/0x10 [ 2861.223932][ C1] ? __pfx_lock_release+0x10/0x10 [ 2861.228993][ C1] ? __asan_memset+0x23/0x50 [ 2861.233627][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2861.239477][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2861.245847][ C1] ? schedule+0x90/0x320 [ 2861.250149][ C1] schedule+0x14b/0x320 [ 2861.254348][ C1] schedule_timeout+0x1be/0x310 [ 2861.259259][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2861.264668][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2861.269997][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 2861.275589][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 2861.280496][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2861.285874][ C1] ? rcu_gp_init+0x1256/0x1630 [ 2861.290679][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2861.295661][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 2861.301767][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2861.307089][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2861.313029][ C1] ? finish_swait+0xd4/0x1e0 [ 2861.317662][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 2861.322296][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2861.327795][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2861.333756][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2861.338837][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2861.344079][ C1] kthread+0x2f0/0x390 [ 2861.348191][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2861.353423][ C1] ? __pfx_kthread+0x10/0x10 [ 2861.358142][ C1] ret_from_fork+0x4b/0x80 [ 2861.362603][ C1] ? __pfx_kthread+0x10/0x10 [ 2861.367231][ C1] ret_from_fork_asm+0x1a/0x30 [ 2861.372050][ C1] [ 2861.375091][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2861.381519][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 2861.391880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2861.401963][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 2861.407411][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 dd 9a 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 2861.427141][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 2861.433244][ C1] RAX: ffff888017af0000 RBX: ffff88801d2f0064 RCX: 00000000162802a9 [ 2861.441241][ C1] RDX: 0000000000000001 RSI: ffff88801d2f0000 RDI: ffff88801d2f0064 [ 2861.449242][ C1] RBP: 000000000003a638 R08: ffff8880b9337c7b R09: 1ffff11017266f8f [ 2861.457329][ C1] R10: dffffc0000000000 R11: ffffffff8bae6cf0 R12: ffff88801a3f2800 [ 2861.465328][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eecc800 [ 2861.473322][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 2861.482280][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2861.488900][ C1] CR2: 000000002006b000 CR3: 00000000578e2000 CR4: 00000000003506f0 [ 2861.496909][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2861.504917][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2861.512921][ C1] Call Trace: [ 2861.516235][ C1] [ 2861.519110][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 2861.525503][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 2861.531193][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 2861.537035][ C1] ? __pfx_lock_release+0x10/0x10 [ 2861.542108][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 2861.548386][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 2861.553810][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2861.559489][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 2861.564726][ C1] ? update_process_times+0x1ce/0x230 [ 2861.570140][ C1] ? tick_nohz_handler+0x37c/0x500 [ 2861.575286][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2861.580782][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 2861.586189][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 2861.592226][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2861.597980][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 2861.604092][ C1] ? hrtimer_interrupt+0x396/0x990 [ 2861.609261][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 2861.615657][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2861.621508][ C1] [ 2861.624564][ C1] [ 2861.627544][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2861.633752][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 2861.639090][ C1] ? acpi_safe_halt+0x21/0x30 [ 2861.643806][ C1] acpi_idle_enter+0xe4/0x140 [ 2861.648534][ C1] cpuidle_enter_state+0x112/0x480 [ 2861.653701][ C1] ? __pfx_menu_select+0x10/0x10 [ 2861.658682][ C1] cpuidle_enter+0x5d/0xa0 [ 2861.663136][ C1] do_idle+0x375/0x5d0 [ 2861.667246][ C1] ? __pfx_do_idle+0x10/0x10 [ 2861.671895][ C1] cpu_startup_entry+0x42/0x60 [ 2861.676694][ C1] start_secondary+0x100/0x100 [ 2861.681496][ C1] common_startup_64+0x13e/0x147 [ 2861.686481][ C1]