last executing test programs: 12.843265611s ago: executing program 4 (id=777): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0x4a, 0x1, 0x40000006, 0x10}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030303030"], 0xb8) 12.770674873s ago: executing program 1 (id=778): socket$unix(0x1, 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e23, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffe, 0x3fce, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f0000000300), 0xa9, 0x4041) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mknod(0x0, 0x8001420, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000b00), 0x0, 0x2404c0e4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8], 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a54f61b0986eb5a528290500000000000021000000000000ebf800008000"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) 9.162903033s ago: executing program 4 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), 0x0}, 0x20) 9.026388288s ago: executing program 1 (id=789): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) 8.875019192s ago: executing program 2 (id=790): r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2100) 8.085336837s ago: executing program 4 (id=792): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2016}) 7.899879151s ago: executing program 2 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000380)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4008000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7aa, 0x0) sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) 7.798720772s ago: executing program 1 (id=795): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.40816765s ago: executing program 0 (id=797): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0x4a, 0x1, 0x40000006, 0x10}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030303030"], 0xb8) 6.151971035s ago: executing program 1 (id=799): socket$unix(0x1, 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e23, @broadcast}, {0x2, 0xfffd, @broadcast}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffe, 0x3fce, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f0000000300), 0xa9, 0x4041) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mknod(0x0, 0x8001420, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000b00), 0x0, 0x2404c0e4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8], 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x2, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a54f61b0986eb5a528290500000000000021000000000000ebf800008000"}}) get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3) 5.927772826s ago: executing program 3 (id=800): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x1c0980001, 0x1, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x200000000, 0x5, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, [0x0, 0x0, 0x6]}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000000000000000b600", @ANYRES32=r3, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a80140007"], 0xec}}, 0x0) 5.730052597s ago: executing program 3 (id=801): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x100, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000080)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 5.370727673s ago: executing program 4 (id=802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0x80a0000, 0xf000, 0xd, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x63, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0x81}, {0x8000000, 0x0, 0xb, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0x1, 0x1}, {0x100000, 0x5000, 0x8, 0x8, 0xfc, 0x6, 0x1, 0x7, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0xa}, {0xe6ef8000, 0x1000, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x1, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x1, 0x2, 0xe, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x0, 0x401]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.211386439s ago: executing program 2 (id=803): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x101403, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x60000800) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x80000000}}]}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x102, 0xffffffff}}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x4, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881090000000c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000500)={r2}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40012101) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.276977329s ago: executing program 3 (id=805): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x1, 0x40, 0x7f, 0x400, 0x0, 0x110027}) 4.188797567s ago: executing program 4 (id=806): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.187226851s ago: executing program 2 (id=807): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 2.798711021s ago: executing program 3 (id=808): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4000001}, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x7, 0xffff}, {0x5, 0x2}}, ["", "", "", ""]}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={r2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}}, 0x0, 0x0, 0x300, 0x0, 0x26}, 0x9c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x2c}}, 0x0) 2.756040489s ago: executing program 0 (id=809): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0xffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 2.665731623s ago: executing program 2 (id=810): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.616007178s ago: executing program 4 (id=811): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c0c4}, 0x0) 2.615242322s ago: executing program 0 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000085000000500000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.542601039s ago: executing program 3 (id=813): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) syz_fuse_handle_req(r6, &(0x7f0000002100)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x8, 0x6, 0x0, {0x3, 0x10000000000007, 0x0, 0x80000001, 0x0, 0x1, 0x256, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) 2.492437812s ago: executing program 2 (id=814): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0x4a, 0x1, 0x40000006, 0x10}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030303030"], 0xb8) 2.374679373s ago: executing program 0 (id=815): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x100, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000080)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 2.151751352s ago: executing program 1 (id=816): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') shutdown(r0, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x8) 1.421025182s ago: executing program 3 (id=817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000005c0)={{0x80a0000, 0xf000, 0xd, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x63, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0x81}, {0x8000000, 0x0, 0xb, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0x1, 0x1}, {0x100000, 0x5000, 0x8, 0x8, 0xfc, 0x6, 0x1, 0x7, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0xa}, {0xe6ef8000, 0x1000, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x1, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x1, 0x2, 0xe, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x0, 0x401]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_RUN(r5, 0xae80, 0x0) 905.363393ms ago: executing program 0 (id=818): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x100, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) 0s ago: executing program 1 (id=819): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x5, 0x101402) utime(&(0x7f0000000000)='.\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0904000000000000000002000000200004801c0001800b00010072656a65637400000c00028008000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a9bc28516306e3ea0dae37b0dfd97e2535414fbfd77e6e39b44fb613d274ef92d1b71a5f297d8ac108874d289e52b"], 0x74}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xd6c9}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x7]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x43b}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x1000000, 0x5e, 0x2000001, 0x4, 0x1c, 0x4}) kernel console output (not intermixed with test programs): : hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.725473][ T5885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.726913][ T5888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.732992][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.740450][ T5884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.748890][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.756826][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.761428][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.770453][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.778533][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.808171][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.468321][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 341.622126][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 341.636136][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 341.662592][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 341.738661][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 341.749644][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.757328][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.764867][ T5874] bridge_slave_0: entered allmulticast mode [ 341.772174][ T5874] bridge_slave_0: entered promiscuous mode [ 341.839153][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.846375][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.853603][ T5874] bridge_slave_1: entered allmulticast mode [ 341.860846][ T5874] bridge_slave_1: entered promiscuous mode [ 341.984687][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.042201][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.075539][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.082865][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.090186][ T5868] bridge_slave_0: entered allmulticast mode [ 342.097186][ T5868] bridge_slave_0: entered promiscuous mode [ 342.104998][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.112240][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.119375][ T5871] bridge_slave_0: entered allmulticast mode [ 342.127273][ T5871] bridge_slave_0: entered promiscuous mode [ 342.161437][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.168649][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.176170][ T5867] bridge_slave_0: entered allmulticast mode [ 342.183215][ T5867] bridge_slave_0: entered promiscuous mode [ 342.191412][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.198723][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.206085][ T5868] bridge_slave_1: entered allmulticast mode [ 342.213302][ T5868] bridge_slave_1: entered promiscuous mode [ 342.220808][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.227958][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.235302][ T5871] bridge_slave_1: entered allmulticast mode [ 342.242397][ T5871] bridge_slave_1: entered promiscuous mode [ 342.249319][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.256697][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.264024][ T5870] bridge_slave_0: entered allmulticast mode [ 342.271217][ T5870] bridge_slave_0: entered promiscuous mode [ 342.281578][ T5874] team0: Port device team_slave_0 added [ 342.288254][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.295449][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.302932][ T5867] bridge_slave_1: entered allmulticast mode [ 342.310199][ T5867] bridge_slave_1: entered promiscuous mode [ 342.348219][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.355621][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.362843][ T5870] bridge_slave_1: entered allmulticast mode [ 342.369987][ T5870] bridge_slave_1: entered promiscuous mode [ 342.378519][ T5874] team0: Port device team_slave_1 added [ 342.400105][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.425514][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.474994][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.498648][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.527410][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.587728][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.601228][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.615731][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.622975][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.649056][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.662842][ T5867] team0: Port device team_slave_0 added [ 342.670974][ T5868] team0: Port device team_slave_0 added [ 342.678825][ T5867] team0: Port device team_slave_1 added [ 342.700317][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.710832][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.717780][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.744128][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.768808][ T5868] team0: Port device team_slave_1 added [ 342.831897][ T5871] team0: Port device team_slave_0 added [ 342.850800][ T5881] Bluetooth: hci2: command tx timeout [ 342.850900][ T52] Bluetooth: hci0: command tx timeout [ 342.856503][ T5881] Bluetooth: hci3: command tx timeout [ 342.862336][ T5148] Bluetooth: hci1: command tx timeout [ 342.867910][ T5873] Bluetooth: hci4: command tx timeout [ 342.875170][ T5870] team0: Port device team_slave_0 added [ 342.885940][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.893152][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.919340][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.943853][ T5871] team0: Port device team_slave_1 added [ 342.953122][ T5870] team0: Port device team_slave_1 added [ 342.973517][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.980526][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.006833][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.019081][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.026269][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.052297][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.110070][ T5874] hsr_slave_0: entered promiscuous mode [ 343.116939][ T5874] hsr_slave_1: entered promiscuous mode [ 343.124781][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.131843][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.158362][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.195177][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.202189][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.228641][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.241657][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.248619][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.275293][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.294187][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.301380][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.327436][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.340061][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.347030][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.373007][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.502827][ T5867] hsr_slave_0: entered promiscuous mode [ 343.509209][ T5867] hsr_slave_1: entered promiscuous mode [ 343.515877][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 343.522009][ T5867] Cannot create hsr debugfs directory [ 343.554987][ T5871] hsr_slave_0: entered promiscuous mode [ 343.561402][ T5871] hsr_slave_1: entered promiscuous mode [ 343.567498][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 343.573392][ T5871] Cannot create hsr debugfs directory [ 343.655733][ T5868] hsr_slave_0: entered promiscuous mode [ 343.662321][ T5868] hsr_slave_1: entered promiscuous mode [ 343.668407][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 343.674573][ T5868] Cannot create hsr debugfs directory [ 343.717678][ T5870] hsr_slave_0: entered promiscuous mode [ 343.724844][ T5870] hsr_slave_1: entered promiscuous mode [ 343.731563][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 343.737299][ T5870] Cannot create hsr debugfs directory [ 344.224813][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.238018][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.258657][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.282814][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.339489][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 344.349279][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 344.375764][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.386526][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.468401][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.482924][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.513212][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.523746][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.625593][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 344.657222][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 344.668912][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 344.684432][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 344.725672][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.781630][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 344.793375][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 344.805046][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.816296][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.871944][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.884294][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.930104][ T5873] Bluetooth: hci3: command tx timeout [ 344.935553][ T5873] Bluetooth: hci0: command tx timeout [ 344.943006][ T5883] Bluetooth: hci4: command tx timeout [ 344.943024][ T5148] Bluetooth: hci2: command tx timeout [ 344.948517][ T5881] Bluetooth: hci1: command tx timeout [ 344.974749][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.982010][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.013543][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.020684][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.049470][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.074037][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.125030][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.132453][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.146016][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.165014][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.172153][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.196747][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.222080][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.240713][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.247903][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.259274][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.266450][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.325977][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.371610][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.378814][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.414849][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.422272][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.449080][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.521649][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.565782][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.573019][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.637695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.644929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.686055][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.937272][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.976679][ T5874] veth0_vlan: entered promiscuous mode [ 346.025067][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.085106][ T5874] veth1_vlan: entered promiscuous mode [ 346.126175][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.178664][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.257510][ T5874] veth0_macvtap: entered promiscuous mode [ 346.293176][ T5874] veth1_macvtap: entered promiscuous mode [ 346.328932][ T5871] veth0_vlan: entered promiscuous mode [ 346.354213][ T5867] veth0_vlan: entered promiscuous mode [ 346.377833][ T5871] veth1_vlan: entered promiscuous mode [ 346.399189][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.435800][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.477037][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.503799][ T5867] veth1_vlan: entered promiscuous mode [ 346.522546][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.537201][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.565423][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.574670][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.616112][ T5871] veth0_macvtap: entered promiscuous mode [ 346.642476][ T5871] veth1_macvtap: entered promiscuous mode [ 346.706662][ T5867] veth0_macvtap: entered promiscuous mode [ 346.718774][ T5867] veth1_macvtap: entered promiscuous mode [ 346.734667][ T5868] veth0_vlan: entered promiscuous mode [ 346.758882][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.779024][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.816259][ T5868] veth1_vlan: entered promiscuous mode [ 346.841307][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.856259][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.872349][ T5870] veth0_vlan: entered promiscuous mode [ 346.882444][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.896848][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.900627][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.913289][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.934015][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.959658][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.989288][ T5870] veth1_vlan: entered promiscuous mode [ 347.004610][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.010212][ T5873] Bluetooth: hci0: command tx timeout [ 347.014833][ T52] Bluetooth: hci3: command tx timeout [ 347.017852][ T5881] Bluetooth: hci1: command tx timeout [ 347.023359][ T52] Bluetooth: hci2: command tx timeout [ 347.034168][ T5148] Bluetooth: hci4: command tx timeout [ 347.035299][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.052188][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.061273][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.082562][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.091920][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.190905][ T5868] veth0_macvtap: entered promiscuous mode [ 347.194376][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 347.247375][ T5868] veth1_macvtap: entered promiscuous mode [ 347.297149][ T5870] veth0_macvtap: entered promiscuous mode [ 347.337634][ T5870] veth1_macvtap: entered promiscuous mode [ 347.346329][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.359882][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.380547][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.394295][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.435065][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.468615][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.485285][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.525349][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.533824][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.544165][ T5969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.554574][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.562835][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.591810][ T5969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.610257][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.619008][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.652005][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.695298][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.779419][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.791318][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.861300][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.027460][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.041146][ T799] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 348.053172][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.097474][ T5948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.134493][ T5948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.212347][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.231754][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 348.249997][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.257191][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.318408][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.330989][ T799] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 348.336870][ T6011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.348081][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.367180][ T799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.430686][ T799] usb 2-1: config 0 descriptor?? [ 348.844000][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 348.876442][ T799] usbhid 2-1:0.0: can't add hid device: -71 [ 348.886168][ T799] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 348.910139][ T799] usb 2-1: USB disconnect, device number 2 [ 349.061974][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 349.085048][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 349.094696][ T52] Bluetooth: hci1: command tx timeout [ 349.094734][ T52] Bluetooth: hci0: command tx timeout [ 349.106091][ T5148] Bluetooth: hci3: command tx timeout [ 349.108238][ T5881] Bluetooth: hci2: command tx timeout [ 349.112998][ T5148] Bluetooth: hci4: command tx timeout [ 349.192763][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 349.270943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 349.300947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 349.519845][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.909342][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.028272][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.059819][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.144093][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 350.176277][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.306855][ T6052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.646979][ T9] usb 3-1: USB disconnect, device number 2 [ 351.536683][ T6064] netlink: 128 bytes leftover after parsing attributes in process `syz.4.26'. [ 351.610718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 351.622121][ T30] audit: type=1326 audit(1760503242.782:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 351.650393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 351.781624][ T6066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.27'. [ 351.805892][ T6066] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 351.836593][ T30] audit: type=1326 audit(1760503242.882:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 351.884356][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.892822][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.965420][ T30] audit: type=1326 audit(1760503242.882:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.024220][ T30] audit: type=1326 audit(1760503242.882:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.086498][ T30] audit: type=1326 audit(1760503242.892:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.121709][ T6068] Zero length message leads to an empty skb [ 352.132348][ T6070] mmap: syz.0.24 (6070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 352.166150][ T30] audit: type=1326 audit(1760503242.892:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.198950][ T30] audit: type=1326 audit(1760503242.892:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.222724][ T30] audit: type=1326 audit(1760503242.892:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.276536][ T30] audit: type=1326 audit(1760503242.892:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.357114][ T30] audit: type=1326 audit(1760503242.892:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.4.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 352.457682][ T6074] qrtr: Invalid version 0 [ 352.572450][ T6078] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 353.016880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 353.220090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 353.410270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.545542][ T6098] sctp: [Deprecated]: syz.3.33 (pid 6098) Use of int in maxseg socket option. [ 353.545542][ T6098] Use struct sctp_assoc_value instead [ 353.620253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 353.653729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 354.518619][ T6113] qrtr: Invalid version 0 [ 354.787048][ T6119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.44'. [ 355.050119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 355.294597][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.51'. [ 355.304349][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.51'. [ 355.435866][ T6140] qrtr: Invalid version 0 [ 355.813058][ T6155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.58'. [ 356.397400][ T6164] sctp: [Deprecated]: syz.2.60 (pid 6164) Use of int in maxseg socket option. [ 356.397400][ T6164] Use struct sctp_assoc_value instead [ 356.400394][ T6163] syz.0.61 uses obsolete (PF_INET,SOCK_PACKET) [ 357.108375][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.69'. [ 357.290187][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 357.290203][ T30] audit: type=1326 audit(1760503248.442:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 357.466553][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'. [ 358.546467][ T6217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.573645][ T6217] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 358.847149][ T6217] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 358.933429][ T6217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.941074][ T6217] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 359.022699][ T6238] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.030417][ T6217] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 359.214528][ T6217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 359.224312][ T6217] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 359.323579][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 359.380514][ T6217] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 359.404422][ T6217] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.422256][ T6217] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 359.440077][ T6217] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 359.462833][ T6217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.474803][ T6217] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 359.498010][ T6217] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 360.114858][ T6250] sctp: [Deprecated]: syz.1.91 (pid 6250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.114858][ T6250] Use struct sctp_sack_info instead [ 360.488743][ T6256] cgroup: fork rejected by pids controller in /syz1 [ 360.530111][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 360.920163][ T5989] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 360.940602][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.971086][ T5989] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.202465][ T6267] fido_id[6267]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 361.249863][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.315722][ T5948] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.469248][ T5948] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.499948][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.562521][ T5948] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.671452][ T5948] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.717589][ T6272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.101'. [ 361.904936][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.3.103'. [ 362.026975][ T6282] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 362.182672][ T5948] bridge_slave_1: left allmulticast mode [ 362.188550][ T5948] bridge_slave_1: left promiscuous mode [ 362.229813][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.332637][ T5948] bridge_slave_0: left allmulticast mode [ 362.373129][ T5948] bridge_slave_0: left promiscuous mode [ 362.378969][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.394128][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 362.423009][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.610023][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.661599][ T6296] fido_id[6296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 362.728515][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.806437][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.826789][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.836002][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.846772][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.015054][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.228714][ T6319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.113'. [ 363.331860][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.569828][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.995991][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.021888][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.036094][ T5948] bond0 (unregistering): Released all slaves [ 364.084013][ T6331] fuse: Bad value for 'fd' [ 364.223588][ T6333] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 364.622838][ T5948] hsr_slave_0: left promiscuous mode [ 364.647533][ T5948] hsr_slave_1: left promiscuous mode [ 364.655981][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.664177][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.673313][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.681444][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.715416][ T5948] veth1_macvtap: left promiscuous mode [ 364.721973][ T5948] veth0_macvtap: left promiscuous mode [ 364.727979][ T5948] veth1_vlan: left promiscuous mode [ 364.734137][ T5948] veth0_vlan: left promiscuous mode [ 364.934411][ T5148] Bluetooth: hci4: command tx timeout [ 365.089994][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.255774][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 365.289256][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 365.419881][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.650098][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 366.036865][ T6321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.043879][ T6321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.052011][ T6321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.058191][ T6321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.065989][ T6321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 366.072586][ T6321] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 366.083985][ T6321] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 366.220162][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.481769][ T6385] netlink: 524 bytes leftover after parsing attributes in process `syz.4.122'. [ 366.822623][ T6306] chnl_net:caif_netlink_parms(): no params data found [ 366.897638][ T6388] sctp: [Deprecated]: syz.2.120 (pid 6388) Use of int in maxseg socket option. [ 366.897638][ T6388] Use struct sctp_assoc_value instead [ 367.731909][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.761630][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.768839][ T6306] bridge_slave_0: entered allmulticast mode [ 367.866925][ T6306] bridge_slave_0: entered promiscuous mode [ 367.952256][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.970522][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.982829][ T6306] bridge_slave_1: entered allmulticast mode [ 367.990575][ T6306] bridge_slave_1: entered promiscuous mode [ 367.997946][ T6410] netlink: 48 bytes leftover after parsing attributes in process `syz.0.126'. [ 368.150258][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.156433][ T52] Bluetooth: hci4: command 0x041b tx timeout [ 368.162608][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.168715][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.732120][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.794229][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.986677][ T6306] team0: Port device team_slave_0 added [ 369.114974][ T6306] team0: Port device team_slave_1 added [ 369.563489][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.625143][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.775524][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.790588][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.797650][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.829863][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.072840][ T6306] hsr_slave_0: entered promiscuous mode [ 370.107672][ T6306] hsr_slave_1: entered promiscuous mode [ 370.210123][ T5148] Bluetooth: hci4: command 0x041b tx timeout [ 371.760848][ T6306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 371.781154][ T6306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.807174][ T6306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.827766][ T6306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.308334][ T52] Bluetooth: hci4: command 0x041b tx timeout [ 372.450364][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.457550][ T6441] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 372.514048][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.568183][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.704834][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.712167][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.788381][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.795640][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.121927][ T6441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 373.129093][ T6441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 373.144126][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.153144][ T6441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 373.159328][ T6441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 373.292055][ T6498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.137'. [ 373.415410][ T6306] veth0_vlan: entered promiscuous mode [ 373.525935][ T6306] veth1_vlan: entered promiscuous mode [ 373.622428][ T6306] veth0_macvtap: entered promiscuous mode [ 373.693108][ T6306] veth1_macvtap: entered promiscuous mode [ 373.779110][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.823086][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.863652][ T3434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.894637][ T5969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.972810][ T5969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.999801][ T5969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.238191][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.258379][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.530230][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 375.037458][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.078807][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.170459][ T5148] Bluetooth: hci4: command 0x041b tx timeout [ 375.176597][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout [ 375.182999][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.171033][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.177177][ T6536] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 377.229600][ T6536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 377.238280][ T6536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 377.245166][ T6536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.254288][ T52] Bluetooth: hci4: command 0x041b tx timeout [ 377.260712][ T6536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.663731][ T6583] tipc: Started in network mode [ 377.672264][ T6583] tipc: Node identity 02226b02b8eb, cluster identity 4711 [ 377.696551][ T6583] tipc: Enabled bearer , priority 0 [ 377.736317][ T6583] tipc: Resetting bearer [ 377.887700][ T6579] tipc: Disabling bearer [ 378.696143][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711618][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.084423][ T6620] binder: 6616:6620 ioctl c0046209 ffffffffff600000 returned -22 [ 379.189870][ T5986] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 379.267899][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 379.274651][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 379.280724][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 379.332349][ T5148] Bluetooth: hci4: command 0x041b tx timeout [ 379.361581][ T5986] usb 5-1: config 0 has no interfaces? [ 379.367229][ T5986] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 379.533563][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.581548][ T5986] usb 5-1: config 0 descriptor?? [ 379.635042][ T6634] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 379.813902][ T6638] wg2: entered promiscuous mode [ 379.827752][ T6638] wg2: entered allmulticast mode [ 379.939380][ T6641] bond_slave_0: entered promiscuous mode [ 379.945180][ T6641] bond_slave_1: entered promiscuous mode [ 380.075465][ T6641] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.144001][ T6641] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 380.204601][ T9] usb 5-1: USB disconnect, device number 2 [ 381.297409][ T5986] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 381.320398][ T5986] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 381.415882][ T5148] Bluetooth: hci4: command 0x041b tx timeout [ 381.536104][ T6657] fido_id[6657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 381.754084][ T6663] sctp: [Deprecated]: syz.2.174 (pid 6663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.754084][ T6663] Use struct sctp_sack_info instead [ 381.868969][ T6670] sctp: [Deprecated]: syz.0.176 (pid 6670) Use of int in max_burst socket option. [ 381.868969][ T6670] Use struct sctp_assoc_value instead [ 382.246511][ T6680] process 'syz.4.172' launched './file0' with NULL argv: empty string added [ 383.489849][ T5148] Bluetooth: hci4: command 0x041b tx timeout [ 383.508702][ T5875] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 383.525322][ T5875] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 383.590748][ T6701] loop2: detected capacity change from 0 to 7 [ 383.673019][ T5871] Dev loop2: unable to read RDB block 7 [ 383.678712][ T5871] loop2: AHDI p1 p2 p3 [ 383.730068][ T5871] loop2: partition table partially beyond EOD, truncated [ 383.828109][ T6702] fido_id[6702]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 383.867020][ T5871] loop2: p1 start 1601398130 is beyond EOD, truncated [ 383.923602][ T6710] binder: 6703:6710 ioctl 4018620d 0 returned -22 [ 384.286081][ T5871] loop2: p2 start 1702059890 is beyond EOD, truncated [ 384.764362][ T6714] sctp: [Deprecated]: syz.0.188 (pid 6714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.764362][ T6714] Use struct sctp_sack_info instead [ 386.005858][ T6729] syzkaller0: entered promiscuous mode [ 386.013371][ T6729] syzkaller0: entered allmulticast mode [ 386.553918][ T6738] syzkaller0: entered promiscuous mode [ 386.559442][ T6738] syzkaller0: entered allmulticast mode [ 386.564884][ T6746] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 387.076832][ T799] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 387.135940][ T799] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.313629][ T6754] fido_id[6754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 387.624383][ T6764] loop2: detected capacity change from 0 to 7 [ 387.643740][ T6764] Dev loop2: unable to read RDB block 7 [ 387.676248][ T6764] loop2: AHDI p1 p2 p3 [ 387.694367][ T6764] loop2: partition table partially beyond EOD, truncated [ 387.706596][ T6764] loop2: p1 start 1601398130 is beyond EOD, truncated [ 387.719347][ T6764] loop2: p2 start 1702059890 is beyond EOD, truncated [ 387.894612][ T6768] sctp: [Deprecated]: syz.3.201 (pid 6768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.894612][ T6768] Use struct sctp_sack_info instead [ 389.918031][ T5986] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 389.926977][ T5986] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.078468][ T6795] fido_id[6795]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 392.229028][ T5986] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 392.305063][ T5986] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.474751][ T6833] fido_id[6833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 393.134822][ T6841] sctp: [Deprecated]: syz.1.222 (pid 6841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.134822][ T6841] Use struct sctp_sack_info instead [ 393.536383][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'. [ 394.365747][ T6857] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 394.816024][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 394.835354][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.167197][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 395.402820][ T6865] fido_id[6865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 395.853880][ T30] audit: type=1326 audit(1760503287.002:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 395.974995][ T30] audit: type=1326 audit(1760503287.002:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.080235][ T30] audit: type=1326 audit(1760503287.002:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.179807][ T30] audit: type=1326 audit(1760503287.012:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.279110][ T30] audit: type=1326 audit(1760503287.012:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.382372][ T30] audit: type=1326 audit(1760503287.062:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.542393][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 396.639347][ T30] audit: type=1326 audit(1760503287.062:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.661964][ T30] audit: type=1326 audit(1760503287.062:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.740589][ T30] audit: type=1326 audit(1760503287.062:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 396.786063][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 397.235338][ T30] audit: type=1326 audit(1760503287.062:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 397.260161][ T9] IPVS: starting estimator thread 0... [ 397.359844][ T5986] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 397.367520][ T6900] IPVS: using max 35 ests per chain, 84000 per kthread [ 397.504388][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 397.524161][ T6904] fido_id[6904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 397.615663][ T5986] usb 3-1: config 0 has no interfaces? [ 397.631799][ T5986] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 397.651007][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.669323][ T5986] usb 3-1: Product: syz [ 397.674655][ T5986] usb 3-1: Manufacturer: syz [ 397.679500][ T5986] usb 3-1: SerialNumber: syz [ 397.707084][ T5986] usb 3-1: config 0 descriptor?? [ 400.112244][ T5875] usb 3-1: USB disconnect, device number 3 [ 400.235179][ T6934] netlink: 128 bytes leftover after parsing attributes in process `syz.2.253'. [ 401.274995][ T6947] evm: overlay not supported [ 402.722605][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 402.991617][ T6970] tipc: Enabling of bearer rejected, failed to enable media [ 403.648526][ T6992] netlink: 128 bytes leftover after parsing attributes in process `syz.1.265'. [ 403.686234][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 403.686250][ T30] audit: type=1326 audit(1760503294.842:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 403.722202][ T30] audit: type=1326 audit(1760503294.842:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 403.929873][ T30] audit: type=1326 audit(1760503294.842:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.024723][ T30] audit: type=1326 audit(1760503294.842:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.057200][ T7002] netlink: 580 bytes leftover after parsing attributes in process `syz.3.270'. [ 404.076789][ T30] audit: type=1326 audit(1760503294.842:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.130043][ T30] audit: type=1326 audit(1760503294.862:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.159887][ T30] audit: type=1326 audit(1760503294.862:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.185616][ T30] audit: type=1326 audit(1760503294.862:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.208291][ T30] audit: type=1326 audit(1760503294.862:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.234467][ T30] audit: type=1326 audit(1760503294.862:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3b78eec9 code=0x7ffc0000 [ 404.268964][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'. [ 404.619106][ T7018] tipc: Enabling of bearer rejected, failed to enable media [ 406.080088][ T7039] netlink: 256 bytes leftover after parsing attributes in process `syz.3.278'. [ 406.166947][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 406.449982][ T7044] netlink: 128 bytes leftover after parsing attributes in process `syz.1.279'. [ 407.040056][ T7052] netlink: 580 bytes leftover after parsing attributes in process `syz.0.282'. [ 408.426213][ T7059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.440117][ T7059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.598971][ T7059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 408.620825][ T7059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.629159][ T7059] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.142733][ T7081] tipc: Enabling of bearer rejected, failed to enable media [ 410.624005][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.630356][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.699915][ T52] Bluetooth: hci4: command 0x041b tx timeout [ 410.706005][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 410.712063][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 411.146675][ T7104] netlink: 128 bytes leftover after parsing attributes in process `syz.3.295'. [ 411.167486][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 411.167506][ T30] audit: type=1326 audit(1760503302.322:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 411.281936][ T30] audit: type=1326 audit(1760503302.322:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 411.391660][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 411.785466][ T30] audit: type=1326 audit(1760503302.322:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 411.808426][ T30] audit: type=1326 audit(1760503302.322:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 411.837794][ T30] audit: type=1326 audit(1760503302.322:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 411.912920][ T30] audit: type=1326 audit(1760503302.402:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 412.003406][ T30] audit: type=1326 audit(1760503302.412:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 412.025807][ T30] audit: type=1326 audit(1760503302.412:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 412.058761][ T30] audit: type=1326 audit(1760503302.412:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 412.086335][ T30] audit: type=1326 audit(1760503302.412:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 413.541143][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 413.699859][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 413.709868][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.742630][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.764003][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.792452][ T5812] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 413.815717][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.860103][ T5812] usb 3-1: config 0 descriptor?? [ 414.152524][ T7151] ptrace attach of "./syz-executor exec"[6306] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 415.110872][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.308'. [ 415.358094][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 415.894872][ T5812] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 415.905682][ T5812] usb 3-1: USB disconnect, device number 4 [ 416.211069][ T7178] tipc: Started in network mode [ 416.220289][ T7178] tipc: Node identity 1661bfddaefb, cluster identity 4711 [ 416.227608][ T7178] tipc: Enabled bearer , priority 0 [ 416.332494][ T7178] tipc: Resetting bearer [ 416.417331][ T7176] tipc: Disabling bearer [ 418.716340][ T7210] input: syz1 as /devices/virtual/input/input7 [ 420.153252][ T7217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 420.447500][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.325'. [ 420.462909][ T7222] sctp: [Deprecated]: syz.1.324 (pid 7222) Use of int in max_burst socket option. [ 420.462909][ T7222] Use struct sctp_assoc_value instead [ 420.577701][ T7227] netlink: 34 bytes leftover after parsing attributes in process `syz.0.325'. [ 422.168100][ T7266] netlink: 64 bytes leftover after parsing attributes in process `syz.4.333'. [ 422.391376][ T7269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.482362][ T7269] vim2m vim2m.0: vidioc_s_fmt queue busy [ 423.725814][ T7256] block device autoloading is deprecated and will be removed. [ 423.775978][ T7256] lo speed is unknown, defaulting to 1000 [ 423.783671][ T7256] lo speed is unknown, defaulting to 1000 [ 423.793537][ T7256] lo speed is unknown, defaulting to 1000 [ 423.853347][ T7256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 423.919011][ T7256] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 424.217748][ T7256] lo speed is unknown, defaulting to 1000 [ 424.225856][ T7256] lo speed is unknown, defaulting to 1000 [ 424.234364][ T7256] lo speed is unknown, defaulting to 1000 [ 424.256822][ T7256] lo speed is unknown, defaulting to 1000 [ 424.283325][ T7255] capability: warning: `syz.0.330' uses 32-bit capabilities (legacy support in use) [ 424.283779][ T7256] lo speed is unknown, defaulting to 1000 [ 424.491126][ T5971] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 424.882579][ T5971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.895065][ T5971] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 424.906956][ T5971] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 424.919310][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.938405][ T5971] usb 5-1: config 0 descriptor?? [ 424.952203][ T5971] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 424.959265][ T5971] dvb-usb: bulk message failed: -22 (3/0) [ 424.980814][ T7287] sctp: [Deprecated]: syz.3.340 (pid 7287) Use of int in max_burst socket option. [ 424.980814][ T7287] Use struct sctp_assoc_value instead [ 425.046380][ T5971] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 425.071409][ T5971] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 425.086246][ T5971] usb 5-1: media controller created [ 425.099307][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.276671][ T5971] dvb-usb: bulk message failed: -22 (6/0) [ 425.283739][ T5971] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 425.323780][ T5971] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 425.950688][ T5971] dvb-usb: schedule remote query interval to 150 msecs. [ 425.958116][ T5971] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 426.111714][ T5971] dvb-usb: bulk message failed: -22 (1/0) [ 426.166723][ T5971] dvb-usb: error while querying for an remote control event. [ 426.205157][ T7292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 426.282662][ T7292] netlink: 34 bytes leftover after parsing attributes in process `syz.3.341'. [ 426.379826][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 426.385689][ T5812] dvb-usb: error while querying for an remote control event. [ 426.661533][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 426.667324][ T5812] dvb-usb: error while querying for an remote control event. [ 426.889885][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 426.889936][ T5812] dvb-usb: error while querying for an remote control event. [ 427.573258][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 427.573296][ T5812] dvb-usb: error while querying for an remote control event. [ 427.614369][ T7305] Bluetooth: MGMT ver 1.23 [ 427.730151][ T5971] dvb-usb: bulk message failed: -22 (1/0) [ 427.730236][ T5971] dvb-usb: error while querying for an remote control event. [ 427.889851][ T5971] dvb-usb: bulk message failed: -22 (1/0) [ 427.889875][ T5971] dvb-usb: error while querying for an remote control event. [ 428.049913][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 428.049950][ T5812] dvb-usb: error while querying for an remote control event. [ 428.685369][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 428.685395][ T5812] dvb-usb: error while querying for an remote control event. [ 428.858564][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 428.858587][ T5812] dvb-usb: error while querying for an remote control event. [ 429.000847][ T7302] tty tty2: ldisc open failed (-12), clearing slot 1 [ 429.045028][ T5971] dvb-usb: bulk message failed: -22 (1/0) [ 429.052358][ T5971] dvb-usb: error while querying for an remote control event. [ 429.242199][ T799] usb 5-1: USB disconnect, device number 3 [ 429.427319][ T5812] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 429.436523][ T799] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 429.463302][ T7324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 429.621422][ T5812] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 430.776289][ T7335] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 430.868772][ T7342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.509864][ T7369] syzkaller0: entered promiscuous mode [ 433.545337][ T7369] syzkaller0: entered allmulticast mode [ 433.571286][ T7372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.360'. [ 435.021872][ T7394] netlink: 64 bytes leftover after parsing attributes in process `syz.2.364'. [ 435.171356][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.178780][ T7395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.187133][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.194330][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.307586][ T7395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.385833][ T7395] vim2m vim2m.0: vidioc_s_fmt queue busy [ 436.647029][ T7411] binder: 7410:7411 ioctl c0306201 0 returned -14 [ 436.940055][ T7421] sctp: [Deprecated]: syz.3.372 (pid 7421) Use of int in max_burst socket option. [ 436.940055][ T7421] Use struct sctp_assoc_value instead [ 438.645602][ T7435] kvm: kvm [7427]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6570000007f [ 439.694833][ T7457] sctp: [Deprecated]: syz.2.380 (pid 7457) Use of int in maxseg socket option. [ 439.694833][ T7457] Use struct sctp_assoc_value instead [ 440.152444][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162088][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.307693][ T7490] netlink: 128 bytes leftover after parsing attributes in process `syz.0.391'. [ 441.331552][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 441.331568][ T30] audit: type=1326 audit(1760503332.492:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 441.399969][ T30] audit: type=1326 audit(1760503332.522:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 441.474140][ T30] audit: type=1326 audit(1760503332.522:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 441.497748][ T30] audit: type=1326 audit(1760503332.522:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 441.543724][ T30] audit: type=1326 audit(1760503332.522:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 441.798799][ T30] audit: type=1326 audit(1760503332.522:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 441.822209][ T30] audit: type=1326 audit(1760503332.532:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 441.864338][ T30] audit: type=1326 audit(1760503332.532:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 442.413226][ T30] audit: type=1326 audit(1760503332.532:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 442.439640][ T30] audit: type=1326 audit(1760503332.532:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 442.694427][ T7507] loop2: detected capacity change from 0 to 7 [ 442.708222][ T7507] Dev loop2: unable to read RDB block 7 [ 442.714244][ T7507] loop2: unable to read partition table [ 442.722545][ T7507] loop2: partition table beyond EOD, truncated [ 442.728846][ T7507] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.139815][ T5986] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 443.212416][ T7521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.323605][ T5986] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.346978][ T5986] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.380912][ T5986] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.411390][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.454878][ T7516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.478579][ T5986] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.284224][ T5971] usb 4-1: USB disconnect, device number 2 [ 445.252711][ T7541] netlink: 'syz.3.406': attribute type 6 has an invalid length. [ 447.518555][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 447.917235][ T5812] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 448.160808][ T7575] netlink: 'syz.1.417': attribute type 6 has an invalid length. [ 448.251837][ T5812] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 448.271541][ T5812] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 448.291726][ T5812] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.490469][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.565530][ T7571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.592753][ T5812] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.797430][ T5812] usb 5-1: USB disconnect, device number 4 [ 450.021095][ T7601] netlink: 'syz.4.425': attribute type 21 has an invalid length. [ 450.555644][ T7612] gfs2: error -5 reading superblock [ 451.065015][ T7615] kvm: pic: non byte write [ 453.670696][ T799] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 453.854722][ T799] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 453.893455][ T799] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 453.929637][ T799] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 453.949131][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.975419][ T7632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 453.996397][ T799] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.149006][ T7650] lo speed is unknown, defaulting to 1000 [ 454.204707][ T799] usb 3-1: USB disconnect, device number 5 [ 454.439925][ T7655] netlink: 128 bytes leftover after parsing attributes in process `syz.3.442'. [ 454.483701][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 454.483717][ T30] audit: type=1326 audit(1760503345.632:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 454.537863][ T30] audit: type=1326 audit(1760503345.642:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 454.561317][ T30] audit: type=1326 audit(1760503345.642:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 454.609295][ T30] audit: type=1326 audit(1760503345.642:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 454.740618][ T30] audit: type=1326 audit(1760503345.652:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 454.764770][ T7646] syz.4.439: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 454.782878][ T30] audit: type=1326 audit(1760503345.652:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 454.827328][ T7646] CPU: 0 UID: 0 PID: 7646 Comm: syz.4.439 Not tainted syzkaller #0 PREEMPT(full) [ 454.827354][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 454.827368][ T7646] Call Trace: [ 454.827376][ T7646] [ 454.827384][ T7646] dump_stack_lvl+0x189/0x250 [ 454.827414][ T7646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.827434][ T7646] ? __pfx__printk+0x10/0x10 [ 454.827455][ T7646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 454.827475][ T7646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 454.827498][ T7646] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 454.827520][ T7646] warn_alloc+0x214/0x310 [ 454.827549][ T7646] ? __pfx_warn_alloc+0x10/0x10 [ 454.827581][ T7646] ? __get_vm_area_node+0x28f/0x300 [ 454.827602][ T7646] ? packet_set_ring+0x6f3/0x2120 [ 454.827627][ T7646] __vmalloc_node_range_noprof+0x690/0x12d0 [ 454.827678][ T7646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.827701][ T7646] ? alloc_pages_mpol+0x3cd/0x4a0 [ 454.827727][ T7646] ? packet_set_ring+0x6f3/0x2120 [ 454.827747][ T7646] vzalloc_noprof+0xb2/0xf0 [ 454.827767][ T7646] ? packet_set_ring+0x6f3/0x2120 [ 454.827789][ T7646] packet_set_ring+0x6f3/0x2120 [ 454.827831][ T7646] ? __pfx_packet_set_ring+0x10/0x10 [ 454.827869][ T7646] ? _copy_from_user+0x94/0xb0 [ 454.827889][ T7646] packet_setsockopt+0xc5a/0x12c0 [ 454.827907][ T7646] ? __pfx_packet_setsockopt+0x10/0x10 [ 454.827922][ T7646] ? file_init_path+0x3b/0x590 [ 454.827953][ T7646] ? aa_sk_perm+0x81e/0x950 [ 454.827973][ T7646] ? __pfx_aa_sk_perm+0x10/0x10 [ 454.827989][ T7646] ? aa_sock_opt_perm+0xff/0x1b0 [ 454.828008][ T7646] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 454.828026][ T7646] ? __pfx_packet_setsockopt+0x10/0x10 [ 454.828042][ T7646] do_sock_setsockopt+0x17c/0x1b0 [ 454.828066][ T7646] __x64_sys_setsockopt+0x13f/0x1b0 [ 454.828089][ T7646] do_syscall_64+0xfa/0xfa0 [ 454.828103][ T7646] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.828118][ T7646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.828133][ T7646] ? clear_bhb_loop+0x60/0xb0 [ 454.828153][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.828174][ T7646] RIP: 0033:0x7f545d38eec9 [ 454.828192][ T7646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.828204][ T7646] RSP: 002b:00007f545e2e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.828226][ T7646] RAX: ffffffffffffffda RBX: 00007f545d5e5fa0 RCX: 00007f545d38eec9 [ 454.828237][ T7646] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 454.828247][ T7646] RBP: 00007f545d411f91 R08: 000000000000001c R09: 0000000000000000 [ 454.828258][ T7646] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 454.828267][ T7646] R13: 00007f545d5e6038 R14: 00007f545d5e5fa0 R15: 00007ffcc68acc98 [ 454.828297][ T7646] [ 454.828309][ T7646] Mem-Info: [ 454.843023][ T30] audit: type=1326 audit(1760503345.652:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 455.139852][ T7646] active_anon:11982 inactive_anon:0 isolated_anon:0 [ 455.139852][ T7646] active_file:3970 inactive_file:39949 isolated_file:0 [ 455.139852][ T7646] unevictable:768 dirty:213 writeback:0 [ 455.139852][ T7646] slab_reclaimable:10579 slab_unreclaimable:95155 [ 455.139852][ T7646] mapped:35504 shmem:7605 pagetables:1221 [ 455.139852][ T7646] sec_pagetables:3 bounce:0 [ 455.139852][ T7646] kernel_misc_reclaimable:0 [ 455.139852][ T7646] free:1309015 free_pcp:16380 free_cma:0 [ 455.201966][ T30] audit: type=1326 audit(1760503345.652:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 455.224333][ T7646] Node 0 active_anon:48908kB inactive_anon:0kB active_file:16028kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142968kB dirty:860kB writeback:0kB shmem:29812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12240kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 455.224403][ T7646] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 455.224446][ T7646] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.224512][ T7646] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 455.224554][ T7646] Node 0 DMA32 free:1333828kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48908kB inactive_anon:0kB active_file:16028kB inactive_file:159592kB unevictable:1536kB writepending:860kB zspages:0kB present:3129332kB managed:2555376kB mlocked:0kB bounce:0kB free_pcp:40688kB local_pcp:20820kB free_cma:0kB [ 455.224610][ T7646] lowmem_reserve[]: 0 0 1 1 1 [ 455.224651][ T7646] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.224704][ T7646] lowmem_reserve[]: 0 0 0 0 0 [ 455.224744][ T7646] Node 1 Normal free:3886824kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23208kB local_pcp:10976kB free_cma:0kB [ 455.224800][ T7646] lowmem_reserve[]: 0 0 0 0 0 [ 455.224841][ T7646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 455.224982][ T7646] Node 0 DMA32: 1*4kB (M) 0*8kB 0*16kB 2*32kB (ME) 2*64kB (ME) 55*128kB (UM) 30*256kB (ME) 8*512kB (UME) 2*1024kB (M) 1*2048kB (M) 320*4096kB (M) = 1333828kB [ 455.225148][ T7646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 455.225263][ T7646] Node 1 Normal: 222*4kB (UE) 56*8kB (UME) 41*16kB (UME) 77*32kB (UME) 28*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB [ 455.420776][ T30] audit: type=1326 audit(1760503345.652:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 455.455075][ T7646] (UE) 945*4096kB (M) = 3886824kB [ 455.518525][ T7646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.570513][ T30] audit: type=1326 audit(1760503345.652:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7654 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6764b8eec9 code=0x7ffc0000 [ 455.593064][ T7646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.629853][ T7646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.650473][ T7646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.668798][ T7646] 51739 total pagecache pages [ 455.673891][ T7646] 0 pages in swap cache [ 455.679092][ T7646] Free swap = 124996kB [ 455.684102][ T7646] Total swap = 124996kB [ 455.688940][ T7646] 2097051 pages RAM [ 455.694777][ T7646] 0 pages HighMem/MovableOnly [ 455.699533][ T7646] 426309 pages reserved [ 455.706839][ T7646] 0 pages cma reserved [ 457.591932][ T7687] syzkaller0: entered promiscuous mode [ 457.599875][ T7687] syzkaller0: entered allmulticast mode [ 458.162549][ T7704] kvm: kvm [7702]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6570000007f [ 459.819879][ T799] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 460.065167][ T799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.095865][ T799] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 460.106145][ T799] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 460.115471][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.130747][ T799] usb 3-1: config 0 descriptor?? [ 460.168098][ T799] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 460.208184][ T799] dvb-usb: bulk message failed: -22 (3/0) [ 460.617308][ T799] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 460.680657][ T799] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 460.994138][ T799] usb 3-1: media controller created [ 461.121248][ T799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.139600][ T799] dvb-usb: bulk message failed: -22 (6/0) [ 461.147371][ T799] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 461.165750][ T799] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 461.183403][ T799] dvb-usb: schedule remote query interval to 150 msecs. [ 461.191136][ T799] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 461.360877][ T799] dvb-usb: bulk message failed: -22 (1/0) [ 461.374812][ T799] dvb-usb: error while querying for an remote control event. [ 461.544950][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 461.551094][ T5986] dvb-usb: error while querying for an remote control event. [ 461.573746][ T7734] kvm: pic: non byte write [ 461.694153][ T7737] netlink: 128 bytes leftover after parsing attributes in process `syz.0.462'. [ 461.706350][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 461.706365][ T30] audit: type=1326 audit(1760503352.862:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.734931][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 461.740880][ T5986] dvb-usb: error while querying for an remote control event. [ 461.748483][ T30] audit: type=1326 audit(1760503352.872:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.772130][ T30] audit: type=1326 audit(1760503352.872:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.794727][ T30] audit: type=1326 audit(1760503352.872:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.817158][ T30] audit: type=1326 audit(1760503352.872:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.846092][ T30] audit: type=1326 audit(1760503352.882:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.874132][ T30] audit: type=1326 audit(1760503352.882:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.899324][ T30] audit: type=1326 audit(1760503352.882:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.921847][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 461.928080][ T5986] dvb-usb: error while querying for an remote control event. [ 461.935946][ T30] audit: type=1326 audit(1760503352.882:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 461.965304][ T30] audit: type=1326 audit(1760503352.882:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.0.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 462.099981][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 462.105880][ T5986] dvb-usb: error while querying for an remote control event. [ 462.294648][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 462.322381][ T5986] dvb-usb: error while querying for an remote control event. [ 462.349261][ T7716] lo speed is unknown, defaulting to 1000 [ 462.499833][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 462.505637][ T5986] dvb-usb: error while querying for an remote control event. [ 462.600645][ T7744] netlink: 64 bytes leftover after parsing attributes in process `syz.1.464'. [ 462.679818][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 462.687396][ T5986] dvb-usb: error while querying for an remote control event. [ 462.791394][ T7745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.844670][ T7746] vim2m vim2m.0: vidioc_s_fmt queue busy [ 462.919809][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 462.925747][ T5986] dvb-usb: error while querying for an remote control event. [ 463.099901][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 463.106134][ T5986] dvb-usb: error while querying for an remote control event. [ 463.269920][ T5986] dvb-usb: bulk message failed: -22 (1/0) [ 463.275834][ T5986] dvb-usb: error while querying for an remote control event. [ 463.429586][ T5986] usb 3-1: USB disconnect, device number 6 [ 463.511497][ T7751] sctp: [Deprecated]: syz.2.466 (pid 7751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.511497][ T7751] Use struct sctp_sack_info instead [ 463.961833][ T5986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 465.931986][ T7784] kvm: kvm [7775]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x6570000007f [ 466.073242][ T7789] syzkaller0: entered promiscuous mode [ 466.078943][ T7789] syzkaller0: entered allmulticast mode [ 467.640644][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 467.655601][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.483'. [ 468.440459][ T7821] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.448155][ T7821] UDF-fs: Scanning with blocksize 512 failed [ 468.469240][ T7821] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.488844][ T7821] UDF-fs: Scanning with blocksize 1024 failed [ 468.517004][ T7821] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.527301][ T7821] UDF-fs: Scanning with blocksize 2048 failed [ 468.541076][ T7821] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 468.569229][ T7821] UDF-fs: Scanning with blocksize 4096 failed [ 469.029941][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 469.199847][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 469.216145][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 469.226631][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.251489][ T10] usb 4-1: config 0 descriptor?? [ 469.258877][ T10] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 469.267671][ T10] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 469.276865][ T10] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 469.467224][ T10] usb 4-1: USB disconnect, device number 3 [ 470.337477][ T7841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'. [ 470.355138][ T7841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'. [ 470.361314][ T7842] netlink: 'syz.2.494': attribute type 6 has an invalid length. [ 470.404093][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 470.433666][ T5989] lo speed is unknown, defaulting to 1000 [ 470.721168][ T10] usb 4-1: device descriptor read/64, error -71 [ 470.821895][ T7847] syzkaller0: entered promiscuous mode [ 470.879292][ T7847] syzkaller0: entered allmulticast mode [ 471.206447][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 471.806020][ T10] usb 4-1: device descriptor read/64, error -71 [ 471.935716][ T10] usb usb4-port1: attempt power cycle [ 472.447978][ T7877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 472.458534][ T7872] lo speed is unknown, defaulting to 1000 [ 472.464532][ T7877] block device autoloading is deprecated and will be removed. [ 472.640366][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 472.671012][ T10] usb 4-1: device descriptor read/8, error -71 [ 472.916455][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 472.990557][ T10] usb 4-1: device descriptor read/8, error -71 [ 473.142984][ T10] usb usb4-port1: unable to enumerate USB device [ 473.143568][ T5148] Bluetooth: hci4: unexpected event for opcode 0x202d [ 475.770878][ T7924] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 476.694254][ T7937] syzkaller0: entered promiscuous mode [ 476.721347][ T7937] syzkaller0: entered allmulticast mode [ 480.881211][ T7985] fuse: Bad value for 'fd' [ 482.713175][ T8021] tipc: Started in network mode [ 482.718096][ T8021] tipc: Node identity 867ca23afcf1, cluster identity 4711 [ 482.726758][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 482.757177][ T8021] tipc: Enabled bearer , priority 0 [ 482.796565][ T8021] tipc: Resetting bearer [ 482.816504][ T8020] tipc: Disabling bearer [ 483.230375][ T8031] fuse: Invalid rootmode [ 483.506520][ T8037] netlink: 128 bytes leftover after parsing attributes in process `syz.4.547'. [ 483.555730][ T5986] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 483.573990][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 483.574007][ T30] audit: type=1326 audit(2000000015.179:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 483.702554][ T30] audit: type=1326 audit(2000000015.179:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 483.722239][ T5986] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 483.745543][ T5986] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.784567][ T30] audit: type=1326 audit(2000000015.179:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 483.823755][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 483.866179][ T30] audit: type=1326 audit(2000000015.179:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 483.919249][ T5986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 483.973565][ T30] audit: type=1326 audit(2000000015.219:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 484.072944][ T5986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.088734][ T5986] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.098031][ T5986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.113663][ T5986] usb 4-1: config 0 descriptor?? [ 484.120500][ T8033] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.172242][ T30] audit: type=1326 audit(2000000015.219:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 484.657297][ T30] audit: type=1326 audit(2000000015.219:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 484.705927][ T30] audit: type=1326 audit(2000000015.219:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 484.728989][ T30] audit: type=1326 audit(2000000015.219:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 484.758147][ T30] audit: type=1326 audit(2000000015.219:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f545d38eec9 code=0x7ffc0000 [ 484.913161][ T5986] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 484.964640][ T5986] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 485.272190][ T10] usb 4-1: USB disconnect, device number 8 [ 486.874582][ T8069] binder: 8062:8069 ioctl c0306201 200000000180 returned -14 [ 488.058756][ T8086] netlink: 128 bytes leftover after parsing attributes in process `syz.4.561'. [ 489.344072][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 491.234463][ T8109] sctp: [Deprecated]: syz.2.568 (pid 8109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.234463][ T8109] Use struct sctp_sack_info instead [ 491.786185][ T8128] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 493.338906][ T8141] binder: 8140:8141 ioctl 4018620d 0 returned -22 [ 493.638838][ T8148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 494.610081][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 494.761944][ T8156] syzkaller0: entered promiscuous mode [ 494.769181][ T8156] syzkaller0: entered allmulticast mode [ 494.829890][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 494.911431][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 494.925856][ T9] usb 3-1: config 38 has an invalid interface number: 87 but max is 0 [ 494.938271][ T9] usb 3-1: config 38 has no interface number 0 [ 495.012746][ T9] usb 3-1: config 38 interface 87 has no altsetting 0 [ 495.048709][ T9] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=62.68 [ 495.068261][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.097621][ T9] usb 3-1: Product: syz [ 495.105581][ T9] usb 3-1: Manufacturer: syz [ 495.129813][ T9] usb 3-1: SerialNumber: syz [ 495.575042][ T9] usb 3-1: USB disconnect, device number 7 [ 495.633786][ T8181] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 496.968649][ T8199] fuse: Unknown parameter '/dev/cpu/#/msr' [ 497.349943][ T8195] sctp: [Deprecated]: syz.1.597 (pid 8195) Use of int in max_burst socket option. [ 497.349943][ T8195] Use struct sctp_assoc_value instead [ 497.399910][ T8202] netlink: 248 bytes leftover after parsing attributes in process `syz.3.598'. [ 497.477138][ T8205] syzkaller0: entered promiscuous mode [ 497.504501][ T8205] syzkaller0: entered allmulticast mode [ 497.965527][ T8213] syzkaller1: entered promiscuous mode [ 497.971278][ T8213] syzkaller1: entered allmulticast mode [ 498.693472][ T8229] tipc: Started in network mode [ 498.698525][ T8229] tipc: Node identity ac141413, cluster identity 4711 [ 498.709346][ T8229] tipc: New replicast peer: 10.1.1.2 [ 498.716914][ T8229] tipc: Enabled bearer , priority 10 [ 500.370330][ T8228] infiniband syz2: set down [ 500.381561][ T5875] tipc: Node number set to 2886997011 [ 500.396384][ T8228] infiniband syz2: added ipvlan0 [ 500.981546][ T8228] RDS/IB: syz2: added [ 500.987833][ T8228] smc: adding ib device syz2 with port count 1 [ 500.994379][ T8228] smc: ib device syz2 port 1 has no pnetid [ 501.575546][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.581958][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.599839][ T5941] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 501.832118][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.243812][ T5941] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 502.277629][ T5941] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 502.319804][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.011634][ T5941] usb 3-1: config 0 descriptor?? [ 503.021842][ T5941] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 503.028514][ T5941] dvb-usb: bulk message failed: -22 (3/0) [ 503.109054][ T8239] sctp: [Deprecated]: syz.0.610 (pid 8239) Use of int in max_burst socket option. [ 503.109054][ T8239] Use struct sctp_assoc_value instead [ 503.182799][ T5941] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 503.228450][ T5941] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 503.433901][ T5941] usb 3-1: media controller created [ 503.443521][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.087806][ T5941] dvb-usb: bulk message failed: -22 (6/0) [ 504.158631][ T5941] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 504.208350][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 504.288094][ T5941] dvb-usb: schedule remote query interval to 150 msecs. [ 504.332692][ T5941] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 504.490160][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 504.509899][ T799] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 504.518726][ T5941] dvb-usb: error while querying for an remote control event. [ 504.680060][ T799] usb 1-1: Using ep0 maxpacket: 8 [ 504.882278][ T799] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 504.896500][ T799] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 504.915213][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 504.957719][ T799] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.987576][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.019849][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 505.020773][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 505.037523][ T5941] dvb-usb: error while querying for an remote control event. [ 505.057551][ T799] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 505.081218][ T799] usb 1-1: config 168 interface 0 has no altsetting 0 [ 505.091076][ T799] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 505.098628][ T799] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 505.176622][ T5989] usb 3-1: USB disconnect, device number 8 [ 505.190365][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 505.215138][ T799] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.232994][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.365960][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 505.426321][ T5989] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 505.443198][ T799] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 505.551176][ T799] usb 1-1: config 168 interface 0 has no altsetting 0 [ 505.892353][ T799] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 505.916797][ T799] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 505.959804][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 506.071261][ T799] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 506.124904][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 506.187605][ T799] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 506.244056][ T799] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 506.319334][ T799] usb 1-1: config 168 interface 0 has no altsetting 0 [ 506.342834][ T799] usb 1-1: string descriptor 0 read error: -22 [ 506.349279][ T799] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 506.368841][ T799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.592496][ T799] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 507.073203][ T5941] usb 1-1: USB disconnect, device number 2 [ 507.207847][ T8288] sctp: [Deprecated]: syz.3.625 (pid 8288) Use of int in max_burst socket option. [ 507.207847][ T8288] Use struct sctp_assoc_value instead [ 507.441730][ T8296] x_tables: duplicate underflow at hook 1 [ 507.640811][ T5812] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 507.800811][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 507.813589][ T5812] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 507.837802][ T5812] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 507.863480][ T5812] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.884343][ T5812] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.914851][ T5812] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.939239][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.179677][ T5812] usb 5-1: GET_CAPABILITIES returned 0 [ 508.191650][ T5812] usbtmc 5-1:16.0: can't read capabilities [ 508.407346][ T5971] usb 5-1: USB disconnect, device number 5 [ 509.669535][ T8334] sctp: [Deprecated]: syz.0.640 (pid 8334) Use of int in max_burst socket option. [ 509.669535][ T8334] Use struct sctp_assoc_value instead [ 509.851780][ T8343] netlink: 128 bytes leftover after parsing attributes in process `syz.0.644'. [ 509.881477][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 509.881493][ T30] audit: type=1326 audit(2000000041.489:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 509.942606][ T30] audit: type=1326 audit(2000000041.519:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 510.010154][ T30] audit: type=1326 audit(2000000041.519:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 510.353743][ T30] audit: type=1326 audit(2000000041.519:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 510.396532][ T30] audit: type=1326 audit(2000000041.519:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 510.476238][ T30] audit: type=1326 audit(2000000041.519:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 510.556052][ T30] audit: type=1326 audit(2000000041.519:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 511.129818][ T30] audit: type=1326 audit(2000000041.519:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 511.206466][ T30] audit: type=1326 audit(2000000041.519:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 511.231889][ T30] audit: type=1326 audit(2000000041.519:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8341 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff18c18eec9 code=0x7ffc0000 [ 511.659948][ T5812] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 512.009835][ T8373] sctp: [Deprecated]: syz.3.654 (pid 8373) Use of int in max_burst socket option. [ 512.009835][ T8373] Use struct sctp_assoc_value instead [ 512.041111][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 512.606180][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.627905][ T5812] usb 3-1: config 0 has no interfaces? [ 512.670246][ T5812] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 512.699891][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.729171][ T5812] usb 3-1: Product: syz [ 512.781627][ T5812] usb 3-1: Manufacturer: syz [ 512.819974][ T5812] usb 3-1: SerialNumber: syz [ 512.962775][ T5812] usb 3-1: config 0 descriptor?? [ 513.196024][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 513.818331][ T5812] usb 3-1: USB disconnect, device number 9 [ 514.104212][ T8398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.662'. [ 514.666282][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.664'. [ 515.043910][ T8411] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 516.061740][ T5971] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 516.241745][ T5971] usb 2-1: Using ep0 maxpacket: 32 [ 516.271870][ T5971] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 516.361307][ T5971] usb 2-1: config 0 has no interface number 0 [ 516.382392][ T5971] usb 2-1: too many endpoints for config 0 interface 229 altsetting 76: 114, using maximum allowed: 30 [ 516.441413][ T5971] usb 2-1: config 0 interface 229 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 516.518522][ T5971] usb 2-1: config 0 interface 229 has no altsetting 0 [ 516.569218][ T5971] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 516.607563][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.689283][ T8447] netlink: 64 bytes leftover after parsing attributes in process `syz.3.673'. [ 516.725195][ T5971] usb 2-1: Product: syz [ 516.745578][ T5971] usb 2-1: Manufacturer: syz [ 516.762841][ T5971] usb 2-1: SerialNumber: syz [ 516.893263][ T5971] usb 2-1: config 0 descriptor?? [ 516.916422][ T8449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.307634][ T5971] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 517.701795][ T5941] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 517.727849][ T5941] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 517.782282][ T5971] gspca_stk1135: reg_w 0x3 err -71 [ 517.788485][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 517.878151][ T5971] gspca_stk1135: Sensor write failed [ 517.907523][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 517.949477][ T5971] gspca_stk1135: Sensor write failed [ 518.118466][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 518.125676][ T5971] gspca_stk1135: Sensor read failed [ 518.131614][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 518.145482][ T5971] gspca_stk1135: Sensor read failed [ 518.151784][ T5971] gspca_stk1135: Detected sensor type unknown (0x0) [ 518.172120][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 518.178485][ T5971] gspca_stk1135: Sensor read failed [ 518.184672][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 518.770386][ T5971] gspca_stk1135: Sensor read failed [ 518.829811][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 518.836197][ T5971] gspca_stk1135: Sensor write failed [ 518.841774][ T5971] gspca_stk1135: serial bus timeout: status=0x00 [ 518.848337][ T5971] gspca_stk1135: Sensor write failed [ 518.853771][ T5971] stk1135 2-1:0.229: probe with driver stk1135 failed with error -71 [ 518.865846][ T5971] usb 2-1: USB disconnect, device number 3 [ 519.060821][ T8465] sctp: [Deprecated]: syz.1.677 (pid 8465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.060821][ T8465] Use struct sctp_sack_info instead [ 519.766081][ T5148] Bluetooth: hci2: unexpected event for opcode 0x202d [ 520.573376][ T8505] fuse: Unknown parameter 'user_i00000000000000000000' [ 523.521839][ T8532] fuse: Bad value for 'user_id' [ 523.533070][ T8532] fuse: Bad value for 'user_id' [ 523.593149][ T8544] netlink: 168 bytes leftover after parsing attributes in process `syz.0.697'. [ 523.633557][ T8542] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.829311][ T8542] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 523.844344][ T8542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 523.852991][ T8542] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 523.915205][ T8542] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 523.924214][ T8542] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 523.951151][ T8542] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 523.961930][ T8542] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 523.982789][ T8542] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 523.999974][ T8542] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 524.504686][ T8555] syz2: rxe_newlink: already configured on ipvlan0 [ 526.070408][ T8558] netlink: 'syz.3.701': attribute type 6 has an invalid length. [ 527.476984][ T8562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.803891][ T8584] sctp: [Deprecated]: syz.4.708 (pid 8584) Use of int in max_burst socket option. [ 528.803891][ T8584] Use struct sctp_assoc_value instead [ 529.277896][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.713'. [ 529.292962][ T8597] sctp: [Deprecated]: syz.0.712 (pid 8597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.292962][ T8597] Use struct sctp_sack_info instead [ 529.732913][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.740898][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.817310][ T8603] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 533.135032][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 534.171183][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.178927][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.128418][ T8651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.745693][ T8659] random: crng reseeded on system resumption [ 536.442389][ T8668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.672840][ T8688] netlink: 64 bytes leftover after parsing attributes in process `syz.0.736'. [ 537.937220][ T8690] syzkaller0: entered promiscuous mode [ 538.015163][ T8690] syzkaller0: entered allmulticast mode [ 538.147376][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.154656][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.162334][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.169445][ T8688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.073165][ T8688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.959830][ T5812] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 540.186871][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.197139][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 540.208404][ T5812] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 540.217863][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.250420][ T5812] usb 5-1: config 0 descriptor?? [ 540.276540][ T5812] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 540.354113][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 540.421695][ T8720] sctp: [Deprecated]: syz.1.744 (pid 8720) Use of int in max_burst socket option. [ 540.421695][ T8720] Use struct sctp_assoc_value instead [ 540.439549][ T5812] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 540.455710][ T5812] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 540.593634][ T5812] usb 5-1: media controller created [ 540.603971][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.620215][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 540.626067][ T5812] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 540.637742][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 541.340506][ T5812] dvb-usb: schedule remote query interval to 150 msecs. [ 541.359111][ T5812] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 541.510020][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 541.516559][ T5812] dvb-usb: error while querying for an remote control event. [ 541.620378][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 541.679840][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 541.685625][ T5941] dvb-usb: error while querying for an remote control event. [ 541.900147][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 541.913300][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 541.920735][ T5812] dvb-usb: error while querying for an remote control event. [ 541.941827][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.976357][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.067427][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 542.127025][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 542.145107][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.157933][ T5812] dvb-usb: error while querying for an remote control event. [ 542.241218][ T9] usb 4-1: config 0 descriptor?? [ 542.359957][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 542.405340][ T5812] dvb-usb: error while querying for an remote control event. [ 542.579983][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 542.598738][ T5812] dvb-usb: error while querying for an remote control event. [ 542.613206][ T8738] netlink: 204 bytes leftover after parsing attributes in process `syz.2.750'. [ 542.794716][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 542.807496][ T5941] dvb-usb: error while querying for an remote control event. [ 542.815173][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 542.821209][ T5812] usb 5-1: USB disconnect, device number 6 [ 542.827949][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 542.928180][ T5812] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 543.294540][ T8741] syzkaller0: entered promiscuous mode [ 543.300109][ T8741] syzkaller0: entered allmulticast mode [ 543.880285][ T8758] lo speed is unknown, defaulting to 1000 [ 544.140112][ T5941] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 544.180259][ T8762] sctp: [Deprecated]: syz.2.757 (pid 8762) Use of int in max_burst socket option. [ 544.180259][ T8762] Use struct sctp_assoc_value instead [ 544.320411][ T5941] usb 1-1: config 0 has no interfaces? [ 544.359373][ T8763] debugfs: 'ttyS3' already exists in 'caif_serial' [ 544.375833][ T5941] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 544.390335][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.398460][ T5941] usb 1-1: Product: syz [ 544.404874][ T5941] usb 1-1: Manufacturer: syz [ 544.410700][ T5941] usb 1-1: SerialNumber: syz [ 544.418305][ T5941] usb 1-1: config 0 descriptor?? [ 544.483275][ T799] usb 4-1: USB disconnect, device number 9 [ 545.202036][ T8758] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.325788][ T5812] usb 1-1: USB disconnect, device number 3 [ 545.576734][ T8784] netlink: 204 bytes leftover after parsing attributes in process `syz.4.761'. [ 545.671315][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 545.777904][ T8787] veth0_macvtap: left promiscuous mode [ 548.009885][ T5812] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 548.811523][ T5812] usb 1-1: config 0 has no interfaces? [ 548.875059][ T5812] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 548.950149][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.966178][ T5812] usb 1-1: Product: syz [ 548.990206][ T5812] usb 1-1: Manufacturer: syz [ 549.021645][ T5812] usb 1-1: SerialNumber: syz [ 549.077401][ T5812] usb 1-1: config 0 descriptor?? [ 549.270182][ T8829] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 549.542798][ T8811] lo speed is unknown, defaulting to 1000 [ 550.699811][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 550.798839][ T799] usb 1-1: USB disconnect, device number 4 [ 550.859822][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 550.875743][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.895268][ T5875] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.910782][ T5875] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 550.921070][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.929232][ T5875] usb 4-1: Product: syz [ 550.934708][ T5875] usb 4-1: Manufacturer: syz [ 550.939400][ T5875] usb 4-1: SerialNumber: syz [ 550.949413][ T5875] usb 4-1: config 0 descriptor?? [ 551.061110][ T8866] sctp: [Deprecated]: syz.0.780 (pid 8866) Use of int in max_burst socket option. [ 551.061110][ T8866] Use struct sctp_assoc_value instead [ 553.262209][ T9] usb 4-1: USB disconnect, device number 10 [ 553.583046][ T8884] ieee802154 phy0 wpan0: encryption failed: -22 [ 554.007104][ T8894] tipc: Enabling of bearer rejected, already enabled [ 554.551560][ T8908] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 554.559196][ T8908] UDF-fs: Scanning with blocksize 512 failed [ 554.570932][ T8908] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 554.578537][ T8908] UDF-fs: Scanning with blocksize 1024 failed [ 554.587507][ T8908] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 554.595185][ T8908] UDF-fs: Scanning with blocksize 2048 failed [ 554.603791][ T8908] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 554.611450][ T8908] UDF-fs: Scanning with blocksize 4096 failed [ 555.290120][ T5964] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 555.673593][ T5964] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.696055][ T5989] libceph: connect (1)[b::]:6789 error -101 [ 555.731942][ T8928] syzkaller0: entered promiscuous mode [ 555.737556][ T8928] syzkaller0: entered allmulticast mode [ 555.916554][ T5964] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 555.927901][ T5989] libceph: mon0 (1)[b::]:6789 connect error [ 556.502427][ T5989] libceph: connect (1)[b::]:6789 error -101 [ 556.515479][ T5964] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.528568][ T5989] libceph: mon0 (1)[b::]:6789 connect error [ 556.600043][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.642134][ T5964] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.651313][ T5964] usb 5-1: invalid MIDI out EP 0 [ 556.872950][ T5989] libceph: connect (1)[b::]:6789 error -101 [ 556.879053][ T5989] libceph: mon0 (1)[b::]:6789 connect error [ 556.943839][ T5964] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 556.981336][ T5964] usb 5-1: USB disconnect, device number 7 [ 557.220502][ T8953] netlink: 204 bytes leftover after parsing attributes in process `syz.3.800'. [ 557.339544][ T8920] ceph: No mds server is up or the cluster is laggy [ 557.431826][ T5964] libceph: connect (1)[b::]:6789 error -101 [ 557.438099][ T5964] libceph: mon0 (1)[b::]:6789 connect error [ 557.789495][ T8966] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.801'. [ 558.189614][ T8974] random: crng reseeded on system resumption [ 560.267469][ T8991] sctp: [Deprecated]: syz.3.808 (pid 8991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.267469][ T8991] Use struct sctp_sack_info instead [ 560.580632][ T9000] netlink: 'syz.0.812': attribute type 21 has an invalid length. [ 562.050462][ T9009] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.815'. [ 563.014838][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.021253][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 667.999767][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 668.006819][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9004/1:b..l P9019/1:b..l [ 668.016297][ C1] rcu: (detected by 1, t=10502 jiffies, g=31249, q=541 ncpus=2) [ 668.024035][ C1] task:syz.3.817 state:R running task stack:23752 pid:9019 tgid:9018 ppid:5867 task_flags:0x40044c flags:0x00080000 [ 668.038423][ C1] Call Trace: [ 668.041720][ C1] [ 668.044656][ C1] __schedule+0x1798/0x4cc0 [ 668.049211][ C1] ? __pfx___schedule+0x10/0x10 [ 668.054066][ C1] ? __lock_acquire+0xab9/0xd20 [ 668.059032][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 668.064325][ C1] preempt_schedule_irq+0xb5/0x150 [ 668.069435][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 668.075158][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 668.080974][ C1] irqentry_exit+0x6f/0x90 [ 668.085387][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.091369][ C1] RIP: 0010:__rcu_read_unlock+0x33/0xe0 [ 668.096921][ C1] Code: 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3c 25 08 c0 91 92 48 8d 9f 84 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 88 04 00 00 4c 89 f0 48 c1 e8 03 [ 668.116523][ C1] RSP: 0018:ffffc90015d570c0 EFLAGS: 00000a03 [ 668.122594][ C1] RAX: 0000000000000000 RBX: ffff88802ed1c104 RCX: 8e89a988673f0700 [ 668.130560][ C1] RDX: 0000000000000001 RSI: ffffffff8d9d6f6f RDI: ffff88802ed1bc80 [ 668.138526][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81cf6c46 [ 668.146489][ C1] R10: ffffc90015d571d8 R11: ffffffff81ac8430 R12: 1ffff11005da3820 [ 668.154455][ C1] R13: dffffc0000000000 R14: 00007f6764b8eec9 R15: dffffc0000000000 [ 668.162429][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.168586][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 668.173797][ C1] is_bpf_text_address+0x292/0x2b0 [ 668.178910][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 668.184117][ C1] kernel_text_address+0xa5/0xe0 [ 668.189052][ C1] __kernel_text_address+0xd/0x40 [ 668.194076][ C1] unwind_get_return_address+0x4d/0x90 [ 668.199539][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.205693][ C1] arch_stack_walk+0xfc/0x150 [ 668.210388][ C1] stack_trace_save+0x9c/0xe0 [ 668.215063][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 668.220445][ C1] kasan_save_track+0x3e/0x80 [ 668.225121][ C1] ? kasan_save_track+0x3e/0x80 [ 668.229973][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 668.236223][ C1] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 668.241774][ C1] ? kmem_cache_free+0x16f/0x690 [ 668.246711][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 668.251558][ C1] ? unlink_anon_vmas+0x503/0x670 [ 668.256575][ C1] ? free_pgtables+0x72b/0x9c0 [ 668.261334][ C1] ? exit_mmap+0x43c/0xb40 [ 668.265744][ C1] ? __mmput+0x118/0x430 [ 668.269990][ C1] ? exit_mm+0x1da/0x2c0 [ 668.274229][ C1] ? do_exit+0x648/0x2300 [ 668.278562][ C1] ? do_group_exit+0x21c/0x2d0 [ 668.283323][ C1] ? get_signal+0x1285/0x1340 [ 668.288000][ C1] ? arch_do_signal_or_restart+0xa0/0x790 [ 668.293717][ C1] ? exit_to_user_mode_loop+0x72/0x130 [ 668.299175][ C1] ? do_syscall_64+0x2bd/0xfa0 [ 668.303933][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.310041][ C1] __kasan_kmalloc+0x93/0xb0 [ 668.314636][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 668.320011][ C1] ? kmem_cache_free+0x16f/0x690 [ 668.324944][ C1] ? __phys_addr+0xd3/0x180 [ 668.329445][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 668.334290][ C1] kmem_cache_free+0x16f/0x690 [ 668.339056][ C1] __put_anon_vma+0x12b/0x2d0 [ 668.343730][ C1] unlink_anon_vmas+0x503/0x670 [ 668.348584][ C1] free_pgtables+0x72b/0x9c0 [ 668.353183][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 668.358297][ C1] ? __pfx_down_write+0x10/0x10 [ 668.363150][ C1] ? __mas_set_range+0x12f/0x3c0 [ 668.368089][ C1] exit_mmap+0x43c/0xb40 [ 668.372325][ C1] ? uprobe_clear_state+0x20f/0x290 [ 668.377525][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 668.382281][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 668.387923][ C1] ? __pfx_exit_aio+0x10/0x10 [ 668.392612][ C1] ? uprobe_clear_state+0x27c/0x290 [ 668.397821][ C1] __mmput+0x118/0x430 [ 668.401894][ C1] exit_mm+0x1da/0x2c0 [ 668.405962][ C1] ? __pfx_exit_mm+0x10/0x10 [ 668.410552][ C1] ? rcu_is_watching+0x15/0xb0 [ 668.415322][ C1] do_exit+0x648/0x2300 [ 668.419483][ C1] ? do_raw_spin_lock+0x121/0x290 [ 668.424517][ C1] ? __pfx_do_exit+0x10/0x10 [ 668.429116][ C1] do_group_exit+0x21c/0x2d0 [ 668.433873][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.439067][ C1] get_signal+0x1285/0x1340 [ 668.443592][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 668.449142][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 668.455294][ C1] ? __se_sys_futex+0x36f/0x400 [ 668.460160][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 668.465645][ C1] exit_to_user_mode_loop+0x72/0x130 [ 668.470930][ C1] do_syscall_64+0x2bd/0xfa0 [ 668.475514][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.480707][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.486766][ C1] ? clear_bhb_loop+0x60/0xb0 [ 668.491441][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.497331][ C1] RIP: 0033:0x7f6764b8eec9 [ 668.501740][ C1] RSP: 002b:00007f67659520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 668.510413][ C1] RAX: fffffffffffffe00 RBX: 00007f6764de5fa8 RCX: 00007f6764b8eec9 [ 668.518381][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6764de5fa8 [ 668.526356][ C1] RBP: 00007f6764de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 668.534323][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.542291][ C1] R13: 00007f6764de6038 R14: 00007ffc09585840 R15: 00007ffc09585928 [ 668.550275][ C1] [ 668.553288][ C1] task:syz.2.814 state:R running task stack:25336 pid:9004 tgid:9002 ppid:5871 task_flags:0x400140 flags:0x00080001 [ 668.566772][ C1] Call Trace: [ 668.570042][ C1] [ 668.572971][ C1] __schedule+0x1798/0x4cc0 [ 668.577503][ C1] ? __pfx___schedule+0x10/0x10 [ 668.582367][ C1] ? xfd_validate_state+0x6d/0x150 [ 668.587475][ C1] ? save_fpregs_to_fpstate+0xa3/0x210 [ 668.592935][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 668.598216][ C1] preempt_schedule_irq+0xb5/0x150 [ 668.603322][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 668.609043][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 668.614852][ C1] irqentry_exit+0x6f/0x90 [ 668.619265][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.625239][ C1] RIP: 0010:deref_stack_reg+0x3/0x230 [ 668.630613][ C1] Code: e8 c2 12 b2 00 48 8b 4c 24 18 e9 f2 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 ff [ 668.650219][ C1] RSP: 0018:ffffc9000ed1ed20 EFLAGS: 00000283 [ 668.656297][ C1] RAX: fffffffffffffff0 RBX: ffffffff90380e50 RCX: 0000000000000000 [ 668.664260][ C1] RDX: ffffc9000ed1ee48 RSI: ffffc9000ed1fdb0 RDI: ffffc9000ed1ee08 [ 668.672226][ C1] RBP: dffffc0000000000 R08: ffffc9000ed1ee67 R09: 0000000000000000 [ 668.680452][ C1] R10: ffffc9000ed1ee58 R11: fffff52001da3dcd R12: ffffc9000ed1fdb0 [ 668.688417][ C1] R13: ffffc9000ed1ee58 R14: ffffc9000ed1ee08 R15: 1ffffffff20701ca [ 668.696405][ C1] unwind_next_frame+0x17c4/0x2390 [ 668.701527][ C1] ? unwind_next_frame+0xa5/0x2390 [ 668.706639][ C1] ? __mm_populate+0x24c/0x380 [ 668.711400][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.717547][ C1] arch_stack_walk+0x11c/0x150 [ 668.722321][ C1] ? vm_mmap_pgoff+0x387/0x4d0 [ 668.727093][ C1] stack_trace_save+0x9c/0xe0 [ 668.731766][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 668.737142][ C1] save_stack+0xf5/0x1f0 [ 668.741383][ C1] ? __pfx_save_stack+0x10/0x10 [ 668.746265][ C1] ? post_alloc_hook+0x240/0x2a0 [ 668.751195][ C1] ? get_page_from_freelist+0x2365/0x2440 [ 668.756910][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 668.762884][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 668.767901][ C1] ? folio_alloc_mpol_noprof+0x39/0x70 [ 668.773703][ C1] ? shmem_alloc_and_add_folio+0x447/0xf60 [ 668.779503][ C1] ? shmem_get_folio_gfp+0x59d/0x1660 [ 668.784881][ C1] ? shmem_fault+0x179/0x390 [ 668.789463][ C1] ? __do_fault+0x138/0x390 [ 668.793961][ C1] ? __handle_mm_fault+0x35e3/0x5400 [ 668.799239][ C1] ? handle_mm_fault+0x40a/0x8e0 [ 668.804172][ C1] ? __get_user_pages+0x165c/0x2a00 [ 668.809369][ C1] ? populate_vma_page_range+0x29f/0x3a0 [ 668.815004][ C1] ? __mm_populate+0x24c/0x380 [ 668.819762][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 668.826006][ C1] __set_page_owner+0x8d/0x4c0 [ 668.830774][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 668.836154][ C1] post_alloc_hook+0x240/0x2a0 [ 668.840921][ C1] get_page_from_freelist+0x2365/0x2440 [ 668.846511][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 668.852406][ C1] ? prepare_alloc_pages+0x213/0x610 [ 668.857697][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 668.863509][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 668.869841][ C1] ? policy_nodemask+0x27c/0x720 [ 668.874783][ C1] alloc_pages_mpol+0x232/0x4a0 [ 668.879637][ C1] folio_alloc_mpol_noprof+0x39/0x70 [ 668.884924][ C1] shmem_alloc_and_add_folio+0x447/0xf60 [ 668.890562][ C1] ? filemap_get_entry+0xad/0x2f0 [ 668.895587][ C1] ? filemap_get_entry+0xad/0x2f0 [ 668.900635][ C1] ? filemap_get_entry+0xad/0x2f0 [ 668.905659][ C1] ? shmem_huge_global_enabled+0x296/0x320 [ 668.911461][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 668.917623][ C1] ? shmem_allowable_huge_orders+0x4c6/0x4f0 [ 668.923618][ C1] shmem_get_folio_gfp+0x59d/0x1660 [ 668.928835][ C1] shmem_fault+0x179/0x390 [ 668.933254][ C1] __do_fault+0x138/0x390 [ 668.937613][ C1] __handle_mm_fault+0x35e3/0x5400 [ 668.942735][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 668.948205][ C1] ? follow_page_pte+0x7ef/0x13e0 [ 668.953239][ C1] handle_mm_fault+0x40a/0x8e0 [ 668.958009][ C1] __get_user_pages+0x165c/0x2a00 [ 668.963071][ C1] populate_vma_page_range+0x29f/0x3a0 [ 668.968549][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 668.974537][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 668.980439][ C1] ? down_read+0x1ad/0x2e0 [ 668.984858][ C1] __mm_populate+0x24c/0x380 [ 668.989456][ C1] ? __pfx___mm_populate+0x10/0x10 [ 668.994562][ C1] ? up_write+0x1c4/0x420 [ 668.998896][ C1] vm_mmap_pgoff+0x387/0x4d0 [ 669.003490][ C1] ? __se_sys_futex+0x36f/0x400 [ 669.008344][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 669.013461][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 669.018307][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 669.023074][ C1] do_syscall_64+0xfa/0xfa0 [ 669.027571][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.032781][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.038872][ C1] ? clear_bhb_loop+0x60/0xb0 [ 669.043569][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.049466][ C1] RIP: 0033:0x7fe45d98eec9 [ 669.053880][ C1] RSP: 002b:00007fe45e90e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 669.062296][ C1] RAX: ffffffffffffffda RBX: 00007fe45dbe5fa0 RCX: 00007fe45d98eec9 [ 669.070261][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 669.078229][ C1] RBP: 00007fe45da11f91 R08: ffffffffffffffff R09: 0000000000000000 [ 669.086192][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 669.094155][ C1] R13: 00007fe45dbe6038 R14: 00007fe45dbe5fa0 R15: 00007fffbdd1f4f8 [ 669.102149][ C1] [ 669.105166][ C1] rcu: rcu_preempt kthread starved for 10368 jiffies! g31249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 669.116349][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 669.126314][ C1] rcu: RCU grace-period kthread stack dump: [ 669.132191][ C1] task:rcu_preempt state:R running task stack:27272 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 669.145678][ C1] Call Trace: [ 669.148957][ C1] [ 669.151888][ C1] __schedule+0x1798/0x4cc0 [ 669.156421][ C1] ? __lock_acquire+0xab9/0xd20 [ 669.161278][ C1] ? __pfx___schedule+0x10/0x10 [ 669.166153][ C1] ? schedule+0x91/0x360 [ 669.170402][ C1] schedule+0x165/0x360 [ 669.174561][ C1] schedule_timeout+0x12b/0x270 [ 669.179410][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 669.184778][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 669.190674][ C1] ? __pfx_process_timeout+0x10/0x10 [ 669.195961][ C1] ? prepare_to_swait_event+0x341/0x380 [ 669.201507][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 669.206383][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 669.212543][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 669.217824][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 669.223036][ C1] ? finish_swait+0xcd/0x1f0 [ 669.227626][ C1] rcu_gp_kthread+0x99/0x390 [ 669.232216][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 669.237413][ C1] ? __kthread_parkme+0x7b/0x200 [ 669.242354][ C1] ? __kthread_parkme+0x1a1/0x200 [ 669.247385][ C1] kthread+0x711/0x8a0 [ 669.251452][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 669.256646][ C1] ? __pfx_kthread+0x10/0x10 [ 669.261236][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 669.266435][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.271626][ C1] ? __pfx_kthread+0x10/0x10 [ 669.276212][ C1] ret_from_fork+0x4bc/0x870 [ 669.280806][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 669.285924][ C1] ? __switch_to_asm+0x39/0x70 [ 669.290683][ C1] ? __switch_to_asm+0x33/0x70 [ 669.295440][ C1] ? __pfx_kthread+0x10/0x10 [ 669.300027][ C1] ret_from_fork_asm+0x1a/0x30 [ 669.304807][ C1] [ 669.307820][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 669.314137][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 669.323098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 669.333147][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 669.338866][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b1 1a 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 669.358551][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 669.364634][ C1] RAX: de73682fd1e4df00 RBX: ffffffff8196d367 RCX: de73682fd1e4df00 [ 669.372602][ C1] RDX: 0000000000000001 RSI: ffffffff8d7edf31 RDI: ffffffff8bc07a60 [ 669.380570][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 669.388538][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8f9e2770 [ 669.396508][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a54b58 [ 669.404471][ C1] FS: 0000000000000000(0000) GS:ffff888125e04000(0000) knlGS:0000000000000000 [ 669.413397][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 669.419975][ C1] CR2: 000055d12bebff28 CR3: 0000000079036000 CR4: 00000000003526f0 [ 669.427951][ C1] Call Trace: [ 669.431226][ C1] [ 669.434150][ C1] default_idle+0x13/0x20 [ 669.438475][ C1] default_idle_call+0x73/0xb0 [ 669.443241][ C1] do_idle+0x1e7/0x510 [ 669.447318][ C1] ? __pfx_do_idle+0x10/0x10 [ 669.451924][ C1] cpu_startup_entry+0x44/0x60 [ 669.456691][ C1] start_secondary+0x101/0x110 [ 669.461453][ C1] common_startup_64+0x13e/0x147 [ 669.466497][ C1]