last executing test programs: 3m51.564971335s ago: executing program 2 (id=3): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x803, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) 3m49.643244967s ago: executing program 2 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x200000) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) socket$netlink(0x10, 0x3, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r3, &(0x7f0000004140)={0x2020}, 0x2020) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0x1, &(0x7f0000000500)="c15247acae4cbbdb07c68a3619cbf16f9dcb938b00f5154c45d98bcb68623dce9af4d75ec976abd2ac84e6c932157a063f4eb5d387f333c22d903187f2c7a871d056ab40c2ad2d13f6e7575b9c51", &(0x7f0000000580)=""/58}, 0x1c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 3m34.440265278s ago: executing program 32 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x200000) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) socket$netlink(0x10, 0x3, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r3, &(0x7f0000004140)={0x2020}, 0x2020) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0x1, &(0x7f0000000500)="c15247acae4cbbdb07c68a3619cbf16f9dcb938b00f5154c45d98bcb68623dce9af4d75ec976abd2ac84e6c932157a063f4eb5d387f333c22d903187f2c7a871d056ab40c2ad2d13f6e7575b9c51", &(0x7f0000000580)=""/58}, 0x1c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 15.351582578s ago: executing program 1 (id=468): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00158008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15.195826989s ago: executing program 1 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.076115014s ago: executing program 1 (id=470): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="6887f8dbcb46d5f3bfb174b610e0635dc5a79934330631e7e1e7c96ad4b85299dfe11e3d9828e582e1a311e45136bacd651b05ac307229b9ef7fb5", @ANYRESDEC, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000000540)=ANY=[@ANYBLOB="8800000041d162a3fb804da446d382c067035cc15250344094dc8cf4ddc618f6d55884fd2c9b06d6d28f91aef46978867c820a96c42eba8f7f93d90b5fff1d94b38f4054e0d578ac8d9d6fea", @ANYRES16=0x0], 0x88}, 0x1, 0x0, 0x0, 0x24000800}, 0x24048081) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x2}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xa, 0x148, 0x30c, 0x60, 0x3f4, 0x2a8, 0x2a8, 0x3f4, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xffffffff, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x30c, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0xa, [0x100, 0x4e22, 0x4e23, 0x4e23, 0x4e24, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e21, 0x4e22, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1]}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4e4) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) 11.748922558s ago: executing program 1 (id=478): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) 11.064230843s ago: executing program 1 (id=481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.510198159s ago: executing program 1 (id=488): recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0xf83, 0x7}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 8.483391814s ago: executing program 5 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) syz_clone3(&(0x7f00000006c0)={0x90010000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0xc}, &(0x7f0000000500)=""/234, 0xea, &(0x7f0000000600)=""/78, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000306010800000000000000000a00000005000100071300000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0xfd, 0xffffffff, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x4, 0x7a, 0x3, 0x40000003, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x3, 0xa6b5, 0x0, 0x1]}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe61, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 8.030870279s ago: executing program 0 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x800, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x67, 0x0, 0x0, 0x21, 0x0, @local, @multicast1}}}}}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="53dee3fa61cd050000400000000003a9bf300215f44cf8ec7132b57541ee4452ba9055efe8107d54", 0x28, 0xb5, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) 7.436575771s ago: executing program 4 (id=496): syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 7.167415298s ago: executing program 5 (id=497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)='j', 0x1, 0x24024095, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 6.833370778s ago: executing program 5 (id=498): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x80) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.75525976s ago: executing program 4 (id=499): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x94) 4.90875749s ago: executing program 4 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, r6) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 4.287019411s ago: executing program 0 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="09000000010001", 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYBLOB="020300031000000000070000000000000600090018010000ce45b8add73fd52f35e21bf163fe477120a04a0ecc43159711ad42393cb41d796061718cf0e6000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002"], 0x80}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 4.167666614s ago: executing program 4 (id=502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x200000000000004a, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 4.133492103s ago: executing program 5 (id=503): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) epoll_create1(0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) close(0x3) 3.875940233s ago: executing program 3 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) 3.414637978s ago: executing program 0 (id=505): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) 3.21434317s ago: executing program 3 (id=506): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="6887f8dbcb46d5f3bfb174b610e0635dc5a79934330631e7e1e7c96ad4b85299dfe11e3d9828e582e1a311e45136bacd651b05ac307229b9ef7fb5", @ANYRESDEC, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000000540)=ANY=[@ANYBLOB="8800000041d162a3fb804da446d382c067035cc15250344094dc8cf4ddc618f6d55884fd2c9b06d6d28f91aef46978867c820a96c42eba8f7f93d90b5fff1d94b38f4054e0d578ac8d9d6fea", @ANYRES16=0x0], 0x88}, 0x1, 0x0, 0x0, 0x24000800}, 0x24048081) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x2}, 0x0) 2.861979133s ago: executing program 4 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) syz_clone3(&(0x7f00000006c0)={0x90010000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0xc}, &(0x7f0000000500)=""/234, 0xea, &(0x7f0000000600)=""/78, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000306010800000000000000000a00000005000100071300000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x80001) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0xfd, 0xffffffff, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x4, 0x7a, 0x3, 0x40000003, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x3, 0xa6b5, 0x0, 0x1]}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe61, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x0) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2.761009232s ago: executing program 3 (id=508): syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x7c900) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) 2.708794169s ago: executing program 0 (id=509): syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 2.348182675s ago: executing program 3 (id=510): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.375250338s ago: executing program 0 (id=511): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x803, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x20008000) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) 1.060476865s ago: executing program 5 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) getrlimit(0xa, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r5, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x0}, r6) add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 548.697472ms ago: executing program 3 (id=513): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x80) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 403.350348ms ago: executing program 5 (id=514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x183100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x281}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x3f, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xbb3, 0xffffffffffffffff, 0x800, 0xffffffffffffffff, 0x7fffffff, 0x81}, {0xdf, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x4d2, 0x3c}, 0xa, @in=@broadcast, 0x10000000, 0x0, 0x3, 0x8}]}]}, 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff2f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="03"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) 52.829687ms ago: executing program 0 (id=515): r0 = io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x1, 0xfffffffe, 0xc}) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8e74, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.420809ms ago: executing program 3 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) 0s ago: executing program 4 (id=517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x200000000000004a, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 81.556548][ T5596] cgroup: Unknown subsys name 'net' [ 81.797628][ T5596] cgroup: Unknown subsys name 'cpuset' [ 81.853433][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.867068][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.995620][ T57] cfg80211: failed to load regulatory.db [ 87.830121][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.856848][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.869628][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.873663][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.886048][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.887573][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.902522][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.906110][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.919915][ T4925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.973514][ T4925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.986152][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.007629][ T4925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.011217][ T4925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.013189][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.027654][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.034761][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.041849][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.045117][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.047147][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.048751][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.079619][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.081074][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.109786][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.125526][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.126618][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.946180][ T5615] Bluetooth: hci1: command tx timeout [ 90.102929][ T5615] Bluetooth: hci4: command tx timeout [ 90.102937][ T5625] Bluetooth: hci2: command tx timeout [ 90.182697][ T5625] Bluetooth: hci3: command tx timeout [ 90.182861][ T5625] Bluetooth: hci0: command tx timeout [ 90.798787][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.800029][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.800979][ T5612] bridge_slave_0: entered allmulticast mode [ 90.803682][ T5612] bridge_slave_0: entered promiscuous mode [ 90.846277][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.846448][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.846597][ T5613] bridge_slave_0: entered allmulticast mode [ 90.848509][ T5613] bridge_slave_0: entered promiscuous mode [ 90.867578][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.867915][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.868190][ T5612] bridge_slave_1: entered allmulticast mode [ 90.905961][ T5612] bridge_slave_1: entered promiscuous mode [ 90.907664][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.907835][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.907990][ T5614] bridge_slave_0: entered allmulticast mode [ 90.909862][ T5614] bridge_slave_0: entered promiscuous mode [ 90.941071][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.941343][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.941573][ T5613] bridge_slave_1: entered allmulticast mode [ 90.948275][ T5613] bridge_slave_1: entered promiscuous mode [ 91.002228][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.002430][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.002999][ T5614] bridge_slave_1: entered allmulticast mode [ 91.008573][ T5614] bridge_slave_1: entered promiscuous mode [ 91.014282][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.014553][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.014795][ T5610] bridge_slave_0: entered allmulticast mode [ 91.018432][ T5610] bridge_slave_0: entered promiscuous mode [ 91.121440][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.121637][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.122029][ T5610] bridge_slave_1: entered allmulticast mode [ 91.125997][ T5610] bridge_slave_1: entered promiscuous mode [ 91.181934][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.226660][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.251124][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.259251][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.283875][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.284293][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.284508][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.284659][ T5611] bridge_slave_0: entered allmulticast mode [ 91.288753][ T5611] bridge_slave_0: entered promiscuous mode [ 91.330738][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.338041][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.361261][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.361518][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.361684][ T5611] bridge_slave_1: entered allmulticast mode [ 91.365766][ T5611] bridge_slave_1: entered promiscuous mode [ 91.417909][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.456260][ T5612] team0: Port device team_slave_0 added [ 91.498561][ T5613] team0: Port device team_slave_0 added [ 91.518943][ T5612] team0: Port device team_slave_1 added [ 91.521658][ T5614] team0: Port device team_slave_0 added [ 91.548223][ T5613] team0: Port device team_slave_1 added [ 91.561365][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.596404][ T5614] team0: Port device team_slave_1 added [ 91.615976][ T5610] team0: Port device team_slave_0 added [ 91.620077][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.673965][ T5610] team0: Port device team_slave_1 added [ 91.691697][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.691710][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.691724][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.757625][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.757639][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.757674][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.810072][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.810084][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.810099][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.812198][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.812210][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.812223][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.823571][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.823588][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.823611][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.856651][ T5611] team0: Port device team_slave_0 added [ 91.889913][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.889928][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.889950][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.894756][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.894770][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.894793][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.902969][ T5611] team0: Port device team_slave_1 added [ 91.939176][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.939192][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.939214][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.025035][ T5615] Bluetooth: hci1: command tx timeout [ 92.076547][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.076564][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.076586][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.147428][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.147441][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.147455][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.157961][ T5613] hsr_slave_0: entered promiscuous mode [ 92.160255][ T5613] hsr_slave_1: entered promiscuous mode [ 92.182972][ T5625] Bluetooth: hci2: command tx timeout [ 92.183066][ T5615] Bluetooth: hci4: command tx timeout [ 92.262941][ T5625] Bluetooth: hci3: command tx timeout [ 92.263044][ T5615] Bluetooth: hci0: command tx timeout [ 92.587994][ T5612] hsr_slave_0: entered promiscuous mode [ 92.589956][ T5612] hsr_slave_1: entered promiscuous mode [ 92.591091][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 92.591175][ T5612] Cannot create hsr debugfs directory [ 92.648268][ T5614] hsr_slave_0: entered promiscuous mode [ 92.649556][ T5614] hsr_slave_1: entered promiscuous mode [ 92.650524][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 92.650549][ T5614] Cannot create hsr debugfs directory [ 92.705916][ T5610] hsr_slave_0: entered promiscuous mode [ 92.707183][ T5610] hsr_slave_1: entered promiscuous mode [ 92.708183][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 92.708208][ T5610] Cannot create hsr debugfs directory [ 92.882071][ T5611] hsr_slave_0: entered promiscuous mode [ 92.884411][ T5611] hsr_slave_1: entered promiscuous mode [ 92.885958][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 92.885982][ T5611] Cannot create hsr debugfs directory [ 93.751110][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.809576][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.829161][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.866680][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.871730][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.897760][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.920405][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.952309][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.089006][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.116599][ T5615] Bluetooth: hci1: command tx timeout [ 94.134046][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.138941][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.180238][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.194018][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.237515][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.261011][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.264355][ T5615] Bluetooth: hci4: command tx timeout [ 94.264388][ T5615] Bluetooth: hci2: command tx timeout [ 94.298508][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.346125][ T5625] Bluetooth: hci0: command tx timeout [ 94.353869][ T5625] Bluetooth: hci3: command tx timeout [ 94.482369][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.527895][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.531706][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.568454][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.572012][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.621079][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.653013][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.701234][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.911762][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.949599][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.961209][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.996452][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.008715][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.049045][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.056379][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.091253][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.126695][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.301211][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.311441][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.357344][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.375099][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.418513][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.431176][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.457988][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.485146][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.517150][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.537391][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.537850][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.599732][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.599995][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.644278][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.819409][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.887591][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.888674][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.925057][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.974394][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.974546][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.114670][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.184293][ T5625] Bluetooth: hci1: command tx timeout [ 96.205849][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.206112][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.248386][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.327483][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.327751][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.342817][ T5625] Bluetooth: hci2: command tx timeout [ 96.342828][ T5615] Bluetooth: hci4: command tx timeout [ 96.427011][ T5615] Bluetooth: hci3: command tx timeout [ 96.427046][ T5615] Bluetooth: hci0: command tx timeout [ 96.490386][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.519246][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.545014][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.545132][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.656309][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.656597][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.782365][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.872286][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.879424][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.966005][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.967032][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.342722][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.867817][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.041355][ T5613] veth0_vlan: entered promiscuous mode [ 98.240032][ T5613] veth1_vlan: entered promiscuous mode [ 98.461335][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.516027][ T5610] veth0_vlan: entered promiscuous mode [ 98.670562][ T5610] veth1_vlan: entered promiscuous mode [ 98.720753][ T5613] veth0_macvtap: entered promiscuous mode [ 98.788644][ T5613] veth1_macvtap: entered promiscuous mode [ 98.905299][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.000817][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.051492][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.058946][ T5610] veth0_macvtap: entered promiscuous mode [ 99.147217][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.151956][ T5610] veth1_macvtap: entered promiscuous mode [ 99.212061][ T1395] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.256218][ T1395] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266688][ T1395] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.291628][ T1395] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.403154][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.500943][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.669862][ T5612] veth0_vlan: entered promiscuous mode [ 99.699469][ T1416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.746519][ T1416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.769740][ T1416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.790584][ T1416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.801659][ T5614] veth0_vlan: entered promiscuous mode [ 99.807039][ T5611] veth0_vlan: entered promiscuous mode [ 99.910435][ T5612] veth1_vlan: entered promiscuous mode [ 99.947001][ T5614] veth1_vlan: entered promiscuous mode [ 99.959364][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.959385][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.007920][ T5611] veth1_vlan: entered promiscuous mode [ 100.299997][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.300020][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.431158][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.431179][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.500767][ T5612] veth0_macvtap: entered promiscuous mode [ 100.630364][ T5612] veth1_macvtap: entered promiscuous mode [ 100.639910][ T5611] veth0_macvtap: entered promiscuous mode [ 100.656275][ T5614] veth0_macvtap: entered promiscuous mode [ 100.689154][ T1395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.689178][ T1395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.738292][ T5611] veth1_macvtap: entered promiscuous mode [ 100.769506][ T5614] veth1_macvtap: entered promiscuous mode [ 100.945977][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.048379][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.091274][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.105755][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.185402][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.187990][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.199427][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.210995][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.227972][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.274007][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.328771][ T157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.330294][ T157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.408337][ T1443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.425868][ T1443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.429434][ T1443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.529599][ T1443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.060531][ T1443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.212652][ T3361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.808615][ T5818] 9pnet_virtio: no channels available for device syz [ 104.891657][ T5822] 9pnet_virtio: no channels available for device syz [ 108.168437][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.168460][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.463214][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.463235][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.506375][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.506396][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.667177][ T5825] syz.3.8 (5825) used greatest stack depth: 18224 bytes left [ 108.854815][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.854838][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.159093][ T1416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.159114][ T1416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.490921][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.490942][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.547726][ T5834] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.858922][ T5835] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 109.867716][ T5835] batman_adv: batadv0: Adding interface: gretap1 [ 109.867733][ T5835] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.867762][ T5835] batman_adv: batadv0: Interface activated: gretap1 [ 115.661143][ T5861] 9pnet_virtio: no channels available for device syz [ 117.912513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.657455][ T4938] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.984957][ T4938] usb 1-1: Using ep0 maxpacket: 16 [ 119.110010][ T4938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.110069][ T4938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.110097][ T4938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.110118][ T4938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.110140][ T4938] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.188033][ T4938] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.188066][ T4938] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 119.188085][ T4938] usb 1-1: Manufacturer: syz [ 119.374181][ T4938] usb 1-1: config 0 descriptor?? [ 119.600397][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.650271][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.660091][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.678063][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.688639][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.123677][ T5896] overlayfs: failed to resolve './bus': -2 [ 120.156786][ T5885] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 120.200212][ T5885] batman_adv: batadv0: Adding interface: gretap1 [ 120.200231][ T5885] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.200264][ T5885] batman_adv: batadv0: Interface activated: gretap1 [ 120.292904][ T4938] rc_core: IR keymap rc-hauppauge not found [ 120.292929][ T4938] Registered IR keymap rc-empty [ 120.316548][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.343041][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.395359][ T4938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 120.418458][ T4938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 121.637021][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.653825][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.674276][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.695418][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.713963][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.751369][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.778229][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.792887][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.814094][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.842864][ T4938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 121.885287][ T5615] Bluetooth: hci5: command tx timeout [ 121.930995][ T4938] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 121.931023][ T4938] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 121.968237][ T4938] usb 1-1: USB disconnect, device number 2 [ 123.946877][ T5615] Bluetooth: hci5: command tx timeout [ 124.744642][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.944249][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 124.949855][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.949892][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.949909][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.949921][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.949933][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.954279][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.954310][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.954329][ T10] usb 1-1: Manufacturer: syz [ 125.272397][ T10] usb 1-1: config 0 descriptor?? [ 125.361407][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.733023][ T5942] overlayfs: failed to resolve './bus': -2 [ 125.797468][ T10] rc_core: IR keymap rc-hauppauge not found [ 125.797490][ T10] Registered IR keymap rc-empty [ 125.797658][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.812650][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.860702][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 125.950277][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 125.971262][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 125.988774][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.004462][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.025924][ T5615] Bluetooth: hci5: command tx timeout [ 126.027866][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.042627][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.064368][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.082798][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.135303][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 126.274723][ T5960] fuse: Bad value for 'fd' [ 127.171567][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 127.447542][ T5962] Zero length message leads to an empty skb [ 127.800072][ T5965] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 128.110063][ T5967] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 128.744585][ T5615] Bluetooth: hci5: command tx timeout [ 128.801730][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 129.309721][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 129.309750][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 129.318067][ T10] usb 1-1: USB disconnect, device number 3 [ 129.731324][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.788952][ T5968] : renamed from dummy0 (while UP) [ 130.540081][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.042712][ T5731] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.146981][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.268665][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 132.275034][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.275092][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.275120][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.275141][ T5731] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 132.275163][ T5731] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.278916][ T5731] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 132.278948][ T5731] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 132.278994][ T5731] usb 2-1: Manufacturer: syz [ 132.384999][ T5731] usb 2-1: config 0 descriptor?? [ 132.553799][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 132.801206][ T5993] overlayfs: failed to resolve './bus': -2 [ 132.846642][ T5731] rc_core: IR keymap rc-hauppauge not found [ 132.846663][ T5731] Registered IR keymap rc-empty [ 132.846828][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.872959][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.943002][ T5731] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 133.077416][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090044][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.254254][ T5731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 134.294206][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.391929][ T6008] syz.0.52 (6008) used greatest stack depth: 18128 bytes left [ 134.548559][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.572198][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.582775][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.603230][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.634299][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.654959][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.687270][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.719392][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.742807][ T5731] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.842009][ T6015] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 134.884294][ T6015] : renamed from dummy0 (while UP) [ 134.891212][ T5731] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 134.891241][ T5731] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 135.055092][ T5731] usb 2-1: USB disconnect, device number 2 [ 139.407820][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 140.884831][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 141.723265][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 141.871501][ T12] bridge_slave_1: left allmulticast mode [ 141.871698][ T12] bridge_slave_1: left promiscuous mode [ 141.940136][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.185308][ T12] bridge_slave_0: left allmulticast mode [ 142.185351][ T12] bridge_slave_0: left promiscuous mode [ 142.185654][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.145438][ T824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.341605][ T824] usb 5-1: Using ep0 maxpacket: 16 [ 145.345254][ T824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.345323][ T824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.345351][ T824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.345371][ T824] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 145.345393][ T824] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.353074][ T824] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.353095][ T824] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.353107][ T824] usb 5-1: Manufacturer: syz [ 145.356766][ T824] usb 5-1: config 0 descriptor?? [ 146.462690][ T824] rc_core: IR keymap rc-hauppauge not found [ 146.462714][ T824] Registered IR keymap rc-empty [ 146.464158][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.494598][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.523700][ T824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 146.564534][ T824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 146.586272][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.607679][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.633312][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.652657][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.677931][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.693430][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.712991][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.732795][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.753707][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.773295][ T824] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 146.854586][ T824] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 146.854613][ T824] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 146.932005][ T824] usb 5-1: USB disconnect, device number 2 [ 147.124530][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 147.124559][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 147.664831][ T6100] binder: 6099:6100 ioctl ae80 0 returned -22 [ 147.741874][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.855649][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.909393][ T12] bond0 (unregistering): Released all slaves [ 148.046742][ T57] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 148.228802][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 148.228849][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.237668][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.263409][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.263743][ T5887] bridge_slave_0: entered allmulticast mode [ 148.303247][ T57] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 148.303280][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.303300][ T57] usb 5-1: Product: syz [ 148.303315][ T57] usb 5-1: Manufacturer: syz [ 148.303328][ T57] usb 5-1: SerialNumber: syz [ 148.379530][ T5887] bridge_slave_0: entered promiscuous mode [ 148.407959][ T57] usb 5-1: config 0 descriptor?? [ 148.437948][ T57] hub 5-1:0.0: bad descriptor, ignoring hub [ 148.437992][ T57] hub 5-1:0.0: probe with driver hub failed with error -5 [ 148.438642][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.438946][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.439273][ T5887] bridge_slave_1: entered allmulticast mode [ 148.484774][ T5887] bridge_slave_1: entered promiscuous mode [ 148.515592][ T57] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 148.624938][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.78'. [ 148.880145][ T6109] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 150.841723][ T6110] : renamed from dummy0 (while UP) [ 151.017959][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.121982][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.821747][ T5744] usb 5-1: USB disconnect, device number 3 [ 154.013652][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.139293][ T5887] team0: Port device team_slave_0 added [ 154.182643][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 154.184965][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.185001][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.185017][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.185028][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.185040][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.186452][ T5872] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.186470][ T5872] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.186480][ T5872] usb 4-1: Manufacturer: syz [ 154.194754][ T5887] team0: Port device team_slave_1 added [ 154.518057][ T5872] usb 4-1: config 0 descriptor?? [ 154.528267][ T5872] usb 4-1: can't set config #0, error -71 [ 154.612793][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.87'. [ 154.781130][ T5872] usb 4-1: USB disconnect, device number 2 [ 154.984605][ T6145] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 155.038343][ T57] kernel read not supported for file /newroot/19/file0 (pid: 57 comm: kworker/1:1) [ 155.283042][ T5872] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 155.465667][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.492271][ T5872] usb 4-1: not running at top speed; connect to a high speed hub [ 155.501023][ T5872] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 155.501055][ T5872] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 155.501074][ T5872] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 155.501094][ T5872] usb 4-1: config 14 has no interface number 0 [ 155.501110][ T5872] usb 4-1: config 14 has no interface number 1 [ 155.501186][ T5872] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 155.501209][ T5872] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 155.501231][ T5872] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.501255][ T5872] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 155.501290][ T5872] usb 4-1: config 14 interface 57 has no altsetting 0 [ 155.501306][ T5872] usb 4-1: config 14 interface 228 has no altsetting 0 [ 155.547486][ T5872] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 155.547519][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.547537][ T5872] usb 4-1: Product: syz [ 155.547551][ T5872] usb 4-1: Manufacturer: syz [ 155.547564][ T5872] usb 4-1: SerialNumber: syz [ 156.643537][ T5872] legousbtower 4-1:14.57: interrupt endpoints not found [ 157.012836][ T5872] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 157.281395][ T5872] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 157.303834][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.303853][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.303878][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.424481][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 157.525964][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.525982][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.526009][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.695998][ T6163] usb 4-1: LEGO USB Tower reset control request failed [ 157.859070][ T824] usb 4-1: USB disconnect, device number 3 [ 158.027789][ T824] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 158.048399][ T5887] hsr_slave_0: entered promiscuous mode [ 158.102244][ T5887] hsr_slave_1: entered promiscuous mode [ 158.127867][ T5887] debugfs: 'hsr0' already exists in 'hsr' [ 158.127896][ T5887] Cannot create hsr debugfs directory [ 158.446240][ T12] hsr_slave_0: left promiscuous mode [ 158.476296][ T12] hsr_slave_1: left promiscuous mode [ 158.477715][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.497301][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.562885][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.562915][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.739926][ T12] veth1_macvtap: left promiscuous mode [ 158.766182][ T12] veth0_macvtap: left promiscuous mode [ 158.778118][ T12] veth1_vlan: left promiscuous mode [ 158.778675][ T12] veth0_vlan: left promiscuous mode [ 161.335873][ T6194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'. [ 163.243719][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.304758][ T12] team0 (unregistering): Port device team_slave_0 removed [ 165.622664][ T5744] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 165.777135][ T5744] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.779733][ T5744] usb 1-1: not running at top speed; connect to a high speed hub [ 165.781277][ T5744] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 165.781303][ T5744] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 165.781324][ T5744] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 165.781343][ T5744] usb 1-1: config 14 has no interface number 0 [ 165.781360][ T5744] usb 1-1: config 14 has no interface number 1 [ 165.781435][ T5744] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 165.781461][ T5744] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 165.781487][ T5744] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.781513][ T5744] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 165.781540][ T5744] usb 1-1: config 14 interface 57 has no altsetting 0 [ 165.781558][ T5744] usb 1-1: config 14 interface 228 has no altsetting 0 [ 166.482480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.846429][ T5744] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 166.846449][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.846461][ T5744] usb 1-1: Product: syz [ 166.846468][ T5744] usb 1-1: Manufacturer: syz [ 166.846476][ T5744] usb 1-1: SerialNumber: syz [ 167.600618][ T5744] legousbtower 1-1:14.57: interrupt endpoints not found [ 167.970363][ T5744] legousbtower 1-1:14.228: get version request failed: -71 [ 167.970584][ T5744] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 168.181591][ T5744] usb 1-1: USB disconnect, device number 4 [ 168.378846][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 168.793418][ T5744] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.955234][ T5744] usb 1-1: Using ep0 maxpacket: 16 [ 168.958146][ T5744] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.958204][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.958231][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 168.958253][ T5744] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 168.958274][ T5744] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.959883][ T5744] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.959911][ T5744] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.959930][ T5744] usb 1-1: Manufacturer: syz [ 169.154101][ T5744] usb 1-1: config 0 descriptor?? [ 169.204718][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 169.612572][ T5744] rc_core: IR keymap rc-hauppauge not found [ 169.612595][ T5744] Registered IR keymap rc-empty [ 169.612850][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.643688][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.665280][ T5744] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 169.700370][ T5744] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 169.724089][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.744012][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.764213][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.784346][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.812218][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.826841][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.846266][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.864711][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.886980][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.904483][ T5744] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 169.963023][ T5744] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 169.963112][ T5744] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 172.610450][ T5744] usb 1-1: USB disconnect, device number 5 [ 175.232488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.262489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.272490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.282484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.292485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.302495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.312524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.322508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.865531][ T6308] Illegal XDP return value 4294967262 on prog (id 11) dev syz_tun, expect packet loss! [ 179.230307][ T6321] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 180.155187][ T6321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.210433][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.262296][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.278039][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.296615][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.297640][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.824714][ T6326] bond1: (slave geneve2): making interface the new active one [ 180.890880][ T6326] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 180.983121][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 182.382603][ T5615] Bluetooth: hci1: command tx timeout [ 184.434089][ T5615] Bluetooth: hci1: command tx timeout [ 185.507281][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 186.503326][ T5615] Bluetooth: hci1: command tx timeout [ 187.151463][ T6393] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 187.971442][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.990000][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.079217][ T6392] pim6reg: entered allmulticast mode [ 188.083309][ T6393] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 188.505652][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 188.583886][ T5615] Bluetooth: hci1: command tx timeout [ 192.435064][ T6447] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 193.504567][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.750283][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.750399][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.451262][ T6466] 9pnet_virtio: no channels available for device syz [ 196.489071][ T6450] bond1: (slave geneve2): making interface the new active one [ 196.517426][ T6450] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 197.660290][ T6460] pim6reg: entered allmulticast mode [ 197.743488][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.161'. [ 202.133149][ T6521] 9pnet_virtio: no channels available for device syz [ 202.682549][ T5731] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.832682][ T5731] usb 2-1: Using ep0 maxpacket: 32 [ 202.835104][ T5731] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 202.838650][ T5731] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 202.838680][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 202.838701][ T5731] usb 2-1: Product: syz [ 202.838716][ T5731] usb 2-1: Manufacturer: syz [ 202.838730][ T5731] usb 2-1: SerialNumber: syz [ 202.937030][ T5731] usb 2-1: config 0 descriptor?? [ 203.005010][ T6518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.023649][ T5731] hub 2-1:0.0: bad descriptor, ignoring hub [ 203.023691][ T5731] hub 2-1:0.0: probe with driver hub failed with error -5 [ 204.443578][ T32] usb 2-1: USB disconnect, device number 3 [ 205.407272][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 207.163390][ T5969] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.224791][ T43] bridge_slave_1: left allmulticast mode [ 207.224830][ T43] bridge_slave_1: left promiscuous mode [ 207.225141][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.315966][ T5969] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.315998][ T5969] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.316015][ T5969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.316066][ T5969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 207.316090][ T5969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 207.319378][ T5969] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.319409][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.319428][ T5969] usb 5-1: Product: syz [ 207.319443][ T5969] usb 5-1: Manufacturer: syz [ 209.099609][ T43] bridge_slave_0: left allmulticast mode [ 209.099647][ T43] bridge_slave_0: left promiscuous mode [ 209.107089][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.123736][ T5969] cdc_wdm 5-1:1.0: skipping garbage [ 209.123758][ T5969] cdc_wdm 5-1:1.0: skipping garbage [ 209.134492][ T5969] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 209.134516][ T5969] cdc_wdm 5-1:1.0: Unknown control protocol [ 209.778747][ T5969] usb 5-1: USB disconnect, device number 4 [ 211.536080][ T6615] fuse: Bad value for 'fd' [ 212.923419][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 213.122853][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 213.122898][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 213.122926][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 213.998087][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.028963][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 214.028989][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 214.113599][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.897036][ T43] bond0 (unregistering): Released all slaves [ 215.158979][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.230246][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.231896][ T6324] bridge_slave_0: entered allmulticast mode [ 215.369572][ T6324] bridge_slave_0: entered promiscuous mode [ 215.477133][ T6626] bond0: entered promiscuous mode [ 215.477159][ T6626] bond_slave_0: entered promiscuous mode [ 215.477428][ T6626] bond_slave_1: entered promiscuous mode [ 215.531694][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.532021][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.532348][ T6324] bridge_slave_1: entered allmulticast mode [ 215.581755][ T6324] bridge_slave_1: entered promiscuous mode [ 217.204459][ T6652] fuse: Bad value for 'fd' [ 219.410952][ T43] hsr_slave_0: left promiscuous mode [ 219.465848][ T43] hsr_slave_1: left promiscuous mode [ 219.467940][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.693144][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.691584][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 220.691604][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 222.191298][ T43] team0 (unregistering): Port device team_slave_1 removed [ 222.283452][ T43] team0 (unregistering): Port device team_slave_0 removed [ 223.028844][ T6669] syz.0.205 (6669) used greatest stack depth: 16448 bytes left [ 223.248080][ T6699] 9pnet_virtio: no channels available for device syz [ 224.004633][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.976906][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.264959][ T6709] Bluetooth: MGMT ver 1.23 [ 226.308569][ T6324] team0: Port device team_slave_0 added [ 226.395443][ T6324] team0: Port device team_slave_1 added [ 226.820426][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.820442][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.820464][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.867866][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.867884][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.867911][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.473859][ T6324] hsr_slave_0: entered promiscuous mode [ 227.520243][ T6324] hsr_slave_1: entered promiscuous mode [ 227.530506][ T6324] debugfs: 'hsr0' already exists in 'hsr' [ 227.530537][ T6324] Cannot create hsr debugfs directory [ 228.627650][ T6744] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 230.764302][ T6725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.942191][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 236.002659][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 239.229242][ T6847] binder: 6843:6847 ioctl ae80 0 returned -22 [ 240.671623][ T5969] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 240.845308][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 240.845345][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 240.848116][ T5969] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 240.848147][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.848166][ T5969] usb 1-1: Product: syz [ 240.848180][ T5969] usb 1-1: Manufacturer: syz [ 240.848194][ T5969] usb 1-1: SerialNumber: syz [ 240.911731][ T5969] usb 1-1: config 0 descriptor?? [ 240.946559][ T5969] hub 1-1:0.0: bad descriptor, ignoring hub [ 240.946601][ T5969] hub 1-1:0.0: probe with driver hub failed with error -5 [ 240.966570][ T5969] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 241.085721][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.117122][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.145121][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.158667][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.169128][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.353694][ T5969] usb 1-1: USB disconnect, device number 6 [ 241.824462][ T6871] syz_tun: entered allmulticast mode [ 242.033834][ T6871] dvmrp6: entered allmulticast mode [ 242.105822][ T6870] syz_tun: left allmulticast mode [ 243.234430][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 243.234733][ T6908] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 243.392959][ T5625] Bluetooth: hci5: command tx timeout [ 243.429585][ T6908] netlink: 152 bytes leftover after parsing attributes in process `syz.3.254'. [ 244.293658][ T823] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 244.445104][ T823] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.445134][ T823] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 244.445152][ T823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.445198][ T823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 244.445223][ T823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 244.451812][ T823] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.451846][ T823] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.451866][ T823] usb 1-1: Product: syz [ 244.451880][ T823] usb 1-1: Manufacturer: syz [ 244.560346][ T823] cdc_wdm 1-1:1.0: skipping garbage [ 244.560371][ T823] cdc_wdm 1-1:1.0: skipping garbage [ 244.697281][ T823] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 244.697307][ T823] cdc_wdm 1-1:1.0: Unknown control protocol [ 245.087709][ T5863] usb 1-1: USB disconnect, device number 7 [ 245.325802][ T6938] syz_tun: entered allmulticast mode [ 245.396886][ T6935] syz_tun: left allmulticast mode [ 245.463961][ T5625] Bluetooth: hci5: command tx timeout [ 247.542773][ T5625] Bluetooth: hci5: command tx timeout [ 248.386854][ T6024] bridge_slave_1: left allmulticast mode [ 248.386896][ T6024] bridge_slave_1: left promiscuous mode [ 248.387238][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.563377][ T5744] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 248.661705][ T6024] bridge_slave_0: left allmulticast mode [ 248.661747][ T6024] bridge_slave_0: left promiscuous mode [ 248.662063][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.849673][ T5744] usb 4-1: config 0 has no interfaces? [ 248.849813][ T5744] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 248.849884][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.491403][ T5744] usb 4-1: config 0 descriptor?? [ 249.495222][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.495267][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.495293][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.496134][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.496161][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.496209][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.496234][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.496259][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.496283][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.496306][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 249.624974][ T5625] Bluetooth: hci5: command tx timeout [ 249.725539][ T6986] binder: 6985:6986 ioctl ae80 0 returned -22 [ 249.934558][ T5863] hid-generic 0004:FFFFFFFF:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 250.145243][ T5731] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 250.194758][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 250.243327][ T4938] usb 4-1: USB disconnect, device number 4 [ 250.317147][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 250.317185][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 250.326708][ T5731] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 250.326737][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.326762][ T5731] usb 1-1: Product: syz [ 250.326775][ T5731] usb 1-1: Manufacturer: syz [ 250.326787][ T5731] usb 1-1: SerialNumber: syz [ 250.416223][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.416261][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.416279][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.416327][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 250.416353][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 250.418417][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.418446][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.418466][ T9] usb 2-1: Product: syz [ 250.418481][ T9] usb 2-1: Manufacturer: syz [ 250.619980][ T5731] usb 1-1: config 0 descriptor?? [ 250.721525][ T5731] hub 1-1:0.0: bad descriptor, ignoring hub [ 250.721568][ T5731] hub 1-1:0.0: probe with driver hub failed with error -5 [ 251.068493][ T5731] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 251.094406][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 251.094429][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 251.203656][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 251.203681][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 251.286163][ T9] usb 2-1: USB disconnect, device number 4 [ 251.433736][ T5731] usb 1-1: USB disconnect, device number 8 [ 251.613559][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.764761][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.890971][ T6024] bond0 (unregistering): Released all slaves [ 252.412867][ T7026] 9pnet_virtio: no channels available for device syz [ 255.823047][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.823366][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.823672][ T6854] bridge_slave_0: entered allmulticast mode [ 255.827546][ T6854] bridge_slave_0: entered promiscuous mode [ 255.914691][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 255.979215][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.979293][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.032943][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.033328][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.033697][ T6854] bridge_slave_1: entered allmulticast mode [ 256.080590][ T6854] bridge_slave_1: entered promiscuous mode [ 256.442631][ T6024] hsr_slave_0: left promiscuous mode [ 256.483222][ T6024] hsr_slave_1: left promiscuous mode [ 256.485969][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.530173][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.540969][ T7057] binder: 7056:7057 ioctl ae80 0 returned -22 [ 256.862664][ T5731] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 257.037280][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 257.037318][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 257.040993][ T5731] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 257.041026][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.041046][ T5731] usb 4-1: Product: syz [ 257.041060][ T5731] usb 4-1: Manufacturer: syz [ 257.041074][ T5731] usb 4-1: SerialNumber: syz [ 257.119522][ T5731] usb 4-1: config 0 descriptor?? [ 257.179476][ T5731] hub 4-1:0.0: bad descriptor, ignoring hub [ 257.179540][ T5731] hub 4-1:0.0: probe with driver hub failed with error -5 [ 257.206316][ T5731] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 257.217816][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 257.254954][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 257.360787][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 257.368652][ T32] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.368682][ T32] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.368701][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.368751][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 257.368777][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 257.374181][ T32] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.374210][ T32] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.374227][ T32] usb 5-1: Product: syz [ 257.374239][ T32] usb 5-1: Manufacturer: syz [ 257.443205][ T5731] usb 4-1: USB disconnect, device number 5 [ 257.557638][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 257.557652][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 257.567880][ T32] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 257.567905][ T32] cdc_wdm 5-1:1.0: Unknown control protocol [ 257.884687][ T824] usb 5-1: USB disconnect, device number 5 [ 258.400357][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.476049][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.693169][ T6854] team0: Port device team_slave_0 added [ 258.708370][ T6854] team0: Port device team_slave_1 added [ 258.929245][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.929263][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.929290][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.965593][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.965610][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.965633][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.637254][ T6854] hsr_slave_0: entered promiscuous mode [ 261.639774][ T6854] hsr_slave_1: entered promiscuous mode [ 261.641799][ T6854] debugfs: 'hsr0' already exists in 'hsr' [ 261.641826][ T6854] Cannot create hsr debugfs directory [ 261.953023][ T5744] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 262.145435][ T5744] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.145467][ T5744] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.145486][ T5744] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.145540][ T5744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 262.145566][ T5744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 262.202719][ T5744] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.202752][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.202772][ T5744] usb 4-1: Product: syz [ 262.202787][ T5744] usb 4-1: Manufacturer: syz [ 262.303718][ T5744] cdc_wdm 4-1:1.0: skipping garbage [ 262.303741][ T5744] cdc_wdm 4-1:1.0: skipping garbage [ 262.331059][ T5744] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 262.331081][ T5744] cdc_wdm 4-1:1.0: Unknown control protocol [ 262.705971][ T824] usb 4-1: USB disconnect, device number 6 [ 263.001062][ T6854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.060534][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.061702][ T6854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.174084][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.206176][ T6854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.225941][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 263.409724][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 263.409753][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 263.499939][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.314657][ T6854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.284857][ T6854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.267434][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.427368][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.490417][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.490583][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.526267][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.526566][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.739702][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 267.739738][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 271.678926][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 271.678953][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 276.074869][ T7234] syz_tun: entered allmulticast mode [ 276.311515][ T7231] syz_tun: left allmulticast mode [ 276.933790][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.522699][ T6854] veth0_vlan: entered promiscuous mode [ 284.669233][ T6854] veth1_vlan: entered promiscuous mode [ 284.908461][ T6854] veth0_macvtap: entered promiscuous mode [ 285.031467][ T6854] veth1_macvtap: entered promiscuous mode [ 286.184254][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.574705][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.386404][ T6023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.777642][ T6023] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.833780][ T1136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.862321][ T1136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.334902][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.334927][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.781943][ T7363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.080377][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.080400][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.709868][ T7376] binder: 7374:7376 ioctl ae80 0 returned -22 [ 293.096516][ T5744] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 293.453820][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 293.453854][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 294.557316][ T5744] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 294.557350][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.557370][ T5744] usb 1-1: Product: syz [ 294.557384][ T5744] usb 1-1: Manufacturer: syz [ 294.557419][ T5744] usb 1-1: SerialNumber: syz [ 295.843761][ T5744] usb 1-1: config 0 descriptor?? [ 295.954805][ T5744] usb 1-1: can't set config #0, error -71 [ 295.982154][ T5744] usb 1-1: USB disconnect, device number 9 [ 297.075956][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.072650][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 302.222607][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 302.222807][ T7425] binder: 7422:7425 ioctl ae80 0 returned -22 [ 302.271382][ T7428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.316571][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 302.316634][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.316656][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.316678][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.316700][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.316822][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 302.316837][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.573415][ T32] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 302.715744][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 302.862211][ T9] usb 6-1: usb_control_msg returned -32 [ 302.862263][ T9] usbtmc 6-1:16.0: can't read capabilities [ 303.012550][ T32] usb 4-1: device descriptor read/64, error -32 [ 303.402557][ T32] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 304.487196][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 304.487236][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 304.490269][ T32] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 304.490300][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.490318][ T32] usb 4-1: Product: syz [ 304.490331][ T32] usb 4-1: Manufacturer: syz [ 304.490339][ T32] usb 4-1: SerialNumber: syz [ 304.526594][ T32] usb 4-1: config 0 descriptor?? [ 304.538064][ T32] hub 4-1:0.0: bad descriptor, ignoring hub [ 304.538090][ T32] hub 4-1:0.0: probe with driver hub failed with error -5 [ 304.557841][ T32] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 304.858945][ T5744] usb 4-1: USB disconnect, device number 8 [ 305.305974][ T9] usb 6-1: USB disconnect, device number 2 [ 306.222873][ T7459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.047618][ T7480] binder: 7479:7480 ioctl ae80 0 returned -22 [ 308.302798][ T32] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 308.353790][ T7487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.456531][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 308.456569][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 308.469042][ T32] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 308.469073][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.469093][ T32] usb 6-1: Product: syz [ 308.469107][ T32] usb 6-1: Manufacturer: syz [ 308.469121][ T32] usb 6-1: SerialNumber: syz [ 308.559489][ T32] usb 6-1: config 0 descriptor?? [ 308.570724][ T32] hub 6-1:0.0: bad descriptor, ignoring hub [ 308.570769][ T32] hub 6-1:0.0: probe with driver hub failed with error -5 [ 308.619167][ T32] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17 [ 308.665159][ T5731] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 308.824461][ T5731] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.824494][ T5731] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 308.824509][ T5731] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.824560][ T5731] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 308.824584][ T5731] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 308.828887][ T5731] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.828921][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.828941][ T5731] usb 1-1: Product: syz [ 308.828955][ T5731] usb 1-1: Manufacturer: syz [ 308.924729][ T5731] cdc_wdm 1-1:1.0: skipping garbage [ 308.924752][ T5731] cdc_wdm 1-1:1.0: skipping garbage [ 308.930252][ T5731] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 308.930273][ T5731] cdc_wdm 1-1:1.0: Unknown control protocol [ 310.488283][ T5616] usb 1-1: USB disconnect, device number 10 [ 312.314187][ T7528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.736570][ T7561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.785117][ T5731] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 314.971282][ T5731] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.971313][ T5731] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 314.971331][ T5731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.971382][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 314.971409][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 314.981130][ T5731] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.981214][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.981232][ T5731] usb 2-1: Product: syz [ 314.981245][ T5731] usb 2-1: Manufacturer: syz [ 315.013894][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 315.013913][ T5731] cdc_wdm 2-1:1.0: skipping garbage [ 315.030365][ T5731] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 315.030387][ T5731] cdc_wdm 2-1:1.0: Unknown control protocol [ 316.069568][ T5616] usb 2-1: USB disconnect, device number 5 [ 316.088398][ T4938] usb 6-1: USB disconnect, device number 3 [ 317.390773][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.390882][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.541801][ T7591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.463541][ T5744] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 319.626574][ T5744] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.626605][ T5744] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 319.626624][ T5744] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.626676][ T5744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 319.626703][ T5744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 319.630506][ T5744] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.630535][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.630554][ T5744] usb 1-1: Product: syz [ 319.630569][ T5744] usb 1-1: Manufacturer: syz [ 319.776007][ T5744] cdc_wdm 1-1:1.0: skipping garbage [ 319.776030][ T5744] cdc_wdm 1-1:1.0: skipping garbage [ 319.805227][ T5744] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 319.805252][ T5744] cdc_wdm 1-1:1.0: Unknown control protocol [ 320.121737][ T5744] usb 1-1: USB disconnect, device number 11 [ 321.465073][ T7628] syz_tun: entered allmulticast mode [ 321.547749][ T7623] syz_tun: left allmulticast mode [ 322.491454][ T7648] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 323.052608][ T5969] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 323.259148][ T5969] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.259180][ T5969] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 323.259201][ T5969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.259265][ T5969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 323.259291][ T5969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 323.261792][ T5969] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.261821][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.261841][ T5969] usb 4-1: Product: syz [ 323.261856][ T5969] usb 4-1: Manufacturer: syz [ 323.374131][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 323.522682][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 323.532154][ T5969] cdc_wdm 4-1:1.0: skipping garbage [ 323.532177][ T5969] cdc_wdm 4-1:1.0: skipping garbage [ 323.572975][ T5969] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 323.572999][ T5969] cdc_wdm 4-1:1.0: Unknown control protocol [ 323.591848][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.591913][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.591938][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.591958][ T57] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.591979][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.658222][ T57] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.658253][ T57] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.658272][ T57] usb 5-1: Manufacturer: syz [ 323.815358][ T57] usb 5-1: config 0 descriptor?? [ 324.144592][ T5969] usb 4-1: USB disconnect, device number 9 [ 324.334690][ T57] rc_core: IR keymap rc-hauppauge not found [ 324.334713][ T57] Registered IR keymap rc-empty [ 324.334876][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.356894][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.435925][ T57] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 324.509040][ T57] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 324.587666][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.606415][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.622898][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.642625][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.663748][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.682700][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.704097][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.727153][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.748919][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.763295][ T57] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 324.791645][ T57] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 324.791672][ T57] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 324.826795][ T7663] syz_tun: entered allmulticast mode [ 324.893481][ T57] usb 5-1: USB disconnect, device number 6 [ 324.899673][ T7662] syz_tun: left allmulticast mode [ 330.338533][ T7732] pim6reg: entered allmulticast mode [ 333.202471][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 333.388570][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 333.391109][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 333.391140][ T9] usb 1-1: config 0 has no interface number 0 [ 333.391180][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.391201][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 333.391225][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.391251][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.391292][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 333.391315][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.501015][ T9] usb 1-1: config 0 descriptor?? [ 333.582049][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 333.780954][ T9] usb 1-1: USB disconnect, device number 12 [ 335.118070][ T7755] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -2 [ 335.747730][ T9] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 438.292380][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 438.292403][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7749 [ 438.292495][ C1] rcu: (detected by 1, t=10502 jiffies, g=26753, q=1171 ncpus=2) [ 438.292506][ C1] task:syz.5.514 state:R running task stack:22160 pid:7749 tgid:7747 ppid:6854 task_flags:0x400140 flags:0x00080000 [ 438.292537][ C1] Call Trace: [ 438.292543][ C1] [ 438.292548][ C1] sched_show_task+0x4aa/0x5f0 [ 438.292569][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 438.292580][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 438.292598][ C1] ? wq_watchdog_touch+0x100/0x160 [ 438.292615][ C1] print_other_cpu_stall+0xfbf/0x1350 [ 438.292636][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 438.292651][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 438.292675][ C1] rcu_sched_clock_irq+0x93d/0x1050 [ 438.292692][ C1] update_process_times+0x234/0x2d0 [ 438.292705][ C1] tick_nohz_handler+0x38f/0x6b0 [ 438.292719][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 438.292731][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 438.292746][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 438.292757][ C1] __hrtimer_run_queues+0x3a0/0xaf0 [ 438.292780][ C1] hrtimer_interrupt+0x44a/0x900 [ 438.292806][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 438.292819][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 438.292832][ C1] [ 438.292836][ C1] [ 438.292840][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 438.292852][ C1] RIP: 0010:save_dst_trace_buffer+0x1a2/0x5b0 [ 438.292869][ C1] Code: f7 dc 48 89 1c 24 48 8d 9b a0 c5 3a 9a 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 74 08 48 89 df e8 82 e7 24 f9 48 83 3b 00 <74> 07 e8 57 17 b9 f8 eb 23 48 89 df be 08 00 00 00 e8 08 ea 24 f9 [ 438.292878][ C1] RSP: 0018:ffffc90005cdf320 EFLAGS: 00000282 [ 438.292887][ C1] RAX: dffffc0000000000 RBX: ffffffff9a483220 RCX: 0000000000080000 [ 438.292895][ C1] RDX: ffffc9001c4a0000 RSI: 000000000007ffff RDI: 0000000000080000 [ 438.292902][ C1] RBP: ffffc90005cdf4b0 R08: 0000000000000000 R09: 0000000000000000 [ 438.292908][ C1] R10: ffffc90005cdf280 R11: fffff52000b9be54 R12: e00000000cb6f9bb [ 438.292916][ C1] R13: e00000000cb6f9ba R14: 1ffffffff3490644 R15: e00000000cb6f9ba [ 438.292940][ C1] ? __pfx_save_dst_trace_buffer+0x10/0x10 [ 438.292954][ C1] ? __copy_skb_header+0x1a8/0x4b0 [ 438.292966][ C1] ? __skb_clone+0x5c/0x6c0 [ 438.292977][ C1] ? skb_clone+0x246/0x3a0 [ 438.292988][ C1] ? bpf_clone_redirect+0x170/0x4b0 [ 438.292998][ C1] ? bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 438.293008][ C1] ? bpf_test_run+0x354/0x830 [ 438.293019][ C1] ? bpf_prog_test_run_skb+0xe35/0x2230 [ 438.293030][ C1] ? bpf_prog_test_run+0x2cb/0x340 [ 438.293040][ C1] ? __sys_bpf+0xa22/0xd90 [ 438.293053][ C1] ? __x64_sys_bpf+0xba/0xd0 [ 438.293066][ C1] ? do_syscall_64+0x174/0x580 [ 438.293077][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.293093][ C1] ? __copy_skb_header+0xa3/0x4b0 [ 438.293108][ C1] __copy_skb_header+0x1a8/0x4b0 [ 438.293122][ C1] __skb_clone+0x5c/0x6c0 [ 438.293138][ C1] skb_clone+0x246/0x3a0 [ 438.293153][ C1] bpf_clone_redirect+0x170/0x4b0 [ 438.293166][ C1] ? bpf_test_run+0x1d1/0x830 [ 438.293179][ C1] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 438.293191][ C1] ? sched_clock_cpu+0x74/0x440 [ 438.293203][ C1] ? sched_balance_domains+0xe8/0x880 [ 438.293219][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 438.293230][ C1] ? sched_balance_domains+0x770/0x880 [ 438.293246][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 438.293258][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 438.293271][ C1] ? __local_bh_enable+0x1e1/0x2f0 [ 438.293283][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 438.293295][ C1] ? rcu_is_watching+0x15/0xb0 [ 438.293305][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 438.293317][ C1] ? bpf_test_timer_continue+0x10c/0x320 [ 438.293332][ C1] bpf_test_run+0x354/0x830 [ 438.293355][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 438.293381][ C1] ? skb_dst_set+0x72/0x140 [ 438.293394][ C1] bpf_prog_test_run_skb+0xe35/0x2230 [ 438.293417][ C1] ? __fget_files+0x3a8/0x420 [ 438.293437][ C1] ? __fget_files+0x2a/0x420 [ 438.293452][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 438.293466][ C1] bpf_prog_test_run+0x2cb/0x340 [ 438.293478][ C1] __sys_bpf+0xa22/0xd90 [ 438.293498][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 438.293512][ C1] ? lock_acquire+0x106/0x350 [ 438.293529][ C1] ? do_futex+0x3e7/0x4e0 [ 438.293555][ C1] ? rcu_is_watching+0x15/0xb0 [ 438.293570][ C1] __x64_sys_bpf+0xba/0xd0 [ 438.293584][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.293595][ C1] do_syscall_64+0x174/0x580 [ 438.293608][ C1] ? clear_bhb_loop+0x40/0x90 [ 438.293621][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.293631][ C1] RIP: 0033:0x7f9a6a1ece59 [ 438.293642][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.293650][ C1] RSP: 002b:00007f9a68425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.293661][ C1] RAX: ffffffffffffffda RBX: 00007f9a6a466090 RCX: 00007f9a6a1ece59 [ 438.293668][ C1] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 438.293675][ C1] RBP: 00007f9a6a282e6f R08: 0000000000000000 R09: 0000000000000000 [ 438.293681][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.293688][ C1] R13: 00007f9a6a466128 R14: 00007f9a6a466090 R15: 00007fff876d1cd8 [ 438.293704][ C1] [ 438.293708][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 5607 jiffies! g26753 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 438.293720][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=17595 [ 438.293726][ C1] rcu: rcu_preempt kthread starved for 5608 jiffies! g26753 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 438.293737][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 438.293742][ C1] rcu: RCU grace-period kthread stack dump: [ 438.293745][ C1] task:rcu_preempt state:I stack:27224 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 438.293776][ C1] Call Trace: [ 438.293779][ C1] [ 438.293785][ C1] __schedule+0x1709/0x5530 [ 438.293810][ C1] ? __pfx___schedule+0x10/0x10 [ 438.293826][ C1] ? schedule+0x90/0x2b0 [ 438.293838][ C1] schedule+0x164/0x2b0 [ 438.293849][ C1] schedule_timeout+0x152/0x2c0 [ 438.293861][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 438.293872][ C1] ? __pfx_process_timeout+0x10/0x10 [ 438.293888][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 438.293900][ C1] ? prepare_to_swait_event+0x322/0x350 [ 438.293916][ C1] rcu_gp_fqs_loop+0x30c/0x11c0 [ 438.293931][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 438.293943][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 438.293954][ C1] ? rcu_gp_init+0x1372/0x1610 [ 438.293965][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 438.293976][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 438.293990][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 438.294003][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 438.294015][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.294025][ C1] ? __kthread_parkme+0x71/0x1f0 [ 438.294038][ C1] ? __kthread_parkme+0x196/0x1f0 [ 438.294052][ C1] kthread+0x388/0x470 [ 438.294067][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 438.294075][ C1] ? __pfx_kthread+0x10/0x10 [ 438.294089][ C1] ret_from_fork+0x514/0xb70 [ 438.294106][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 438.294120][ C1] ? __switch_to+0xc89/0x1420 [ 438.294134][ C1] ? __pfx_kthread+0x10/0x10 [ 438.294148][ C1] ret_from_fork_asm+0x1a/0x30 [ 438.294170][ C1] [ 438.294174][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 438.294179][ C1] Sending NMI from CPU 1 to CPUs 0: [ 438.294216][ C0] NMI backtrace for cpu 0 [ 438.294232][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 438.294249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.294258][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 438.294277][ C0] Code: 1b 5f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 1b 18 00 fb f4 8c cd 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 438.294289][ C0] RSP: 0018:ffffffff8dc07de0 EFLAGS: 00000242 [ 438.294303][ C0] RAX: 00000000004acb07 RBX: ffffffff8199565c RCX: 0000000080000001 [ 438.294315][ C0] RDX: 0000000000000001 RSI: ffffffff8d65a8c4 RDI: ffffffff8baa7180 [ 438.294326][ C0] RBP: ffffffff8dc07eb8 R08: ffff8880b8633d5b R09: 1ffff110170c67ab [ 438.294337][ C0] R10: dffffc0000000000 R11: ffffed10170c67ac R12: 0000000000000000 [ 438.294348][ C0] R13: 1ffffffff1b9ede8 R14: 1ffffffff1b80fc4 R15: dffffc0000000000 [ 438.294360][ C0] FS: 0000000000000000(0000) GS:ffff888125eca000(0000) knlGS:0000000000000000 [ 438.294374][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.294385][ C0] CR2: 00007fe941dcc155 CR3: 000000000ddb0000 CR4: 00000000003526f0 [ 438.294410][ C0] Call Trace: [ 438.294416][ C0] [ 438.294421][ C0] default_idle+0x9/0x20 [ 438.294440][ C0] default_idle_call+0x72/0xb0 [ 438.294460][ C0] do_idle+0x1cc/0x540 [ 438.294477][ C0] ? __pfx_do_idle+0x10/0x10 [ 438.294496][ C0] cpu_startup_entry+0x43/0x60 [ 438.294512][ C0] rest_init+0x2de/0x300 [ 438.294533][ C0] start_kernel+0x392/0x3e0 [ 438.294559][ C0] x86_64_start_reservations+0x24/0x30 [ 438.294577][ C0] x86_64_start_kernel+0x137/0x1b0 [ 438.294595][ C0] common_startup_64+0x13e/0x157 [ 438.294619][ C0]