last executing test programs: 33.860046655s ago: executing program 3 (id=3090): socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 33.688256572s ago: executing program 3 (id=3094): r0 = userfaultfd(0x80001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 32.643992691s ago: executing program 3 (id=3099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x25e4, 0x3000, 0x1, r2, 0x7}) 32.34003064s ago: executing program 3 (id=3102): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) r1 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmdt(r1) 30.642680052s ago: executing program 3 (id=3117): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f0000000180)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 26.636885205s ago: executing program 3 (id=3124): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000440)={0x0, 0xce73, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r0, 0x3, 0x0, 0x0, 0x1, 0x1, {0x1}}) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r6 = signalfd4(r4, &(0x7f0000000140)={[0x9]}, 0x8, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f00000004c0)="ba9eda13d79cc1f7690c29ec8cfcd301ea558849452caa7b7c9033fdd64d5e67ec8696044fc7839b5437af9e582929a40f54b0e5335968346bd27e5fe06cd76bfa0bd55328c3430508a9aa4846f00ba0c5f28204f100c1e3688723dff70e9b746330c4086a947f18577324449330b1d498992d901823db05b7c48b3755309bd63aedc9158931665064391e9ecc720e768ecda4bb9e7d88ab2a835b038242e08bfc75353543a7c7e505f32f93a1027883e249ac6d32b291a456fea6a580ecf8f63f5e8d6ee2af1caff48e91b3fe97748c0e4862669e7caf678a3fea1c2ce73a402fa4d4922ad7cc78", 0xe8}], 0x1) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x2008c43, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) connect$rxrpc(r10, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f0000000080)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12.610793975s ago: executing program 0 (id=3194): socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) r0 = socket(0x2a, 0x2, 0x0) sendto$isdn(r0, 0x0, 0xfffffeb3, 0x0, &(0x7f00000003c0)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x6, 0x6, 0xc}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) 11.485871942s ago: executing program 32 (id=3124): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000440)={0x0, 0xce73, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r0, 0x3, 0x0, 0x0, 0x1, 0x1, {0x1}}) r4 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r6 = signalfd4(r4, &(0x7f0000000140)={[0x9]}, 0x8, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f00000004c0)="ba9eda13d79cc1f7690c29ec8cfcd301ea558849452caa7b7c9033fdd64d5e67ec8696044fc7839b5437af9e582929a40f54b0e5335968346bd27e5fe06cd76bfa0bd55328c3430508a9aa4846f00ba0c5f28204f100c1e3688723dff70e9b746330c4086a947f18577324449330b1d498992d901823db05b7c48b3755309bd63aedc9158931665064391e9ecc720e768ecda4bb9e7d88ab2a835b038242e08bfc75353543a7c7e505f32f93a1027883e249ac6d32b291a456fea6a580ecf8f63f5e8d6ee2af1caff48e91b3fe97748c0e4862669e7caf678a3fea1c2ce73a402fa4d4922ad7cc78", 0xe8}], 0x1) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x2008c43, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) connect$rxrpc(r10, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f0000000080)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.20167894s ago: executing program 0 (id=3204): mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='cgroup2\x00', 0x200000, 0x0) 9.126357357s ago: executing program 0 (id=3205): r0 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bind$packet(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x80000003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x1000001c, 0xfd1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffa}, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000100)]}) r3 = getpid() syz_pidfd_open(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000340)={0x62, 0x2, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @pad1, @padn={0x1, 0x1, [0x0]}]}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) add_key(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}, 0x1, 0x8, 0x699, 0x8, r3, r3, 0x6f8a}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000014000d04b8070096d1ca00"], 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) 6.284652699s ago: executing program 2 (id=3211): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1f, 0x6, 0xca11, 0xffff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090210000904430002317d55002a05020200020200000905820200020000000000000000"], 0x0) syz_usb_ep_read(r3, 0x5, 0xb4, &(0x7f0000000200)=""/180) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0xd, 0x2, "dae5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) personality(0xfe47fef9f5ff7379) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r8, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "941686f54c428e48193856257512280bf969b3ca75ea3f63"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, r11, 0x3}}, 0x18) 4.736172226s ago: executing program 0 (id=3215): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) 4.642988056s ago: executing program 2 (id=3216): process_madvise(0xffffffffffffffff, &(0x7f0000001d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x9, 0x0) 4.506884729s ago: executing program 0 (id=3217): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x3) acct(&(0x7f0000000140)='./file0\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 4.352007204s ago: executing program 2 (id=3218): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000980)={'wlan0\x00', {0x2, 0xce22, @multicast2}}) 4.127901245s ago: executing program 2 (id=3219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.947695022s ago: executing program 2 (id=3220): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getlink={0x20, 0x12, 0x1, 0x70bd3d, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1000}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000280)) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) read(r5, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000440)={0x2, 0xfe}, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e7ff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000ef974a5bfdd3bda4cd67cc0992f400109500000000000000c449cd029c65418fd0a7e6028c77a389c262d388ed5ee2940f05ffc06b8bfe1608e6e45862600480c625aa2451f9d014ae80a0baf171365fdaa506c84cc1250d9ebc80bef51419ef8af8bb5f9fc23dcfb7bd20a18cb652fe79beeb493fd3728766123a67ebe350058ce47e2f2a12cc82427c782b62fa7fa6aeb381d42c188778c81266a98b90d60f5021330a1fae447d09cfa0c74b3155a1034046201d15fed31d95788e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf000) 3.668058249s ago: executing program 1 (id=3221): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r0}, 0x10) getpgrp(0x0) 3.543504111s ago: executing program 0 (id=3222): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 3.542812071s ago: executing program 1 (id=3223): mkdir(&(0x7f00000000c0)='./file0\x00', 0x35) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3.377604807s ago: executing program 1 (id=3224): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000007"], 0x0, 0x26}, 0x28) 3.23603947s ago: executing program 1 (id=3225): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x6) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10) 3.037898199s ago: executing program 1 (id=3226): getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x84, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xc, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000380), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0xe0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xb4, 0x2, [@TCA_U32_ACT={0x8c, 0x7, [@m_bpf={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x5c, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0x1d, 0x6, "2477a1dbee56333e84619c3f596d7f74087fc905196835bf42"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x7, 0x1}]}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x24040084) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x275c, &(0x7f00000003c0)={0x0, 0x5bce, 0x800, 0x3, 0xc0001c8}, &(0x7f0000000340), &(0x7f0000001180)) write$dsp(r3, &(0x7f0000000300)="a52876830a602214f6b4e928", 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 1.97803518s ago: executing program 2 (id=3227): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0x564) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_usbip_server_init(0x6) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000680009030000000029"], 0x20}}, 0x50) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x7fff) 1.375830168s ago: executing program 4 (id=3197): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x44804) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 955.960978ms ago: executing program 4 (id=3228): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x0, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x2, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x935, 0x200000000005) 723.9616ms ago: executing program 4 (id=3229): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, 0x0, 0x0) 105.913399ms ago: executing program 4 (id=3230): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r6) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 0s ago: executing program 1 (id=3231): socket$kcm(0x10, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) openat$cachefiles(0xffffff9c, 0x0, 0x210000, 0x0) kernel console output (not intermixed with test programs): idge0: port 1(bridge_slave_0) entered blocking state [ 421.568073][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.576881][T11837] bridge_slave_0: entered allmulticast mode [ 421.585864][T11837] bridge_slave_0: entered promiscuous mode [ 421.627771][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.642935][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.654680][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.661992][T11837] bridge_slave_1: entered allmulticast mode [ 421.672645][T11837] bridge_slave_1: entered promiscuous mode [ 421.755249][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.778225][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.803090][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.871403][T11837] team0: Port device team_slave_0 added [ 421.895928][T11837] team0: Port device team_slave_1 added [ 421.957237][T11837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.967124][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.998252][T11837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.026262][T11837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.033873][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.064047][T11837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.236814][T11837] hsr_slave_0: entered promiscuous mode [ 422.243854][T11837] hsr_slave_1: entered promiscuous mode [ 422.265321][T11837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.272927][T11837] Cannot create hsr debugfs directory [ 422.384802][ T5084] Bluetooth: hci3: command tx timeout [ 422.472605][T11849] fuse: Unknown parameter '0x0000000000000003' [ 422.759508][T11859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2283'. [ 423.787818][T11837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 423.809421][T11837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 423.872123][T11837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 423.933690][T11837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.358945][ T11] hsr_slave_0: left promiscuous mode [ 424.464327][ T5084] Bluetooth: hci3: command tx timeout [ 426.544600][ T5084] Bluetooth: hci3: command tx timeout [ 426.723139][ T11] hsr_slave_1: left promiscuous mode [ 426.734718][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.743123][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.767501][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.835001][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.864935][ T11] bridge_slave_1: left allmulticast mode [ 426.914282][ T11] bridge_slave_1: left promiscuous mode [ 426.939454][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.004949][ T11] bridge_slave_0: left allmulticast mode [ 427.011064][ T11] bridge_slave_0: left promiscuous mode [ 427.017680][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.046380][T11884] fuse: Unknown parameter '0x0000000000000003' [ 427.137196][ T11] veth1_macvtap: left promiscuous mode [ 427.144346][ T11] veth0_macvtap: left promiscuous mode [ 427.157595][ T11] veth1_vlan: left promiscuous mode [ 427.194213][ T11] veth0_vlan: left promiscuous mode [ 427.469477][T11888] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.2290'. ./file0/file0[ 428.249712][ T11] bond1 (unregistering): Released all slaves ./file0./file0fuse[ 428.624478][ T5084] Bluetooth: hci3: command tx timeout [ 428.651843][T11907] 9pnet_virtio: no channels available for device syz [ 428.776099][T11913] fuse: Unknown parameter '0x0000000000000003' [ 429.238544][ T11] team0 (unregistering): Port device team_slave_1 removed [ 429.311567][ T11] team0 (unregistering): Port device team_slave_0 removed [ 429.379667][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.452429][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.204428][ T11] bond0 (unregistering): Released all slaves [ 430.419028][T11837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.521458][T11837] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.556296][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.564128][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.619354][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.626954][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.540506][ T11] IPVS: stop unused estimator thread 0... [ 432.116123][T11938] fuse: Unknown parameter '0x0000000000000003' [ 432.235874][T11939] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 432.286204][T11837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.339618][T11939] netlink: 'syz.1.2298': attribute type 4 has an invalid length. [ 432.348714][T11939] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2298'. [ 432.487315][T11837] veth0_vlan: entered promiscuous mode [ 432.647690][T11837] veth1_vlan: entered promiscuous mode [ 432.712477][T11837] veth0_macvtap: entered promiscuous mode [ 432.749474][T11837] veth1_macvtap: entered promiscuous mode [ 432.775010][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.775036][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.775051][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.775065][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.777616][T11837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.789510][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.789536][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.789551][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.789567][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.791731][T11837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.806599][T11837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.806694][T11837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.806725][T11837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.806754][T11837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.004774][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.004795][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.459677][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.459698][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.280992][T11967] fuse: Unknown parameter 'fd0x0000000000000003' [ 435.142307][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 435.149726][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 435.164265][T11983] ceph: No mds server is up or the cluster is laggy [ 435.470460][T11991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2319'. [ 435.516408][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2319'. [ 435.599511][T11995] fuse: Unknown parameter 'fd0x0000000000000003' [ 435.924124][ T5821] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 436.635717][ T5821] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 436.643332][ T5821] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 436.674230][ T5821] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 436.724423][ T5821] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 436.733513][ T5821] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 436.754219][ T5821] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 436.854548][ T5821] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 436.862197][ T5821] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 436.888571][ T5821] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 436.922555][ T5821] usb 2-1: string descriptor 0 read error: -22 [ 436.929462][ T5821] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 437.797133][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.888162][ T5821] adutux 2-1:168.0: interrupt endpoints not found [ 438.101802][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2323'. [ 438.122444][T12019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2331'. [ 438.158333][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2331'. [ 440.549444][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.556332][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.061748][T11997] Set syz1 is full, maxelem 65536 reached [ 441.136790][ T5835] usb 2-1: USB disconnect, device number 65 [ 441.657904][T12030] fuse: Unknown parameter 'fd0x0000000000000003' [ 442.155782][T12034] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 442.524479][T12034] fuse: Bad value for 'fd' [ 443.654623][T12046] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2340'. [ 445.624534][T12071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2350'. [ 446.167913][T12084] 9pnet_virtio: no channels available for device syz [ 447.116772][T12083] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2354'. [ 448.090413][ T5084] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 448.102433][ T5084] Bluetooth: hci4: Injecting HCI hardware error event [ 448.113393][ T5769] Bluetooth: hci4: hardware error 0x00 [ 449.019200][T12119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2367'. [ 449.314767][T12125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2371'. [ 449.377787][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 449.534841][T12134] futex_wake_op: syz.3.2373 tries to shift op by -1; fix this program [ 450.234412][ T5769] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 451.446085][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2381'. [ 452.028513][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2384'. [ 452.080885][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2384'. [ 454.162712][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2395'. [ 454.216302][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2395'. [ 454.360667][T12199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2396'. [ 455.882502][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 455.930714][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 457.034761][T12233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2406'. [ 457.083271][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2406'. [ 459.444754][T12264] JFS: discard option not supported on device [ 459.517839][T12264] Mount JFS Failure: -22 [ 459.522576][T12264] jfs_mount failed w/return code = -22 [ 463.774560][T12274] netlink: 'syz.3.2416': attribute type 27 has an invalid length. [ 463.884153][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'. [ 463.911479][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 465.170968][T12295] 9pnet_virtio: no channels available for device syz [ 466.677598][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2430'. [ 466.715228][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'. [ 467.025959][ T28] audit: type=1326 audit(1799769948.746:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 467.092415][ T28] audit: type=1326 audit(1799769948.766:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 467.148096][ T28] audit: type=1326 audit(1799769948.766:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 467.239145][ T28] audit: type=1326 audit(1799769948.776:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 467.289092][ T28] audit: type=1326 audit(1799769948.776:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 467.351088][ T28] audit: type=1326 audit(1799769948.776:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 467.424502][ T28] audit: type=1326 audit(1799769948.776:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 467.499373][ T28] audit: type=1326 audit(1799769948.776:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 467.583046][ T28] audit: type=1326 audit(1799769948.776:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 467.675263][ T28] audit: type=1326 audit(1799769948.776:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12281 comm="syz.1.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bc432b829 code=0x7ffc0000 [ 468.528413][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.565016][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.640051][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.657840][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.666606][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 468.674178][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.804060][ T5821] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 468.899990][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.009736][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.026996][ T5821] usb 3-1: config 0 has no interfaces? [ 469.037680][ T5821] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 469.054069][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.068808][ T5821] usb 3-1: config 0 descriptor?? [ 469.160338][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.255109][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.704520][ T5084] Bluetooth: hci0: command tx timeout [ 470.752814][T12350] chnl_net:caif_netlink_parms(): no params data found [ 470.907522][ T9] usb 3-1: USB disconnect, device number 67 [ 471.402989][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.410581][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.418586][T12350] bridge_slave_0: entered allmulticast mode [ 471.427285][T12350] bridge_slave_0: entered promiscuous mode [ 471.440645][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.526448][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.593524][T12350] bridge_slave_1: entered allmulticast mode [ 471.705647][T12350] bridge_slave_1: entered promiscuous mode [ 472.203626][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 472.357852][T12382] wireguard0: entered promiscuous mode [ 472.372768][T12382] wireguard0: entered allmulticast mode [ 472.633857][T12390] JFS: discard option not supported on device [ 472.641634][T12390] Mount JFS Failure: -22 [ 472.646311][T12390] jfs_mount failed w/return code = -22 [ 472.826553][ T5084] Bluetooth: hci0: command tx timeout [ 474.730594][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.853256][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 474.874301][ T5084] Bluetooth: hci0: command tx timeout [ 474.880922][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.996401][T12350] team0: Port device team_slave_0 added [ 475.177678][T12350] team0: Port device team_slave_1 added [ 475.286668][T12409] netlink: 'syz.0.2465': attribute type 1 has an invalid length. [ 475.303402][T12409] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2465'. [ 475.397084][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.414251][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.470019][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.572945][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.590288][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.625014][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.903641][T12350] hsr_slave_0: entered promiscuous mode [ 475.945858][T12350] hsr_slave_1: entered promiscuous mode [ 475.975908][ T11] hsr_slave_0: left promiscuous mode [ 475.987676][ T11] hsr_slave_1: left promiscuous mode [ 476.000433][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.015136][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.035202][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.049656][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.085109][ T11] bridge_slave_1: left allmulticast mode [ 476.090948][ T11] bridge_slave_1: left promiscuous mode [ 476.101284][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.130359][ T11] bridge_slave_0: left allmulticast mode [ 476.149036][ T11] bridge_slave_0: left promiscuous mode [ 476.169706][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.324763][ T11] veth1_macvtap: left promiscuous mode [ 476.330407][ T11] veth0_macvtap: left promiscuous mode [ 476.360785][ T11] veth1_vlan: left promiscuous mode [ 476.376365][ T11] veth0_vlan: left promiscuous mode [ 476.810155][ T11] bond1 (unregistering): Released all slaves [ 476.944174][ T5084] Bluetooth: hci0: command tx timeout [ 478.678179][ T11] team0 (unregistering): Port device team_slave_1 removed [ 478.776325][ T11] team0 (unregistering): Port device team_slave_0 removed [ 478.872275][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.028503][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.263258][ T11] bond0 (unregistering): Released all slaves [ 480.423602][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2471'. [ 484.703512][T12460] syzkaller1: entered promiscuous mode [ 484.761751][T12460] syzkaller1: entered allmulticast mode [ 484.854794][T12350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.878382][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2483'. [ 484.906291][T12350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.929699][T12350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.962652][T12350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 485.313705][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.379634][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.404219][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.411450][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.435119][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.443068][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.463826][ T28] kauditd_printk_skb: 224 callbacks suppressed [ 485.463843][ T28] audit: type=1326 audit(1799769967.176:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 485.515530][ T28] audit: type=1326 audit(1799769967.186:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 485.556010][ T28] audit: type=1326 audit(1799769967.186:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 485.699613][ T28] audit: type=1326 audit(1799769967.416:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 485.776331][ T28] audit: type=1326 audit(1799769967.416:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 485.840851][ T28] audit: type=1326 audit(1799769967.416:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 485.907393][ T28] audit: type=1326 audit(1799769967.416:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 485.951731][ T28] audit: type=1326 audit(1799769967.416:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 486.010917][ T28] audit: type=1326 audit(1799769967.416:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 486.066103][ T28] audit: type=1326 audit(1799769967.416:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.0.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9378f749 code=0x7ffc0000 [ 486.254780][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.501466][T12350] veth0_vlan: entered promiscuous mode [ 486.578526][T12350] veth1_vlan: entered promiscuous mode [ 486.771246][T12350] veth0_macvtap: entered promiscuous mode [ 486.812596][T12350] veth1_macvtap: entered promiscuous mode [ 486.876342][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.899327][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.919669][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.940410][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.955607][T12350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.996682][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.020269][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.033527][T12350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.044617][T12350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.057025][T12350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.070504][T12350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.080226][T12350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.090195][T12350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.100064][T12350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.278394][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.306529][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.421895][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.455346][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.599339][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2494'. [ 488.244241][ T5834] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 488.321576][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 488.446482][ T5834] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 488.464042][ T5834] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 488.491018][ T5834] usb 2-1: config 0 interface 0 has no altsetting 0 [ 488.501763][ T5834] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 488.521304][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 488.534676][ T5834] usb 2-1: Product: syz [ 488.538926][ T5834] usb 2-1: Manufacturer: syz [ 488.555103][ T5834] usb 2-1: SerialNumber: syz [ 488.565211][ T5834] usb 2-1: config 0 descriptor?? [ 488.582283][ T5834] usb 2-1: selecting invalid altsetting 0 [ 488.603021][T12545] virtio-fs: tag not found [ 488.858687][ T5720] usb 2-1: USB disconnect, device number 66 [ 488.937364][T12554] fuse: Bad value for 'group_id' [ 489.805162][T12568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2514'. [ 489.916061][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'. [ 490.851285][T12586] fuse: Bad value for 'group_id' [ 492.019171][T12597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2525'. [ 492.030322][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2525'. [ 493.451330][T12617] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.354813][T12629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2535'. [ 494.368619][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 495.340516][T12644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2541'. [ 495.629932][T12648] Bluetooth: MGMT ver 1.22 [ 499.046595][T12685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2553'. [ 499.100258][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'. [ 502.008072][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.358827][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 502.358844][ T28] audit: type=1326 audit(1799769984.076:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9378f749 code=0x0 [ 502.746019][ T5084] Bluetooth: unknown link type 222 [ 502.751368][ T5084] Bluetooth: hci0: connection err: -111 [ 502.820165][T12719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2565'. [ 502.865093][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 503.649189][T12725] block device autoloading is deprecated and will be removed. [ 504.840728][T12735] netlink: 'syz.0.2570': attribute type 4 has an invalid length. [ 504.848733][T12735] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2570'. [ 507.659042][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2577'. [ 507.690800][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2577'. [ 507.960914][T12764] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 507.994721][T12766] team0: No ports can be present during mode change [ 508.164281][ T5720] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 508.345817][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 508.388824][ T5720] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 508.414257][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.444151][ T5720] usb 1-1: Product: syz [ 508.461147][ T5720] usb 1-1: Manufacturer: syz [ 508.479027][ T5720] usb 1-1: SerialNumber: syz [ 508.495389][ T5720] usb 1-1: config 0 descriptor?? [ 509.019937][T12782] 9pnet_virtio: no channels available for device syz [ 512.838096][ T5878] usb 1-1: USB disconnect, device number 72 [ 513.800398][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2591'. [ 513.860081][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 514.274316][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 514.490793][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.530590][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.564126][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.603650][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.645075][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.677135][ T9] usb 1-1: config 0 descriptor?? [ 515.129842][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xe [ 515.163991][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 515.167697][T12811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.192859][T12811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.195413][ T9] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 515.222442][T12811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.242753][T12811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.252123][T12811] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 515.252531][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 515.304428][T12811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 515.421561][ T6342] usb 1-1: USB disconnect, device number 73 [ 515.448760][T12812] fido_id[12812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 515.520372][ T1132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.885947][ T1132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.106377][ T1132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.262073][ T1132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.113626][T12829] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 517.157447][T12809] chnl_net:caif_netlink_parms(): no params data found [ 517.169077][T12829] ref_ctr increment failed for inode: 0x220 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e678000 [ 517.222497][T12830] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 517.258998][T12830] ref_ctr decrement failed for inode: 0x220 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807e678000 [ 517.424165][ T5084] Bluetooth: hci1: command tx timeout [ 518.653167][T12809] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.677046][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.705147][T12809] bridge_slave_0: entered allmulticast mode [ 518.712896][T12809] bridge_slave_0: entered promiscuous mode [ 518.822644][T12840] fuse: Unknown parameter 'grou00000000000000000000' [ 518.894357][T12809] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.901591][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.957296][T12809] bridge_slave_1: entered allmulticast mode [ 518.975960][T12809] bridge_slave_1: entered promiscuous mode [ 519.454487][T12809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.504105][ T5084] Bluetooth: hci1: command tx timeout [ 519.576810][T12809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.656555][T12848] 9pnet_virtio: no channels available for device syz [ 519.868743][T12809] team0: Port device team_slave_0 added [ 519.950586][ T1132] bond0: left promiscuous mode [ 519.966077][ T1132] veth1_to_batadv: left promiscuous mode [ 520.134102][ T1132] hsr_slave_0: left promiscuous mode [ 520.149224][ T1132] hsr_slave_1: left promiscuous mode [ 520.275316][ T1132] veth1_macvtap: left promiscuous mode [ 520.280977][ T1132] veth0_macvtap: left promiscuous mode [ 520.304150][ T1132] veth1_vlan: left promiscuous mode [ 520.309614][ T1132] veth0_vlan: left promiscuous mode [ 521.584049][ T5084] Bluetooth: hci1: command tx timeout [ 522.074712][T12864] fuse: Unknown parameter 'grou00000000000000000000' [ 522.564006][ T5853] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 522.765838][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 522.774073][ T5853] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 522.782349][ T5853] usb 4-1: config 0 has no interface number 0 [ 522.789015][ T5853] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 522.800593][ T5853] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 522.813480][ T5853] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 522.823568][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 522.832632][ T5853] usb 4-1: Product: syz [ 522.838357][ T5853] usb 4-1: SerialNumber: syz [ 522.853358][ T5853] usb 4-1: config 0 descriptor?? [ 522.875833][ T5853] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 522.889205][ T5853] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input37 [ 523.097939][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 523.375099][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.385437][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.392724][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.400164][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.407440][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.415137][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.422682][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.430350][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.437805][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.445250][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 523.469986][ T5835] usb 4-1: USB disconnect, device number 79 [ 523.476305][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 523.537393][ T5835] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 523.691093][ T5084] Bluetooth: hci1: command tx timeout [ 523.812395][ T1132] bond0 (unregistering): Released all slaves [ 523.952286][T12809] team0: Port device team_slave_1 added [ 523.963049][T12855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2610'. [ 523.992798][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 524.120297][T12809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.127874][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.210589][T12809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.294846][T12809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.301882][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.393621][T12809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.867822][T12809] hsr_slave_0: entered promiscuous mode [ 524.927998][T12809] hsr_slave_1: entered promiscuous mode [ 524.939846][T12809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.979324][T12809] Cannot create hsr debugfs directory [ 525.083235][ T1132] IPVS: stop unused estimator thread 0... [ 525.683404][T12885] fuse: Unknown parameter 'grou00000000000000000000' [ 525.760320][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2621'. [ 525.843721][T12892] syzkaller0: entered promiscuous mode [ 525.852099][T12892] syzkaller0: entered allmulticast mode [ 526.215292][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2624'. [ 526.226012][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2624'. [ 527.456692][ T6342] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 527.688835][T12809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 528.023673][T12809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 528.563160][T12809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 529.733287][T12809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 530.709502][ T6342] usb 2-1: device descriptor read/all, error -71 [ 531.086151][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.147502][T12809] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.191516][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.199304][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.265122][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.272490][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.982204][T12924] fuse: Unknown parameter 'group_i00000000000000000000' [ 532.472927][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.481060][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.843326][ T28] audit: type=1326 audit(1799770014.556:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f00d8f749 code=0x7ffc0000 [ 532.885465][ T28] audit: type=1326 audit(1799770014.556:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 532.949662][ T28] audit: type=1326 audit(1799770014.556:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 532.984175][ T28] audit: type=1326 audit(1799770014.556:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 533.038725][ T28] audit: type=1326 audit(1799770014.556:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 533.084336][ T28] audit: type=1326 audit(1799770014.556:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 533.143977][ T28] audit: type=1326 audit(1799770014.556:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 533.214118][ T28] audit: type=1326 audit(1799770014.556:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 533.264105][ T28] audit: type=1326 audit(1799770014.556:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 533.313512][ T28] audit: type=1326 audit(1799770014.556:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12927 comm="syz.3.2630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f00d2b829 code=0x7ffc0000 [ 533.542765][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.640471][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.435748][T12912] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.448282][T12912] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.458876][T12912] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.471640][T12912] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.757488][T12932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2633'. [ 534.769767][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2633'. [ 535.007917][T12809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.044680][ T5720] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 535.048107][T12943] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 535.131675][T12809] veth0_vlan: entered promiscuous mode [ 535.149805][T12809] veth1_vlan: entered promiscuous mode [ 535.217010][T12809] veth0_macvtap: entered promiscuous mode [ 535.241815][T12809] veth1_macvtap: entered promiscuous mode [ 535.266344][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.282080][T12809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.293033][ T5720] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 535.293090][ T5720] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 535.293118][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.326563][ T5720] usb 4-1: config 0 descriptor?? [ 535.384734][T12809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.414421][T12809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.431241][T12809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.462557][T12809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.487805][T12809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.511596][T12809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.524257][T12809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.544181][T12809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.568047][T12809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.630052][T12809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.648474][T12953] fuse: Unknown parameter 'group_i00000000000000000000' [ 535.656195][T12809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.682859][T12022] usb 4-1: USB disconnect, device number 80 [ 535.683242][T12809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.723920][T12809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.938032][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.982836][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.041053][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.057981][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.470269][T12967] netlink: 'syz.1.2641': attribute type 30 has an invalid length. [ 536.482712][T12967] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.491574][T12967] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.500330][T12967] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.509110][T12967] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.524383][T12967] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.533374][T12967] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.542894][T12967] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.552232][T12967] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.622279][T12968] netlink: 'syz.1.2641': attribute type 30 has an invalid length. [ 536.662435][T12968] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.671497][T12968] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.681105][T12968] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.690482][T12968] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.735603][T12968] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.744956][T12968] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.754147][T12968] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.763081][T12968] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.044436][T12971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 537.098689][T12971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 537.166432][T12971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 537.215474][T12971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 537.254545][T12971] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 537.330877][T12980] fuse: Bad value for 'fd' [ 537.408578][T12971] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 537.469153][T12971] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 537.487214][T12971] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 537.815085][T12971] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 538.630594][T12990] dlm: no local IP address has been set [ 538.815121][T12990] dlm: cannot start dlm midcomms -107 [ 539.104152][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 539.264569][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 539.504014][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 541.185081][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 541.344113][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 541.583991][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 543.114796][T13016] fuse: Unknown parameter 'group_id00000000000000000000' [ 543.264524][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout [ 543.424036][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 543.664061][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 544.283375][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2662'. [ 544.916824][T13046] fuse: Unknown parameter 'group_id00000000000000000000' [ 544.965539][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2667'. [ 545.054405][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2667'. [ 546.324170][ T5084] Bluetooth: hci0: unexpected event for opcode 0x200d [ 546.507258][ T28] kauditd_printk_skb: 1826 callbacks suppressed [ 546.507278][ T28] audit: type=1326 audit(1799770028.216:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 546.594096][ T28] audit: type=1326 audit(1799770028.226:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 546.644011][ T28] audit: type=1326 audit(1799770028.266:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 546.694283][ T28] audit: type=1326 audit(1799770028.266:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13068 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 547.525051][T13080] fuse: Unknown parameter 'group_id00000000000000000000' [ 547.593624][T13081] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 547.871039][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2679'. [ 548.000324][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2679'. [ 549.670741][T13108] fuse: Bad value for 'user_id' [ 550.014285][ T5807] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 550.220788][ T5807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.238840][ T5807] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.250138][ T5807] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 550.263583][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.287557][ T5807] usb 2-1: config 0 descriptor?? [ 552.758943][ T5878] usb 2-1: USB disconnect, device number 69 [ 553.319046][T13142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2694'. [ 553.599132][T13144] vivid-007: disconnect [ 553.635053][T13143] vivid-007: reconnect [ 553.889311][T13148] fuse: Bad value for 'user_id' [ 554.178162][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 554.658298][ T5807] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 554.859460][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.909726][ T5807] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.943943][ T5807] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 555.000570][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.052510][ T5807] usb 4-1: config 0 descriptor?? [ 555.082368][T13170] fuse: Bad value for 'user_id' [ 555.727822][ T5084] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 556.335880][T13192] fuse: Bad value for 'fd' [ 556.790976][T13201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2721'. [ 556.857863][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'. [ 556.948003][T13203] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 556.955168][T13203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 556.972601][T13203] vhci_hcd vhci_hcd.0: Device attached [ 557.135905][T13208] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 557.142585][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 557.178503][T13208] vhci_hcd vhci_hcd.0: Device attached [ 557.236603][T13209] vhci_hcd: connection closed [ 557.264241][ T1000] vhci_hcd: stop threads [ 557.273673][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 557.281519][T13204] vhci_hcd: connection closed [ 557.283566][ T1000] vhci_hcd: release socket [ 557.300526][T13205] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 557.325436][ T1000] vhci_hcd: disconnect device [ 557.374482][ T1000] vhci_hcd: stop threads [ 557.384012][T12022] vhci_hcd: vhci_device speed not set [ 557.416492][ T1000] vhci_hcd: release socket [ 557.447546][ T1000] vhci_hcd: disconnect device [ 557.566220][ T5807] usb 4-1: USB disconnect, device number 81 [ 559.904312][T13225] fuse: Bad value for 'fd' [ 560.637273][T13232] syzkaller0: entered promiscuous mode [ 560.686843][T13232] syzkaller0: entered allmulticast mode [ 560.714128][T13234] tipc: Started in network mode [ 560.740064][T13234] tipc: Node identity ba84696dc4d7, cluster identity 4711 [ 560.776114][T13234] tipc: Enabled bearer , priority 0 [ 560.842237][T13231] tipc: Resetting bearer [ 560.977199][T13231] tipc: Disabling bearer [ 561.034088][T12935] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 561.215910][T12935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.226689][T12935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 561.244024][T12935] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 562.130501][T13242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 562.184826][T12935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.209934][T13242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.216393][T13242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.236188][T12935] usb 1-1: config 0 descriptor?? [ 562.484125][ T9] vhci_hcd: vhci_device speed not set [ 562.587643][T12935] usb 1-1: USB disconnect, device number 74 [ 563.272519][T13250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2735'. [ 563.319052][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'. [ 563.342204][T13253] fuse: Bad value for 'fd' [ 563.396676][ T5084] Bluetooth: hci0: unexpected subevent 0x01 length: 5 < 18 [ 563.435726][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.764412][T13268] syzkaller0: entered promiscuous mode [ 563.770079][T13268] syzkaller0: entered allmulticast mode [ 563.815854][T13268] tipc: Started in network mode [ 563.821012][T13268] tipc: Node identity , cluster identity 4711 [ 563.832947][T13268] tipc: Failed to obtain node identity [ 563.839807][T13268] tipc: Enabling of bearer rejected, failed to enable media [ 563.934129][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 564.116340][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.133311][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.164351][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 564.173484][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.206155][ T9] usb 4-1: config 0 descriptor?? [ 564.242249][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 564.248712][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 564.250022][T12811] Bluetooth: hci3: command 0x0c1a tx timeout [ 564.681980][T13281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2747'. [ 564.798805][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'. [ 566.501456][T13285] cgroup: No subsys list or none specified [ 566.867019][ T5878] usb 4-1: USB disconnect, device number 82 [ 567.694167][ T5878] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 567.907324][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.993988][ T5878] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 568.003288][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 568.013592][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.025560][ T5878] usb 1-1: config 0 descriptor?? [ 568.276419][ T9] usb 1-1: USB disconnect, device number 75 [ 568.562388][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'. [ 569.076295][T13366] 9pnet_virtio: no channels available for device syz [ 570.204161][ T5853] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 570.214220][T13385] hub 8-0:1.0: USB hub found [ 570.222923][T13385] hub 8-0:1.0: 1 port detected [ 570.420321][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.453285][ T5853] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.472843][ T5853] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 570.503271][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.527121][ T5853] usb 2-1: config 0 descriptor?? [ 570.761595][ T5853] usb 2-1: USB disconnect, device number 70 [ 571.250828][T13398] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 571.265501][T13398] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 571.826778][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2788'. [ 572.102623][T13413] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 572.425868][T13393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 572.448304][T13393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 572.455125][T13393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 572.864145][T13274] Bluetooth: hci3: command 0x0c1a tx timeout [ 573.348203][T13419] misc userio: The device must be registered before sending interrupts [ 574.464213][ T5769] Bluetooth: hci0: command 0x0c1a tx timeout [ 574.471397][T13274] Bluetooth: hci1: command 0x0c1a tx timeout [ 574.953968][ T5834] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 575.146888][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.183692][ T5834] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 575.214056][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 575.243974][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.266393][ T5834] usb 4-1: config 0 descriptor?? [ 575.494050][ T5834] usb 4-1: USB disconnect, device number 83 [ 575.839387][T13454] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 576.555595][ T5769] Bluetooth: hci1: command 0x0c1a tx timeout [ 576.768907][ T28] audit: type=1326 audit(1799770058.436:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.1.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 576.809373][ T28] audit: type=1326 audit(1799770058.436:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.1.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 576.834135][ T28] audit: type=1326 audit(1799770058.436:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.1.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 576.857354][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.883678][ T28] audit: type=1326 audit(1799770058.436:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13463 comm="syz.1.2806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 576.906335][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.859269][T13489] ubi31: attaching mtd0 [ 578.074073][ T5834] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 578.315714][ T5834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.350115][ T5834] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.391316][ T5834] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 578.401082][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.435922][ T5834] usb 3-1: config 0 descriptor?? [ 578.535957][T13501] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 578.768939][ T9] usb 3-1: USB disconnect, device number 68 [ 579.784582][T13513] 9pnet_virtio: no channels available for device syz [ 580.497743][T13517] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 581.441888][T13523] netlink: 'syz.2.2826': attribute type 4 has an invalid length. [ 582.304000][T12022] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 582.423046][T13536] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 582.429657][T13536] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 582.514008][T12022] usb 2-1: Using ep0 maxpacket: 16 [ 582.520697][T13536] vhci_hcd vhci_hcd.0: Device attached [ 583.148516][ T5853] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 583.154010][T12022] usb 2-1: unable to get BOS descriptor or descriptor too short [ 583.165290][T12022] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 583.190956][T12022] usb 2-1: can't read configurations, error -71 [ 583.429077][T13537] vhci_hcd: connection reset by peer [ 583.440471][ T1132] vhci_hcd: stop threads [ 583.473986][ T1132] vhci_hcd: release socket [ 583.484385][ T1132] vhci_hcd: disconnect device [ 584.272242][T13551] Device name cannot be null; rc = [-22] [ 585.529443][T13558] bridge1: entered allmulticast mode [ 585.692032][T13560] netlink: 'syz.2.2838': attribute type 11 has an invalid length. [ 586.033274][T12022] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 586.583018][ T5769] Bluetooth: hci3: unexpected event 0x01 length: 3 > 1 [ 586.603376][T12022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.643685][T12022] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.654505][T12022] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 586.672343][T12022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.722095][T12022] usb 2-1: config 0 descriptor?? [ 586.993324][ T5834] usb 2-1: USB disconnect, device number 72 [ 587.158440][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'. [ 587.242578][T13584] syzkaller0: entered promiscuous mode [ 587.250149][T13584] syzkaller0: entered allmulticast mode [ 587.361144][T13586] tipc: Started in network mode [ 587.384448][T13586] tipc: Node identity 22e10611c29d, cluster identity 4711 [ 587.548312][T13589] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 587.575862][T13586] tipc: Enabled bearer , priority 0 [ 587.632190][T13583] tipc: Resetting bearer [ 588.706620][T13583] tipc: Disabling bearer [ 588.734003][ T5853] vhci_hcd: vhci_device speed not set [ 588.872727][T12022] tipc: Node number set to 3766224401 [ 589.344989][T13600] input: syz0 as /devices/virtual/input/input39 [ 589.994095][T12022] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 590.248863][T12022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.277267][T12022] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 590.311760][T12022] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 590.333266][T12022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.365583][T12022] usb 2-1: config 0 descriptor?? [ 590.573490][T13629] ALSA: mixer_oss: invalid OSS volume '' [ 590.605402][T12022] usb 2-1: USB disconnect, device number 73 [ 592.863010][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'. [ 593.074100][T13652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.382169][T13652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.676290][T13652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.908307][T13652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.251865][T13652] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.328011][T13652] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.427149][T13652] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.461075][T13652] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.044210][ T5853] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 595.239691][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.266695][T13676] syzkaller0: entered promiscuous mode [ 595.278876][ T5853] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.281407][T13676] syzkaller0: entered allmulticast mode [ 595.294219][ T5853] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 595.303366][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.340617][ T5853] usb 2-1: config 0 descriptor?? [ 595.580265][ T9] usb 2-1: USB disconnect, device number 74 [ 596.104244][T13681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 596.169616][ T5769] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 596.180111][ T5769] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 596.299457][T13692] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2884' sets config #0 [ 596.769675][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 596.814988][T13703] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 596.998500][T13706] capability: warning: `syz.1.2889' uses 32-bit capabilities (legacy support in use) [ 597.050511][T13703] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2882'. [ 597.254983][T13713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2890'. [ 597.301665][T13713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2890'. [ 597.674019][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 597.972360][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.010480][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.045023][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 598.072913][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.115007][ T9] usb 2-1: config 0 descriptor?? [ 598.333990][ T9] usb 2-1: USB disconnect, device number 75 [ 598.642488][ T5769] Bluetooth: hci3: unexpected event 0x03 length: 13 > 11 [ 598.967370][T13740] netlink: 'syz.2.2901': attribute type 30 has an invalid length. [ 599.004190][T13740] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.013051][T13740] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.023078][T13740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.032772][T13740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.307531][T13740] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.317366][T13740] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.327347][T13740] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.336461][T13740] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.688631][T13741] netlink: 'syz.2.2901': attribute type 30 has an invalid length. [ 599.716049][T13741] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.725294][T13741] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.734250][T13741] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.743068][T13741] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.814940][T13741] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.824461][T13741] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.833440][T13741] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.842873][T13741] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.224115][ T5769] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 600.233193][ T5769] Bluetooth: hci1: Injecting HCI hardware error event [ 600.246902][T13274] Bluetooth: hci1: hardware error 0x00 [ 601.603999][ T5834] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 601.650906][T13774] 9pnet_fd: Insufficient options for proto=fd [ 601.819437][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.868084][ T5834] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 601.897657][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 601.926213][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.978865][ T5834] usb 4-1: config 0 descriptor?? [ 602.245580][ T5834] usb 4-1: USB disconnect, device number 84 [ 602.314295][T13274] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 602.597849][T13784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2917'. [ 602.854789][T13788] overlay: Unknown parameter 'dont_hash' [ 606.373979][ T5853] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 606.584057][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 606.596281][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 606.625124][ T5853] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 606.649038][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.667640][ T5853] usb 3-1: Product: syz [ 606.679546][ T5853] usb 3-1: Manufacturer: syz [ 606.689063][ T5853] usb 3-1: SerialNumber: syz [ 606.706737][ T5853] usb 3-1: config 0 descriptor?? [ 606.735127][ T5853] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 606.758469][ T5853] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 607.339654][ T5853] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 607.414727][ T5834] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 607.615882][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.626417][ T5834] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.638356][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 607.647560][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.659568][ T5834] usb 4-1: config 0 descriptor?? [ 607.724118][ T5878] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 607.762622][ T5853] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 607.771134][ T5853] em28xx 3-1:0.0: board has no eeprom [ 607.847203][ T5853] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 607.855356][ T5853] em28xx 3-1:0.0: dvb set to bulk mode. [ 607.861024][ T5834] em28xx 3-1:0.0: Binding DVB extension [ 607.881388][ T5853] usb 3-1: USB disconnect, device number 69 [ 607.889987][ T5853] em28xx 3-1:0.0: Disconnecting em28xx [ 607.904112][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 607.934941][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.957568][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.968099][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.980215][ T5834] em28xx 3-1:0.0: Registering input extension [ 607.987985][ T5853] em28xx 3-1:0.0: Closing input extension [ 607.995737][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.017024][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.027875][ T5853] em28xx 3-1:0.0: Freeing device [ 608.041418][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.276142][ T5878] usb 2-1: GET_CAPABILITIES returned 0 [ 608.282171][ T5878] usbtmc 2-1:16.0: can't read capabilities [ 608.725386][ T9] usb 2-1: USB disconnect, device number 76 [ 609.023676][T13844] 9pnet_virtio: no channels available for device syz [ 609.039477][T13844] overlayfs: overlapping lowerdir path [ 609.538834][T13855] 9pnet_virtio: no channels available for device syz [ 610.135034][T13865] 9pnet_virtio: no channels available for device syz [ 610.192746][ T9] usb 4-1: USB disconnect, device number 85 [ 612.212902][T13873] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 613.317621][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 613.334432][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 613.350251][T13887] ceph: No mds server is up or the cluster is laggy [ 613.607189][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 613.613422][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 613.832772][T13274] Bluetooth: hci3: Malformed Event: 0x2f [ 614.133212][T13909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2957'. [ 614.164027][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 614.295166][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2960'. [ 614.366684][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.391520][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.418847][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 614.430956][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.452043][ T9] usb 2-1: config 0 descriptor?? [ 616.053771][T13929] misc userio: The device must be registered before sending interrupts [ 616.238415][ T9] libceph: connect (1)[c::]:6789 error -101 [ 616.278032][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 616.544861][T12022] libceph: connect (1)[c::]:6789 error -101 [ 616.551537][T12022] libceph: mon0 (1)[c::]:6789 connect error [ 617.006417][ T5834] usb 2-1: USB disconnect, device number 77 [ 617.007275][T13935] ceph: No mds server is up or the cluster is laggy [ 617.074517][T12022] libceph: connect (1)[c::]:6789 error -101 [ 617.097863][T12022] libceph: mon0 (1)[c::]:6789 connect error [ 617.222026][T13948] afs: Unknown parameter 'measure' [ 618.695886][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 618.899206][ T5878] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 619.645997][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.663923][ T5878] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.673001][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 619.721001][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.736831][ T5878] usb 1-1: config 0 descriptor?? [ 621.731531][ T5834] usb 1-1: USB disconnect, device number 76 [ 622.154168][T14001] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 622.241527][T14001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2982'. [ 622.289040][T14006] 9pnet_virtio: no channels available for device syz [ 622.362312][T14001] netlink: 'syz.3.2982': attribute type 7 has an invalid length. [ 622.373235][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2982'. [ 622.734081][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 622.864275][T14010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.627218][T14019] 9pnet_virtio: no channels available for device syz [ 624.283971][T12022] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 624.868871][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.047426][ T5769] Bluetooth: hci0: command 0x0c1a tx timeout [ 625.186266][T12022] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.207581][T12022] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 625.232079][T12022] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 625.259497][T14029] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 625.261917][T12022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.304693][T12022] usb 2-1: config 0 descriptor?? [ 625.402647][T14031] bond1: (slave geneve2): Opening slave failed [ 626.427261][ T5834] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 626.689981][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 626.698603][ T5834] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 626.719093][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 626.747351][ T5834] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 626.777774][ T5834] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.813236][ T5834] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.851541][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.014441][T12022] usb 2-1: USB disconnect, device number 78 [ 627.100255][ T5834] usb 4-1: GET_CAPABILITIES returned 0 [ 627.115237][ T5834] usbtmc 4-1:16.0: can't read capabilities [ 627.307071][ T5834] usb 4-1: USB disconnect, device number 86 [ 627.480521][T14013] syz.0.2989: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 627.503594][T14013] CPU: 1 PID: 14013 Comm: syz.0.2989 Not tainted syzkaller #0 [ 627.511132][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.521240][T14013] Call Trace: [ 627.524556][T14013] [ 627.527529][T14013] dump_stack_lvl+0x16c/0x230 [ 627.532249][T14013] ? show_regs_print_info+0x20/0x20 [ 627.537651][T14013] ? load_image+0x3b0/0x3b0 [ 627.542187][T14013] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 627.548643][T14013] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 627.555173][T14013] warn_alloc+0x210/0x300 [ 627.559540][T14013] ? zone_watermark_ok_safe+0x230/0x230 [ 627.565134][T14013] ? _raw_spin_unlock+0x28/0x40 [ 627.570034][T14013] __vmalloc_node_range+0x662/0x1320 [ 627.575469][T14013] ? free_vm_area+0x50/0x50 [ 627.580204][T14013] ? _raw_spin_unlock+0x28/0x40 [ 627.585095][T14013] __vmalloc_node_range+0x568/0x1320 [ 627.590645][T14013] ? do_replace_finish+0x7c/0x1920 [ 627.595803][T14013] ? __page_table_check_ptes_set+0xae/0x310 [ 627.601725][T14013] ? pfn_valid+0x411/0x450 [ 627.606169][T14013] ? __vmap_pages_range_noflush+0x946/0x9d0 [ 627.612105][T14013] ? free_vm_area+0x50/0x50 [ 627.616812][T14013] ? do_replace_finish+0x7c/0x1920 [ 627.622258][T14013] vmalloc+0x79/0x90 [ 627.626295][T14013] ? do_replace_finish+0x7c/0x1920 [ 627.631975][T14013] do_replace_finish+0x7c/0x1920 [ 627.637586][T14013] ? __might_fault+0xaa/0x120 [ 627.642492][T14013] ? __lock_acquire+0x7c80/0x7c80 [ 627.648071][T14013] ? do_raw_spin_unlock+0x121/0x230 [ 627.653914][T14013] ? __might_fault+0xaa/0x120 [ 627.659612][T14013] ? __might_fault+0xc6/0x120 [ 627.664641][T14013] ? __might_fault+0xaa/0x120 [ 627.669552][T14013] do_replace+0x328/0x410 [ 627.674117][T14013] ? do_ebt_get_ctl+0x1c40/0x1c40 [ 627.679513][T14013] ? bpf_lsm_capable+0x9/0x10 [ 627.684573][T14013] ? security_capable+0x89/0xb0 [ 627.692440][T14013] do_ebt_set_ctl+0x1fd/0xd60 [ 627.698830][T14013] ? ebt_standard_compat_to_user+0x140/0x140 [ 627.706971][T14013] ? print_unlock_imbalance_bug+0x160/0x160 [ 627.713049][T14013] ? do_ip_setsockopt+0x1b86/0x2cf0 [ 627.718295][T14013] ? nf_setsockopt+0x21c/0x280 [ 627.723134][T14013] ? __lock_acquire+0x7c80/0x7c80 [ 627.729221][T14013] ? rcu_is_watching+0x15/0xb0 [ 627.734041][T14013] ? trace_contention_end+0x39/0xe0 [ 627.739612][T14013] ? __mutex_lock+0x304/0xcc0 [ 627.744583][T14013] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 627.750361][T14013] ? mutex_unlock+0x10/0x10 [ 627.755322][T14013] ? aa_sk_perm+0x7fc/0x930 [ 627.760424][T14013] ? aa_af_perm+0x2b0/0x2b0 [ 627.765350][T14013] nf_setsockopt+0x263/0x280 [ 627.770389][T14013] ? sock_common_recvmsg+0x1b0/0x1b0 [ 627.776258][T14013] do_sock_setsockopt+0x175/0x1a0 [ 627.781961][T14013] ? __fdget+0x180/0x210 [ 627.786560][T14013] __x64_sys_setsockopt+0x184/0x200 [ 627.792092][T14013] do_syscall_64+0x55/0xb0 [ 627.796619][T14013] ? clear_bhb_loop+0x40/0x90 [ 627.801317][T14013] ? clear_bhb_loop+0x40/0x90 [ 627.806033][T14013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 627.811955][T14013] RIP: 0033:0x7f6e9378f749 [ 627.816499][T14013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.836391][T14013] RSP: 002b:00007f6e946e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 627.844954][T14013] RAX: ffffffffffffffda RBX: 00007f6e939e5fa0 RCX: 00007f6e9378f749 [ 627.852943][T14013] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 627.860958][T14013] RBP: 00007f6e93813f91 R08: 0000000000000108 R09: 0000000000000000 [ 627.869030][T14013] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 627.877037][T14013] R13: 00007f6e939e6038 R14: 00007f6e939e5fa0 R15: 00007ffec837c0c8 [ 627.885060][T14013] [ 627.905956][T14013] Mem-Info: [ 627.909261][T14013] active_anon:4425 inactive_anon:0 isolated_anon:0 [ 627.909261][T14013] active_file:16708 inactive_file:40116 isolated_file:0 [ 627.909261][T14013] unevictable:768 dirty:16 writeback:0 [ 627.909261][T14013] slab_reclaimable:11975 slab_unreclaimable:93014 [ 627.909261][T14013] mapped:24224 shmem:1376 pagetables:473 [ 627.909261][T14013] sec_pagetables:0 bounce:0 [ 627.909261][T14013] kernel_misc_reclaimable:0 [ 627.909261][T14013] free:1275469 free_pcp:10327 free_cma:0 [ 627.962572][T14013] Node 0 active_anon:17700kB inactive_anon:0kB active_file:66796kB inactive_file:160268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96860kB dirty:64kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10836kB pagetables:1892kB sec_pagetables:0kB all_unreclaimable? no [ 628.000346][T14013] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 628.042287][T14058] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 628.057418][T14013] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.088408][T14013] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 628.094532][T14013] Node 0 DMA32 free:1190560kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:17552kB inactive_anon:0kB active_file:66796kB inactive_file:158948kB unevictable:1536kB writepending:64kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:14260kB local_pcp:5320kB free_cma:0kB [ 628.130379][T14013] lowmem_reserve[]: 0 0 1 1 1 [ 628.157783][T14013] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 628.185724][T14013] lowmem_reserve[]: 0 0 0 0 0 [ 628.190582][T14013] Node 1 Normal free:3895964kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:26820kB local_pcp:18560kB free_cma:0kB [ 628.196355][T14061] (null): rxe_set_mtu: Set mtu to 1024 [ 628.238740][T14013] lowmem_reserve[]: 0 0 0 0 0 [ 628.246671][T14013] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 628.293923][T14013] Node 0 DMA32: 1171*4kB (UME) 657*8kB (UME) 659*16kB (UME) 407*32kB (ME) 115*64kB (ME) 59*128kB (ME) 56*256kB (ME) 20*512kB (M) 7*1024kB (UM) 4*2048kB (UM) 269*4096kB (M) = 1190180kB [ 628.312955][T14013] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 628.327201][T14013] Node 1 Normal: 227*4kB (UME) 60*8kB (UME) 57*16kB (UME) 169*32kB (UE) 56*64kB (UME) 7*128kB (UE) 5*256kB (U) 3*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3895964kB [ 628.346287][T14013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.358729][T14013] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 628.387598][T14013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 628.398849][T14013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 628.410365][T14013] 58641 total pagecache pages [ 628.415985][T14013] 0 pages in swap cache [ 628.420382][T14013] Free swap = 124200kB [ 628.426912][T14013] Total swap = 124996kB [ 628.431139][T14013] 2097051 pages RAM [ 628.435559][T14013] 0 pages HighMem/MovableOnly [ 628.440369][T14013] 416127 pages reserved [ 628.444942][T14013] 0 pages cma reserved [ 628.918840][T14061] infiniband syz1: set active [ 628.955218][T14061] infiniband syz1: added syz_tun [ 629.398846][T14061] RDS/IB: syz1: added [ 629.420029][T14061] smc: adding ib device syz1 with port count 1 [ 629.446516][T14061] smc: ib device syz1 port 1 has pnetid [ 632.767899][T14078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3009'. [ 632.801728][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 632.884673][T14079] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 632.892502][T14079] netlink: 'syz.0.3010': attribute type 2 has an invalid length. [ 633.196503][T14087] syzkaller0: entered promiscuous mode [ 633.202293][T14087] syzkaller0: entered allmulticast mode [ 633.226663][ T5834] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 633.436166][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.457828][ T5834] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.493940][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 633.520140][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.553465][ T5834] usb 4-1: config 0 descriptor?? [ 637.451567][T14110] block nbd2: shutting down sockets [ 638.559699][T12022] usb 4-1: USB disconnect, device number 87 [ 638.570729][T14116] netlink: set zone limit has 8 unknown bytes [ 639.253973][ T9] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 639.291292][T14138] netlink: 'syz.1.3029': attribute type 1 has an invalid length. [ 639.401916][T14138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 639.448169][T14140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.457246][T14140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.467670][T14140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.473956][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 639.476627][T14140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.508977][T14140] bond2: (slave geneve2): making interface the new active one [ 639.516639][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 639.516676][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 639.539981][T14140] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 639.601565][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 639.612509][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 639.628793][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 639.641837][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 639.650072][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 639.673899][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 639.717834][ T9] usb 1-1: string descriptor 0 read error: -22 [ 639.724860][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 639.763634][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.808028][ T9] adutux 1-1:168.0: interrupt endpoints not found [ 640.034147][ T5853] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 640.163500][T14151] 9pnet_virtio: no channels available for device syz [ 640.236370][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.267947][ T5853] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.297281][ T5853] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 640.322644][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.352368][ T5853] usb 2-1: config 0 descriptor?? [ 640.997287][ T5853] usb 1-1: USB disconnect, device number 77 [ 641.412448][T14166] binder: 14164:14166 unknown command 1074553619 [ 641.427323][T14166] binder: 14164:14166 ioctl c0306201 200000000540 returned -22 [ 641.495381][T14167] binder: 14164:14167 unknown command 1074291477 [ 641.501832][T14167] binder: 14164:14167 ioctl c0306201 200000000640 returned -22 [ 642.903300][ T5878] usb 2-1: USB disconnect, device number 79 [ 643.000895][T14195] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 643.008266][T14195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 643.025879][T14195] vhci_hcd vhci_hcd.0: Device attached [ 643.294119][ T5853] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 643.400659][T14197] vhci_hcd: connection reset by peer [ 643.414655][ T1324] vhci_hcd: stop threads [ 643.440834][ T1324] vhci_hcd: release socket [ 643.447897][ T1324] vhci_hcd: disconnect device [ 644.021711][T14214] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3055'. [ 645.043882][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'. [ 647.964619][T14248] comedi comedi0: Minor 47 could not be opened [ 649.178287][ T5853] vhci_hcd: vhci_device speed not set [ 649.725911][T14253] ubi31: attaching mtd0 [ 649.734006][T14253] ubi31: scanning is finished [ 649.739312][T14253] ubi31: empty MTD device detected [ 649.789862][T14253] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 649.797582][T14253] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 649.805041][T14253] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 649.812096][T14253] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 649.819840][T14253] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 649.827351][T14253] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 649.835512][T14253] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3631346206 [ 649.845616][T14253] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 649.861884][T14255] ubi31: background thread "ubi_bgt31d" started, PID 14255 [ 650.338782][T14261] dummy0: entered promiscuous mode [ 650.373170][T14261] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 650.473258][T14261] hsr1: entered allmulticast mode [ 650.524170][T14261] dummy0: entered allmulticast mode [ 650.604473][T14261] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 653.661873][T14280] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3074'. [ 653.818812][T14282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3076'. [ 654.252956][T14268] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 654.402777][T14291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3079'. [ 655.169730][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 655.264016][ T5807] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 655.540575][ T5807] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 655.585783][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.689957][T14303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.729891][T14303] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.834068][T14303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.960871][T14303] syz.1.3081 (14303) used greatest stack depth: 20552 bytes left [ 655.994076][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.043874][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 656.447518][ T5807] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 656.590988][ T5807] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 656.748178][ T5807] usb 4-1: Manufacturer: syz [ 656.815303][ T5807] usb 4-1: config 0 descriptor?? [ 656.974468][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 657.224117][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 657.241666][ T5807] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 657.263461][ T5807] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 657.277243][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.299851][ T9] usb 3-1: config 0 has no interface number 0 [ 657.319936][ T5807] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 657.332638][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.356339][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 657.366477][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.392821][ T9] usb 3-1: config 0 descriptor?? [ 657.430954][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 657.712193][T14305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.721895][T14305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.734643][ T28] audit: type=1326 audit(1799770395.412:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 657.787259][ T28] audit: type=1326 audit(1799770395.412:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 657.848843][ T28] audit: type=1326 audit(1799770395.422:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 657.879584][ T28] audit: type=1326 audit(1799770395.422:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 657.905069][ T28] audit: type=1326 audit(1799770395.422:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 657.944105][ T28] audit: type=1326 audit(1799770395.422:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 657.968255][ T28] audit: type=1326 audit(1799770395.422:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 657.993588][ T28] audit: type=1326 audit(1799770395.422:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14316 comm="syz.1.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc438f749 code=0x7ffc0000 [ 659.494069][T14325] vivid-007: kernel_thread() failed [ 659.741660][ T5878] usb 3-1: USB disconnect, device number 70 [ 660.125046][ T5807] usb 4-1: USB disconnect, device number 88 [ 660.860426][T14343] netlink: 'syz.2.3095': attribute type 10 has an invalid length. [ 660.939073][T14343] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 661.076464][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.091184][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.122340][T14391] tipc: Enabling of bearer rejected, failed to enable media [ 662.596672][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3113'. [ 662.683651][T14395] bridge_slave_1: left allmulticast mode [ 662.774067][T14395] bridge_slave_1: left promiscuous mode [ 662.787633][T14395] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.855900][T14395] bridge_slave_0: left allmulticast mode [ 662.892383][T14395] bridge_slave_0: left promiscuous mode [ 662.914320][T14395] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.236532][T14403] misc userio: The device must be registered before sending interrupts [ 663.533122][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 663.754787][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 663.762274][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 663.773967][ T9] usb 4-1: config 0 has no interface number 0 [ 663.795017][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 663.842200][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 663.882206][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 663.943475][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 663.991390][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.039218][ T9] usb 4-1: config 0 descriptor?? [ 664.088087][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 664.400316][ T9] usb 4-1: USB disconnect, device number 89 [ 667.323942][ T5853] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 667.619337][ T5853] usb 1-1: New USB device found, idVendor=0830, idProduct=0064, bcdDevice=13.2b [ 667.662948][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.711094][ T5853] usb 1-1: Product: syz [ 667.738049][ T5853] usb 1-1: Manufacturer: syz [ 667.743038][ T5853] usb 1-1: SerialNumber: syz [ 668.487245][T14446] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 669.467205][ T5807] usb 1-1: USB disconnect, device number 78 [ 670.113303][T14451] bridge_slave_0: default FDB implementation only supports local addresses [ 670.403989][T14458] bridge0: entered promiscuous mode [ 670.410737][T14458] bridge0: entered allmulticast mode [ 670.431350][T14458] team0: Port device bridge0 added [ 670.451226][T14458] bridge0: port 1(team0) entered blocking state [ 670.459677][T14458] bridge0: port 1(team0) entered disabled state [ 670.468173][T14458] team0: entered allmulticast mode [ 670.473530][T14458] team_slave_0: entered allmulticast mode [ 670.481776][T14458] team_slave_1: entered allmulticast mode [ 670.491837][T14458] team0: left allmulticast mode [ 670.500546][T14458] team_slave_0: left allmulticast mode [ 670.507642][T14458] team_slave_1: left allmulticast mode [ 670.572890][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3136'. [ 671.124408][T14477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=407865202 (3262921616 ns) > initial count (2352015480 ns). Using initial count to start timer. [ 671.654233][ T5853] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 671.848632][ T5853] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 671.857440][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.869662][ T5853] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 671.879321][ T5853] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 671.887603][ T5853] usb 2-1: Manufacturer: syz [ 671.899838][ T5853] usb 2-1: config 0 descriptor?? [ 671.975797][ T5853] rc_core: IR keymap rc-hauppauge not found [ 671.983145][ T5853] Registered IR keymap rc-empty [ 671.991547][ T5853] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 672.003418][ T5853] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 672.126033][ T5807] usb 2-1: USB disconnect, device number 80 [ 672.969141][T14508] netlink: 'syz.1.3156': attribute type 10 has an invalid length. [ 672.980006][T14508] syz_tun: entered promiscuous mode [ 673.000803][T14508] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 673.114182][T14512] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3157'. [ 674.263361][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3164'. [ 674.278641][T14533] Invalid ELF header type: 2 != 1 [ 674.640333][ T5769] block nbd1: Receive control failed (result -107) [ 674.667560][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3169'. [ 674.677838][T14540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.686179][T14540] IPv6: NLM_F_CREATE should be set when creating new route [ 674.737419][T14537] block nbd1: shutting down sockets [ 676.628321][T14561] 9pnet_virtio: no channels available for device syz [ 676.824593][T14569] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 676.922595][T14569] bond1: entered promiscuous mode [ 676.931672][T14569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.943175][T14575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3178'. [ 676.969040][T14575] bond1: entered allmulticast mode [ 677.117168][T14566] bond1: (slave bridge1): making interface the new active one [ 677.127808][T14566] bridge1: entered promiscuous mode [ 677.141244][T14566] bridge1: entered allmulticast mode [ 677.152240][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'. [ 677.167850][T14566] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 682.985793][T14629] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 682.993380][T14629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 683.001934][T14632] vhci_hcd: connection closed [ 683.005043][T14629] vhci_hcd vhci_hcd.0: Device attached [ 683.025657][ T1000] vhci_hcd: stop threads [ 683.030198][ T1000] vhci_hcd: release socket [ 683.035032][ T1000] vhci_hcd: disconnect device [ 683.192654][T13274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 683.215206][T13274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 683.319244][T13274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.344722][T13274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.359157][T13274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 683.367329][T13274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.673917][ T5720] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 683.875996][ T5720] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 683.883511][ T5720] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 683.933956][ T5720] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 683.965301][ T5720] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 683.973024][ T5720] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 684.001164][ T5720] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 684.032899][ T5720] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 684.041051][ T5720] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 684.077420][ T5720] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 684.110931][ T5720] usb 3-1: string descriptor 0 read error: -22 [ 684.120077][ T5720] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 684.137151][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.169769][ T5720] adutux 3-1:168.0: interrupt endpoints not found [ 684.546054][T14634] chnl_net:caif_netlink_parms(): no params data found [ 684.834914][T14634] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.870263][T14634] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.924279][T14634] bridge_slave_0: entered allmulticast mode [ 684.951727][T14634] bridge_slave_0: entered promiscuous mode [ 685.222819][T14634] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.240173][T14634] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.262727][T14634] bridge_slave_1: entered allmulticast mode [ 685.296040][T14634] bridge_slave_1: entered promiscuous mode [ 685.424044][ T5769] Bluetooth: hci2: command tx timeout [ 685.470042][T14666] overlayfs: failed to clone upperpath [ 685.534134][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 685.640681][T14666] syz_tun: left promiscuous mode [ 685.696568][T14666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.765933][T14634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.822246][T14634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.220635][T14634] team0: Port device team_slave_0 added [ 686.257435][T14634] team0: Port device team_slave_1 added [ 686.310234][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.413504][T14634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.437271][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.486173][T14634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.522537][T14634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.538934][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.595832][T14634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.654114][ T6342] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 686.658108][T12022] usb 3-1: USB disconnect, device number 71 [ 686.889028][T14634] hsr_slave_0: entered promiscuous mode [ 686.906637][T14634] hsr_slave_1: entered promiscuous mode [ 686.913040][T14634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.933888][ T6342] usb 1-1: Using ep0 maxpacket: 32 [ 686.936590][T14634] Cannot create hsr debugfs directory [ 686.949339][ T6342] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 686.980461][ T6342] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 687.017389][ T6342] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 687.039604][ T6342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.084045][ T6342] usb 1-1: Product: syz [ 687.088302][ T6342] usb 1-1: Manufacturer: syz [ 687.120433][ T6342] usb 1-1: SerialNumber: syz [ 687.167364][ T6342] usb 1-1: config 0 descriptor?? [ 687.237833][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 687.506114][ T5769] Bluetooth: hci2: command tx timeout [ 687.628174][T14634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 687.640469][T14634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 687.661428][T14634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 687.677859][T14634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 687.764561][T12022] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 687.850342][T14634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.884457][T14634] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.901755][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.909457][T12712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.935561][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.942933][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.948294][T12022] usb 3-1: Using ep0 maxpacket: 32 [ 687.958375][T12022] usb 3-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 687.970011][T12022] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 687.988844][T12022] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 687.999107][T12022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.025226][T12022] usb 3-1: Product: syz [ 688.039322][T12022] usb 3-1: Manufacturer: syz [ 688.049915][T12022] usb 3-1: SerialNumber: syz [ 688.292545][T12022] usb 3-1: USB disconnect, device number 72 [ 688.588092][T12022] usb 1-1: USB disconnect, device number 79 [ 688.700389][T14699] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:0 [ 688.748010][T14634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.584324][ T5769] Bluetooth: hci2: command tx timeout [ 689.661191][T14634] veth0_vlan: entered promiscuous mode [ 689.736641][T14634] veth1_vlan: entered promiscuous mode [ 689.813591][T14634] veth0_macvtap: entered promiscuous mode [ 689.852792][T14634] veth1_macvtap: entered promiscuous mode [ 689.929842][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.956317][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.003879][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.027784][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.064550][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.086149][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.123860][T14634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.139179][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.170623][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.194197][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.213986][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.234010][T14634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.274319][T14634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.306661][T14634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.395805][T14634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.434753][T14634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.476559][T14634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.499662][T14634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.319537][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.374052][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.680754][ T5769] Bluetooth: hci2: command tx timeout [ 691.895537][T12712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.996986][T12712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.777623][T14746] fuse: Bad value for 'fd' [ 692.819823][T14747] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 693.120944][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 693.164025][T14749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3229'. [ 747.751376][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.073924][ C0] ------------[ cut here ]------------ [ 804.081734][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 804.092153][ C0] Modules linked in: [ 804.096099][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 804.103143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.113336][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 804.119697][ C0] Code: ff ff ff 48 c7 c7 a0 d4 ed 96 be 04 00 00 00 e8 4a d0 6c 00 48 89 df b8 01 00 00 00 87 05 4c a4 7d 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 51 d3 8c 74 47 48 c7 c0 ec 55 4a 8e 48 c1 e8 03 [ 804.139424][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 804.145520][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35180 RCX: ffffffff81703046 [ 804.153529][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35180 [ 804.161517][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 804.169507][ C0] R10: dffffc0000000000 R11: fffffbfff2ddba94 R12: 0000000000002904 [ 804.177492][ C0] R13: 1ffff110171c79e2 R14: 0000000000000a02 R15: dffffc0000000000 [ 804.185488][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 804.194431][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.201041][ C0] CR2: 00002000009fb030 CR3: 0000000030005000 CR4: 00000000003506f0 [ 804.209031][ C0] Call Trace: [ 804.212320][ C0] [ 804.215176][ C0] rcu_core+0x612/0x1720 [ 804.219440][ C0] ? lock_chain_count+0x20/0x20 [ 804.224304][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 804.229779][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.235009][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 804.240222][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 804.245466][ C0] ? __run_timers+0x781/0x7d0 [ 804.250167][ C0] ? __run_timers+0x74e/0x7d0 [ 804.254862][ C0] ? detach_timer+0x2b0/0x2b0 [ 804.259549][ C0] ? detach_timer+0x2b0/0x2b0 [ 804.264630][ C0] ? lock_chain_count+0x20/0x20 [ 804.269525][ C0] handle_softirqs+0x280/0x820 [ 804.274327][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 804.279120][ C0] ? do_softirq+0x180/0x180 [ 804.283766][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 804.289100][ C0] __irq_exit_rcu+0xc7/0x190 [ 804.293710][ C0] ? irq_exit_rcu+0x20/0x20 [ 804.298228][ C0] irq_exit_rcu+0x9/0x20 [ 804.302512][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 804.308169][ C0] [ 804.311201][ C0] [ 804.314972][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 804.321930][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 804.327924][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 bb 40 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 804.347612][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 804.353697][ C0] RAX: 571225a52225ff00 RBX: ffffffff8161881b RCX: 571225a52225ff00 [ 804.361682][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 804.369667][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 804.377654][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a2128 [ 804.385637][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688 [ 804.393640][ C0] ? do_idle+0x1eb/0x510 [ 804.397919][ C0] default_idle+0x13/0x20 [ 804.402267][ C0] default_idle_call+0x6c/0xa0 [ 804.407160][ C0] do_idle+0x1eb/0x510 [ 804.411639][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 804.416869][ C0] ? do_idle+0xa/0x510 [ 804.420966][ C0] cpu_startup_entry+0x43/0x60 [ 804.425839][ C0] rest_init+0x2e2/0x300 [ 804.430109][ C0] ? time_init+0x40/0x40 [ 804.434384][ C0] arch_call_rest_init+0xe/0x10 [ 804.439254][ C0] start_kernel+0x459/0x4e0 [ 804.443773][ C0] x86_64_start_reservations+0x2a/0x30 [ 804.449263][ C0] x86_64_start_kernel+0x60/0x60 [ 804.454217][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 804.460332][ C0] [ 804.463363][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 804.470648][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 804.477682][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.488193][ C0] Call Trace: [ 804.491480][ C0] [ 804.494332][ C0] dump_stack_lvl+0x16c/0x230 [ 804.499030][ C0] ? show_regs_print_info+0x20/0x20 [ 804.504253][ C0] ? load_image+0x3b0/0x3b0 [ 804.508781][ C0] panic+0x2c0/0x710 [ 804.512713][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 804.517233][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 804.523546][ C0] __warn+0x2e0/0x470 [ 804.527546][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 804.533347][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 804.539268][ C0] report_bug+0x2be/0x4f0 [ 804.543616][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 804.549371][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 804.555260][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 804.561460][ C0] handle_bug+0xcf/0x120 [ 804.565724][ C0] exc_invalid_op+0x1a/0x50 [ 804.570237][ C0] asm_exc_invalid_op+0x1a/0x20 [ 804.575097][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 804.581532][ C0] Code: ff ff ff 48 c7 c7 a0 d4 ed 96 be 04 00 00 00 e8 4a d0 6c 00 48 89 df b8 01 00 00 00 87 05 4c a4 7d 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 51 d3 8c 74 47 48 c7 c0 ec 55 4a 8e 48 c1 e8 03 [ 804.601157][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 804.607258][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35180 RCX: ffffffff81703046 [ 804.615270][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35180 [ 804.623251][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 804.631232][ C0] R10: dffffc0000000000 R11: fffffbfff2ddba94 R12: 0000000000002904 [ 804.639336][ C0] R13: 1ffff110171c79e2 R14: 0000000000000a02 R15: dffffc0000000000 [ 804.647356][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 804.653107][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 804.658853][ C0] rcu_core+0x612/0x1720 [ 804.663106][ C0] ? lock_chain_count+0x20/0x20 [ 804.667968][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 804.673362][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 804.678575][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 804.684138][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 804.691032][ C0] ? __run_timers+0x781/0x7d0 [ 804.696037][ C0] ? __run_timers+0x74e/0x7d0 [ 804.700740][ C0] ? detach_timer+0x2b0/0x2b0 [ 804.705442][ C0] ? detach_timer+0x2b0/0x2b0 [ 804.710154][ C0] ? lock_chain_count+0x20/0x20 [ 804.715054][ C0] handle_softirqs+0x280/0x820 [ 804.719846][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 804.724657][ C0] ? do_softirq+0x180/0x180 [ 804.729207][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 804.734533][ C0] __irq_exit_rcu+0xc7/0x190 [ 804.739226][ C0] ? irq_exit_rcu+0x20/0x20 [ 804.743861][ C0] irq_exit_rcu+0x9/0x20 [ 804.748135][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 804.753827][ C0] [ 804.756777][ C0] [ 804.759717][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 804.765709][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 804.771442][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 bb 40 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 804.791328][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 804.797412][ C0] RAX: 571225a52225ff00 RBX: ffffffff8161881b RCX: 571225a52225ff00 [ 804.805429][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 804.813416][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 804.821400][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a2128 [ 804.829394][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688 [ 804.837756][ C0] ? do_idle+0x1eb/0x510 [ 804.842060][ C0] default_idle+0x13/0x20 [ 804.846422][ C0] default_idle_call+0x6c/0xa0 [ 804.851221][ C0] do_idle+0x1eb/0x510 [ 804.855323][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 804.860551][ C0] ? do_idle+0xa/0x510 [ 804.865428][ C0] cpu_startup_entry+0x43/0x60 [ 804.870208][ C0] rest_init+0x2e2/0x300 [ 804.874489][ C0] ? time_init+0x40/0x40 [ 804.879090][ C0] arch_call_rest_init+0xe/0x10 [ 804.883948][ C0] start_kernel+0x459/0x4e0 [ 804.888476][ C0] x86_64_start_reservations+0x2a/0x30 [ 804.893957][ C0] x86_64_start_kernel+0x60/0x60 [ 804.898937][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 804.905649][ C0] [ 806.040600][ C0] Shutting down cpus with NMI [ 806.045833][ C0] Kernel Offset: disabled [ 806.051423][ C0] Rebooting in 86400 seconds..