last executing test programs: 29m28.343117863s ago: executing program 0 (id=2065): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) 29m27.307123453s ago: executing program 0 (id=2069): r0 = socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x26, &(0x7f00000000c0)={@remote, @local, @val={@void, {0x9900, 0x3, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @loopback}}}}}, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x26, 0x42, &(0x7f0000000280)=@ll={0x11, 0x11, 0x0, 0x1, 0x3, 0x6, @random="856301f29455"}, 0x80) 29m27.111302637s ago: executing program 0 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 29m26.94777337s ago: executing program 0 (id=2072): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x8040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x8ed}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r4, 0x4b63, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) 29m22.694582572s ago: executing program 0 (id=2076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60020000020010000000000000000000000000001fe800000add3ec93384eb10000000000000000000000aa"], 0x0) 29m22.538516695s ago: executing program 0 (id=2079): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00', {}, 0x2}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket(0x2, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) process_vm_writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000300)=""/197, 0xc5}, {0x0}, {&(0x7f0000000880)=""/141, 0x8d}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/99, 0x63}, {&(0x7f0000000ac0)=""/190, 0xbe}], 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)=""/36, 0x24}], 0x1, 0x0) 29m6.76306768s ago: executing program 32 (id=2079): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00', {}, 0x2}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket(0x2, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) process_vm_writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000300)=""/197, 0xc5}, {0x0}, {&(0x7f0000000880)=""/141, 0x8d}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/99, 0x63}, {&(0x7f0000000ac0)=""/190, 0xbe}], 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)=""/36, 0x24}], 0x1, 0x0) 26m19.851153126s ago: executing program 1 (id=2411): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 26m16.53524089s ago: executing program 1 (id=2414): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xfcff, &(0x7f0000000700)='V'}) 26m15.304446564s ago: executing program 1 (id=2416): openat$kvm(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f0000000040)={[{@noquota}, {@nombcache}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@noinit_itable}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$eJzs3d9rW20dAPDvSX9u62ynXsyBc+ikG7ikXd1WvJgVRK8Gznlfa5uW0rQpbbqtZUiHf4Ag/kKvvPJG8FoE2Z8gwkDvRUQZus0LL973zUuSk3ddlrYpa5q2+Xzg6XnOj57v90k4T/LkHM4JoGtdiYipiOiJiOsRMZwuz6Qltmulst2rl09mKyWJcvnBf5JI0mX1fSXp9Fz6b4MR8d1vR/wgeTfu+ubW0kyhkF9L53Ol5dXc+ubWjcXlmYX8Qn5lamL89uSdyVuTY4fW1rvf/OfPf/zbb93901ce/X3639d+WElrKF23sx2t2G5xu1rT+6qvRV1vRKwdJNgx1pO2p6/TiQAA0JLKd/xPR8QXI+L1rzqdDQAAANAO5a8PxQdJRBkAAAA4tTLVa2CTTDa9FmAoMplstnYN72fjbKbQHxHzxY2Vudq1siPRl5lfLOTH0muFR6IvqcyPV+tv5m82zE9ExIWI+Onwmep8drZYmOv0jx8AAADQJc41jP//N1wb/wMAAACnzMgBtm1yLy8AAADgBDjI+B8AAAA4mXYd/ye9R5sIAAAA0A7fuXevUsr151/PPdzcWCo+vDGXX1/KLm/MZmeLa6vZhWJxoXrPvuX99lcoFle/Gisbj3Ol/Hopt765Nb1c3FgpTVef6z2d95xoAAAAOHoXvvDsb0lEbH/tTLVU9KfrWhirT7U3O6CdMgfb3N0/4BTp6XQCQMc0XODb36k8gKPnfDywz8D+Zw3zB/zZAAAAOA5GP/de5/+dD4QTzEAeupfz/9C93OALupfz/9DlBvbfZHC3FX8+5FwAAIC2GaqWJJNNzwUORSaTzUacrz4WoC+ZXyzkxyLiUxHx1+G+gcr8eKeTBgAAAAAAAAAAAAAAAAAAAAAAAIATplxOogwAAACcahGZfyXpg/xHh68ONf4+0J/8f7g6jYhHv37wi8czpdLaeGX5fz9ZXvpluvxmfQkAAADQSfVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH6dXLJ7P1cpRxX3wjIkaaxe+Nwep08A/DEXH2dRK9O/4viYieQ4i//TQiLr4dvyeNMFJNrZZFY/xMRJxpU/xoMf65Q4gP3exZpf+Zqhx/fQ3HXyauVKfNj7/etLyvF1d26/8y9f6v2s816//O773rwXrl0vPf53aN/zTiUm/z/qceP3nP/vf739va2m1d+TcRo/t8/lRi5UrLq7n1za0bi8szC/mF/MrExPjtyTuTtybHcvOLhXz6t2mMn3z+jx/t1f6zTePX+t+92n/13d0NNIvx4fPHLz+zR/xrX2r+/l/cI37ltf9y+jlQWT9ar2/X6jtd/t1fLu/V/rld2r/f+39tt502uH7/R/9ocVMA4Aisb24tzRQK+bWTUYmofSs/Lvl0tnI+jkUaKq1VhtJjbseqnrYHvf9u0NYqneuTAACA9njzpb/TmQAAAAAAAAAAAAAAAAAAAED3avudzwbevrPAYOeaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwp48DAAD//85EyV0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timer_create(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe2$9p(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde3}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xd7b463f9eab17a7e}, 0x4800) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000240)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 26m14.4768105s ago: executing program 1 (id=2420): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 26m12.986597849s ago: executing program 1 (id=2422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="190000000400"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001080)={'erspan0\x00', &(0x7f0000001040)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x0, 0x401, {{0x6, 0x4, 0x0, 0x24, 0x18, 0x66, 0x0, 0x22, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x43}, {[@noop, @end]}}}}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x200, 0x1, 0x800, 0x0, 0xfff, 0x5000000, r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)=""/4091, &(0x7f00000010c0)=0xffb) unshare(0x42000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x4, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x1413451e, 0x1, 0x40000000006, 0x8000000000005, 0x800040068], 0x2000, 0x80}) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r7, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/54, 0x36}], 0x2) syz_open_dev$vcsa(&(0x7f0000001000), 0x0, 0x200000) 26m11.86321515s ago: executing program 1 (id=2424): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 25m56.169072483s ago: executing program 33 (id=2424): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22m33.367512525s ago: executing program 2 (id=2856): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x8040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x8ed}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r4, 0x4b63, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) 22m32.146103029s ago: executing program 2 (id=2860): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)=@generic={0x80}) 22m32.023366131s ago: executing program 2 (id=2861): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x110, 0x4) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x4040015) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/110, 0x6e}], 0x1}, 0x2}], 0x1, 0x2002, 0x0) 22m31.892184914s ago: executing program 2 (id=2862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 22m31.802700316s ago: executing program 2 (id=2863): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getrlimit(0xa, &(0x7f0000000280)) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x1}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000030101020000c265d862d861c53db22262722d0000000000000a00002c0e4827cc849063015f2808982bed8cff5b3d3a14c3b74780bb421fd6cfb9117a06b4d92eb9759f29a699b2f109cc31ed65304aaf0c9cec337b2e8048e8b65ad7cfd082754000480e43511504eb37ec07baaf7d294710ae9623103868735a485a1e334b"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x24000010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB="28000000000801020000000000000000020000020900010073797a3100000000050003002f000000457e45aa78cd41146a837d3cfd66a108f010701093ed32dc5c64f10284a530d180e1bd99813a934ced7328bd8190ae066ed9aa68de906f98367a0e9340561a776b0a674e46a1dbdc9309ffc23989f2d4580c51659cfc99f41a49f7c990180b229fb708cc2fd11dfe93c81c2e61ce3a148d687d5daf36778d6041de94e26d01e0713bf2342e6c4385e777aed87e28b630b8470d2586b0c10e49d7a391f0ef9ee8309b16"], 0x28}, 0x1, 0x0, 0x0, 0xc400}, 0x54) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 22m29.810754165s ago: executing program 2 (id=2864): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$netlink(0x10, 0x3, 0x0) flistxattr(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000002a40)={'vlan0\x00', &(0x7f0000002a00)=@ethtool_gstrings={0x1b, 0x6}}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45b1f, 0x7ba8b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 22m13.910824518s ago: executing program 34 (id=2864): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$netlink(0x10, 0x3, 0x0) flistxattr(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000002a40)={'vlan0\x00', &(0x7f0000002a00)=@ethtool_gstrings={0x1b, 0x6}}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45b1f, 0x7ba8b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 11.681180694s ago: executing program 6 (id=8154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) 11.536645926s ago: executing program 6 (id=8157): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xfffffffb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090) 11.421373739s ago: executing program 6 (id=8160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 11.235087173s ago: executing program 6 (id=8161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 8.650851922s ago: executing program 3 (id=8164): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xfffffffffffffd63}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r4, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1661}]}]}, 0x44}}, 0x48040) 5.867296956s ago: executing program 4 (id=8170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001efc000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000870000008500000006000000850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f00000004c0), &(0x7f0000000540)=r1}, 0x20) 5.755125798s ago: executing program 4 (id=8171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.571173712s ago: executing program 3 (id=8173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.491229654s ago: executing program 4 (id=8175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10) 5.365141946s ago: executing program 3 (id=8176): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) 5.246778828s ago: executing program 4 (id=8177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) 5.119145541s ago: executing program 3 (id=8178): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r1}, 0x10) 5.032985862s ago: executing program 3 (id=8179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0x2d}, 0x141) 5.025873502s ago: executing program 6 (id=8180): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 4.866996056s ago: executing program 3 (id=8181): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xfffffffffffffd63}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r4, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1661}]}]}, 0x44}}, 0x48040) 4.734156228s ago: executing program 4 (id=8182): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.681021279s ago: executing program 5 (id=8186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000050}, 0x8004) 3.183087168s ago: executing program 5 (id=8187): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040)=r4, 0x3b) 3.06215554s ago: executing program 5 (id=8188): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x6, 0x4, 0x12}, 0x50) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.966139562s ago: executing program 5 (id=8189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 2.799221826s ago: executing program 5 (id=8190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 79.848448ms ago: executing program 6 (id=8191): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.535519ms ago: executing program 5 (id=8192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='signal_deliver\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 4 (id=8193): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): req 02 val 2800 [ 2028.849527][T26017] pwc: recv_control_msg error -71 req 04 val 1100 [ 2028.860022][T26017] pwc: recv_control_msg error -71 req 04 val 1200 [ 2028.866707][T26006] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2028.875103][T26017] pwc: Registered as video103. [ 2028.899315][T26017] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input67 [ 2028.910472][T26006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.930905][T26006] usb 4-1: config 0 descriptor?? [ 2028.976748][T26017] usb 6-1: USB disconnect, device number 51 [ 2029.350002][T26006] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2029.398850][T26006] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2029.422936][T26006] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2029.464132][T26006] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2029.490943][T26006] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2029.509667][T26006] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2029.530953][T26006] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2029.552129][T26006] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2029.661600][T26006] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00 [ 2030.859816][T26006] cp2112 0003:10C4:EA90.0019: error reading lock byte: -71 [ 2030.925675][T26006] usb 4-1: USB disconnect, device number 113 [ 2031.117931][T23385] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 2031.311067][T26016] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2031.530799][T26016] usb 6-1: Using ep0 maxpacket: 32 [ 2031.577164][T26016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.598416][T26016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.616860][T26016] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2031.630043][T26016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.653729][T26016] usb 6-1: config 0 descriptor?? [ 2031.668899][T26016] hub 6-1:0.0: USB hub found [ 2031.883847][T26016] hub 6-1:0.0: 1 port detected [ 2032.425172][T26444] 9pnet_fd: Insufficient options for proto=fd [ 2032.588170][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 2032.595478][T26016] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 2032.643901][T26017] usb 6-1: USB disconnect, device number 52 [ 2034.071325][T26461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6739'. [ 2034.092218][T26461] vlan2: entered promiscuous mode [ 2034.098212][T26461] team0: entered promiscuous mode [ 2034.110249][T26461] team_slave_0: entered promiscuous mode [ 2034.117393][T26461] team_slave_1: entered promiscuous mode [ 2034.723219][T26472] 9pnet_fd: Insufficient options for proto=fd [ 2035.820810][T26017] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2036.074529][T26017] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.087954][T26017] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2036.099118][T26017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.121463][T26017] usb 6-1: config 0 descriptor?? [ 2036.140588][T26017] pwc: Askey VC010 type 2 USB webcam detected. [ 2036.450740][T26006] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2036.546060][T26017] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2036.554188][T26017] pwc: recv_control_msg error -71 req 02 val 2700 [ 2036.575405][T26017] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2036.585494][T26017] pwc: recv_control_msg error -71 req 04 val 1000 [ 2036.594250][T26017] pwc: recv_control_msg error -71 req 04 val 1300 [ 2036.614587][T26017] pwc: recv_control_msg error -71 req 04 val 1400 [ 2036.632814][T26006] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 2036.634638][T26017] pwc: recv_control_msg error -71 req 02 val 2000 [ 2036.641566][T26006] usb 4-1: config 0 has no interface number 0 [ 2036.660827][T26006] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 2036.680807][T26017] pwc: recv_control_msg error -71 req 02 val 2100 [ 2036.690330][T26006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.693157][T26006] usb 4-1: config 0 descriptor?? [ 2036.705210][T26017] pwc: recv_control_msg error -71 req 04 val 1500 [ 2036.719578][T26017] pwc: recv_control_msg error -71 req 02 val 2500 [ 2036.730824][T26017] pwc: recv_control_msg error -71 req 02 val 2400 [ 2036.741120][T26017] pwc: recv_control_msg error -71 req 02 val 2600 [ 2036.748140][T26017] pwc: recv_control_msg error -71 req 02 val 2900 [ 2036.755142][T26017] pwc: recv_control_msg error -71 req 02 val 2800 [ 2036.756178][T26507] syz_tun: entered allmulticast mode [ 2036.768211][T26017] pwc: recv_control_msg error -71 req 04 val 1100 [ 2036.771721][T26506] syz_tun: left allmulticast mode [ 2036.775856][T26017] pwc: recv_control_msg error -71 req 04 val 1200 [ 2036.793162][T26017] pwc: Registered as video103. [ 2036.800039][T26017] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 2036.823016][T26017] usb 6-1: USB disconnect, device number 53 [ 2036.932892][T26006] usb 4-1: USB disconnect, device number 114 [ 2037.045535][T26516] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6756'. [ 2037.816703][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.991312][T26566] syz.5.6771(26566): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2041.960740][T26006] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2042.230743][T26006] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2042.242635][T26006] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2042.271100][T26006] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2042.290267][T26006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.303618][T26577] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2042.314956][T26006] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2042.603829][T26006] usb 6-1: USB disconnect, device number 54 [ 2043.380478][T26603] 9pnet_fd: Insufficient options for proto=fd [ 2045.114141][T26626] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2045.147633][T26626] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2045.183316][T26626] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2045.288804][T26613] could not allocate digest TFM handle rmd320 [ 2045.390766][T26006] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2045.571099][T26006] usb 6-1: Using ep0 maxpacket: 8 [ 2045.582954][T26006] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2045.600683][T26006] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2045.615840][T26006] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2045.629570][T26006] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2045.797157][T26006] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2045.814225][T26006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.065092][T26006] usb 6-1: GET_CAPABILITIES returned 0 [ 2046.089818][T26006] usbtmc 6-1:16.0: can't read capabilities [ 2046.285436][T26017] usb 6-1: USB disconnect, device number 55 [ 2046.896508][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6795'. [ 2046.915364][T26649] vlan2: entered promiscuous mode [ 2049.379574][T26682] netlink: 'syz.4.6804': attribute type 11 has an invalid length. [ 2049.794170][T26690] overlayfs: overlapping lowerdir path [ 2050.135033][T26698] syzkaller0: entered promiscuous mode [ 2050.140581][T26698] syzkaller0: entered allmulticast mode [ 2050.790989][T26017] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2050.997695][T26017] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2051.015457][T26017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.035429][T26017] usb 6-1: Product: syz [ 2051.043147][T26017] usb 6-1: Manufacturer: syz [ 2051.048875][T26017] usb 6-1: SerialNumber: syz [ 2051.069640][T26017] usb 6-1: config 0 descriptor?? [ 2051.243036][T26721] overlayfs: failed to resolve './file0': -2 [ 2051.646833][T26725] tipc: Enabled bearer , priority 0 [ 2051.675027][T26725] syzkaller0: entered promiscuous mode [ 2051.690804][T26725] syzkaller0: entered allmulticast mode [ 2051.726993][T26725] tipc: Resetting bearer [ 2051.738169][T26724] tipc: Resetting bearer [ 2051.793395][T26724] tipc: Disabling bearer [ 2051.975147][T26727] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6822'. [ 2052.074645][T26729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6823'. [ 2052.291052][T26006] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2052.470884][T26006] usb 4-1: Using ep0 maxpacket: 32 [ 2052.484318][T26006] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.497120][T26734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6824'. [ 2052.506489][T26006] usb 4-1: config 0 has no interfaces? [ 2052.516769][T26006] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2052.538997][T26734] vlan2: entered promiscuous mode [ 2052.546764][T26006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.570487][T26006] usb 4-1: config 0 descriptor?? [ 2052.662128][T26736] syzkaller0: entered promiscuous mode [ 2052.667824][T26736] syzkaller0: entered allmulticast mode [ 2052.816878][T26727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.828793][T26727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.839563][T26006] usb 4-1: USB disconnect, device number 115 [ 2053.365984][T26017] usb 6-1: USB disconnect, device number 56 [ 2053.524073][T26744] overlayfs: failed to resolve './file1/file0': -2 [ 2053.770838][T26006] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2053.964601][T26006] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.100873][T26006] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2054.115933][T26006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.126841][T26006] usb 4-1: config 0 descriptor?? [ 2054.146878][T26006] pwc: Askey VC010 type 2 USB webcam detected. [ 2054.785041][T26006] pwc: recv_control_msg error -71 req 02 val 2700 [ 2054.785456][T26006] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2054.785790][T26006] pwc: recv_control_msg error -71 req 04 val 1000 [ 2054.786117][T26006] pwc: recv_control_msg error -71 req 04 val 1300 [ 2054.786508][T26006] pwc: recv_control_msg error -71 req 04 val 1400 [ 2054.786881][T26006] pwc: recv_control_msg error -71 req 02 val 2000 [ 2054.787312][T26006] pwc: recv_control_msg error -71 req 02 val 2100 [ 2054.787782][T26006] pwc: recv_control_msg error -71 req 04 val 1500 [ 2054.886966][T26006] pwc: recv_control_msg error -71 req 02 val 2500 [ 2054.887479][T26006] pwc: recv_control_msg error -71 req 02 val 2400 [ 2054.887859][T26006] pwc: recv_control_msg error -71 req 02 val 2600 [ 2054.888391][T26006] pwc: recv_control_msg error -71 req 02 val 2900 [ 2054.888934][T26006] pwc: recv_control_msg error -71 req 02 val 2800 [ 2054.889568][T26006] pwc: recv_control_msg error -71 req 04 val 1100 [ 2054.933092][T26006] pwc: recv_control_msg error -71 req 04 val 1200 [ 2054.942977][T26006] pwc: Registered as video103. [ 2054.945072][T26006] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 2054.954592][T26006] usb 4-1: USB disconnect, device number 116 [ 2055.267593][T26763] syzkaller0: entered promiscuous mode [ 2055.273914][T26763] syzkaller0: entered allmulticast mode [ 2055.810778][T21474] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2056.011507][T21474] usb 4-1: Using ep0 maxpacket: 16 [ 2056.031741][T21474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2056.057791][T21474] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2056.057816][T21474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.057831][T21474] usb 4-1: Product: syz [ 2056.057842][T21474] usb 4-1: Manufacturer: syz [ 2056.057853][T21474] usb 4-1: SerialNumber: syz [ 2056.060041][T21474] usb 4-1: config 0 descriptor?? [ 2056.068556][T21474] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2056.102949][T26770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6836'. [ 2056.123834][T26770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6836'. [ 2056.159597][T21474] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2056.684837][T21474] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2057.079611][T26774] overlayfs: failed to resolve './file1/file0': -2 [ 2057.102105][T21474] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2057.126747][T21474] em28xx 4-1:0.0: board has no eeprom [ 2057.164131][T26776] 9pnet_fd: Insufficient options for proto=fd [ 2057.290809][T21474] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2057.310234][T21474] em28xx 4-1:0.0: dvb set to bulk mode. [ 2057.327495][T26006] em28xx 4-1:0.0: Binding DVB extension [ 2057.350434][T21474] usb 4-1: USB disconnect, device number 117 [ 2057.361407][T21474] em28xx 4-1:0.0: Disconnecting em28xx [ 2057.494047][T26006] em28xx 4-1:0.0: Registering input extension [ 2057.529096][T21474] em28xx 4-1:0.0: Closing input extension [ 2058.287490][T21474] em28xx 4-1:0.0: Freeing device [ 2058.601545][T26791] syzkaller0: entered promiscuous mode [ 2058.607228][T26791] syzkaller0: entered allmulticast mode [ 2059.284031][T26802] bridge1: entered promiscuous mode [ 2059.800845][T26006] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2059.823095][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6850'. [ 2059.832561][T26815] bridge_slave_1: left allmulticast mode [ 2059.838315][T26815] bridge_slave_1: left promiscuous mode [ 2059.844477][T26815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.891630][T26815] bridge_slave_0: left allmulticast mode [ 2059.899815][T26815] bridge_slave_0: left promiscuous mode [ 2059.906660][T26815] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.027762][T26006] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2060.076467][T26006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.103887][T26006] usb 6-1: Product: syz [ 2060.138751][T26006] usb 6-1: Manufacturer: syz [ 2060.145695][T26006] usb 6-1: SerialNumber: syz [ 2060.153175][T26006] usb 6-1: config 0 descriptor?? [ 2060.419977][T26802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.504481][T26802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2061.738476][T26839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6858'. [ 2061.756695][T26839] vlan2: entered promiscuous mode [ 2061.763963][T26839] team0: entered promiscuous mode [ 2062.479988][T26008] usb 6-1: USB disconnect, device number 57 [ 2064.630749][T26017] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2064.993217][T26017] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2065.009997][T26017] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2065.034966][T26017] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2065.071783][T26017] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2065.083407][T26017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.091638][T26017] usb 6-1: Product: syz [ 2065.095928][T26017] usb 6-1: Manufacturer: syz [ 2065.100676][T26017] usb 6-1: SerialNumber: syz [ 2065.123666][T26017] hub 6-1:1.0: bad descriptor, ignoring hub [ 2065.131000][T26017] hub: probe of 6-1:1.0 failed with error -5 [ 2065.353639][T26017] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2065.734442][T26884] overlayfs: statfs failed on './file0' [ 2065.741071][T26006] usb 6-1: USB disconnect, device number 58 [ 2065.767599][T26006] usblp0: removed [ 2069.411755][T26949] overlayfs: statfs failed on './file0' [ 2070.571479][T26981] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2071.194688][T26985] could not allocate digest TFM handle rmd320 [ 2071.639045][T27007] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2071.770839][T26004] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2071.973936][T26004] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2071.984093][T26004] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2071.994375][T26004] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2072.017879][T26004] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2072.027358][T26004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.038979][T26004] usb 4-1: Product: syz [ 2072.043377][T26004] usb 4-1: Manufacturer: syz [ 2072.049930][T26004] usb 4-1: SerialNumber: syz [ 2072.070432][T26004] hub 4-1:1.0: bad descriptor, ignoring hub [ 2072.076520][T26004] hub: probe of 4-1:1.0 failed with error -5 [ 2072.275102][T26004] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2072.598671][T26004] usb 4-1: USB disconnect, device number 118 [ 2072.613547][T26004] usblp0: removed [ 2072.781737][T27020] 9pnet_fd: Insufficient options for proto=fd [ 2073.285376][T27031] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2073.793820][T27036] could not allocate digest TFM handle rmd320 [ 2074.323389][T27055] overlayfs: failed to resolve './file1/file0': -2 [ 2075.690733][T26008] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2075.786898][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6942'. [ 2075.837200][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6942'. [ 2075.887950][T26008] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2075.907050][T26008] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2075.916970][T26008] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2075.933572][T26008] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2075.943278][T26008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.952148][T26008] usb 6-1: Product: syz [ 2075.956500][T26008] usb 6-1: Manufacturer: syz [ 2075.961240][T26008] usb 6-1: SerialNumber: syz [ 2075.971041][T26008] hub 6-1:1.0: bad descriptor, ignoring hub [ 2075.977754][T26008] hub: probe of 6-1:1.0 failed with error -5 [ 2076.177212][T26008] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2077.070773][T26004] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2077.262804][T26004] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.274145][T26004] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.284059][T26004] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2077.297372][T26004] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2077.306609][T26004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.322308][T26004] usb 4-1: config 0 descriptor?? [ 2077.779102][T26004] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 2077.789238][T26004] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 2077.817054][T26004] plantronics 0003:047F:FFFF.001A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2077.961492][T26008] usb 6-1: USB disconnect, device number 59 [ 2077.971391][T26008] usblp0: removed [ 2078.015909][T26004] usb 4-1: USB disconnect, device number 119 [ 2078.390778][T26006] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2078.593209][T26006] usb 6-1: Using ep0 maxpacket: 16 [ 2078.620752][T26006] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.650857][T26006] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2078.670394][T26006] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2078.690748][T26006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.701553][T26006] usb 6-1: Product: syz [ 2078.705776][T26006] usb 6-1: Manufacturer: syz [ 2078.710521][T26006] usb 6-1: SerialNumber: syz [ 2078.930263][T26006] usb 6-1: 0:2 : does not exist [ 2078.939593][T26006] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2078.959942][T26006] usb 6-1: USB disconnect, device number 60 [ 2079.001183][T26008] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2079.202895][T26008] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2079.213982][T26008] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2079.224239][T26008] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2079.235895][T26008] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2079.245132][T26008] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2079.254181][T26008] usb 4-1: Product: syz [ 2079.258403][T26008] usb 4-1: Manufacturer: syz [ 2079.263085][T26008] usb 4-1: SerialNumber: syz [ 2079.269537][T26008] usb 4-1: config 0 descriptor?? [ 2079.276301][T26008] hub 4-1:0.0: bad descriptor, ignoring hub [ 2079.282297][T26008] hub: probe of 4-1:0.0 failed with error -5 [ 2079.291324][T26008] usb 4-1: selecting invalid altsetting 0 [ 2080.602134][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2080.647809][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2080.669965][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2080.695823][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2080.703821][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2080.714120][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2081.715461][T27152] chnl_net:caif_netlink_parms(): no params data found [ 2082.052896][T27152] bridge0: port 1(bridge_slave_0) entered blocking state [ 2082.070548][T27152] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.094474][T27152] bridge_slave_0: entered allmulticast mode [ 2082.113667][T27152] bridge_slave_0: entered promiscuous mode [ 2082.132534][T27152] bridge0: port 2(bridge_slave_1) entered blocking state [ 2082.151110][T27152] bridge0: port 2(bridge_slave_1) entered disabled state [ 2082.158417][T27152] bridge_slave_1: entered allmulticast mode [ 2082.201003][T27152] bridge_slave_1: entered promiscuous mode [ 2082.271072][T26004] usb 4-1: USB disconnect, device number 120 [ 2082.398402][T27152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2082.462114][T27152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2082.605000][T27152] team0: Port device team_slave_0 added [ 2082.643609][T27152] team0: Port device team_slave_1 added [ 2082.773246][T27152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.792315][T27152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.857459][T27152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.877905][T27152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2082.890089][T27152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2082.918068][T27152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2083.014540][ T5802] Bluetooth: hci1: command tx timeout [ 2083.039695][T27152] hsr_slave_0: entered promiscuous mode [ 2083.055129][T27152] hsr_slave_1: entered promiscuous mode [ 2083.064138][T27152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2083.072500][T27152] Cannot create hsr debugfs directory [ 2083.399514][T27152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.563258][T27152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.684622][T27152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.824620][T27152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2084.089440][T27152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2084.103892][T27152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2084.128881][T27152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2084.144699][T27152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2084.324523][T27152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2084.366890][T27152] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.386386][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.393778][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.422551][T12844] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.429726][T12844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.608565][T27206] netlink: 'syz.6.6979': attribute type 20 has an invalid length. [ 2084.616836][T27206] IPv6: NLM_F_CREATE should be specified when creating new route [ 2084.901018][T21474] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2084.944796][T27152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2085.094543][T21474] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 2085.101003][ T5802] Bluetooth: hci1: command tx timeout [ 2085.102892][T21474] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2085.146981][T21474] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2085.179954][T21474] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2085.218600][T21474] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2085.234914][T21474] usb 6-1: Product: syz [ 2085.248537][T21474] usb 6-1: Manufacturer: syz [ 2085.258539][T21474] usb 6-1: SerialNumber: syz [ 2085.270127][T21474] usb 6-1: config 0 descriptor?? [ 2085.282800][T21474] hub 6-1:0.0: bad descriptor, ignoring hub [ 2085.309012][T21474] hub: probe of 6-1:0.0 failed with error -5 [ 2085.335696][T21474] usb 6-1: selecting invalid altsetting 0 [ 2085.717875][T27152] veth0_vlan: entered promiscuous mode [ 2085.749407][T27152] veth1_vlan: entered promiscuous mode [ 2085.821912][T27152] veth0_macvtap: entered promiscuous mode [ 2085.856637][T27152] veth1_macvtap: entered promiscuous mode [ 2086.027096][T27152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2086.039066][T27152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.061354][T27152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.078860][T27152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.089850][T27152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.104084][T27152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.126783][T27152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.142458][T27152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.151545][T27152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.160504][T27152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.328548][T12844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.359531][T12844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.494041][T12849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.639751][T12849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.180881][ T5802] Bluetooth: hci1: command tx timeout [ 2087.782910][T27246] binder: 27245:27246 ioctl c0306201 0 returned -14 [ 2088.211495][T26008] usb 6-1: USB disconnect, device number 61 [ 2088.401387][T27256] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6993'. [ 2088.414275][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6993'. [ 2088.785325][T27270] binder: 27267:27270 ioctl c0306201 0 returned -14 [ 2089.190765][T21474] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2089.250915][ T5802] Bluetooth: hci1: command tx timeout [ 2089.385086][T21474] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 2089.393681][T21474] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2089.403932][T21474] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2089.414576][T21474] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2089.423839][T21474] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2089.432217][T21474] usb 6-1: Product: syz [ 2089.436417][T21474] usb 6-1: Manufacturer: syz [ 2089.441176][T21474] usb 6-1: SerialNumber: syz [ 2089.447771][T21474] usb 6-1: config 0 descriptor?? [ 2089.455524][T21474] hub 6-1:0.0: bad descriptor, ignoring hub [ 2089.461619][T21474] hub: probe of 6-1:0.0 failed with error -5 [ 2089.470407][T21474] usb 6-1: selecting invalid altsetting 0 [ 2089.921365][T27280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7002'. [ 2091.157761][T27293] binder: 27292:27293 ioctl c0306201 0 returned -14 [ 2091.472187][T27303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7011'. [ 2091.800914][T26006] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2092.008681][T26006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2092.020026][T26006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2092.038511][T26006] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2092.050504][T26006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.061250][T26017] usb 6-1: USB disconnect, device number 62 [ 2092.063420][T26006] usb 4-1: config 0 descriptor?? [ 2092.522124][T26006] usbhid 4-1:0.0: can't add hid device: -71 [ 2092.529544][T26006] usbhid: probe of 4-1:0.0 failed with error -71 [ 2092.539309][T26006] usb 4-1: USB disconnect, device number 121 [ 2093.456366][T27323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7020'. [ 2094.863944][T27346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7029'. [ 2097.106444][T27373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7038'. [ 2098.111832][T26017] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2098.317027][T26017] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 2098.325678][T26017] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2098.338549][T26017] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2098.347616][T26017] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2098.357113][T26017] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2098.365410][T26017] usb 6-1: Product: syz [ 2098.369739][T26017] usb 6-1: Manufacturer: syz [ 2098.379952][T26017] usb 6-1: SerialNumber: syz [ 2098.401630][T26017] usb 6-1: config 0 descriptor?? [ 2098.411965][T26017] hub 6-1:0.0: bad descriptor, ignoring hub [ 2098.446907][T26017] hub: probe of 6-1:0.0 failed with error -5 [ 2098.464312][T26017] usb 6-1: selecting invalid altsetting 0 [ 2098.472316][T27389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7041'. [ 2098.488569][T27389] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 2099.266468][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2101.240687][T26016] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2101.401272][T26008] usb 6-1: USB disconnect, device number 63 [ 2101.447533][T26016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.522112][T26016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.606728][T26016] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2101.665578][T26016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.678017][T26016] usb 4-1: config 0 descriptor?? [ 2102.103034][T26016] usbhid 4-1:0.0: can't add hid device: -71 [ 2102.109568][T26016] usbhid: probe of 4-1:0.0 failed with error -71 [ 2102.120055][T26016] usb 4-1: USB disconnect, device number 122 [ 2105.700882][T26008] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2105.932743][T26008] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 2105.958546][T26008] usb 4-1: config 0 has no interface number 0 [ 2105.990801][T26008] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 2106.009286][T26008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.042382][T26008] usb 4-1: config 0 descriptor?? [ 2106.269190][T26008] usb 4-1: USB disconnect, device number 123 [ 2106.995980][T27500] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7080'. [ 2107.287954][T27503] syzkaller0: entered promiscuous mode [ 2107.295136][T27503] syzkaller0: entered allmulticast mode [ 2108.356621][T27515] tipc: Started in network mode [ 2108.365483][T27515] tipc: Node identity 7ed4c5889c6e, cluster identity 4711 [ 2108.414655][T27515] tipc: Enabled bearer , priority 0 [ 2108.444580][T27516] syzkaller0: entered promiscuous mode [ 2108.452105][T27516] syzkaller0: entered allmulticast mode [ 2108.532756][T27515] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2108.755382][T27508] tipc: Resetting bearer [ 2108.805928][T27508] tipc: Disabling bearer [ 2108.812042][T21474] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2109.007420][T21474] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2109.034545][T21474] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2109.064534][T21474] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2109.091150][T21474] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2109.116767][T21474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.135453][T21474] usb 6-1: Product: syz [ 2109.139746][T21474] usb 6-1: Manufacturer: syz [ 2109.144705][T21474] usb 6-1: SerialNumber: syz [ 2109.171715][T21474] hub 6-1:1.0: bad descriptor, ignoring hub [ 2109.180046][T21474] hub: probe of 6-1:1.0 failed with error -5 [ 2109.388098][T21474] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2111.191073][T26016] usb 6-1: USB disconnect, device number 64 [ 2111.201483][T26016] usblp0: removed [ 2111.227765][T27540] syzkaller0: entered promiscuous mode [ 2111.233764][T27540] syzkaller0: entered allmulticast mode [ 2111.799174][T26016] IPVS: starting estimator thread 0... [ 2111.904133][T27549] IPVS: using max 26 ests per chain, 62400 per kthread [ 2112.093153][T27555] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7096'. [ 2114.263758][T27576] syzkaller0: entered promiscuous mode [ 2114.269300][T27576] syzkaller0: entered allmulticast mode [ 2114.330890][T26004] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2114.533866][T26004] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2114.549049][T26004] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2114.558972][T26004] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2114.580107][T26004] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2114.590919][T26004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.599044][T26004] usb 4-1: Product: syz [ 2114.603431][T26004] usb 4-1: Manufacturer: syz [ 2114.608077][T26004] usb 4-1: SerialNumber: syz [ 2114.623486][T26004] hub 4-1:1.0: bad descriptor, ignoring hub [ 2114.633495][T26004] hub: probe of 4-1:1.0 failed with error -5 [ 2114.829446][T26004] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2116.690974][T27580] Bluetooth: hci0: command 0x0406 tx timeout [ 2117.130944][T26004] usb 4-1: reset high-speed USB device number 124 using dummy_hcd [ 2117.391050][T26004] usb 4-1: device firmware changed [ 2117.398467][T26004] usb 4-1: USB disconnect, device number 124 [ 2117.407038][T26004] usblp0: removed [ 2117.797143][T26004] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2117.957802][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7105'. [ 2118.022629][T26004] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 2118.040820][T26004] usb 4-1: config 0 has no interface number 0 [ 2118.051226][ T42] tipc: Left network mode [ 2118.068599][T26004] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 2118.109881][T26004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.128831][T26004] usb 4-1: config 0 descriptor?? [ 2118.356913][T20843] usb 4-1: USB disconnect, device number 125 [ 2118.620772][T26004] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2118.800824][T26004] usb 6-1: Using ep0 maxpacket: 16 [ 2118.809193][T26004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2118.822421][T26004] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2118.835600][T26004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.844062][T26004] usb 6-1: Product: syz [ 2118.848278][T26004] usb 6-1: Manufacturer: syz [ 2118.853204][T26004] usb 6-1: SerialNumber: syz [ 2118.860490][T26004] usb 6-1: config 0 descriptor?? [ 2118.869772][T26004] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2118.900905][T26004] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2119.202458][ T42] hsr_slave_0: left promiscuous mode [ 2119.221067][ T42] hsr_slave_1: left promiscuous mode [ 2119.302945][ T42] veth1_macvtap: left promiscuous mode [ 2119.308604][ T42] veth0_macvtap: left promiscuous mode [ 2119.323891][ T42] veth1_vlan: left promiscuous mode [ 2119.524741][T26004] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2119.948650][T26004] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2119.967167][T26004] em28xx 6-1:0.0: board has no eeprom [ 2120.103060][T26004] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2120.119202][T26004] em28xx 6-1:0.0: dvb set to bulk mode. [ 2120.172605][T21474] em28xx 6-1:0.0: Binding DVB extension [ 2120.184463][T26004] usb 6-1: USB disconnect, device number 65 [ 2120.212865][T26004] em28xx 6-1:0.0: Disconnecting em28xx [ 2120.296963][T21474] em28xx 6-1:0.0: Registering input extension [ 2120.314811][T26004] em28xx 6-1:0.0: Closing input extension [ 2120.338978][T26004] em28xx 6-1:0.0: Freeing device [ 2122.362196][ T42] bond0 (unregistering): Released all slaves [ 2123.153996][ T42] IPVS: stop unused estimator thread 0... [ 2123.320230][T27648] could not allocate digest TFM handle rmd320 [ 2124.128293][T27677] syzkaller0: entered promiscuous mode [ 2124.157722][T27677] syzkaller0: entered allmulticast mode [ 2128.424697][T27713] could not allocate digest TFM handle rmd320 [ 2128.620716][T26012] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2128.810945][T26012] usb 4-1: Using ep0 maxpacket: 16 [ 2128.823289][T26012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2128.844293][T26012] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2128.853657][T26012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.870642][T26012] usb 4-1: Product: syz [ 2128.880920][T26012] usb 4-1: Manufacturer: syz [ 2128.890815][T26012] usb 4-1: SerialNumber: syz [ 2128.903129][T26012] usb 4-1: config 0 descriptor?? [ 2128.922406][T26012] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2128.940702][T26012] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2129.264286][T27740] fuse: Bad value for 'fd' [ 2129.539392][T26012] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2129.957607][T26012] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2129.979245][T26012] em28xx 4-1:0.0: board has no eeprom [ 2130.380848][T26012] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2130.411176][T26012] em28xx 4-1:0.0: dvb set to bulk mode. [ 2130.417010][T26016] em28xx 4-1:0.0: Binding DVB extension [ 2131.269083][T27770] could not allocate digest TFM handle rmd320 [ 2131.337190][T27722] em28xx 4-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 2131.356402][T26012] usb 4-1: USB disconnect, device number 126 [ 2131.368501][T26012] em28xx 4-1:0.0: Disconnecting em28xx [ 2131.442615][T26016] em28xx 4-1:0.0: Registering input extension [ 2131.457603][T26012] em28xx 4-1:0.0: Closing input extension [ 2131.489275][T26012] em28xx 4-1:0.0: Freeing device [ 2132.505334][T27798] usb usb8: usbfs: process 27798 (syz.4.7169) did not claim interface 0 before use [ 2133.086334][T27806] could not allocate digest TFM handle rmd320 [ 2133.664180][T27824] bridge0: port 1(macvtap0) entered blocking state [ 2133.680806][T27824] bridge0: port 1(macvtap0) entered disabled state [ 2133.697486][T27824] macvtap0: entered allmulticast mode [ 2133.706007][T27824] veth0_macvtap: entered allmulticast mode [ 2133.717477][T27824] macvtap0: left allmulticast mode [ 2133.724212][T27824] veth0_macvtap: left allmulticast mode [ 2133.855755][T27828] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7179'. [ 2134.041036][T21474] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 2134.098052][T27836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2134.139099][ T27] audit: type=1804 audit(1759299802.913:7456): pid=27835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.7183" name="/newroot/394/file1" dev="fuse" ino=1 res=1 errno=0 [ 2134.252292][T21474] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2134.264380][T21474] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2134.280792][T21474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.316243][T27826] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2134.325856][T27826] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2134.346240][T21474] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2135.092008][T26016] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2135.782801][T26016] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2135.816498][T26016] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2135.833269][T26016] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2135.851422][T26016] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2135.870912][T26016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.886930][T26016] usb 4-1: Product: syz [ 2135.891461][T26016] usb 4-1: Manufacturer: syz [ 2135.896245][T26016] usb 4-1: SerialNumber: syz [ 2135.910693][T26016] hub 4-1:1.0: bad descriptor, ignoring hub [ 2135.921265][T26016] hub: probe of 4-1:1.0 failed with error -5 [ 2136.078419][T27859] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7189'. [ 2136.118726][T26016] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 127 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2136.992384][T26016] usb 6-1: USB disconnect, device number 66 [ 2137.841134][T26004] usb 4-1: USB disconnect, device number 127 [ 2137.869849][T26004] usblp0: removed [ 2139.033366][T27895] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7198'. [ 2139.500843][T26016] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2139.681059][T26016] usb 4-1: device descriptor read/64, error -71 [ 2139.976399][T26016] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2140.154869][T26016] usb 4-1: device descriptor read/64, error -71 [ 2140.219973][T27915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7206'. [ 2140.237379][T27915] vlan2: entered promiscuous mode [ 2140.242928][T27915] macvtap0: entered promiscuous mode [ 2140.300988][T26016] usb usb4-port1: attempt power cycle [ 2140.556151][T27923] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7209'. [ 2140.710812][T26016] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2140.741398][T26016] usb 4-1: device descriptor read/8, error -71 [ 2141.030826][T26016] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2141.070962][T26016] usb 4-1: device descriptor read/8, error -71 [ 2141.190903][T26016] usb usb4-port1: unable to enumerate USB device [ 2142.676665][T26012] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2142.681059][T27934] syz.4.7211: vmalloc error: size 85106688, failed to allocated page array size 166224, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2142.730730][T27934] CPU: 1 PID: 27934 Comm: syz.4.7211 Not tainted syzkaller #0 [ 2142.738247][T27934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2142.748351][T27934] Call Trace: [ 2142.751647][T27934] [ 2142.754638][T27934] dump_stack_lvl+0x16c/0x230 [ 2142.759399][T27934] ? show_regs_print_info+0x20/0x20 [ 2142.764630][T27934] ? load_image+0x3b0/0x3b0 [ 2142.769182][T27934] ? __rcu_read_unlock+0x7c/0xd0 [ 2142.774154][T27934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2142.780623][T27934] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2142.787170][T27934] warn_alloc+0x210/0x300 [ 2142.791542][T27934] ? zone_watermark_ok_safe+0x230/0x230 [ 2142.797134][T27934] ? _raw_spin_unlock+0x28/0x40 [ 2142.802009][T27934] ? __kmem_cache_free+0xba/0x1f0 [ 2142.807247][T27934] __vmalloc_node_range+0x662/0x1320 [ 2142.812603][T27934] ? free_vm_area+0x50/0x50 [ 2142.817157][T27934] ? kvmalloc_node+0x70/0x180 [ 2142.821891][T27934] ? kvmalloc_node+0x70/0x180 [ 2142.826597][T27934] ? trace_kmalloc+0x1f/0xa0 [ 2142.831220][T27934] kvmalloc_node+0x13f/0x180 [ 2142.835830][T27934] ? drm_property_create_blob+0x65/0x300 [ 2142.841483][T27934] ? intel_cx0pll_calc_state+0x93e/0xea0 [ 2142.847221][T27934] drm_property_create_blob+0x65/0x300 [ 2142.852708][T27934] drm_mode_createblob_ioctl+0xc1/0x3c0 [ 2142.858278][T27934] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 2142.863867][T27934] drm_ioctl_kernel+0x35f/0x4c0 [ 2142.868766][T27934] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 2142.874333][T27934] ? drm_copy_field+0x170/0x170 [ 2142.879237][T27934] ? __might_fault+0xaa/0x120 [ 2142.883930][T27934] ? __might_fault+0xc6/0x120 [ 2142.888630][T27934] ? __might_fault+0xaa/0x120 [ 2142.893338][T27934] drm_ioctl+0x661/0xac0 [ 2142.897720][T27934] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 2142.903391][T27934] ? drm_ioctl_kernel+0x4c0/0x4c0 [ 2142.908470][T27934] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2142.913446][T27934] ? security_file_ioctl+0x80/0xa0 [ 2142.918588][T27934] ? drm_ioctl_kernel+0x4c0/0x4c0 [ 2142.923649][T27934] __se_sys_ioctl+0xfd/0x170 [ 2142.928284][T27934] do_syscall_64+0x55/0xb0 [ 2142.932730][T27934] ? clear_bhb_loop+0x40/0x90 [ 2142.937428][T27934] ? clear_bhb_loop+0x40/0x90 [ 2142.942146][T27934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2142.948092][T27934] RIP: 0033:0x7f401d98eec9 [ 2142.952536][T27934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2142.972250][T27934] RSP: 002b:00007f401b7f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2142.980696][T27934] RAX: ffffffffffffffda RBX: 00007f401dbe6270 RCX: 00007f401d98eec9 [ 2142.988737][T27934] RDX: 00002000000000c0 RSI: 00000000c01064bd RDI: 0000000000000006 [ 2142.996824][T27934] RBP: 00007f401da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2143.004818][T27934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2143.012908][T27934] R13: 00007f401dbe6308 R14: 00007f401dbe6270 R15: 00007fffe5938518 [ 2143.020925][T27934] [ 2143.038279][T27934] Mem-Info: [ 2143.042039][T27934] active_anon:11420 inactive_anon:0 isolated_anon:0 [ 2143.042039][T27934] active_file:12630 inactive_file:41069 isolated_file:0 [ 2143.042039][T27934] unevictable:0 dirty:197 writeback:0 [ 2143.042039][T27934] slab_reclaimable:10936 slab_unreclaimable:93052 [ 2143.042039][T27934] mapped:29879 shmem:6286 pagetables:607 [ 2143.042039][T27934] sec_pagetables:0 bounce:0 [ 2143.042039][T27934] kernel_misc_reclaimable:0 [ 2143.042039][T27934] free:1332616 free_pcp:10437 free_cma:0 [ 2143.156047][T27934] Node 0 active_anon:44288kB inactive_anon:0kB active_file:50520kB inactive_file:164072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121516kB dirty:788kB writeback:0kB shmem:23608kB shmem_thp:10240kB shmem_pmdmapped:10240kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11712kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no [ 2143.670266][T27934] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2143.686593][T27959] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7220'. [ 2143.711339][T27934] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2143.787721][T27934] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 2143.797126][T27934] Node 0 DMA32 free:1417004kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:32084kB inactive_anon:0kB active_file:50520kB inactive_file:162760kB unevictable:0kB writepending:792kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:38524kB local_pcp:20908kB free_cma:0kB [ 2143.830910][T27934] lowmem_reserve[]: 0 0 1 1 1 [ 2143.835725][T27934] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2143.886287][T27934] lowmem_reserve[]: 0 0 0 0 0 [ 2143.891846][T27934] Node 1 Normal free:3900080kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14128kB local_pcp:3656kB free_cma:0kB [ 2144.014712][T27934] lowmem_reserve[]: 0 0 0 0 0 [ 2144.020329][T27934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2144.070104][T27934] Node 0 DMA32: 2495*4kB (UME) 1065*8kB (UME) 1003*16kB (UME) 933*32kB (UME) 399*64kB (UME) 87*128kB (UME) 27*256kB (UME) 35*512kB (UM) 20*1024kB (UM) 6*2048kB (UME) 312*4096kB (UM) = 1436628kB [ 2144.154220][T27934] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2144.187004][T27934] Node 1 Normal: 6*4kB (UME) 7*8kB (ME) 14*16kB (ME) 96*32kB (UME) 20*64kB (UME) 7*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3900080kB [ 2144.237868][T27934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2144.248543][T27934] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 2144.319688][T27934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2144.339473][T27934] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2144.349169][T27934] 57114 total pagecache pages [ 2144.358690][T27934] 0 pages in swap cache [ 2144.382592][T27934] Free swap = 124276kB [ 2144.387196][T27934] Total swap = 124996kB [ 2144.394569][T27934] 2097051 pages RAM [ 2144.398603][T27934] 0 pages HighMem/MovableOnly [ 2144.405868][T27934] 416137 pages reserved [ 2144.504428][T27934] 0 pages cma reserved [ 2144.645983][T27981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2144.771371][T26017] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2144.798947][T27988] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7230'. [ 2144.930905][T26017] usb 4-1: device descriptor read/64, error -71 [ 2145.230785][T26017] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2145.391049][T26004] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2145.412394][T26017] usb 4-1: device descriptor read/64, error -71 [ 2145.534103][T26017] usb usb4-port1: attempt power cycle [ 2145.603948][T26004] usb 6-1: Using ep0 maxpacket: 32 [ 2145.622794][T26004] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2145.655828][T26004] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2145.685724][T26004] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2145.710658][T26004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.737515][T26004] usb 6-1: config 0 descriptor?? [ 2145.940787][T26017] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2145.994209][T26017] usb 4-1: device descriptor read/8, error -71 [ 2146.270945][T26017] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2146.322445][T26017] usb 4-1: device descriptor read/8, error -71 [ 2146.445809][T26017] usb usb4-port1: unable to enumerate USB device [ 2146.511495][T28022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7241'. [ 2147.162791][T28026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7242'. [ 2148.178757][T28048] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7251'. [ 2148.243428][T26017] usb 6-1: USB disconnect, device number 67 [ 2150.321129][T26004] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2150.430869][T26008] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2150.534229][T26004] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.544843][T26004] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2150.554043][T26004] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2150.563520][T26004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.574111][T26004] usb 4-1: config 0 descriptor?? [ 2150.614139][T26008] usb 6-1: Using ep0 maxpacket: 16 [ 2150.634143][T26008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2150.655302][T26008] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2150.670267][T26008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.680112][T26008] usb 6-1: Product: syz [ 2150.688993][T26008] usb 6-1: Manufacturer: syz [ 2150.696327][T26008] usb 6-1: SerialNumber: syz [ 2150.706698][T26008] usb 6-1: config 0 descriptor?? [ 2150.722390][T26008] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2150.737598][T26008] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2151.341943][T26008] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2151.765392][T26008] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2151.775378][T26008] em28xx 6-1:0.0: board has no eeprom [ 2152.852006][T28069] em28xx 6-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 2152.920765][T26008] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2152.929048][T26008] em28xx 6-1:0.0: dvb set to bulk mode. [ 2152.934884][T26017] em28xx 6-1:0.0: Binding DVB extension [ 2152.945730][T26008] usb 6-1: USB disconnect, device number 68 [ 2152.952859][T26008] em28xx 6-1:0.0: Disconnecting em28xx [ 2152.999454][T26017] em28xx 6-1:0.0: Registering input extension [ 2153.008496][T26008] em28xx 6-1:0.0: Closing input extension [ 2153.028754][T26008] em28xx 6-1:0.0: Freeing device [ 2153.068723][T26017] usb 4-1: USB disconnect, device number 11 [ 2153.890814][T26017] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2154.130746][T26017] usb 6-1: Using ep0 maxpacket: 16 [ 2154.194255][T26017] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2154.210853][T26017] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2154.233510][T26017] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2154.243064][T26017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.260071][T26017] usb 6-1: Product: syz [ 2154.267588][T26017] usb 6-1: Manufacturer: syz [ 2154.278900][T26017] usb 6-1: SerialNumber: syz [ 2154.498490][T26017] usb 6-1: 0:2 : does not exist [ 2154.527028][T26017] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2154.580881][T26017] usb 6-1: USB disconnect, device number 69 [ 2154.863110][T28118] overlayfs: missing 'workdir' [ 2155.390673][T20843] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2155.580788][T20843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.591176][T20843] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2155.600207][T20843] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2155.635343][T20843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.665787][T20843] usb 4-1: config 0 descriptor?? [ 2155.774499][T28133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2157.517238][T28149] overlayfs: missing 'workdir' [ 2158.111593][T26008] usb 4-1: USB disconnect, device number 12 [ 2159.474737][T28206] vivid-007: ================= START STATUS ================= [ 2159.486746][T28206] vivid-007: FM Deviation: 75000 [ 2159.504600][T28206] vivid-007: ================== END STATUS ================== [ 2160.696427][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.141162][T28230] syzkaller0: entered promiscuous mode [ 2161.146783][T28230] syzkaller0: entered allmulticast mode [ 2161.816002][T28252] netlink: 'syz.5.7315': attribute type 17 has an invalid length. [ 2164.748654][T28303] syzkaller0: entered promiscuous mode [ 2164.754281][T28303] syzkaller0: entered allmulticast mode [ 2164.990708][T26016] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2165.198420][T26016] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2165.217402][T26016] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2165.240917][T26016] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2165.265191][T26016] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2165.286567][T26016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.295625][T26016] usb 4-1: Product: syz [ 2165.300799][T26016] usb 4-1: Manufacturer: syz [ 2165.305775][T26016] usb 4-1: SerialNumber: syz [ 2165.320248][T26016] hub 4-1:1.0: bad descriptor, ignoring hub [ 2165.326614][T26016] hub: probe of 4-1:1.0 failed with error -5 [ 2165.525359][T26016] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2167.121098][T26016] usb 4-1: USB disconnect, device number 13 [ 2167.129418][T26016] usblp0: removed [ 2167.630948][T26016] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2167.654093][T28332] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 2167.661908][T28332] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 2167.812916][T26016] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 2167.822515][T26016] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2167.833037][T26016] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2167.845038][T26016] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2167.860873][T26016] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2167.869158][T26016] usb 6-1: Product: syz [ 2167.883839][T26016] usb 6-1: Manufacturer: syz [ 2167.888540][T26016] usb 6-1: SerialNumber: syz [ 2167.914001][T26016] usb 6-1: config 0 descriptor?? [ 2167.928770][T26016] hub 6-1:0.0: bad descriptor, ignoring hub [ 2167.937315][T26016] hub: probe of 6-1:0.0 failed with error -5 [ 2167.949526][T26016] usb 6-1: selecting invalid altsetting 0 [ 2168.307545][T26004] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2168.510729][T26004] usb 4-1: Using ep0 maxpacket: 32 [ 2168.519533][T26004] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2168.539123][T26004] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2168.600672][T26004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.623612][T26004] usb 4-1: config 0 descriptor?? [ 2168.838048][T28367] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 2170.911218][T26004] usb 6-1: USB disconnect, device number 70 [ 2171.042273][T21474] usb 4-1: USB disconnect, device number 14 [ 2171.284404][T28395] netlink: 'syz.5.7365': attribute type 1 has an invalid length. [ 2171.358577][T28395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2171.393675][T28399] vlan3: entered promiscuous mode [ 2171.398949][T28399] bond1: entered promiscuous mode [ 2171.405186][T28399] vlan3: entered allmulticast mode [ 2171.412971][T28399] bond1: entered allmulticast mode [ 2171.550135][T28395] bond1: (slave gretap1): making interface the new active one [ 2171.559973][T28395] gretap1: entered promiscuous mode [ 2171.566702][T28395] gretap1: entered allmulticast mode [ 2171.583295][T28395] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2172.106030][T28408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7371'. [ 2172.370707][T26016] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2172.450858][T26008] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2172.552520][T26016] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2172.560848][T26016] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2172.570970][T26016] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2172.580180][T26016] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2172.589347][T26016] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2172.597604][T26016] usb 4-1: Product: syz [ 2172.601883][T26016] usb 4-1: Manufacturer: syz [ 2172.606761][T26016] usb 4-1: SerialNumber: syz [ 2172.613829][T26016] usb 4-1: config 0 descriptor?? [ 2172.620469][T26016] hub 4-1:0.0: bad descriptor, ignoring hub [ 2172.626458][T26016] hub: probe of 4-1:0.0 failed with error -5 [ 2172.634868][T26016] usb 4-1: selecting invalid altsetting 0 [ 2172.646863][T26008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2172.658774][T26008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2172.671698][T26008] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2172.684769][T26008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.694589][T26008] usb 6-1: config 0 descriptor?? [ 2173.476516][T28417] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 2175.153114][T26008] usbhid 6-1:0.0: can't add hid device: -71 [ 2175.166208][T26008] usbhid: probe of 6-1:0.0 failed with error -71 [ 2175.187431][T26008] usb 6-1: USB disconnect, device number 71 [ 2175.231117][T26012] usb 4-1: USB disconnect, device number 15 [ 2175.431104][T28431] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2175.840728][T26012] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2176.088746][T26012] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2176.100721][T26012] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2176.115790][T26012] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2176.125845][T26012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.141961][T28439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2176.160233][T26012] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2176.367814][T28439] syz_tun: entered allmulticast mode [ 2176.957333][T28460] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2177.862231][T28469] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7394'. [ 2178.190750][T26008] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2178.328932][T26012] usb 6-1: USB disconnect, device number 72 [ 2178.373263][T26008] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2178.389724][T26008] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2178.408155][T26008] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2178.417813][T26008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.436162][T28471] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2178.453286][T26008] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 2178.707613][T26012] usb 4-1: USB disconnect, device number 16 [ 2179.770751][T21474] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2179.994060][T21474] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2180.014755][T21474] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2180.042652][T21474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.077609][T21474] usb 6-1: config 0 descriptor?? [ 2180.120104][T21474] pwc: Askey VC010 type 2 USB webcam detected. [ 2180.532195][T21474] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2180.546905][T21474] pwc: recv_control_msg error -32 req 02 val 2700 [ 2180.560810][T21474] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2180.572472][T21474] pwc: recv_control_msg error -71 req 04 val 1000 [ 2180.586730][T21474] pwc: recv_control_msg error -71 req 04 val 1300 [ 2180.598402][T21474] pwc: recv_control_msg error -71 req 04 val 1400 [ 2180.608038][T21474] pwc: recv_control_msg error -71 req 02 val 2000 [ 2180.615546][T21474] pwc: recv_control_msg error -71 req 02 val 2100 [ 2180.623768][T21474] pwc: recv_control_msg error -71 req 04 val 1500 [ 2180.630833][T21474] pwc: recv_control_msg error -71 req 02 val 2500 [ 2180.639129][T21474] pwc: recv_control_msg error -71 req 02 val 2400 [ 2180.646331][T21474] pwc: recv_control_msg error -71 req 02 val 2600 [ 2180.653621][T21474] pwc: recv_control_msg error -71 req 02 val 2900 [ 2180.660750][T21474] pwc: recv_control_msg error -71 req 02 val 2800 [ 2180.670501][T21474] pwc: recv_control_msg error -71 req 04 val 1100 [ 2180.677597][T21474] pwc: recv_control_msg error -71 req 04 val 1200 [ 2180.692953][T21474] pwc: Registered as video103. [ 2180.712435][T21474] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input86 [ 2180.729731][T21474] usb 6-1: USB disconnect, device number 73 [ 2181.000843][T26012] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2181.190674][T26012] usb 4-1: Using ep0 maxpacket: 32 [ 2181.197873][T26012] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2181.210707][T26012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.224717][T26012] usb 4-1: config 0 descriptor?? [ 2181.243217][T26012] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2181.843085][T26012] gspca_sunplus: reg_r err -32 [ 2181.848076][T26012] sunplus: probe of 4-1:0.0 failed with error -32 [ 2183.780704][T26012] usb 4-1: USB disconnect, device number 17 [ 2184.755553][T28584] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7442'. [ 2185.993302][T28600] netlink: 'syz.3.7448': attribute type 1 has an invalid length. [ 2186.080031][T28600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2186.122258][T28602] vlan3: entered promiscuous mode [ 2186.132204][T28602] bond1: entered promiscuous mode [ 2186.141152][T28602] vlan3: entered allmulticast mode [ 2186.151057][T28602] bond1: entered allmulticast mode [ 2186.405813][T28609] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.7451'. [ 2186.784383][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7452'. [ 2188.008769][T28638] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.7461'. [ 2188.430425][T28646] netlink: 'syz.4.7463': attribute type 1 has an invalid length. [ 2188.645581][T28646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2188.687554][T28650] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 2188.744967][T28651] vlan0: entered promiscuous mode [ 2188.750123][T28651] bond1: entered promiscuous mode [ 2188.755625][T28651] vlan0: entered allmulticast mode [ 2188.760834][T28651] bond1: entered allmulticast mode [ 2188.880740][T26016] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2189.155612][T26016] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2189.199055][T26016] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2189.244497][T26016] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2189.342081][T26016] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2189.360700][T26016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.376406][T26016] usb 4-1: Product: syz [ 2189.381154][T26016] usb 4-1: Manufacturer: syz [ 2189.385833][T26016] usb 4-1: SerialNumber: syz [ 2189.419353][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7468'. [ 2189.420160][T26016] hub 4-1:1.0: bad descriptor, ignoring hub [ 2189.478847][T26016] hub: probe of 4-1:1.0 failed with error -5 [ 2189.652192][T26016] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2189.838580][T28665] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.7470'. [ 2190.357082][T28683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7478'. [ 2190.696405][T28693] netlink: 'syz.5.7482': attribute type 1 has an invalid length. [ 2190.857361][T28693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2190.907679][T28695] bond2: (slave ip6gretap1): making interface the new active one [ 2190.924371][T28695] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2190.949955][T28699] sctp: [Deprecated]: syz.4.7483 (pid 28699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2190.949955][T28699] Use struct sctp_sack_info instead [ 2191.591316][T26012] usb 4-1: USB disconnect, device number 18 [ 2191.600214][T26012] usblp0: removed [ 2191.818323][T28714] netlink: 'syz.4.7488': attribute type 1 has an invalid length. [ 2191.869040][T28714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2191.986537][T28717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7489'. [ 2193.644520][T27580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2193.656385][T27580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2193.700858][T27580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2193.740845][T27580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2193.758781][T27580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2193.768023][T27580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2194.484039][T12844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.634933][T12844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.657064][T28734] chnl_net:caif_netlink_parms(): no params data found [ 2194.680864][T28744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2194.838269][T12844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.969517][T12844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2195.022018][T26012] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2195.129706][T28734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.137464][T28734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.146142][T28734] bridge_slave_0: entered allmulticast mode [ 2195.154500][T28734] bridge_slave_0: entered promiscuous mode [ 2195.163444][T28734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.172349][T28734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.181187][T28734] bridge_slave_1: entered allmulticast mode [ 2195.188857][T28734] bridge_slave_1: entered promiscuous mode [ 2195.239611][T26012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2195.250040][T26012] usb 6-1: config 0 has no interfaces? [ 2195.261777][T26012] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2195.292733][T26012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.318236][T28734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2195.342073][T26012] usb 6-1: config 0 descriptor?? [ 2195.353459][T28734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2195.434203][T28734] team0: Port device team_slave_0 added [ 2195.537274][T28734] team0: Port device team_slave_1 added [ 2195.619747][T28734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2195.626948][T28734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2195.740905][T28734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2195.758257][T12844] tipc: Left network mode [ 2195.774149][T28734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2195.798781][T28734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2195.832306][T27580] Bluetooth: hci2: command tx timeout [ 2195.850616][T28734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2196.152699][T28734] hsr_slave_0: entered promiscuous mode [ 2196.162466][T28734] hsr_slave_1: entered promiscuous mode [ 2196.171123][T28734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2196.190314][T28734] Cannot create hsr debugfs directory [ 2197.021449][T12844] IPVS: stopping master sync thread 28417 ... [ 2197.302849][T12844] hsr_slave_0: left promiscuous mode [ 2197.322671][T12844] hsr_slave_1: left promiscuous mode [ 2197.352311][T12844] veth1_macvtap: left promiscuous mode [ 2197.357911][T12844] veth0_macvtap: left promiscuous mode [ 2197.363849][T12844] veth1_vlan: left promiscuous mode [ 2197.910760][T27580] Bluetooth: hci2: command tx timeout [ 2197.965922][T12844] bond1 (unregistering): Released all slaves [ 2198.494917][T20843] usb 6-1: USB disconnect, device number 74 [ 2198.816708][T28779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2199.980943][T27580] Bluetooth: hci2: command tx timeout [ 2200.567735][T12844] bond0 (unregistering): Released all slaves [ 2200.892048][T28734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2200.904117][T28734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2200.950113][T28734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2200.984535][T28734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2201.266477][T28734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2201.304692][T12844] IPVS: stop unused estimator thread 0... [ 2201.321391][T28734] 8021q: adding VLAN 0 to HW filter on device team0 [ 2201.356378][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.363605][T10094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2201.412289][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.419501][T10094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2201.921585][T28734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2202.014784][T28812] input: syz1 as /devices/virtual/input/input88 [ 2202.060935][T27580] Bluetooth: hci2: command tx timeout [ 2202.065367][T28734] veth0_vlan: entered promiscuous mode [ 2202.163547][T28734] veth1_vlan: entered promiscuous mode [ 2202.283522][T28734] veth0_macvtap: entered promiscuous mode [ 2202.308441][T28734] veth1_macvtap: entered promiscuous mode [ 2202.411577][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2202.432846][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2202.442885][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2202.454408][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2202.467424][T28734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2202.492298][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2202.507440][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2202.518970][T28734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2202.530271][T28734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2202.547563][T28734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2202.567658][T28734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.578214][T28734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.593361][T28734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.602485][T28734] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2202.745445][T10094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2202.754715][T10094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2202.805358][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2202.819149][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2203.253501][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7516'. [ 2203.730889][T27580] Bluetooth: hci1: command 0x0406 tx timeout [ 2205.720687][T21474] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2205.752712][T28872] syzkaller0: entered promiscuous mode [ 2205.758334][T28872] syzkaller0: entered allmulticast mode [ 2205.910647][T21474] usb 6-1: Using ep0 maxpacket: 16 [ 2205.920966][T21474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2205.934659][T21474] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2205.944288][T21474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.956420][T21474] usb 6-1: Product: syz [ 2205.966344][T21474] usb 6-1: Manufacturer: syz [ 2205.977109][T21474] usb 6-1: SerialNumber: syz [ 2205.991430][T21474] usb 6-1: config 0 descriptor?? [ 2206.003315][T21474] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2206.021038][T21474] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2206.611755][T21474] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2207.091230][T21474] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2207.099587][T21474] em28xx 6-1:0.0: board has no eeprom [ 2207.380621][T21474] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2207.388627][T21474] em28xx 6-1:0.0: dvb set to bulk mode. [ 2207.395834][T26004] em28xx 6-1:0.0: Binding DVB extension [ 2207.426806][T21474] usb 6-1: USB disconnect, device number 75 [ 2207.437116][T21474] em28xx 6-1:0.0: Disconnecting em28xx [ 2207.483475][T26004] em28xx 6-1:0.0: Registering input extension [ 2207.499425][T21474] em28xx 6-1:0.0: Closing input extension [ 2207.529673][T21474] em28xx 6-1:0.0: Freeing device [ 2209.045130][T28905] syzkaller0: entered promiscuous mode [ 2209.051565][T28905] syzkaller0: entered allmulticast mode [ 2209.235928][T28912] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7546'. [ 2209.452006][T28921] netlink: 'syz.6.7547': attribute type 1 has an invalid length. [ 2209.558435][T28921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2209.607900][T28923] vlan2: entered promiscuous mode [ 2209.613362][T28923] bond1: entered promiscuous mode [ 2209.618913][T28923] vlan2: entered allmulticast mode [ 2209.624273][T28923] bond1: entered allmulticast mode [ 2211.536001][T28932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7549'. [ 2211.933935][T28951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7555'. [ 2212.204946][T28957] Driver unsupported XDP return value 0 on prog (id 1963) dev N/A, expect packet loss! [ 2213.413512][T28982] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2213.587393][T28986] netlink: 'syz.5.7569': attribute type 1 has an invalid length. [ 2213.636084][T28986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2213.686861][T28986] vlan4: entered promiscuous mode [ 2213.692144][T28986] bond3: entered promiscuous mode [ 2213.697570][T28986] vlan4: entered allmulticast mode [ 2213.703755][T28986] bond3: entered allmulticast mode [ 2214.681916][T28995] binder: 28990:28995 ioctl c0306201 200000000100 returned -11 [ 2215.680703][T21474] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2215.818242][T29023] netlink: 'syz.6.7576': attribute type 33 has an invalid length. [ 2215.846198][T29023] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7576'. [ 2215.867345][T29037] wg2: entered promiscuous mode [ 2215.883140][T21474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2215.906480][T29037] wg2: entered allmulticast mode [ 2215.915504][T21474] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2215.935253][T21474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.971849][T21474] usb 6-1: config 0 descriptor?? [ 2216.001262][T21474] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2219.100194][T26016] usb 6-1: USB disconnect, device number 76 [ 2219.705805][T29088] syzkaller0: create flow: hash 132014647 index 1 [ 2219.904132][ T42] syzkaller0: tun_net_xmit 76 [ 2219.914064][ T42] syzkaller0: tun_net_xmit 48 [ 2219.930985][T26015] syzkaller0: tun_net_xmit 76 [ 2220.771286][T26016] syzkaller0: tun_net_xmit 76 [ 2220.829915][T29083] syzkaller0: delete flow: hash 132014647 index 1 [ 2221.696606][T21474] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2221.932525][T21474] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.946596][T21474] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2221.957366][T21474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.970913][T21474] usb 4-1: config 0 descriptor?? [ 2221.978999][T21474] pwc: Askey VC010 type 2 USB webcam detected. [ 2222.139997][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.400389][T21474] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2222.618805][T21474] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2222.639185][T21474] pwc: recv_control_msg error -71 req 04 val 1000 [ 2222.660024][T21474] pwc: recv_control_msg error -71 req 04 val 1300 [ 2222.667936][T21474] pwc: recv_control_msg error -71 req 04 val 1400 [ 2222.688717][T21474] pwc: recv_control_msg error -71 req 02 val 2000 [ 2222.695808][T21474] pwc: recv_control_msg error -71 req 02 val 2100 [ 2222.702856][T21474] pwc: recv_control_msg error -71 req 04 val 1500 [ 2222.709751][T21474] pwc: recv_control_msg error -71 req 02 val 2500 [ 2222.717285][T21474] pwc: recv_control_msg error -71 req 02 val 2400 [ 2222.729534][T21474] pwc: recv_control_msg error -71 req 02 val 2600 [ 2222.750600][T21474] pwc: recv_control_msg error -71 req 02 val 2900 [ 2222.757507][T21474] pwc: recv_control_msg error -71 req 02 val 2800 [ 2222.764516][T21474] pwc: recv_control_msg error -71 req 04 val 1100 [ 2222.799900][T21474] pwc: recv_control_msg error -71 req 04 val 1200 [ 2222.807661][T21474] pwc: Registered as video103. [ 2222.814220][T21474] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input92 [ 2222.843732][T21474] usb 4-1: USB disconnect, device number 19 [ 2225.917686][T29116] netlink: 'syz.4.7604': attribute type 1 has an invalid length. [ 2226.101707][T29116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2226.193638][T29118] bond3: (slave gretap1): making interface the new active one [ 2226.225573][T29118] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 2226.240211][T29125] netlink: 'syz.6.7606': attribute type 1 has an invalid length. [ 2226.364085][T29125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2226.449383][T29127] vlan3: entered promiscuous mode [ 2226.454898][T29127] bond2: entered promiscuous mode [ 2226.460364][T29127] vlan3: entered allmulticast mode [ 2226.477324][T29127] bond2: entered allmulticast mode [ 2227.232330][T29145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7611'. [ 2227.451588][T29145] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2227.939862][T29171] netlink: 'syz.6.7621': attribute type 1 has an invalid length. [ 2228.153969][T29171] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2229.670698][T26006] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2229.852966][T26006] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2229.861583][T26006] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2229.872968][T26006] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2229.884184][T26006] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2229.894055][T26006] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2229.905630][T26006] usb 4-1: Product: syz [ 2229.909947][T26006] usb 4-1: Manufacturer: syz [ 2229.914774][T26006] usb 4-1: SerialNumber: syz [ 2229.922851][T26006] usb 4-1: config 0 descriptor?? [ 2229.933025][T26006] hub 4-1:0.0: bad descriptor, ignoring hub [ 2229.939107][T26006] hub: probe of 4-1:0.0 failed with error -5 [ 2229.948972][T26006] usb 4-1: selecting invalid altsetting 0 [ 2230.723593][T29233] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 2230.792250][T29234] pim6reg1: entered promiscuous mode [ 2230.798820][T29234] pim6reg1: entered allmulticast mode [ 2231.601229][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7652'. [ 2232.149232][T29258] netlink: 'syz.6.7655': attribute type 1 has an invalid length. [ 2232.270403][T29258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2232.581083][T26012] usb 4-1: USB disconnect, device number 20 [ 2234.161010][T26015] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2234.276400][T29291] fuse: Bad value for 'fd' [ 2234.380295][T26015] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2234.388971][T26015] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2234.400155][T26015] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2234.416267][T26015] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2234.426728][T26015] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2234.438678][T26015] usb 4-1: Product: syz [ 2234.443943][T26015] usb 4-1: Manufacturer: syz [ 2234.448877][T26015] usb 4-1: SerialNumber: syz [ 2234.459931][T26015] usb 4-1: config 0 descriptor?? [ 2234.468593][T26015] hub 4-1:0.0: bad descriptor, ignoring hub [ 2234.478545][T26015] hub: probe of 4-1:0.0 failed with error -5 [ 2234.488495][T26015] usb 4-1: selecting invalid altsetting 0 [ 2234.841916][T29302] ip6tnl0: entered promiscuous mode [ 2234.849106][T29302] ip6tnl0: entered allmulticast mode [ 2236.367249][T29318] netlink: 'syz.6.7679': attribute type 72 has an invalid length. [ 2237.061562][T26006] usb 4-1: USB disconnect, device number 21 [ 2237.312140][T29329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7685'. [ 2237.597617][T29337] netlink: 'syz.3.7689': attribute type 72 has an invalid length. [ 2237.691666][T26015] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2237.882994][T26015] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2237.901654][T26015] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2237.915441][T26015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.926626][T26015] usb 6-1: config 0 descriptor?? [ 2237.939397][T26015] pwc: Askey VC010 type 2 USB webcam detected. [ 2238.284760][T29353] netlink: 'syz.4.7695': attribute type 1 has an invalid length. [ 2238.356067][T29353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2238.363741][T26015] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2238.517767][T29357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7696'. [ 2238.587704][T26015] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2238.646486][T26015] pwc: recv_control_msg error -71 req 04 val 1000 [ 2238.681493][T26015] pwc: recv_control_msg error -71 req 04 val 1300 [ 2238.694782][T26015] pwc: recv_control_msg error -71 req 04 val 1400 [ 2238.711831][T26015] pwc: recv_control_msg error -71 req 02 val 2000 [ 2238.729097][T26015] pwc: recv_control_msg error -71 req 02 val 2100 [ 2238.745559][T26015] pwc: recv_control_msg error -71 req 04 val 1500 [ 2238.772130][T26015] pwc: recv_control_msg error -71 req 02 val 2500 [ 2238.805676][T29362] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7698'. [ 2238.821194][T26015] pwc: recv_control_msg error -71 req 02 val 2400 [ 2238.836938][T26015] pwc: recv_control_msg error -71 req 02 val 2600 [ 2238.867733][T26015] pwc: recv_control_msg error -71 req 02 val 2900 [ 2238.884505][T26015] pwc: recv_control_msg error -71 req 02 val 2800 [ 2238.906678][T26015] pwc: recv_control_msg error -71 req 04 val 1100 [ 2238.925231][T26015] pwc: recv_control_msg error -71 req 04 val 1200 [ 2238.945531][T26015] pwc: Registered as video103. [ 2238.957847][T26015] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input93 [ 2238.977919][T26015] usb 6-1: USB disconnect, device number 77 [ 2239.316478][T29376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7705'. [ 2239.566337][T29383] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.7707'. [ 2239.741112][T29390] pim6reg1: entered promiscuous mode [ 2239.746491][T29390] pim6reg1: entered allmulticast mode [ 2239.960266][T29398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7714'. [ 2240.095069][T29406] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.7718'. [ 2240.244173][T29410] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2240.296326][T29412] pim6reg1: entered promiscuous mode [ 2240.301997][T29412] pim6reg1: entered allmulticast mode [ 2240.360902][T26006] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2240.526358][T29420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7725'. [ 2240.553172][T26006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.568838][T26006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.579122][T26006] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2240.588519][T26006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.604008][T26006] usb 4-1: config 0 descriptor?? [ 2241.027869][T26006] usbhid 4-1:0.0: can't add hid device: -32 [ 2241.035682][T26006] usbhid: probe of 4-1:0.0 failed with error -32 [ 2241.049579][T26006] usb 4-1: USB disconnect, device number 22 [ 2241.250177][T29436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2241.472292][T29441] syz.5.7733[29441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2241.472430][T29441] syz.5.7733[29441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2241.556969][T29444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7734'. [ 2241.924000][T29458] syz.5.7740[29458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2241.924152][T29458] syz.5.7740[29458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2242.182591][T29469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7745'. [ 2242.264124][T29471] pim6reg1: entered promiscuous mode [ 2242.269487][T29471] pim6reg1: entered allmulticast mode [ 2242.391370][T26016] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2242.577886][T26016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.589073][T26016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.613568][T26016] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2242.650701][T26016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.671731][T26016] usb 6-1: config 0 descriptor?? [ 2242.782339][T29487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7752'. [ 2242.948410][T29490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7754'. [ 2243.091696][T26016] usbhid 6-1:0.0: can't add hid device: -32 [ 2243.108186][T26016] usbhid: probe of 6-1:0.0 failed with error -32 [ 2243.125153][T26016] usb 6-1: USB disconnect, device number 78 [ 2243.186823][T29494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2243.657419][T29510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7763'. [ 2243.727561][T29512] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2244.330813][T26006] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2244.485379][T26006] usb 6-1: device descriptor read/64, error -71 [ 2244.770740][T26006] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2244.830665][T26004] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2244.920721][T26006] usb 6-1: device descriptor read/64, error -71 [ 2245.014937][T26004] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2245.026010][T26004] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2245.035867][T26004] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2245.045556][T26004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.053844][T26006] usb usb6-port1: attempt power cycle [ 2245.061562][T26004] usb 4-1: config 0 descriptor?? [ 2245.476413][T26004] usbhid 4-1:0.0: can't add hid device: -32 [ 2245.482675][T26004] usbhid: probe of 4-1:0.0 failed with error -32 [ 2245.489089][T26006] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2245.498782][T26004] usb 4-1: USB disconnect, device number 23 [ 2245.523650][T26006] usb 6-1: device descriptor read/8, error -71 [ 2245.776591][T29530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7772'. [ 2245.800960][T26006] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2245.836053][T26006] usb 6-1: device descriptor read/8, error -71 [ 2245.964920][T26006] usb usb6-port1: unable to enumerate USB device [ 2246.013437][T29536] fuse: Bad value for 'fd' [ 2246.192857][T29540] fuse: Bad value for 'fd' [ 2246.417072][T29544] pim6reg1: entered promiscuous mode [ 2246.422611][T29544] pim6reg1: entered allmulticast mode [ 2246.803324][T29551] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2247.061972][T29555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7781'. [ 2247.302601][T29563] fuse: Bad value for 'fd' [ 2247.360679][T29564] netlink: 'syz.4.7783': attribute type 1 has an invalid length. [ 2247.461113][T29564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2247.541005][T26016] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2247.753366][T26016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.767661][T29574] pim6reg1: entered promiscuous mode [ 2247.773754][T29574] pim6reg1: entered allmulticast mode [ 2247.785147][T26016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2247.807421][T26016] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2247.830749][T26016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.868770][T26016] usb 6-1: config 0 descriptor?? [ 2248.522989][T26016] usbhid 6-1:0.0: can't add hid device: -32 [ 2248.530165][T26016] usbhid: probe of 6-1:0.0 failed with error -32 [ 2248.561834][T26016] usb 6-1: USB disconnect, device number 83 [ 2248.579880][T29589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7791'. [ 2249.038415][T29599] fuse: Bad value for 'fd' [ 2249.199183][T29601] fuse: Bad value for 'fd' [ 2250.541641][T29619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7800'. [ 2250.840958][T26006] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2251.054588][T26006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.073654][T26006] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.110718][T26006] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2251.123998][T26006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.154320][T26006] usb 6-1: config 0 descriptor?? [ 2251.336245][T29649] syz.3.7809[29649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2251.336377][T29649] syz.3.7809[29649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2251.794801][T26006] usbhid 6-1:0.0: can't add hid device: -32 [ 2251.840719][T26006] usbhid: probe of 6-1:0.0 failed with error -32 [ 2251.864281][T26006] usb 6-1: USB disconnect, device number 84 [ 2252.230910][T26016] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2252.305963][T29667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2252.420915][T26016] usb 4-1: Using ep0 maxpacket: 16 [ 2252.432667][T26016] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.448557][T26016] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2252.470673][T26016] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2252.511572][T26016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.519642][T26016] usb 4-1: Product: syz [ 2252.540719][T26016] usb 4-1: Manufacturer: syz [ 2252.555760][T26016] usb 4-1: SerialNumber: syz [ 2252.792266][T26016] usb 4-1: 0:2 : does not exist [ 2252.798327][T26016] usb 4-1: unit 6 not found! [ 2252.839900][T26016] usb 4-1: USB disconnect, device number 24 [ 2253.017034][T29696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7828'. [ 2253.130619][T29696] syz_tun (unregistering): left allmulticast mode [ 2253.159205][T29698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2253.630447][T29711] pim6reg1: entered promiscuous mode [ 2253.657907][T29711] pim6reg1: entered allmulticast mode [ 2254.080795][T21474] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2254.164760][T29723] syzkaller0: entered promiscuous mode [ 2254.170680][T29723] syzkaller0: entered allmulticast mode [ 2254.260718][T21474] usb 6-1: device descriptor read/64, error -71 [ 2254.550236][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7840'. [ 2254.560816][T21474] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2254.696369][T29739] wg2: entered promiscuous mode [ 2254.702243][T29739] wg2: entered allmulticast mode [ 2254.730895][T26016] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2254.730976][T21474] usb 6-1: device descriptor read/64, error -71 [ 2254.861753][T21474] usb usb6-port1: attempt power cycle [ 2254.920827][T26016] usb 4-1: Using ep0 maxpacket: 16 [ 2254.928255][T26016] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.938346][T29747] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7846'. [ 2254.938408][T29747] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7846'. [ 2254.939001][T29746] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7846'. [ 2254.953591][T26016] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2254.957933][T29747] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7846'. [ 2254.976796][T26016] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2254.998398][T26016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.006724][T26016] usb 4-1: Product: syz [ 2255.015552][T26016] usb 4-1: Manufacturer: syz [ 2255.020386][T26016] usb 4-1: SerialNumber: syz [ 2255.233692][T26016] usb 4-1: 0:2 : does not exist [ 2255.240013][T26016] usb 4-1: unit 6 not found! [ 2255.266354][T26016] usb 4-1: USB disconnect, device number 25 [ 2255.290766][T21474] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2255.322649][T21474] usb 6-1: device descriptor read/8, error -71 [ 2255.610935][T21474] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2255.651703][T21474] usb 6-1: device descriptor read/8, error -71 [ 2255.790468][T21474] usb usb6-port1: unable to enumerate USB device [ 2255.950114][T29766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7854'. [ 2257.095288][T29792] netlink: 'syz.3.7865': attribute type 29 has an invalid length. [ 2257.103668][T29792] netlink: 'syz.3.7865': attribute type 29 has an invalid length. [ 2257.120820][T29792] netlink: 'syz.3.7865': attribute type 29 has an invalid length. [ 2257.131737][T29792] netlink: 'syz.3.7865': attribute type 29 has an invalid length. [ 2257.245980][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7868'. [ 2257.607863][T29815] netlink: 'syz.6.7874': attribute type 1 has an invalid length. [ 2257.722986][T29815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2257.981496][T29824] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 2258.115953][T29829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7880'. [ 2259.789691][T29869] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7895'. [ 2259.804117][T29869] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7895'. [ 2259.816825][T29869] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7895'. [ 2259.835995][T29869] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7895'. [ 2259.851055][T29870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7898'. [ 2259.871171][T29870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7898'. [ 2259.881594][T29868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7898'. [ 2259.903506][T29868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7898'. [ 2260.089035][T29872] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2260.142909][T29881] netlink: 'syz.3.7902': attribute type 12 has an invalid length. [ 2260.154935][T29881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7902'. [ 2260.590703][T21474] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2260.790631][T21474] usb 6-1: Using ep0 maxpacket: 16 [ 2260.810691][T21474] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.850841][T21474] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2260.865754][T21474] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2260.882276][T21474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.900799][T21474] usb 6-1: Product: syz [ 2260.905322][T21474] usb 6-1: Manufacturer: syz [ 2260.913368][T21474] usb 6-1: SerialNumber: syz [ 2261.184883][T21474] usb 6-1: 0:2 : does not exist [ 2261.210876][T21474] usb 6-1: unit 6 not found! [ 2261.254255][T21474] usb 6-1: USB disconnect, device number 89 [ 2261.302388][T29905] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7913'. [ 2261.696916][T29919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2261.969706][T29930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2262.074305][T29935] syzkaller0: entered promiscuous mode [ 2262.079972][T29935] syzkaller0: entered allmulticast mode [ 2265.466129][T29939] kthread_run failed with err -4 [ 2265.480885][T29953] __nla_validate_parse: 8 callbacks suppressed [ 2265.480906][T29953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7933'. [ 2265.586463][T29958] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7934'. [ 2265.646849][T29962] netlink: 830 bytes leftover after parsing attributes in process `syz.6.7936'. [ 2265.932917][T29976] netlink: 'syz.4.7941': attribute type 1 has an invalid length. [ 2266.052533][T29976] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2266.129692][T29982] vlan1: entered promiscuous mode [ 2266.136747][T29982] bond6: entered promiscuous mode [ 2266.145090][T29982] vlan1: entered allmulticast mode [ 2266.159044][T29982] bond6: entered allmulticast mode [ 2266.305723][T29990] netlink: 'syz.5.7945': attribute type 12 has an invalid length. [ 2266.316750][T29990] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7945'. [ 2266.394078][T29992] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7947'. [ 2266.962375][T30013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7957'. [ 2267.061663][T30018] netlink: 1030 bytes leftover after parsing attributes in process `syz.5.7959'. [ 2267.071277][T30018] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2267.080666][T20843] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2267.280858][T20843] usb 4-1: Using ep0 maxpacket: 16 [ 2267.308699][T20843] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2267.322241][T30027] netlink: 'syz.5.7962': attribute type 1 has an invalid length. [ 2267.333006][T20843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2267.355990][T20843] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2267.370607][T20843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.391211][T20843] usb 4-1: Product: syz [ 2267.398063][T20843] usb 4-1: Manufacturer: syz [ 2267.402916][T20843] usb 4-1: SerialNumber: syz [ 2267.436896][T30027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2267.451895][T30029] vlan5: entered promiscuous mode [ 2267.457090][T30029] bond4: entered promiscuous mode [ 2267.467421][T30029] vlan5: entered allmulticast mode [ 2267.477373][T30029] bond4: entered allmulticast mode [ 2267.617638][T20843] usb 4-1: 0:2 : does not exist [ 2267.623492][T20843] usb 4-1: unit 6 not found! [ 2267.660429][T20843] usb 4-1: USB disconnect, device number 26 [ 2268.359790][T30038] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7966'. [ 2268.752185][T30053] netlink: 'syz.3.7972': attribute type 1 has an invalid length. [ 2268.800968][T30053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2268.878793][T30053] vlan2: entered promiscuous mode [ 2268.887218][T30053] bond1: entered promiscuous mode [ 2268.892733][T30053] vlan2: entered allmulticast mode [ 2268.897984][T30053] bond1: entered allmulticast mode [ 2268.929808][T30058] syzkaller0: entered promiscuous mode [ 2268.945966][T30058] syzkaller0: entered allmulticast mode [ 2269.023493][T20843] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2269.219906][T20843] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.237627][T20843] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2269.264554][T20843] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2269.281029][T20843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.525117][T26008] usb 6-1: USB disconnect, device number 90 [ 2269.588367][T30062] input: syz1 as /devices/virtual/input/input96 [ 2270.383062][T30072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2270.689862][T30083] syzkaller0: entered promiscuous mode [ 2270.703138][T30083] syzkaller0: entered allmulticast mode [ 2271.430793][T26008] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2271.649692][T26008] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2271.686345][T26008] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2271.711288][T26008] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2271.720406][T26008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.957501][T26016] usb 4-1: USB disconnect, device number 27 [ 2272.227176][T20843] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2272.438367][T20843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.448837][T20843] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2272.498989][T20843] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2272.508317][T20843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.540636][T20843] usb 6-1: Product: syz [ 2272.545028][T20843] usb 6-1: Manufacturer: syz [ 2272.549664][T20843] usb 6-1: SerialNumber: syz [ 2272.589315][T20843] hub 6-1:1.0: bad descriptor, ignoring hub [ 2272.605725][T20843] hub: probe of 6-1:1.0 failed with error -5 [ 2273.761032][T30108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2275.433086][T30111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7994'. [ 2275.719858][T30122] syzkaller0: entered promiscuous mode [ 2275.726295][T30122] syzkaller0: entered allmulticast mode [ 2275.741088][T26008] usb 6-1: USB disconnect, device number 91 [ 2276.067597][T30132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2276.289590][T30140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8004'. [ 2276.461920][T30143] netlink: 'syz.5.8005': attribute type 1 has an invalid length. [ 2276.537401][T30143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2276.601121][T30145] vlan6: entered promiscuous mode [ 2276.606296][T30145] bond5: entered promiscuous mode [ 2276.615980][T30145] vlan6: entered allmulticast mode [ 2276.622497][T30145] bond5: entered allmulticast mode [ 2277.071974][T30154] syzkaller0: entered promiscuous mode [ 2277.111656][T30154] syzkaller0: entered allmulticast mode [ 2277.694784][T30167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8013'. [ 2278.353723][T30180] syzkaller0: entered promiscuous mode [ 2278.359594][T30180] syzkaller0: entered allmulticast mode [ 2279.231696][T30191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8022'. [ 2279.537508][T30203] syzkaller0: entered promiscuous mode [ 2279.543624][T30203] syzkaller0: entered allmulticast mode [ 2280.031663][T30219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8033'. [ 2280.421492][T30232] syzkaller0: entered promiscuous mode [ 2280.427205][T30232] syzkaller0: entered allmulticast mode [ 2280.745329][T30242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8045'. [ 2281.043631][T30247] netlink: 'syz.6.8046': attribute type 1 has an invalid length. [ 2281.164547][T30247] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2281.224475][T30247] vlan4: entered promiscuous mode [ 2281.229642][T30247] bond6: entered promiscuous mode [ 2281.235118][T30247] vlan4: entered allmulticast mode [ 2281.240322][T30247] bond6: entered allmulticast mode [ 2283.576856][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2285.376094][T30269] syzkaller0: entered promiscuous mode [ 2285.381996][T30269] syzkaller0: entered allmulticast mode [ 2285.668105][T30289] netlink: 'syz.3.8058': attribute type 1 has an invalid length. [ 2285.789246][T30289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2285.811168][T30293] vlan3: entered promiscuous mode [ 2285.816278][T30293] bond2: entered promiscuous mode [ 2285.822118][T30293] vlan3: entered allmulticast mode [ 2285.827356][T30293] bond2: entered allmulticast mode [ 2286.468608][T27580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2286.490804][T27580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2286.502304][T27580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2286.530600][T27580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2286.540092][T27580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2286.550407][T27580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2286.830888][T30299] pim6reg1: entered promiscuous mode [ 2286.840993][T30299] pim6reg1: entered allmulticast mode [ 2287.276838][T30296] chnl_net:caif_netlink_parms(): no params data found [ 2288.624250][T27580] Bluetooth: hci4: command tx timeout [ 2290.700750][T27580] Bluetooth: hci4: command tx timeout [ 2292.770707][T27580] Bluetooth: hci4: command tx timeout [ 2294.851940][T27580] Bluetooth: hci4: command tx timeout [ 2294.933336][T30296] bridge0: port 1(bridge_slave_0) entered blocking state [ 2294.942067][T30296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2294.949377][T30296] bridge_slave_0: entered allmulticast mode [ 2294.982795][T30296] bridge_slave_0: entered promiscuous mode [ 2294.992306][T30296] bridge0: port 2(bridge_slave_1) entered blocking state [ 2294.999576][T30296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2295.021226][T30296] bridge_slave_1: entered allmulticast mode [ 2295.033517][T30296] bridge_slave_1: entered promiscuous mode [ 2295.069351][T30349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2295.090016][T30296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2295.108624][T30296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2295.177436][T30296] team0: Port device team_slave_0 added [ 2295.207875][T30296] team0: Port device team_slave_1 added [ 2295.269582][T30296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2295.291264][T30296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2295.320993][T26016] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2295.326709][T30296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2295.342398][T30296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2295.349490][T30296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2295.375832][T30296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2295.479745][T30296] hsr_slave_0: entered promiscuous mode [ 2295.480603][T26016] usb 4-1: device descriptor read/64, error -71 [ 2295.497049][T30296] hsr_slave_1: entered promiscuous mode [ 2295.508233][T30296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2295.517139][T30296] Cannot create hsr debugfs directory [ 2295.761413][T26016] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2295.944034][T26016] usb 4-1: device descriptor read/64, error -71 [ 2296.066152][T26016] usb usb4-port1: attempt power cycle [ 2296.531500][T26016] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2296.552286][T30296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2296.571338][T30296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2296.579959][T26016] usb 4-1: device descriptor read/8, error -71 [ 2296.586849][T30296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2296.598830][T30296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2296.820279][T30296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.858368][T30296] 8021q: adding VLAN 0 to HW filter on device team0 [ 2296.865633][T26016] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2296.889329][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.896600][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2296.912789][T26016] usb 4-1: device descriptor read/8, error -71 [ 2296.941987][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.949177][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2297.041242][T26016] usb usb4-port1: unable to enumerate USB device [ 2297.365167][T30296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2297.944340][T30296] veth0_vlan: entered promiscuous mode [ 2297.976831][T30296] veth1_vlan: entered promiscuous mode [ 2298.068462][T30296] veth0_macvtap: entered promiscuous mode [ 2298.113133][T30296] veth1_macvtap: entered promiscuous mode [ 2298.148501][T30296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.179687][T30296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.198954][T30296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.226005][T30296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.248493][T30296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.269313][T30296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.294128][T30296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2298.316985][T30296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.347998][T30296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.368438][T30296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.390017][T30296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.410219][T30296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.430644][T30296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.453137][T30296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2298.546637][T30296] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.563182][T30296] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.580608][T30296] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.591539][T30296] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.796494][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2298.809627][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2298.901465][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2298.909636][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2299.261916][T30459] netlink: 'syz.3.8111': attribute type 1 has an invalid length. [ 2299.362152][T30459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2299.442226][T30464] vlan4: entered promiscuous mode [ 2299.447470][T30464] bond3: entered promiscuous mode [ 2299.453020][T30464] vlan4: entered allmulticast mode [ 2299.458284][T30464] bond3: entered allmulticast mode [ 2300.860131][T30505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2302.197875][T30540] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2302.237751][T30539] pim6reg1: entered promiscuous mode [ 2302.243873][T30539] pim6reg1: entered allmulticast mode [ 2302.594877][T30553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2303.350805][T26006] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2303.573009][T26006] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2303.607874][T30585] netlink: 'syz.5.8162': attribute type 1 has an invalid length. [ 2303.620962][T26006] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2303.657022][T30585] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2303.667759][T26006] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2303.678548][T26006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2303.687000][T26006] usb 4-1: Product: syz [ 2303.691591][T26006] usb 4-1: Manufacturer: syz [ 2303.696407][T26006] usb 4-1: SerialNumber: syz [ 2303.709591][T26006] hub 4-1:1.0: bad descriptor, ignoring hub [ 2303.719516][T30587] vlan7: entered promiscuous mode [ 2303.724984][T30587] bond6: entered promiscuous mode [ 2303.726264][T26006] hub: probe of 4-1:1.0 failed with error -5 [ 2303.737866][T30587] vlan7: entered allmulticast mode [ 2303.748951][T30587] bond6: entered allmulticast mode [ 2305.760939][T26008] usb 4-1: USB disconnect, device number 32 [ 2306.087982][T26008] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2306.301630][T26008] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2306.309831][T26008] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2306.320121][T26008] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2306.356579][T26008] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2306.365770][T26008] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2306.374537][T26008] usb 4-1: Product: syz [ 2306.378740][T26008] usb 4-1: Manufacturer: syz [ 2306.383448][T26008] usb 4-1: SerialNumber: syz [ 2306.390713][T26008] usb 4-1: config 0 descriptor?? [ 2306.399479][T26008] hub 4-1:0.0: bad descriptor, ignoring hub [ 2306.405656][T26008] hub: probe of 4-1:0.0 failed with error -5 [ 2306.415371][T26008] usb 4-1: selecting invalid altsetting 0 [ 2308.240985][T26008] usb 4-1: USB disconnect, device number 33 [ 2309.024714][T30621] netlink: 'syz.5.8174': attribute type 1 has an invalid length. [ 2309.119993][T30621] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2309.151460][T30625] vlan8: entered promiscuous mode [ 2309.156530][T30625] bond7: entered promiscuous mode [ 2309.162457][T30625] vlan8: entered allmulticast mode [ 2309.167622][T30625] bond7: entered allmulticast mode [ 2309.806548][T30639] syzkaller0: entered promiscuous mode [ 2309.819200][T30639] syzkaller0: entered allmulticast mode [ 2309.891019][T26006] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2310.102223][T26006] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2310.125431][T26006] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2310.137811][T26006] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2310.163776][T26006] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2310.196482][T26006] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2310.214935][T26006] usb 4-1: Product: syz [ 2310.224035][T26006] usb 4-1: Manufacturer: syz [ 2310.234303][T26006] usb 4-1: SerialNumber: syz [ 2310.248438][T26006] usb 4-1: config 0 descriptor?? [ 2310.258466][T26006] hub 4-1:0.0: bad descriptor, ignoring hub [ 2310.269958][T26006] hub: probe of 4-1:0.0 failed with error -5 [ 2310.287529][T26006] usb 4-1: selecting invalid altsetting 0 [ 2314.245215][T30642] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2314.481192][T21473] usb 4-1: USB disconnect, device number 34 [ 2314.623342][T30669] [ 2314.625743][T30669] ====================================================== [ 2314.632783][T30669] WARNING: possible circular locking dependency detected [ 2314.639813][T30669] syzkaller #0 Not tainted [ 2314.644230][T30669] ------------------------------------------------------ [ 2314.651256][T30669] syz.4.8193/30669 is trying to acquire lock: [ 2314.657342][T30669] ffff8880b8f29370 (krc.lock){-.-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 2314.665964][T30669] [ 2314.665964][T30669] but task is already holding lock: [ 2314.673323][T30669] ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 2314.682206][T30669] [ 2314.682206][T30669] which lock already depends on the new lock. [ 2314.682206][T30669] [ 2314.692603][T30669] [ 2314.692603][T30669] the existing dependency chain (in reverse order) is: [ 2314.701622][T30669] [ 2314.701622][T30669] -> #1 (&base->lock){-.-.}-{2:2}: [ 2314.708940][T30669] _raw_spin_lock_irqsave+0xa8/0xf0 [ 2314.714684][T30669] lock_timer_base+0x123/0x270 [ 2314.719995][T30669] __mod_timer+0xf9/0xdb0 [ 2314.724862][T30669] queue_delayed_work_on+0x12a/0x1e0 [ 2314.730675][T30669] kvfree_call_rcu+0x541/0x780 [ 2314.735963][T30669] rtnl_register_internal+0x486/0x590 [ 2314.741865][T30669] rtnl_register+0x32/0x70 [ 2314.746838][T30669] ip_rt_init+0x2ec/0x390 [ 2314.751700][T30669] ip_init+0xe/0x20 [ 2314.756037][T30669] inet_init+0x2c1/0x3e0 [ 2314.760801][T30669] do_one_initcall+0x1fd/0x750 [ 2314.766096][T30669] do_initcall_level+0x137/0x1f0 [ 2314.771557][T30669] do_initcalls+0x69/0xd0 [ 2314.776434][T30669] kernel_init_freeable+0x3d2/0x570 [ 2314.782170][T30669] kernel_init+0x1d/0x1c0 [ 2314.787034][T30669] ret_from_fork+0x48/0x80 [ 2314.791985][T30669] ret_from_fork_asm+0x11/0x20 [ 2314.797292][T30669] [ 2314.797292][T30669] -> #0 (krc.lock){-.-.}-{2:2}: [ 2314.804336][T30669] __lock_acquire+0x2ddb/0x7c80 [ 2314.809712][T30669] lock_acquire+0x197/0x410 [ 2314.814738][T30669] _raw_spin_lock+0x2e/0x40 [ 2314.819775][T30669] kvfree_call_rcu+0x15a/0x780 [ 2314.825069][T30669] trie_delete_elem+0x535/0x6a0 [ 2314.830447][T30669] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 2314.836429][T30669] bpf_trace_run3+0x1e7/0x400 [ 2314.841634][T30669] __bpf_trace_timer_start+0x14a/0x1b0 [ 2314.847637][T30669] enqueue_timer+0x398/0x530 [ 2314.852777][T30669] __mod_timer+0x977/0xdb0 [ 2314.857734][T30669] sk_reset_timer+0x23/0xc0 [ 2314.862772][T30669] tipc_sk_finish_conn+0x154/0x7e0 [ 2314.868413][T30669] tipc_socketpair+0x254/0x470 [ 2314.873707][T30669] __sys_socketpair+0x2b0/0x550 [ 2314.879153][T30669] __x64_sys_socketpair+0x9b/0xb0 [ 2314.884726][T30669] do_syscall_64+0x55/0xb0 [ 2314.889685][T30669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2314.896139][T30669] [ 2314.896139][T30669] other info that might help us debug this: [ 2314.896139][T30669] [ 2314.906371][T30669] Possible unsafe locking scenario: [ 2314.906371][T30669] [ 2314.913825][T30669] CPU0 CPU1 [ 2314.919187][T30669] ---- ---- [ 2314.924638][T30669] lock(&base->lock); [ 2314.928710][T30669] lock(krc.lock); [ 2314.935054][T30669] lock(&base->lock); [ 2314.941652][T30669] lock(krc.lock); [ 2314.945475][T30669] [ 2314.945475][T30669] *** DEADLOCK *** [ 2314.945475][T30669] [ 2314.953636][T30669] 2 locks held by syz.4.8193/30669: [ 2314.958837][T30669] #0: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 2314.968190][T30669] #1: ffffffff8cd2fe20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 2314.977514][T30669] [ 2314.977514][T30669] stack backtrace: [ 2314.983432][T30669] CPU: 1 PID: 30669 Comm: syz.4.8193 Not tainted syzkaller #0 [ 2314.990892][T30669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2315.000971][T30669] Call Trace: [ 2315.004343][T30669] [ 2315.007279][T30669] dump_stack_lvl+0x16c/0x230 [ 2315.011980][T30669] ? load_image+0x3b0/0x3b0 [ 2315.016491][T30669] ? show_regs_print_info+0x20/0x20 [ 2315.021703][T30669] ? print_circular_bug+0x12b/0x1a0 [ 2315.026925][T30669] check_noncircular+0x2bd/0x3c0 [ 2315.031895][T30669] ? print_deadlock_bug+0x5d0/0x5d0 [ 2315.037111][T30669] ? lockdep_lock+0xe0/0x220 [ 2315.041720][T30669] ? _find_first_zero_bit+0xd3/0x100 [ 2315.047035][T30669] __lock_acquire+0x2ddb/0x7c80 [ 2315.051986][T30669] ? stack_trace_snprint+0xf0/0xf0 [ 2315.057126][T30669] ? __stack_depot_save+0x560/0x630 [ 2315.062341][T30669] ? verify_lock_unused+0x140/0x140 [ 2315.067574][T30669] ? kasan_save_stack+0x4d/0x60 [ 2315.072438][T30669] ? kasan_save_stack+0x3e/0x60 [ 2315.077292][T30669] ? __kasan_record_aux_stack+0xaf/0xc0 [ 2315.082851][T30669] ? kvfree_call_rcu+0xee/0x780 [ 2315.087705][T30669] ? trie_delete_elem+0x535/0x6a0 [ 2315.092740][T30669] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 2315.098372][T30669] ? bpf_trace_run3+0x1e7/0x400 [ 2315.103223][T30669] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 2315.108894][T30669] ? enqueue_timer+0x398/0x530 [ 2315.113657][T30669] ? __mod_timer+0x977/0xdb0 [ 2315.118251][T30669] ? sk_reset_timer+0x23/0xc0 [ 2315.122931][T30669] ? tipc_sk_finish_conn+0x154/0x7e0 [ 2315.128219][T30669] ? tipc_socketpair+0x254/0x470 [ 2315.133160][T30669] ? __sys_socketpair+0x2b0/0x550 [ 2315.138186][T30669] ? __x64_sys_socketpair+0x9b/0xb0 [ 2315.143388][T30669] ? do_syscall_64+0x55/0xb0 [ 2315.148005][T30669] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2315.154090][T30669] lock_acquire+0x197/0x410 [ 2315.158596][T30669] ? kvfree_call_rcu+0x15a/0x780 [ 2315.163548][T30669] ? read_lock_is_recursive+0x20/0x20 [ 2315.168924][T30669] ? __phys_addr+0xba/0x170 [ 2315.173432][T30669] _raw_spin_lock+0x2e/0x40 [ 2315.177936][T30669] ? kvfree_call_rcu+0x15a/0x780 [ 2315.182890][T30669] kvfree_call_rcu+0x15a/0x780 [ 2315.187665][T30669] ? call_rcu+0x930/0x930 [ 2315.192006][T30669] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2315.197901][T30669] ? _raw_spin_unlock+0x40/0x40 [ 2315.202753][T30669] trie_delete_elem+0x535/0x6a0 [ 2315.207619][T30669] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 2315.213084][T30669] bpf_trace_run3+0x1e7/0x400 [ 2315.217765][T30669] ? bpf_trace_run3+0xf4/0x400 [ 2315.222549][T30669] ? bpf_trace_run2+0x3c0/0x3c0 [ 2315.227422][T30669] ? __bpf_trace_timer_start+0x133/0x1b0 [ 2315.233075][T30669] __bpf_trace_timer_start+0x14a/0x1b0 [ 2315.238551][T30669] ? __bpf_trace_timer_class+0x100/0x100 [ 2315.244193][T30669] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2315.250085][T30669] ? _raw_spin_unlock+0x40/0x40 [ 2315.254938][T30669] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 2315.260318][T30669] enqueue_timer+0x398/0x530 [ 2315.264916][T30669] __mod_timer+0x977/0xdb0 [ 2315.269350][T30669] sk_reset_timer+0x23/0xc0 [ 2315.273863][T30669] tipc_sk_finish_conn+0x154/0x7e0 [ 2315.279001][T30669] tipc_socketpair+0x254/0x470 [ 2315.283778][T30669] __sys_socketpair+0x2b0/0x550 [ 2315.288651][T30669] __x64_sys_socketpair+0x9b/0xb0 [ 2315.293685][T30669] do_syscall_64+0x55/0xb0 [ 2315.298117][T30669] ? clear_bhb_loop+0x40/0x90 [ 2315.302812][T30669] ? clear_bhb_loop+0x40/0x90 [ 2315.307490][T30669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2315.313404][T30669] RIP: 0033:0x7f401d98eec9 [ 2315.317826][T30669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2315.337435][T30669] RSP: 002b:00007f401e79b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2315.345848][T30669] RAX: ffffffffffffffda RBX: 00007f401dbe5fa0 RCX: 00007f401d98eec9 [ 2315.353818][T30669] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2315.361800][T30669] RBP: 00007f401da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2315.369770][T30669] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 2315.377753][T30669] R13: 00007f401dbe6038 R14: 00007f401dbe5fa0 R15: 00007fffe5938518 [ 2315.385738][T30669] [ 2316.380740][T27580] Bluetooth: hci2: command 0x0406 tx timeout