last executing test programs: 24.629060805s ago: executing program 2 (id=1438): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r0, 0x0, 0x0, 0x0) (fail_nth: 2) 15.320005756s ago: executing program 4 (id=1463): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x191) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0)='-', 0x1}], 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x5) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f00001e0000/0x4000)=nil, 0x4000, 0x5, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r2 = io_uring_setup(0x66a, &(0x7f00000002c0)) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0x2}, 0xc) read(r3, &(0x7f0000000040)=""/49, 0x31) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000000100), 0x10) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) io_setup(0x7f, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 14.66924462s ago: executing program 4 (id=1466): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x200a0}, 0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14.396712639s ago: executing program 4 (id=1468): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) epoll_create(0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x4446, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x6, &(0x7f0000000340), 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SPLICE) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.948730852s ago: executing program 4 (id=1469): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2816c00}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc598, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000a380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_IOCTL(r6, &(0x7f0000000780)={0x20}, 0x20) fsync(r6) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000100)={&(0x7f0000000200)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x24, r8, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000200)={r11, 0x3, r0, 0x5}) creat(&(0x7f0000000000)='./file0\x00', 0x0) 12.588405335s ago: executing program 4 (id=1472): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYBLOB="000000800100000000000077ac"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 12.327362276s ago: executing program 4 (id=1473): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2, 0x1e9b}, 0x1c, 0x0}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x24c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3fad2c79c647e430c2598342e684eeb571ae38e066467eef"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c96f00bd9053fff6b9fd4d2ebd2e563890181ab52ae164e7"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25b007e2228d499dfa4c9159aa1950f875de419bb77f579f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "86ee273988305cbc66646d4a4666d53481865aa4bb2c7fb0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf52"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70699af63f78f086f6041fd6d6c06260fa0283ade3f27e19"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf2"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c1"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0xfffc, 0x0, @void}, 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r13, 0x89e2, &(0x7f0000000000)=@bcast) 4.883723117s ago: executing program 1 (id=1414): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x0, 0x168, 0x9, 0x270, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) 4.253885146s ago: executing program 0 (id=1500): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3e, &(0x7f0000000080)=""/120, &(0x7f0000000000)=0x78) 4.031202938s ago: executing program 0 (id=1501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="eb4676f22c9816dc1f1079b5a0a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="e2", 0x0}, 0x50) 3.854071636s ago: executing program 0 (id=1503): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99eb, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 3.651038189s ago: executing program 0 (id=1504): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x30]}}, 0x0, 0x2a}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x7c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x20, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}}]}, 0x7c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000600004f624d7a757c3d39ddc689e8aa94dd3102479d45e2cd3df5e47d99db3fcad9ce8e61a71069d421b0068116f5a82b8c046ad6ebf85b26feae6d092ac3802ef05b92c32134ca0538f8474a042dafbf03a4b40fe38897"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006112001c0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) 3.248869025s ago: executing program 0 (id=1505): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75973fb1dd9b01000000390bfca71c84d0b1603e70"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x5452, &(0x7f0000000000)) 3.064039174s ago: executing program 1 (id=1506): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) epoll_create(0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x4446, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x6, &(0x7f0000000340), 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_SPLICE) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.827080281s ago: executing program 1 (id=1507): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2816c00}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc598, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a380)="1479c9dda3c97e9ac7e9be32eca16b0d565fe2e115af3812231b0f91fb2cacff03000000000000c6e39756258dd4d85d7774af6daf8112bd1b166eb41572d44eaeecf6c37e63b1d3b2b31e655aee622b010cb16d60e8c645fb24a4d56cfc56d045b37e8c3259b2b4e6b85d7951a048cb261c1e949f39e5baf7807f18c7366c2652b5a07ef4cb48584310183f3acec3c25ef05211ff7677aa0798df78d434ab3a77000c0b003c26d86107d87c764b24c44f2b62566bfda8664c708ad6020a237aac4be5586f6355f857cc3a20c892cae2668ad10126eae87c2513eb32b6190eda9385c460190f20d65d91cc7236ebb6c9589d769edf20e5e99dc3fe8c15825e9bc1a40f901560689d21728ec6f695be4eccbc2eb3b704af00c281b4a70ba7f061b0cbbde6dc1f6a5346d44d860de0c77b935787d2b6ce27020a3b286c352936b0fea1f8ff457c8d8226f2b0464e12663387278e04e8558fb6cb40656106c643077e107533057ac4c29539f4a9eeccb89ebd11c6379e2c13f5b5c2ca8766bb675eab04c50a8875ed5711b6ca6e81ab830935f5788841475f2010b0e8262b02b660c0eeb4193b292d22bffe2d4a350d690b653f1f73376b5af173803e724bf15aef30024e637e088a3bd5159d934a7970339099c5c07a3bb749a363da9484f67b87d5600a9c4bca881bf6c9a8b2789fc048d0f337fc7ddd9803d99371ab535c14aff11a17b5ca122c60aef06546e7d118a66779eadcc847e959e535a50b7ecf65305f5b7a532c54523cadcf367ca55651293521249e1a4dad025457f3917f63756b4e9c2c624f2a4b72ae9c1a8b980150c3e103aeadbe104c6c37755b030f359d7bac500531ce66ef56a08a72510371d3996661f18ae23e8ce7dea5cbefd69beba351c51ee7d2ecf3f78d0ce7575c3f19dfd25a72758b9b32096d7f6bdfe156f931f52cb9f6ecf31a12d42f1643158d2eb86c715b1401026f284763d49a478bdeafbee4cb51cde91f40a9d1fa901293bd800c4f97ee9c64c282bc542e64cab69fc2e83017ba8cc293fa59bca3146248b8da7727720912c3748fb4d5427ce724d93749dcfe3738a4b5fa0bb20fe8f7772164da547083b3737878d138c768500b4bc5f14dd15a401e3f40261f556d9e49b2cbbb305da13e15d177509901ec95b331e4affa813eae3b230b9421ca2a7c362cce08c43b0c823514e935ac292f0ef69c1167f093c40d26ae6ddfc53b5298ce836a37db04bc367d67b2d755317ef9f3d384652448ceaa4d91d2bc2b2cd9cf9d177ffad997d4b6f9effe33b5791d8192ef1780cb59b8f2191d59fb1ec6baf2478981598430a14b7baae55239911c095894acc9e1a4608ec6c405623c0dc366002a9bc0851b6a7ee1dfd5037358614b7af26985d2591f638abbd43986c2b00f4dbfd5b860b95901ece3a3ab42e2cf1719a878c82b41ae3340e6348ee120778a502f3f77695036a29295287a49245bda5167516629b7ef8b3eaf4d8e6fcc11e1c03edb5eb70e4b95f767e3a400b4d96319d0872cc5cca96bc630c740f84b7a8b55fc01d7e6f6fe1b463ffd9e05cd1d8791e51ee9207a051eae96c2d99bf21001279d048b52cd5c0bf78093a284d1ba22feffe2c6b22f311188ba14810ed1d7d44a1d09a58ac2631b5750e629b0bcab3c4509651c273ce6ff016c9d9a4d41111ed156d01a2f7818c83e8654ce5721d6ef90c236d25fb6ff083bd24a6fc58b948edcf2fb0dba6c879e1aaea2aa2d2ce45e52a37c60de6cee5771d86ce1eacbb5a06459c4c3f747e5ba96942954a466a307097fb5017157a64d1cfeb7d2c185f75c46d215e9234043b1a2682d98627b670368ffed2343ba1d20c2d33efa75d937ee97d173a1fd1754534dc06ba2bcd396c88183260c76729a0d28f2c19f481517221cf347af9fcfdf6de056e49d8375329e658d46ddd61e2fa3d0414bafaeeec494a8f5c0725aa32d79962768fba004431b4ced8f515cad0e7a4a37a6b3f7f16f03d4c9ba1324536d46e3000aad83fb678a062ecd0326c8709e3e62e407f3da39e26813122a5733be1c13eaa24ac37d5008bbe3bec1aef4863e77ac651a0aa9baa473fafa11d61bec7c70eda99fa143848761615720568916d530ed6bcdd606fc8175d19e56f8b222e8466f0b225a084c48907bda8f1daf39ffd7ef8f471a5e59eb918ad93a3212a321f70251f063dd8f50f1f29bf78e84cf0975a7cb6aa525e2682e04bf723fad39feff97d6b253d625b1e1005646fa1d7bdf0e22faf2656de3e487563b87c6d07387f0cc9d0382172d30cb95bc73f14e031f5315e4c6bdfaff83cea404af2e0dc0c238f9bc94d309c815fcfa5ce929492e6b28e4b6d7c7b1e50459284c4660a84206e22edca767d15589d35cf680e0cdbf3476aa4002f9fd86bd870706b4fa25e3b7de3c01ead41062cac787fd32a45d516db2d6c33e3dd37e77a5bf6e118e0aff7dbf0a4fe9ecc4cbb8a355c1ad40072c7537856eb8717818cfa46a06e2e2b9a46e2517171b8a8243418bdbeec692dfb22455e40a59636c271e9f61960a08357878852cbee769f04eeaaec75c38f0311bdef44272167cf76c6c42ed0056631523eab81852f8968984340baa649edf2d04aad76c79c17d08778a0ba5c44e8de0d7127338769e580974ec643d58adde6c1d9085a89f5e897a737303e07fdfb434ffa58881ad474225fe6882bcc8476a4c2d829577f3316e0af860e6709b5a017e9c7c2c938773aa5e7967887f35c2b8fab66bf8a3cd24bd7ff4727d1b0c9550bf3aa08b5b48c4782c9cec4acde5ddd22ac8b4f829ebafd899a50bbf87f957d6d1d6e8951ad1644280efcb643411cbbe9c844ab565be47db5bc7a0815e69e500ad4e0f754133f2b3d8031efd726e2daa5358e3d10a1f0af6c364ac559d0545f951fbc50ff72ecdd6b374e2015d2244fe8f74ef24ea47c8912395c1e4a9d83353ddae8bcc9ee2135a017fcdcd9a0d56df7aeb53d723e528ff920bf906aa005c5102164a19e38ed4c9ca510706e635e1fdc6e0af01037f91fdb2f505773d778ac0828e1492d699023b18ca65669fd70d64833e744d53eb526d248d2c6c422f07f4a34b2c1a6b29460894bcd9613db696777c5dab9f2685ede08e4301bec407fb932c81a73795a7503ceab0bf07398ffde353df8eb56f2206be78af6a914e7c13ea93ec01adb4bebeb9a0aea2051b7023a0043dfecd4bf19915278548f3b07a717401a36678910c261931e49bfd78de49b3c0e2c4bab6442cef3a958a26042669528e0b361fd2f4f41b588e2b3352d0a9a24bbfad9cd3356ba1552b19a2706eb14ffe0c33fa73d4338c5ddb3917a656183b8052e5103b56538b73d02438d37cf01084e9106aef3e6fab43d496d5f470933b03266b2f233cf140f1e8f0689cf03d17763f65dcc0eae9824c9ca3ccd47668bbdb60825604ed15faa8840d5267f63b23876df68c9f4b82dcf15899d6d1e00e35f94d2298932da74f7f1ec77e258b44764e8ed0e416c5def7557ba73f1671e530cab05eb39f87184331e2f8671062b7642bbce131275996e76017158178a1e62dc9b1009412a07572a13d81699154bf9bf88f8f0dc82873336c2a6c9b0a46b6caa50da362b6090d2e09ee616d20037abd588c26e0580be2f8931b4204600a82cd8dc0634db32caaa67a793454c76d3777ec9020904db43c2d4ed348c299b9bbaf8f53fe5d97808b57c68990c727432d092c8f92ce96a60127436867ba1b8af934330fef2a34da396ae437c936635df113a5b5d4ea4e8be1efcd8c66635023887c0c180e814ca507c9456a662d20391748167a7551a760bed6b60fdb451a72c74b15e7eb5e44d72d32114b4367052667f771a08724adb407890b57fe90d364a7c390ec5af2e5b6a03167f6c54fdee8d92f489415c45377957dc7705746bafbb52489b9e84d7456618b8aab4430eda1e7eec1858a62d2c937edeffee9208f17419f2a3b914dd2cf240660eed1a330b196f3b455ccab9b4606f182e87c16dd4309393507f7b72fd41fcc8b7f1cf0b91fc93b6e3b63686924504babb77701a0b8064d9f72d91441c825b12ef13ac054a6dfd4e074eefbd576ca3e17a94e4b7e6b701d43c119b8d3bc0f53b64f9e868c107e158dc13b227d0583dcb5a3e4650998c99369d0ce765bbc3c30edd9bf61d7245714d9e7512527a2be434a98507768778ca3bbe79ead252450ce5a9f1f463458e2738fea7ec053b46a693538b7728b4218a8e85a91f0c09ef21fff4abcda50be4d2a0f2c8f27c75b1e5c0dc8781c54ccfdd4d7cda1682b49b2b9043566e4e5067e9216e252bf1e55649684d8cedcc31a49376edf4d09875d0dae3c7dcfcd3655f538f4a5e3d06343b58cb71df5217a23e160a313096c32b48938d47a4f8c7994a735f516391e11c5bc80e4a10194919f4c92ec6fd07509df96f1882d2109565f54fedc2f80a23db4fc92db9a8c45060b7085e184d6a504e3a5d32c79176e4ef829c8a96aa171c4b5b5a26ff953ff910fdd0bd6f00fee4f27acfe55eaf8abd34010591a92d4e668d745e9a6b2f985ccdb5f77bb9580b8324eb53554274c9336c1593bd02e8d16827e14b39a8d1f4fa0ff6e1ad07d56bd5dbc45df7ba18ebfab66ad0dfed93a59421eaddccdcf2564c774f599556c14144e4d1f49c8e91f68c8df7b8057ad519479024096964c8776e2c83fd4032b11bbd7f504fbbe8fe718053a0ea331de1885254f98c88604751d827c6dd40953522af5b9d75de3c73150a82cc009882fb931eede64ad747251462b28d2ee36798e0d1877d1a23e40cd85f0724eb02098ff7e3a6e7c527261bb5d80ad3ebcf69dfe25daae2f71eb0bd527bba990f4b258315ed0a122d046e48141228be90c1e5b4a4b4639597912a07258b5cdeb9864d98eb028fd9ea1e55049187c3ef6f0fff966b55b57d21b5f71f1113e1b26dde32bb2c47a4c0788f1637b02e2d548e64b4e431bd7bea191b91e69d4f3846477b39a10bf8e2c33a09cb8d27c996ac7853155ed13419444d57f8b1270fc17eb5e10e110d0fbedfa456e18b77a08e825afd93920e07ef8c2934b01b6bdae9a3bcb161bd4fa1668e6c499b0aee762c1155f617e0928b2b4776024a56182e6fb98c1a007282af8972103a6968035860f10a60f07c1cf13409e8303d909d51ff904960980b0fded658159004cee0903c03f850516d1f3241d3ee09627ed727b76ceb8e0d8fea138e41a62257544a9a20a3509895a8d27740abf3396026466e323207bac6aee37bb16af6359a991fb85d6d641f7b8d86bdfa99fdc56e2e224b30984fdfb707f483931fdd7fe04441e8a468a75d60cf45b2f1cbecb3ea706eafb36d4daf528591a0be7acf0b9651cbfbfeb3037b8c4503449ef485e388644d6b235c4e117063c56eb867dea887811df4b5c8fa6f3919a421eb1224e6cbaacee3c6123f5de6750a35f92ac5d216a5156bc1cb40b486cd931b75b476166286f594d10ce13389cd74b466091442f490928f6dc94ed2eb51b767717e1eaedc6ff481501906853619b3bd154d735cf8a4fec9d5ecd08c11b3b88f2f1603fe8e765f344116370631e9cf643bde6c5e40b4570eee84ad70c3203f35b1041fe2a57c6ecd66313be39428b7b06d9b834a6e749908eb51156f53a7806ae8cb9eea4262e826dd387f7d9f63713d95cfb113d123f63d2f1c57a9af9955af669a3e8e2d42c00c71a3b3ccd076ac5fd51ec04b0c0e82875e542f23540749f536560bf912bbed18daa84951146747931e7912eaf819ec015a825c3db7ebb97aebea2dd5b798a40fa723972d2a556148f253a14b2e7bd8fc384476e43228227610024667b8a3f44db209467a6582b685deafce31a39a408c41495006825af19e08a3510cf41b90540e23aa5ce3e851764715c5003a54107303ab169a27342193494e822368647fe86d82ae424951551f1d9b6faef96cfc7b55970c4ef6c464eabba1d0a6b468e2b6b87aaeade345dfb8b7d13e894aa8d4cfce70922c5fa129ebca45cbb0eafbd6889934b1bd6a637666c30e5b93a932f3242ac588d0eaaea5c31183c92392b84bad9a1a9a653999bce3e10ccc95e267ece0afd24c4965a2fdfcfbd8583071526cc4b9560ee5d23772fb602c8ba69222743a864ec7c4deab15423d1c3e71092a651ca99a621335ac7f5c8ab95a1e2a098158684e7107fc60186304df178bbb8d1b8c5975f3d969d3c8e0f0ef1ddcc974afe300c584d2cf78c7458a649346a5e0f563e88f6ad06a47c9ba05d75bd89e0200562cf892d376981a4c886c0c90baf937d6953308fd0f216a1ace0f2098c88dc041a3be47250fdc7ccac393a1d235ff01cd8846ca860c7b88cae3cfe4c54756e84070074d8a0faaad4136d6701af94f3a24d8c4f5c846035e4f393d92c455e9c5ac7579b0d36122f2a57cd6fcea19f877443a61dbcabaaa12e1a17dd219d7e9c73a32479b6d9568df6df800ff620241354311ebb5d0721d635b987f12b6b50a5b4815dec5629d62a26bb70f06ce098a59417305bc67285fd8ab11ee301fa50f579438f14411bc9b4bd5f6b9478750ea05f30c1c0b518ea8bfed81d51a238a4e1479e088a957d0a3d90f36fce82098a69d7a9b4a16993a070be5ce9d5f8b6081f24ff644cd12cc23c2a59423bd13714201b779b415bd38d7d10ca029b73b0c83f5602b1c174b2531977a2d0466d94cccdb825afa38acb7c6625b7a81d5556c767b4316e85d5ce10e09816e34dce8e0e79af6642a6431625110e466fbd6aa6f09c24dcfff6f1d0c6796978dbb610b28d5c2233f13bbfa24c6320030dc85e6570673ccdb46b0c29f1f84ce8372249672baa08fa4d0f58ea36521873f368a3a1ad710f3b3a41805719c092da154200db28b92f48cd79c3fc613c9756a12a2bff10cae84170bd69715de22ea3edb01d2d7e0bcf1aed3567dab698f3ce2b34f29ef3ddab5d5485561047ca5abc5da059b75f702dddfef7e8b8f53af493bc2a37a530ce123c9530ef5445f5939020d1e58b5d5ae9bda685802cf3b704d5eee31d71cf29a79f5eacc021d514ad5dbc7b572c828105ed61ee5811efe1298694ae1305decafdc57dfccf8157f1becb01dd87b4651ea63d271c8c7a4bac80f68ba1d6afaf13dd7eef6fddac97cada950739c81a396e05780d8fc6e3e667274a6ae443988f91775e18648cbd6a19105a3e2aebbe558d40c1395dccd4e17ea689e78476bed6b0b1086f26af52950a6586dbf41838944fbf9c8b97c5e08dfdb326b341885e77828087e4daafd52c8b9464c670cbcb86840e8f5f2c6913128cfc46810e4e9ccaf2aef393a30fbe67ad7773dd215416b2480ec918b28d78e67d83e2ad890baa5c13f28bc95520bfe31bf66483290bcf4bc5e543975ca37551d0a6b27422cb3681d79e79d1e7a049e0b116706967592c122f59686014c4aaadd4eccbaf5eb4fb0ec91f0d78f66c634e7fd4995416b79d6fb673b266e78f70f2164ea8a0fa9490d3891e0a89f9484eb67506c3325dd8ead0ca8a79c04b436b2aa794dd307ae9915a8f70b73981411afd5e0af691d8780f6548b72601a32f09248fd0b9779481b3250abeae470e2cddb47a958ad6b61284398517f3aeb33cd564a450d543469a09d4b82cbe927c678b5af7768eddc3f415bb9ab672c2a37dfc384c8fa22c24d53c32c352c2fa6c555a0c5f743468ca767a46d2edfb03eb8d451080216adc81c20288c284490a990aa63879579824ae6534638c5cc0048c5281fb7a72978eaf281b993306550001ce01578073946392504a4150f18baf39c157e1d48041a45c054c09bd8caeeeb6240c740890496b0815136c3ba71e0461af619d421390c38bbce86b82f209e3563bd56686a76f798685f2ebbd47c58f09253c05ba4bf5a74fcea714776ae925816d187fd705505888a76c125f7dd2a6929231fb26e59ea5a4de57da630d3422d12587fae25ad297fe48e6d2cc48e6cad38877893571212bad65c198160407638c60d49f3e39570e0c61d377da30394d59604ef38041e173205c83a732f9ced64f61e71549a6cecd17e32bca72858b20c64037d9b3e85cb8df884d2af8db5d21b23d224f7606fc5ef5ba5751475e0fe0cf7a97a4eba00adaac0dddb7e413409ab4617e0d90df38085a7aafa0a7c365826915e08d54c7f4a3b12e1a3cef44852ebef7290459475d63f973b8951886a5607b2e0b89f8ea3ed377b272275fc670732520937c93a697b9ce5b08ad51c58a6687cb8da50c381c9145bd06c9893619ac305306ee1c2bb55c007ce0d76de0cafde92c1aec6ba2b4ae0d83b536316df6c912f5e1b0cfbf39b55d414d0e4d16741bb241179d498afbcc2b8f1c70f0d6d1df13213eed8ff9a37e0497368c228fc452a6f78a7c341b6ad2f89dbb63e8916abb8f735eadfd77d2b9ec30c1cb5e58fb7205588676e6021e624ecb08358821cc9a4da4f5b26e3ebe12cb64c2d241eb89105e87a2c6a04c4943f8fe8f107e05f18c475bd48e1b7a7dcecec2c8786d56d6e418b09acb9d320b5ddd97ad73f26abdd2d7c4224002882fbe192b74ed2aeb4770bb0308a925c324df26fcfb7a1961913e6a226685e0900fec38ab16fe831fcbfdc5a61b0eef2b3546e2eaf53cb4a6c58c3489230e18a09caee28ffe57ba14e6536e8735da6e5dd011614d859e631cce8022f6a1227cb50ebdc420f0f0dd4f725779739223c46083c57145adcf0157facb5787a79e45b80482511e7ad9b8b665db045027f93884a0f34cacacadf60cb545bfbf7662818574f27a65af1be0ba37fd4ec06e85929b1c7797440a25d9937bcc978c5368d1b89a1dab349dd57d6eec9f23c42e2a238f6a6b788dfcd9d7494f15703327e000f85b55a4cc756941b8524aed964e55d0fcee9e2a516afa713c2d254600c5e4726bff234008611ff87e8b84120f9dd5285e410f4766566cc8870dfaaede537faf222119997d4e42d9294160b801c75225eb6bbbf91663fa11c3ba7f5f44b4abed273390c0928a9dff1a292fa2151678d50d444edcfdccee9c4043a44a988c8e21cbc1ca841ae29e24097c4aaf2d7f990dba88866f36474fb74ec397770cf026ca5b1951207af3fe948cbe8196e42cb4d66149493f58e70410d263952f0b3e4324ede0a06f2d831a8ec00a9f71daabe105363481762f9be189d6844af22f713e45cc5079b9e552583b4dae2d0dae2a9cf3cd84c6acc7a58eab4f4e00c162b1bd24c60d6e03ae191f699b9bf60dfaaf5bfb6acb54f2602f5efbab73e1bd4b434bcca2b5daceec1dc8536cae327ecc76abe690ce4dee493eea41c519d82807c10c13e7710c730a39985852976b8150a4f4cbf9651a17288dcc47cab589bc8d90e2cda3ba397ec18ed051e7a8d230fa0f51def88411276d067d07bcec01f4c455190105cb5d7951eaf6d9e4b0fea85341b25145abe7c68094fcffb547e66d16b2602a1ca7c1328535cb6f824b893e931adf52ffa1fc3b16b6a8a55a19f20abaf2455573102cd83eb0a219f625d11d64e5aca1f4ff42edf5cbe7365c412c9512fc289713f3f8a166207830fc2efdbe8552359ec891c2bf66b554af361806b4b54c7054f850d5e427a05d44102b5350e85cea42c4ba5a1aaf5c0f2c1ee15ab5835c31e06f5d45b9a27c101833a9c1a22cd1d6e6e91a4d1ed812f65bce3845bfd235486380ad79818b1ebc592d653c9d5632e59b7e52e99970e410e1a868079fa830a4ec264f09e78d92ce849a15a21f0ae360debb41e48be8bc000d7e0deed2f5de82bddd1bc419888dfffc9341ff10929a7e78421413c4d0beb27de6de5fddfbd3f1d4735e446414c26e25411600e83468d84c95d8a0d89580468f2902abcdf33f0707868f628fc6b3b5c3ce8abb082133c85299c1ec29a42c4de25c9b706aa9f2077862be835cd093f0f0b2a7f05915ac0ae3209a622fe9b6d7c7f493a50aaeac1d90b81ab23cb2654ae16eb7afeae16923d19e41902ecc2bb12fa7a65a5e8f2c81d7236429889ecaead036be52346165616714f0d374548305e79d7d9bf0136a16a23663d33371304e430afb46f4ea6e2916e8465a41271ac90ba72e269e4f1456aca9ec5698b3904dac7c9e75024e042c0fb77b416a17eb8d7af87cd3ee6355b003949510d1a9b10f6cbcb18cba49a1c5128b2a0a0d5872cfc4156b6906d29eae65e94f881efd681704145260af81ef9eea3a8e766df2e10a39dacad28e7816367b06cf56626666d12e37fc32a5dd451d008b97b7d09544bb71afcf7f805d3b34cd1df63b3e139b0531935b43c3ab5c444d23498504f1cc92a6389914060b75d6268ae2cce864b4265a137ed238248efe1d31b555c9f25b0aa5fa60c26add26be96e1ca1acedf6e44a75479c4be443ccd75d666521f5386004711625465318afd755a0d923a94cdb401159a3b21434808df34f9223ae8c6e0845c10b0fc415ac32166be2b82e1845eda37fb7f0ffb39571a66030706f4c3bc6c8dd754f95f80e49c6cfc34e4e62704c123ba1effbf393c991de2b4e8e39f0cdda502715eef920546c005ac962b14cbfd295209c038b73a2cb8d3e8f9020e4abf6d1cf108e026dcc53944750300c066a54e7deadd71d8f5f1bdeb5b3e1f6773503c25cf28845f02fa1c50b1405e94404eb2aee0111bdbb376e231bb0bfcc618ec10f2383f979c31b8ac68ae99c760f1d4bc3981486fe3c26bff2aba6269ab43505dbe4bc5772c9585ac94441c7ca71ed92fb669e49da5785758cef3bffb2c51a142c5e36eb14bb430345ac322b24377b2ee02bb69113c6d1d0fbd3c7cf16c95a895bba4eacd60d8c1f9e735d59f32a74e3c0bfb9165652b6263f6ecf7ad92b4068191590e3b7c107a7f8f8ba6d0df93f22adf0cb65ec1e7f98d3f718967ec0fa13ebfab3169d6dc73fcf115251931e317d9ecf65bcd18a8ed8d1b46d3b0f520732b50f158d48e63e3190e6c9c8950bac65ee21f400c0c3594407bae8cee8d3b5e21216b4e3222dc8a87cdbc04f02ed43001c8df19ca49728e25265d09b32d5856ba1cb5b2b0ca419dc56a50b97413cb2d3f70a2b92f35876b4622d6a07ad199cc9e8fc7f95fa55fc83b558d21c83bda7b4d9064290a942c211c6464d9603719cea9af37c620d172964e930c075a015ee4fc86898fcaf698d879ba5eb5ef45e9af4b0309c7dfe862f7ffdca6a13018afa82668f3c978cc7d0a764fb02830aad7a1affe76d8b724fc0d2d7dc5cb66f23a087f454f9d4a09f2e7e1d1afdf2cd026a5557e453e405b3742061f7a05561bed253c7ae0ee7a72b5106c1f2bfdecfab63f2889e838b591390eabb89d28580ecf576eaa5fec912ba9c9e72115605f46bc479eb3db7fc0f1a8a191755f95b4f34f5f193f202b886ebbf96c3bb5a0a4fc0c7a327227cfabcf8f3393d1bc891d7f2a82a8c3dced69eaf6f971ae6452c7bed3384a307982df0bfbc0b0bc26d660e176e74a896c39d255971cb49794ac883c8b16a01cb8e8890d8f4871cea4c26da185cc7d89c052a2d34854c8099f09cd73ed6ed634c5202cfbae454027542515e119a600", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_IOCTL(r7, &(0x7f0000000780)={0x20}, 0x20) fsync(r7) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000100)={&(0x7f0000000200)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x24, r9, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000200)={r12, 0x3, r0, 0x5}) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2.434487747s ago: executing program 3 (id=1509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000580), 0x0}, 0x20) 2.125418573s ago: executing program 3 (id=1510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210}, 0x21) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@printk={@d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup2(r4, r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r9}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20040840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) write$cgroup_type(r11, &(0x7f0000000200), 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x88, &(0x7f0000000600)=""/136}, 0x90) 1.82344201s ago: executing program 1 (id=1512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="eb4676f22c9816dc1f1079b5a0a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="e2", 0x0}, 0x50) 1.654785322s ago: executing program 1 (id=1513): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./bus\x00', 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) (fail_nth: 6) 1.603086537s ago: executing program 2 (id=1467): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') r1 = memfd_create(&(0x7f0000001d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81\x01\x00\x00\x00\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea%\xc0\xe9\x9d,K\x97\xe1m|g', 0xd) r2 = fcntl$dupfd(r1, 0x0, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffff1f, 0x12, r2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 1.507756204s ago: executing program 3 (id=1514): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x30]}}, 0x0, 0x2a}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x7c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x60, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x20, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}}]}, 0x7c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000600004f624d7a757c3d39ddc689e8aa94dd3102479d45e2cd3df5e47d99db3fcad9ce8e61a71069d421b0068116f5a82b8c046ad6ebf85b26feae6d092ac3802ef05b92c32134ca0538f8474a042dafbf03a4b40fe38897"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006112001c0000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) 1.42486282s ago: executing program 0 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x5, 0x2e, 0x81, 0x8}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xd11, 0x3, 0x0, 0x2800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18d307af6200000000000000000000009500000023000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmsg(r3, &(0x7f0000008ac0)={0x0, 0x0, 0x0}, 0x102) unshare(0x8020600) syz_usb_connect(0x6, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b000000f9ffffff00101109050b"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x9, 0x6, &(0x7f0000000d40)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 1.005473413s ago: executing program 2 (id=1516): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) epoll_create(0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socket$rds(0x15, 0x5, 0x0) syz_io_uring_setup(0x4446, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x6, &(0x7f0000000340), 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 962.062394ms ago: executing program 1 (id=1517): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x28, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x69}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000380)=""/209, 0xd1}], 0x5) 751.601053ms ago: executing program 2 (id=1518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 660.061385ms ago: executing program 3 (id=1519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000580), 0x0}, 0x20) 425.381007ms ago: executing program 2 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="120000004200000226bd70001bdcdf2500000000"], 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f04000005f9"], 0x7) syz_emit_vhci(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$alg(0x26, 0x5, 0x0) mkdir(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000004c0)={0x10000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000002c0)={0x10000, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000500)) 279.5089ms ago: executing program 3 (id=1521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="eb4676f22c9816dc1f1079b5a0a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="e2", 0x0}, 0x50) 450.678µs ago: executing program 2 (id=1522): r0 = memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\xdb\x00p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw^I\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6kYH+\xa5\xdcxUY3 [ 292.238254][ T8550] dump_stack_lvl+0x241/0x360 [ 292.256562][ T785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.258395][ T8550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.274757][ T785] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.278112][ T8550] ? __pfx__printk+0x10/0x10 [ 292.278161][ T8550] ? snprintf+0xda/0x120 [ 292.293582][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.297125][ T8550] should_fail_ex+0x3b0/0x4e0 [ 292.297172][ T8550] _copy_to_user+0x2f/0xb0 [ 292.316551][ T785] usb 3-1: Product: syz [ 292.318496][ T8550] simple_read_from_buffer+0xca/0x150 [ 292.328157][ T8550] proc_fail_nth_read+0x1e9/0x250 [ 292.331532][ T785] usb 3-1: Manufacturer: Ṝᒔ寨뱎뾢ᦜꎥã§á¢³å“’ⴶ뎢딲𩄚ᒞ䀗쟢햃툨鮑凙痰ۦë¸è¿±àº¿è¯‘ä¢à¾¶Ì°é¤è§«Ï›ì²©ç»êˆ«â‘«çµŸè·¨ [ 292.333220][ T8550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.333263][ T8550] ? rw_verify_area+0x520/0x6b0 [ 292.358526][ T8550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.361937][ T785] usb 3-1: SerialNumber: syz [ 292.364097][ T8550] vfs_read+0x204/0xbc0 [ 292.372848][ T8550] ? __pfx_lock_release+0x10/0x10 [ 292.377884][ T8550] ? __pfx_vfs_read+0x10/0x10 [ 292.382583][ T8550] ? __fget_files+0x29/0x470 [ 292.387186][ T8550] ? __fget_files+0x3f6/0x470 [ 292.391901][ T8550] ksys_read+0x1a0/0x2c0 [ 292.396187][ T8550] ? __pfx_ksys_read+0x10/0x10 [ 292.400979][ T8550] ? do_syscall_64+0x100/0x230 [ 292.405772][ T8550] ? do_syscall_64+0xb6/0x230 [ 292.410486][ T8550] do_syscall_64+0xf3/0x230 [ 292.415009][ T8550] ? clear_bhb_loop+0x35/0x90 [ 292.419703][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.425612][ T8550] RIP: 0033:0x7fe4be37467c [ 292.430035][ T8550] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 292.449651][ T8550] RSP: 002b:00007fe4bf07a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.458074][ T8550] RAX: ffffffffffffffda RBX: 00007fe4be503f60 RCX: 00007fe4be37467c [ 292.466059][ T8550] RDX: 000000000000000f RSI: 00007fe4bf07a0b0 RDI: 0000000000000005 [ 292.474036][ T8550] RBP: 00007fe4bf07a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.482013][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.489986][ T8550] R13: 000000000000000b R14: 00007fe4be503f60 R15: 00007ffe0a3c2f98 [ 292.497995][ T8550] [ 292.776169][ T8556] ebt_limit: overflow, try lower: 0/0 [ 293.040008][ T785] usb 3-1: 0:2 : does not exist [ 293.250024][ T785] usb 3-1: USB disconnect, device number 16 [ 293.483862][ T784] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 293.550099][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.679219][ T784] usb 5-1: Using ep0 maxpacket: 8 [ 293.702406][ T8566] IPv4: Oversized IP packet from 172.20.20.24 [ 293.707782][ T784] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 293.709195][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 293.724140][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 293.725090][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.751867][ T784] usb 5-1: config 0 descriptor?? [ 293.810446][ T784] pvrusb2: Hardware description: Terratec Grabster AV400 [ 293.832977][ T784] pvrusb2: ********** [ 293.846678][ T784] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 293.863683][ T784] pvrusb2: Important functionality might not be entirely working. [ 293.873951][ T784] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 293.937635][ T784] pvrusb2: ********** [ 294.076856][ T5132] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 294.299017][ T5132] usb 2-1: Using ep0 maxpacket: 16 [ 294.308569][ T5132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 294.343055][ T1980] pvrusb2: Invalid write control endpoint [ 294.347681][ T5132] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 294.361362][ T784] usb 5-1: USB disconnect, device number 19 [ 294.400420][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.422661][ T5132] usb 2-1: config 0 descriptor?? [ 294.438425][ T1980] pvrusb2: Invalid write control endpoint [ 294.450584][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 294.481122][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 294.498487][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 294.520140][ T1980] pvrusb2: Device being rendered inoperable [ 294.532870][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 294.550406][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 294.569356][ T1980] pvrusb2: Attached sub-driver cx25840 [ 294.585153][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 294.618134][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 294.625123][ T8589] xt_ipcomp: unknown flags 12 [ 294.868936][ T8566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.887521][ T8566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.919137][ T5132] hid (null): nested delimiters [ 294.924109][ T5132] hid (null): report_id 24797 is invalid [ 294.940790][ T5132] hid (null): unknown global tag 0x83 [ 294.946340][ T5132] hid (null): unknown global tag 0xc [ 294.976697][ T8573] syz.3.937 (8573) used greatest stack depth: 18232 bytes left [ 294.991239][ T5132] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 295.007254][ T5132] hid-generic 0003:0158:0100.000D: unexpected long global item [ 295.019012][ T5132] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 295.153185][ T5132] usb 2-1: USB disconnect, device number 11 [ 296.031409][ T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.215573][ T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.338542][ T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.540663][ T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.979639][ T44] bridge_slave_0: left allmulticast mode [ 297.007117][ T44] bridge_slave_0: left promiscuous mode [ 297.031635][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.094027][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.111765][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.126279][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.137204][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.146169][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.153997][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.701418][ T1158] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 297.906748][ T1158] usb 1-1: Using ep0 maxpacket: 16 [ 297.926031][ T1158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 297.945542][ T1158] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 297.972698][ T1158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.011631][ T1158] usb 1-1: config 0 descriptor?? [ 298.324272][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.345628][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.366454][ T44] bond0 (unregistering): Released all slaves [ 298.506940][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.538015][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.603641][ T1158] hid (null): nested delimiters [ 298.632046][ T1158] hid (null): report_id 24797 is invalid [ 298.659031][ T1158] hid (null): unknown global tag 0x83 [ 298.837892][ T1158] hid (null): unknown global tag 0xc [ 298.868606][ T1158] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 298.897823][ T1158] hid-generic 0003:0158:0100.000E: unexpected long global item [ 298.913001][ T1158] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 299.821680][ T1158] usb 1-1: USB disconnect, device number 12 [ 299.869359][ T5091] Bluetooth: hci2: command tx timeout [ 299.956712][ T785] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 300.166122][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.210149][ T785] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.254659][ T785] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.273797][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.303788][ T785] usb 2-1: config 0 descriptor?? [ 301.470491][ T785] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 301.484372][ T785] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 301.636037][ T785] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 301.916637][ T5091] Bluetooth: hci2: command tx timeout [ 302.206753][ T784] usb 2-1: USB disconnect, device number 12 [ 303.058107][ T5091] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 303.058150][ T5091] Bluetooth: unknown link type 5 [ 303.072366][ T5091] Bluetooth: hci4: connection err: -111 [ 305.113949][ T5091] Bluetooth: hci2: command tx timeout [ 305.568594][ T8710] Cannot find del_set index 0 as target [ 306.725822][ T5131] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 306.984164][ T5131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 307.056631][ T5131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 307.086911][ T5131] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.142757][ T5131] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.186715][ T5091] Bluetooth: hci2: command tx timeout [ 307.203058][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.239712][ T5131] usb 2-1: config 0 descriptor?? [ 307.249288][ T8716] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.329816][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'. [ 307.665640][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 307.805801][ T5131] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 307.838862][ T5131] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 307.903552][ T5131] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 308.129957][ T44] hsr_slave_0: left promiscuous mode [ 308.155353][ T44] hsr_slave_1: left promiscuous mode [ 308.197651][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.205261][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.217815][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.229260][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.299570][ T44] veth1_macvtap: left promiscuous mode [ 308.305616][ T44] veth0_macvtap: left promiscuous mode [ 308.313340][ T44] veth1_vlan: left promiscuous mode [ 308.321565][ T44] veth0_vlan: left promiscuous mode [ 309.243151][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 309.243175][ T29] audit: type=1326 audit(1719991269.642:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8776 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738375b99 code=0x7ffc0000 [ 309.312946][ T29] audit: type=1326 audit(1719991269.642:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8776 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738375b99 code=0x7ffc0000 [ 309.373238][ T29] audit: type=1326 audit(1719991269.642:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8776 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb738375b99 code=0x7ffc0000 [ 309.415112][ T29] audit: type=1326 audit(1719991269.642:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8776 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738375b99 code=0x7ffc0000 [ 309.453587][ T29] audit: type=1326 audit(1719991269.662:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8776 comm="syz.2.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738375b99 code=0x7ffc0000 [ 309.836117][ T44] team0 (unregistering): Port device team_slave_1 removed [ 309.892616][ T44] team0 (unregistering): Port device team_slave_0 removed [ 309.982448][ T784] usb 2-1: USB disconnect, device number 13 [ 312.225645][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.274441][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.326195][ T8626] bridge_slave_0: entered allmulticast mode [ 312.376988][ T8626] bridge_slave_0: entered promiscuous mode [ 312.448867][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.516027][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.537101][ T8626] bridge_slave_1: entered allmulticast mode [ 312.559067][ T8626] bridge_slave_1: entered promiscuous mode [ 312.885264][ T5091] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 312.895360][ T5091] Bluetooth: hci3: Injecting HCI hardware error event [ 312.905484][ T5091] Bluetooth: hci3: hardware error 0x00 [ 313.531105][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.629206][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.287962][ T8626] team0: Port device team_slave_0 added [ 314.326022][ T8626] team0: Port device team_slave_1 added [ 314.427422][ T5123] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 314.511027][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.514654][ T44] IPVS: stop unused estimator thread 0... [ 314.520482][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.603522][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.642633][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.652961][ T5123] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.666334][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.687507][ T5123] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 314.726583][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.769595][ T5123] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 314.786639][ T5123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.823686][ T5123] usb 3-1: Product: syz [ 314.845312][ T5123] usb 3-1: Manufacturer: syz [ 314.850177][ T5123] usb 3-1: SerialNumber: syz [ 314.873294][ T5123] usb 3-1: config 0 descriptor?? [ 314.873822][ T8843] xt_ipcomp: unknown flags 12 [ 314.920677][ T8626] hsr_slave_0: entered promiscuous mode [ 314.940740][ T8626] hsr_slave_1: entered promiscuous mode [ 314.949335][ T8626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.966024][ T8626] Cannot create hsr debugfs directory [ 315.236722][ T8835] netlink: 'syz.2.1013': attribute type 5 has an invalid length. [ 315.347695][ T5091] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 315.495968][ T29] audit: type=1326 audit(1719991275.902:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.2.1013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb738375b99 code=0x0 [ 315.531896][ T5091] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 315.541813][ T5091] Bluetooth: hci5: Injecting HCI hardware error event [ 315.551493][ T5091] Bluetooth: hci5: hardware error 0x00 [ 317.010266][ T8871] program syz.1.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.151448][ T5127] usb 3-1: USB disconnect, device number 17 [ 317.753144][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.759781][ T5091] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 318.708149][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.565221][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.199056][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.870318][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.025109][ T8626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.085893][ T8626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.166433][ T8626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.437155][ T8626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.499957][ T8899] xt_ipcomp: unknown flags 12 [ 322.902757][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.016209][ T8934] program syz.3.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.075132][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.170107][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.177388][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.223155][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.230557][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.252219][ T8940] ebt_limit: overflow, try lower: 0/0 [ 325.890517][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.947780][ T5092] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 326.156808][ T8975] sctp: [Deprecated]: syz.2.1043 (pid 8975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.156808][ T8975] Use struct sctp_sack_info instead [ 326.189171][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.328296][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.030794][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.687032][ T8994] program syz.3.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.958353][ T8626] veth0_vlan: entered promiscuous mode [ 328.009814][ T8626] veth1_vlan: entered promiscuous mode [ 328.271776][ T9011] ebt_limit: overflow, try lower: 0/0 [ 328.336429][ T8626] veth0_macvtap: entered promiscuous mode [ 329.796204][ T8626] veth1_macvtap: entered promiscuous mode [ 329.978525][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.074762][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.090989][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.116629][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.156419][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.344299][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.406607][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.417260][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.427176][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.446531][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.671364][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.871661][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.938642][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.072584][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.143988][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.167699][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.184789][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.216570][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.236529][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.250239][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.286025][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.300127][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.311139][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.322044][ T8626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.337354][ T9044] sctp: [Deprecated]: syz.1.1055 (pid 9044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.337354][ T9044] Use struct sctp_sack_info instead [ 331.355707][ T9019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1050'. [ 331.367215][ T8626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.379946][ T9019] binder: 9018:9019 ioctl 4018620d 0 returned -22 [ 331.391016][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.434627][ T8626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.456253][ T8626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.541010][ T8626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.588744][ T8626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.009372][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.049541][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.057050][ T5131] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 332.257008][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.278650][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.298604][ T5131] usb 1-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 332.331933][ T5131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.370624][ T5131] usb 1-1: Product: syz [ 332.382807][ T5131] usb 1-1: Manufacturer: syz [ 332.401787][ T5131] usb 1-1: SerialNumber: syz [ 332.414386][ T5131] usb 1-1: config 0 descriptor?? [ 332.431279][ T5131] option 1-1:0.0: GSM modem (1-port) converter detected [ 332.651166][ T9064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 332.699699][ T9064] overlayfs: failed to set xattr on upper [ 332.705498][ T9064] overlayfs: ...falling back to redirect_dir=nofollow. [ 332.751635][ T9064] overlayfs: ...falling back to index=off. [ 332.838996][ T9064] overlayfs: ...falling back to uuid=null. [ 332.853314][ T9064] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 333.444277][ T9082] ebt_limit: overflow, try lower: 0/0 [ 336.731112][ T5131] usb 1-1: USB disconnect, device number 13 [ 336.772518][ T5131] option 1-1:0.0: device disconnected [ 336.948116][ T5129] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 336.982502][ T1158] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 337.129999][ T9107] sctp: [Deprecated]: syz.3.1068 (pid 9107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.129999][ T9107] Use struct sctp_sack_info instead [ 337.186621][ T5129] usb 2-1: Using ep0 maxpacket: 8 [ 337.203471][ T1158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.224987][ T5129] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 337.254479][ T1158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.264696][ T5129] usb 2-1: config 179 has no interface number 0 [ 337.304855][ T5129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 337.324455][ T1158] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 337.344264][ T5129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 337.366285][ T1158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.419372][ T1158] usb 3-1: config 0 descriptor?? [ 337.426781][ T5129] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.494617][ T5129] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 337.590462][ T5129] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 337.647922][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.672839][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.683543][ T785] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 337.719280][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.769064][ T9089] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 337.931169][ T785] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 337.960372][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.008132][ T785] usb 5-1: config 0 descriptor?? [ 338.135836][ T5129] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input39 [ 338.297200][ T9115] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1065'. [ 338.392898][ T9115] 0ª: renamed from bond_slave_0 (while UP) [ 338.413270][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1067'. [ 338.474691][ T785] hackrf 5-1:0.0: Board ID: 00 [ 338.495636][ T785] hackrf 5-1:0.0: Firmware version: [ 338.505156][ T9100] binder: 9099:9100 ioctl 4018620d 0 returned -22 [ 338.523993][ T9115] 0ª: entered allmulticast mode [ 338.549044][ T785] hackrf 5-1:0.0: Registered as swradio16 [ 338.574164][ T785] hackrf 5-1:0.0: Registered as swradio17 [ 338.589363][ T785] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 339.029235][ T1158] usbhid 3-1:0.0: can't add hid device: -71 [ 339.053189][ T1158] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.138421][ T1158] usb 3-1: USB disconnect, device number 18 [ 339.316717][ T9127] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 339.352413][ T5123] usb 2-1: USB disconnect, device number 14 [ 339.352419][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 339.352488][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 339.390073][ T5123] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 339.403624][ T9127] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1069'. [ 339.437621][ T9127] team0: entered promiscuous mode [ 339.459543][ T9127] team_slave_0: entered promiscuous mode [ 339.492266][ T9127] team_slave_1: entered promiscuous mode [ 339.587929][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.665886][ T9127] batman_adv: batadv0: Interface activated: team0 [ 339.746808][ T9127] batman_adv: batadv0: Interface deactivated: team0 [ 339.826656][ T9127] batman_adv: batadv0: Removing interface: team0 [ 339.940882][ T9127] bridge0: port 3(team0) entered blocking state [ 339.947642][ T9127] bridge0: port 3(team0) entered disabled state [ 339.954181][ T9127] team0: entered allmulticast mode [ 339.961025][ T9127] team_slave_0: entered allmulticast mode [ 339.968568][ T9127] team_slave_1: entered allmulticast mode [ 339.982801][ T9127] bridge0: port 3(team0) entered blocking state [ 339.989217][ T9127] bridge0: port 3(team0) entered forwarding state [ 340.192264][ T5123] usb 5-1: USB disconnect, device number 20 [ 340.605189][ T5131] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 342.081007][ T5131] usb 3-1: Using ep0 maxpacket: 8 [ 342.112541][ T5131] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 342.132118][ T5131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.332040][ T9148] pim6reg1: entered promiscuous mode [ 342.338714][ T5131] usb 3-1: config 0 descriptor?? [ 342.343812][ T9148] pim6reg1: entered allmulticast mode [ 342.364888][ T5131] pvrusb2: Hardware description: Terratec Grabster AV400 [ 342.375029][ T5131] pvrusb2: ********** [ 343.009006][ T5131] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 343.055711][ T5131] pvrusb2: Important functionality might not be entirely working. [ 343.073860][ T5131] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 343.355972][ T5092] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 343.404113][ T5131] pvrusb2: ********** [ 343.422207][ T1980] pvrusb2: Invalid write control endpoint [ 343.441125][ T5131] usb 3-1: USB disconnect, device number 19 [ 343.769211][ T1158] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 343.858633][ T1980] pvrusb2: Invalid write control endpoint [ 343.880341][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 343.957458][ T1158] usb 5-1: Using ep0 maxpacket: 8 [ 343.975742][ T1158] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 2.a2 [ 343.985896][ T1158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.040060][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 344.050965][ T9176] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1078'. [ 344.097767][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 344.116932][ T1980] pvrusb2: Device being rendered inoperable [ 344.125716][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 344.139314][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 344.161168][ T1980] pvrusb2: Attached sub-driver cx25840 [ 344.252162][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 344.283216][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 344.373042][ T1158] usb 5-1: Firmware version (0.0) predates our first public release. [ 344.409568][ T1158] usb 5-1: Please update to version 0.2 or newer [ 344.431958][ T9181] sctp: [Deprecated]: syz.1.1079 (pid 9181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.431958][ T9181] Use struct sctp_sack_info instead [ 344.690402][ T1158] usb 5-1: USB disconnect, device number 21 [ 345.224238][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1081'. [ 345.252826][ T9189] binder: 9188:9189 ioctl 4018620d 0 returned -22 [ 345.515373][ T9176] smk_cipso_doi:695 remove rc = -2 [ 345.531202][ T9176] smk_cipso_doi:708 cipso add rc = -17 [ 345.615368][ T9208] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 345.627152][ T9208] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1084'. [ 345.636375][ T9208] team0: entered promiscuous mode [ 345.651186][ T9208] team_slave_0: entered promiscuous mode [ 345.689981][ T9208] team_slave_1: entered promiscuous mode [ 345.723993][ T9208] bridge0: port 3(team0) entered blocking state [ 345.747181][ T9208] bridge0: port 3(team0) entered disabled state [ 345.761044][ T9208] team0: entered allmulticast mode [ 345.783024][ T9208] team_slave_0: entered allmulticast mode [ 345.836706][ T9208] team_slave_1: entered allmulticast mode [ 345.875565][ T9208] bridge0: port 3(team0) entered blocking state [ 345.882049][ T9208] bridge0: port 3(team0) entered forwarding state [ 346.363251][ T5128] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 346.836902][ T5128] usb 3-1: Using ep0 maxpacket: 8 [ 346.844151][ T5128] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 346.853764][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.864893][ T5128] usb 3-1: config 0 descriptor?? [ 346.875179][ T5128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 346.882635][ T5128] pvrusb2: ********** [ 346.895725][ T5128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 346.913422][ T5128] pvrusb2: Important functionality might not be entirely working. [ 347.282099][ T5128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 347.348283][ T5128] pvrusb2: ********** [ 347.621079][ T9246] sctp: [Deprecated]: syz.3.1093 (pid 9246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.621079][ T9246] Use struct sctp_sack_info instead [ 347.880207][ T1980] pvrusb2: Invalid write control endpoint [ 347.886356][ T5128] usb 3-1: USB disconnect, device number 20 [ 348.033334][ T1980] pvrusb2: Invalid write control endpoint [ 348.063312][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 348.073694][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.097685][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.105474][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 348.114695][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.122344][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 348.142714][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.155240][ T1980] pvrusb2: Device being rendered inoperable [ 348.175997][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.185258][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.200206][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 348.217707][ T9263] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1098'. [ 348.227333][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 348.248651][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.257570][ T1980] pvrusb2: Attached sub-driver cx25840 [ 348.279768][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 348.290871][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.315221][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.333861][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 348.339567][ T9265] pim6reg1: entered promiscuous mode [ 348.348661][ T9265] pim6reg1: entered allmulticast mode [ 348.354171][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.390630][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.461698][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.504689][ T9266] smk_cipso_doi:695 remove rc = -2 [ 348.506549][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.521000][ T9266] smk_cipso_doi:708 cipso add rc = -17 [ 348.573330][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.608390][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.622762][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.633288][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.665769][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.687155][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.701717][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.717458][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.741298][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.776434][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.799522][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.810156][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.833038][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.846053][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.872927][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.947388][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 348.999022][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.035304][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.072429][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.110828][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.146774][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.166685][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.184557][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.201667][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.225597][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.244633][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.274389][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.282347][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.337185][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.347415][ T5092] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 349.357475][ T5092] Bluetooth: hci4: Injecting HCI hardware error event [ 349.365906][ T5091] Bluetooth: hci4: hardware error 0x00 [ 349.402076][ T1158] hid-generic 0000:0000:10000.0011: unknown main item tag 0x0 [ 349.445568][ T1158] hid-generic 0000:0000:10000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 350.229454][ T5092] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 350.247823][ T9301] overlayfs: failed to resolve './file1': -2 [ 350.932814][ T9329] sctp: [Deprecated]: syz.0.1119 (pid 9329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.932814][ T9329] Use struct sctp_sack_info instead [ 351.323546][ T9344] sctp: [Deprecated]: syz.4.1125 (pid 9344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.323546][ T9344] Use struct sctp_sack_info instead [ 351.427673][ T5091] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 351.462838][ T9346] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1126'. [ 351.851731][ T9346] smk_cipso_doi:695 remove rc = -2 [ 351.881430][ T9346] smk_cipso_doi:708 cipso add rc = -17 [ 351.906791][ T5091] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 351.922751][ T5091] Bluetooth: hci2: Injecting HCI hardware error event [ 351.943550][ T5091] Bluetooth: hci2: hardware error 0x00 [ 353.746896][ T5092] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 353.757351][ T5092] Bluetooth: hci1: Injecting HCI hardware error event [ 353.765945][ T4480] Bluetooth: hci1: hardware error 0x00 [ 353.789788][ T5128] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 353.950752][ T9392] overlayfs: failed to resolve './file1': -2 [ 354.041291][ T5128] usb 3-1: Using ep0 maxpacket: 8 [ 354.067823][ T5091] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 354.081147][ T5128] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 354.090506][ T5128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.176639][ T9403] syzkaller1: entered promiscuous mode [ 354.188113][ T5128] usb 3-1: config 0 descriptor?? [ 354.193849][ T9403] syzkaller1: entered allmulticast mode [ 354.217091][ T5128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 354.242551][ T5128] pvrusb2: ********** [ 354.272993][ T5128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 354.515433][ T5128] pvrusb2: Important functionality might not be entirely working. [ 354.523405][ T5128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 354.535772][ T5128] pvrusb2: ********** [ 355.907966][ T4480] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 356.305936][ T1980] pvrusb2: Invalid write control endpoint [ 356.432453][ T5128] usb 3-1: USB disconnect, device number 21 [ 356.689050][ T1980] pvrusb2: Invalid write control endpoint [ 356.697923][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 356.708567][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 356.716993][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 356.727551][ T1980] pvrusb2: Device being rendered inoperable [ 356.735442][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 356.747805][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 356.757427][ T1980] pvrusb2: Attached sub-driver cx25840 [ 356.766885][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 356.780669][ T1158] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 356.805633][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 356.986827][ T1158] usb 5-1: Using ep0 maxpacket: 8 [ 356.995427][ T1158] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 357.019595][ T9442] overlayfs: failed to resolve './file1': -2 [ 357.046660][ T1158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.060108][ T1158] usb 5-1: config 0 descriptor?? [ 357.106856][ T1158] pvrusb2: Hardware description: Terratec Grabster AV400 [ 357.124035][ T1158] pvrusb2: ********** [ 357.138873][ T1158] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 357.176522][ T1158] pvrusb2: Important functionality might not be entirely working. [ 357.188537][ T9447] sctp: [Deprecated]: syz.1.1158 (pid 9447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.188537][ T9447] Use struct sctp_sack_info instead [ 357.206037][ T1158] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 357.254420][ T1158] pvrusb2: ********** [ 357.551399][ T9461] syzkaller1: entered promiscuous mode [ 357.576357][ T9461] syzkaller1: entered allmulticast mode [ 357.636385][ T1980] pvrusb2: Invalid write control endpoint [ 357.669705][ T1158] usb 5-1: USB disconnect, device number 22 [ 357.859843][ T1980] pvrusb2: Invalid write control endpoint [ 357.877977][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 357.921326][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 357.938807][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 358.154374][ T1980] pvrusb2: Device being rendered inoperable [ 358.268148][ T9472] pim6reg1: entered promiscuous mode [ 358.273562][ T9472] pim6reg1: entered allmulticast mode [ 359.115227][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 359.125446][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 359.136129][ T1980] pvrusb2: Attached sub-driver cx25840 [ 359.162043][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 359.229373][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 359.785226][ T9484] overlayfs: failed to resolve './file1': -2 [ 360.647884][ T9502] syzkaller1: entered promiscuous mode [ 360.696115][ T9502] syzkaller1: entered allmulticast mode [ 360.840838][ T9504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.939919][ T9508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.994839][ T9504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.120963][ T9474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1167'. [ 361.168214][ T9474] binder: 9473:9474 ioctl 4018620d 0 returned -22 [ 361.382872][ T9518] overlayfs: workdir and upperdir must reside under the same mount [ 362.023227][ T9536] xt_hashlimit: Unknown mode mask EB0D38F6, kernel too old? [ 362.237127][ T9541] syzkaller1: entered promiscuous mode [ 362.256995][ T9541] syzkaller1: entered allmulticast mode [ 362.446216][ T9547] overlayfs: workdir and upperdir must reside under the same mount [ 362.784115][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.864972][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.879707][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.156951][ T784] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 363.338366][ T9556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1199'. [ 363.615882][ T9556] binder: 9554:9556 ioctl 4018620d 0 returned -22 [ 364.248151][ T784] usb 1-1: Using ep0 maxpacket: 8 [ 364.260060][ T784] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 364.269289][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.330885][ T784] usb 1-1: config 0 descriptor?? [ 364.421730][ T784] pvrusb2: Hardware description: Terratec Grabster AV400 [ 364.443659][ T784] pvrusb2: ********** [ 364.496661][ T784] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 364.527606][ T784] pvrusb2: Important functionality might not be entirely working. [ 364.555860][ T784] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 364.596269][ T784] pvrusb2: ********** [ 364.695214][ T9585] overlayfs: workdir and upperdir must reside under the same mount [ 364.943734][ T1980] pvrusb2: Invalid write control endpoint [ 364.951221][ T784] usb 1-1: USB disconnect, device number 14 [ 365.143369][ T1980] pvrusb2: Invalid write control endpoint [ 365.165479][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 365.196701][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 365.219514][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 365.259285][ T1980] pvrusb2: Device being rendered inoperable [ 365.279299][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 365.293147][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 365.314727][ T1980] pvrusb2: Attached sub-driver cx25840 [ 365.336587][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 365.365910][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 365.566075][ T9611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.647937][ T9611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.707051][ T9611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.740169][ T9616] overlayfs: failed to resolve './file1': -2 [ 366.591237][ T9621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1222'. [ 366.645687][ T9621] binder: 9619:9621 ioctl 4018620d 0 returned -22 [ 367.213242][ T9652] overlayfs: failed to resolve './file1': -2 [ 367.387735][ T1158] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 367.442017][ T9660] FAULT_INJECTION: forcing a failure. [ 367.442017][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 367.470531][ T9660] CPU: 0 PID: 9660 Comm: syz.0.1236 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 367.480681][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 367.490790][ T9660] Call Trace: [ 367.494107][ T9660] [ 367.497070][ T9660] dump_stack_lvl+0x241/0x360 [ 367.501807][ T9660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.507062][ T9660] ? __pfx__printk+0x10/0x10 [ 367.511708][ T9660] ? __pfx___might_resched+0x10/0x10 [ 367.517042][ T9660] ? alloc_pages_mpol_noprof+0x417/0x680 [ 367.522725][ T9660] should_fail_ex+0x3b0/0x4e0 [ 367.527457][ T9660] ? __pmd_alloc+0x110/0x630 [ 367.532086][ T9660] should_failslab+0x9/0x20 [ 367.536634][ T9660] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 367.542044][ T9660] __pmd_alloc+0x110/0x630 [ 367.546476][ T9660] ? mt_find+0x226/0x850 [ 367.550769][ T9660] ? __pfx___pmd_alloc+0x10/0x10 [ 367.555723][ T9660] handle_mm_fault+0xe0d/0x19d0 [ 367.560633][ T9660] ? __pfx_handle_mm_fault+0x10/0x10 [ 367.565991][ T9660] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 367.571318][ T9660] exc_page_fault+0x2b9/0x8c0 [ 367.576007][ T9660] ? __might_fault+0xaa/0x120 [ 367.580706][ T9660] asm_exc_page_fault+0x26/0x30 [ 367.585612][ T9660] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 367.591456][ T9660] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 367.611101][ T9660] RSP: 0018:ffffc9000c8efd48 EFLAGS: 00050202 [ 367.617197][ T9660] RAX: ffffffff84a62801 RBX: 0000000020000098 RCX: 0000000000000018 [ 367.625189][ T9660] RDX: 0000000000000001 RSI: 0000000020000080 RDI: ffffc9000c8efde0 [ 367.633177][ T9660] RBP: 0000000000000018 R08: ffffc9000c8efdf7 R09: 1ffff9200191dfbe [ 367.641249][ T9660] R10: dffffc0000000000 R11: fffff5200191dfbf R12: 0000000020000080 [ 367.649231][ T9660] R13: 0000000020000080 R14: ffffc9000c8efde0 R15: 0000000000000018 [ 367.657227][ T9660] ? rcuref_put_slowpath+0x2f1/0x340 [ 367.662535][ T9660] _copy_from_user+0x8c/0xe0 [ 367.667156][ T9660] move_addr_to_kernel+0x82/0x150 [ 367.672210][ T9660] __sys_connect+0xc1/0x310 [ 367.676728][ T9660] ? __pfx___sys_connect+0x10/0x10 [ 367.681871][ T9660] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 367.688315][ T9660] ? do_syscall_64+0x100/0x230 [ 367.693102][ T9660] __x64_sys_connect+0x7a/0x90 [ 367.697882][ T9660] do_syscall_64+0xf3/0x230 [ 367.702405][ T9660] ? clear_bhb_loop+0x35/0x90 [ 367.707106][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.713019][ T9660] RIP: 0033:0x7f68c4375b99 [ 367.717446][ T9660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.737081][ T9660] RSP: 002b:00007f68c5228048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 367.745521][ T9660] RAX: ffffffffffffffda RBX: 00007f68c4503f60 RCX: 00007f68c4375b99 [ 367.753516][ T9660] RDX: 0000000000000018 RSI: 0000000020000080 RDI: 0000000000000003 [ 367.761502][ T9660] RBP: 00007f68c52280a0 R08: 0000000000000000 R09: 0000000000000000 [ 367.769482][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.777467][ T9660] R13: 000000000000000b R14: 00007f68c4503f60 R15: 00007ffc8a1f2b18 [ 367.785459][ T9660] [ 367.926618][ T1158] usb 5-1: Using ep0 maxpacket: 8 [ 367.934479][ T1158] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 367.944279][ T1158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.952802][ T5129] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 368.014816][ T1158] usb 5-1: config 0 descriptor?? [ 368.043520][ T1158] pvrusb2: Hardware description: Terratec Grabster AV400 [ 368.055509][ T1158] pvrusb2: ********** [ 368.061973][ T1158] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 368.102492][ T1158] pvrusb2: Important functionality might not be entirely working. [ 368.111438][ T1158] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 368.123425][ T1158] pvrusb2: ********** [ 368.147915][ T5129] usb 2-1: Using ep0 maxpacket: 8 [ 368.156203][ T5129] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 368.166201][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.196274][ T5129] usb 2-1: config 0 descriptor?? [ 368.212460][ T9673] smk_cipso_doi:695 remove rc = -2 [ 368.218087][ T5129] pvrusb2: Hardware description: Terratec Grabster AV400 [ 368.218108][ T5129] pvrusb2: ********** [ 368.218119][ T5129] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 368.218134][ T5129] pvrusb2: Important functionality might not be entirely working. [ 368.218146][ T5129] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 368.218160][ T5129] pvrusb2: ********** [ 368.268368][ T9673] smk_cipso_doi:708 cipso add rc = -17 [ 368.568524][ T9684] FAULT_INJECTION: forcing a failure. [ 368.568524][ T9684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.875008][ T9684] CPU: 1 PID: 9684 Comm: syz.0.1243 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 368.885161][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.895250][ T9684] Call Trace: [ 368.898560][ T9684] [ 368.901530][ T9684] dump_stack_lvl+0x241/0x360 [ 368.906268][ T9684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.911528][ T9684] ? __pfx__printk+0x10/0x10 [ 368.916173][ T9684] ? stack_depot_save_flags+0x6e4/0x830 [ 368.921772][ T9684] should_fail_ex+0x3b0/0x4e0 [ 368.926498][ T9684] prepare_alloc_pages+0x1da/0x5d0 [ 368.931660][ T9684] __alloc_pages_noprof+0x166/0x6c0 [ 368.936895][ T9684] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 368.942670][ T9684] alloc_pages_mpol_noprof+0x3e8/0x680 [ 368.948176][ T9684] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 368.954235][ T9684] ? __kasan_kmalloc+0x98/0xb0 [ 368.959053][ T9684] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 368.964467][ T9684] ? alloc_pages_noprof+0xef/0x170 [ 368.969631][ T9684] get_zeroed_page_noprof+0x17/0x40 [ 368.974873][ T9684] write_ldt+0x5bf/0xb50 [ 368.979164][ T9684] ? __pfx_write_ldt+0x10/0x10 [ 368.983961][ T9684] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.989987][ T9684] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.996387][ T9684] __se_sys_modify_ldt+0x6f/0x2f0 [ 369.001543][ T9684] do_syscall_64+0xf3/0x230 [ 369.006099][ T9684] ? clear_bhb_loop+0x35/0x90 [ 369.010820][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.016761][ T9684] RIP: 0033:0x7f68c4375b99 [ 369.021208][ T9684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.040854][ T9684] RSP: 002b:00007f68c5228048 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 369.049323][ T9684] RAX: ffffffffffffffda RBX: 00007f68c4503f60 RCX: 00007f68c4375b99 [ 369.057329][ T9684] RDX: 0000000000000010 RSI: 00000000200002c0 RDI: 0000000000000011 [ 369.065328][ T9684] RBP: 00007f68c52280a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.073328][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.081348][ T9684] R13: 000000000000000b R14: 00007f68c4503f60 R15: 00007ffc8a1f2b18 [ 369.089556][ T9684] [ 369.115187][ T1980] pvrusb2: Invalid write control endpoint [ 369.138058][ T5129] usb 2-1: USB disconnect, device number 15 [ 369.230662][ T1158] usb 5-1: USB disconnect, device number 23 [ 369.267015][ T1158] pvrusb2: Device being rendered inoperable [ 369.386031][ T1980] pvrusb2: Invalid write control endpoint [ 369.405095][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 369.435545][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 369.463814][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 369.484159][ T1980] pvrusb2: Device being rendered inoperable [ 369.496557][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 369.514005][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 369.527564][ T1980] pvrusb2: Attached sub-driver cx25840 [ 369.546530][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 369.566507][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 369.647685][ T9697] overlayfs: failed to resolve './file1': -2 [ 369.823619][ T9702] fuse: Bad value for 'fd' [ 370.127621][ T9690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1244'. [ 371.451226][ T9720] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 371.882758][ T9721] smk_cipso_doi:695 remove rc = -2 [ 371.906836][ T9721] smk_cipso_doi:708 cipso add rc = -17 [ 372.645307][ T9757] fuse: Bad value for 'fd' [ 374.217233][ T9768] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 374.260706][ T9753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1267'. [ 374.614937][ T9774] smk_cipso_doi:695 remove rc = -2 [ 374.633329][ T9774] smk_cipso_doi:708 cipso add rc = -17 [ 376.451287][ T9809] fuse: Bad value for 'fd' [ 376.568974][ T9807] kvm: kvm [9806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x431d00004341 [ 376.589218][ T9807] kvm: kvm [9806]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x18000000df [ 378.209045][ T9842] bond0: entered promiscuous mode [ 378.228936][ T9842] bond_slave_0: entered promiscuous mode [ 378.234847][ T9842] bond_slave_1: entered promiscuous mode [ 378.352121][ T9842] dummy0: entered promiscuous mode [ 378.397545][ T9855] FAULT_INJECTION: forcing a failure. [ 378.397545][ T9855] name failslab, interval 1, probability 0, space 0, times 0 [ 378.411501][ T9855] CPU: 1 PID: 9855 Comm: syz.3.1300 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 378.421713][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 378.431811][ T9855] Call Trace: [ 378.435116][ T9855] [ 378.438076][ T9855] dump_stack_lvl+0x241/0x360 [ 378.442805][ T9855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.448050][ T9855] ? __pfx__printk+0x10/0x10 [ 378.452690][ T9855] ? rxrpc_lookup_local+0xb8/0x1890 [ 378.457938][ T9855] should_fail_ex+0x3b0/0x4e0 [ 378.462663][ T9855] ? rxrpc_lookup_local+0x54e/0x1890 [ 378.467997][ T9855] should_failslab+0x9/0x20 [ 378.472538][ T9855] kmalloc_trace_noprof+0x6c/0x2c0 [ 378.477667][ T9855] ? rxrpc_net+0x45/0x270 [ 378.482013][ T9855] rxrpc_lookup_local+0x54e/0x1890 [ 378.487144][ T9855] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.493144][ T9855] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.499478][ T9855] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 378.505038][ T9855] ? __local_bh_enable_ip+0x168/0x200 [ 378.510435][ T9855] ? lockdep_hardirqs_on+0x99/0x150 [ 378.515672][ T9855] ? __local_bh_enable_ip+0x168/0x200 [ 378.521066][ T9855] ? rxrpc_sendmsg+0x127/0x920 [ 378.525861][ T9855] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 378.531589][ T9855] ? do_raw_spin_unlock+0x13c/0x8b0 [ 378.536831][ T9855] rxrpc_sendmsg+0x4d9/0x920 [ 378.541447][ T9855] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 378.546571][ T9855] __sock_sendmsg+0x221/0x270 [ 378.551262][ T9855] sock_write_iter+0x2dd/0x400 [ 378.556045][ T9855] ? __pfx_sock_write_iter+0x10/0x10 [ 378.561355][ T9855] ? __import_iovec+0x361/0x820 [ 378.566216][ T9855] ? bpf_lsm_file_permission+0x9/0x10 [ 378.571604][ T9855] ? security_file_permission+0x7f/0xa0 [ 378.577165][ T9855] ? rw_verify_area+0x1d2/0x6b0 [ 378.582317][ T9855] aio_write+0x570/0x7d0 [ 378.586580][ T9855] ? __pfx_aio_write+0x10/0x10 [ 378.591366][ T9855] ? __might_fault+0xaa/0x120 [ 378.596058][ T9855] ? __pfx_lock_release+0x10/0x10 [ 378.601095][ T9855] ? __fget_files+0x3f6/0x470 [ 378.605778][ T9855] ? __might_fault+0xaa/0x120 [ 378.610474][ T9855] io_submit_one+0x8a7/0x18b0 [ 378.615184][ T9855] ? __pfx_io_submit_one+0x10/0x10 [ 378.620311][ T9855] ? __might_fault+0xaa/0x120 [ 378.625002][ T9855] ? __pfx_lock_release+0x10/0x10 [ 378.630039][ T9855] ? lookup_ioctx+0x94/0x6a0 [ 378.634641][ T9855] ? __might_fault+0xaa/0x120 [ 378.639328][ T9855] ? __might_fault+0xc6/0x120 [ 378.644021][ T9855] __se_sys_io_submit+0x179/0x2f0 [ 378.649061][ T9855] ? __pfx___se_sys_io_submit+0x10/0x10 [ 378.654614][ T9855] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.660604][ T9855] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.666945][ T9855] ? do_syscall_64+0x100/0x230 [ 378.671744][ T9855] ? do_syscall_64+0xb6/0x230 [ 378.676462][ T9855] do_syscall_64+0xf3/0x230 [ 378.681030][ T9855] ? clear_bhb_loop+0x35/0x90 [ 378.685730][ T9855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.691655][ T9855] RIP: 0033:0x7f2c9b175b99 [ 378.696082][ T9855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.715706][ T9855] RSP: 002b:00007f2c9bfae048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 378.724133][ T9855] RAX: ffffffffffffffda RBX: 00007f2c9b303f60 RCX: 00007f2c9b175b99 [ 378.732113][ T9855] RDX: 0000000020000240 RSI: 0000000000000001 RDI: 00007f2c9bf8d000 [ 378.740096][ T9855] RBP: 00007f2c9bfae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 378.748075][ T9855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.756056][ T9855] R13: 000000000000000b R14: 00007f2c9b303f60 R15: 00007fff6b73e008 [ 378.764054][ T9855] [ 378.926648][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 379.279563][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.534960][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.579165][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 379.641856][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 379.718472][ T9867] fuse: Bad value for 'fd' [ 379.857308][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.972237][ T25] usb 2-1: config 0 descriptor?? [ 380.022249][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 380.080396][ T25] pvrusb2: ********** [ 380.084442][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 380.170597][ T25] pvrusb2: Important functionality might not be entirely working. [ 380.298302][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 380.338265][ T25] pvrusb2: ********** [ 380.712963][ T1980] pvrusb2: Invalid write control endpoint [ 380.747062][ T25] usb 2-1: USB disconnect, device number 16 [ 380.912464][ T1980] pvrusb2: Invalid write control endpoint [ 380.926310][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 380.938273][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 380.981527][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 381.503205][ T1980] pvrusb2: Device being rendered inoperable [ 381.746722][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 381.753814][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 381.772506][ T1980] pvrusb2: Attached sub-driver cx25840 [ 381.794136][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 381.848379][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 382.266682][ T784] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 382.346651][ T5131] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 382.458837][ T784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.513495][ T784] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.556629][ T5131] usb 5-1: Using ep0 maxpacket: 8 [ 382.567535][ T5131] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 382.584232][ T5131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.593826][ T784] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 382.609737][ T5131] usb 5-1: config 0 descriptor?? [ 382.619749][ T784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.635933][ T5131] pvrusb2: Hardware description: Terratec Grabster AV400 [ 382.644336][ T784] usb 3-1: Product: syz [ 382.653671][ T5131] pvrusb2: ********** [ 382.658855][ T784] usb 3-1: Manufacturer: syz [ 382.665768][ T5131] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 382.681529][ T784] usb 3-1: SerialNumber: syz [ 382.690511][ T784] usb 3-1: config 0 descriptor?? [ 382.699005][ T5131] pvrusb2: Important functionality might not be entirely working. [ 382.712895][ T5131] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 382.743216][ T5131] pvrusb2: ********** [ 382.909187][ T9916] smk_cipso_doi:695 remove rc = -2 [ 382.919839][ T9916] smk_cipso_doi:708 cipso add rc = -17 [ 383.208680][ T1980] pvrusb2: Invalid write control endpoint [ 383.215457][ T5131] usb 5-1: USB disconnect, device number 24 [ 383.233356][ T9899] netlink: 'syz.2.1311': attribute type 5 has an invalid length. [ 383.258351][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.312290][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.461350][ T1980] pvrusb2: Invalid write control endpoint [ 383.516697][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 383.536291][ T5129] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 383.556911][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 383.564522][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 383.635978][ T1980] pvrusb2: Device being rendered inoperable [ 383.685868][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 383.724285][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 383.787796][ T1980] pvrusb2: Attached sub-driver cx25840 [ 383.796620][ T5129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.824154][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 383.826505][ T5129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.855525][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 383.859796][ T5129] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 383.918726][ T5129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.980041][ T5129] usb 4-1: config 0 descriptor?? [ 384.224500][ T29] audit: type=1326 audit(1719991344.652:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9897 comm="syz.2.1311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb738375b99 code=0x0 [ 384.424810][ T5129] holtek 0003:1241:5015.0012: item fetching failed at offset 2/5 [ 384.436060][ T9941] FAULT_INJECTION: forcing a failure. [ 384.436060][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 384.470163][ T5129] holtek 0003:1241:5015.0012: parse failed [ 384.483268][ T5129] holtek 0003:1241:5015.0012: probe with driver holtek failed with error -22 [ 384.501357][ T9941] CPU: 1 PID: 9941 Comm: syz.4.1322 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 384.511460][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 384.521548][ T9941] Call Trace: [ 384.524847][ T9941] [ 384.527781][ T9941] dump_stack_lvl+0x241/0x360 [ 384.532510][ T9941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.537731][ T9941] ? __pfx__printk+0x10/0x10 [ 384.542341][ T9941] ? __pfx___might_resched+0x10/0x10 [ 384.547652][ T9941] ? __lock_acquire+0x1346/0x1fd0 [ 384.552688][ T9941] should_fail_ex+0x3b0/0x4e0 [ 384.557382][ T9941] ? __d_alloc+0x31/0x700 [ 384.561740][ T9941] should_failslab+0x9/0x20 [ 384.566246][ T9941] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 384.571994][ T9941] __d_alloc+0x31/0x700 [ 384.576162][ T9941] d_alloc_pseudo+0x1f/0xb0 [ 384.580693][ T9941] alloc_file_pseudo+0x123/0x290 [ 384.585639][ T9941] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 384.591114][ T9941] ? do_raw_spin_unlock+0x13c/0x8b0 [ 384.596357][ T9941] sock_alloc_file+0xb8/0x290 [ 384.601073][ T9941] do_accept+0x3b8/0x6c0 [ 384.605329][ T9941] ? __pfx_do_accept+0x10/0x10 [ 384.610114][ T9941] __sys_accept4+0x11e/0x1c0 [ 384.614717][ T9941] ? __pfx___sys_accept4+0x10/0x10 [ 384.619856][ T9941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.626201][ T9941] ? do_syscall_64+0x100/0x230 [ 384.631032][ T9941] __x64_sys_accept4+0x9a/0xb0 [ 384.635842][ T9941] do_syscall_64+0xf3/0x230 [ 384.640359][ T9941] ? clear_bhb_loop+0x35/0x90 [ 384.645048][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.650964][ T9941] RIP: 0033:0x7f8e6c775b99 [ 384.655414][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.675058][ T9941] RSP: 002b:00007f8e6d612048 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 384.683488][ T9941] RAX: ffffffffffffffda RBX: 00007f8e6c903f60 RCX: 00007f8e6c775b99 [ 384.691470][ T9941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 384.699462][ T9941] RBP: 00007f8e6d6120a0 R08: 0000000000000000 R09: 0000000000000000 [ 384.707469][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.715444][ T9941] R13: 000000000000000b R14: 00007f8e6c903f60 R15: 00007fffb8138368 [ 384.723437][ T9941] [ 384.816772][ T5128] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 385.046563][ T5128] usb 2-1: Using ep0 maxpacket: 8 [ 385.074891][ T5128] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 385.101299][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.145526][ T5128] usb 2-1: config 0 descriptor?? [ 385.163725][ T5128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 385.199472][ T5128] pvrusb2: ********** [ 385.208911][ T5128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 385.230493][ T5128] pvrusb2: Important functionality might not be entirely working. [ 385.240132][ T5128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 385.261826][ T5128] pvrusb2: ********** [ 385.806194][ T1980] pvrusb2: Invalid write control endpoint [ 385.823736][ T5128] usb 2-1: USB disconnect, device number 17 [ 386.017760][ T1980] pvrusb2: Invalid write control endpoint [ 386.024268][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 386.052675][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 386.077339][ T784] usb 3-1: USB disconnect, device number 22 [ 386.085312][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 386.119672][ T1980] pvrusb2: Device being rendered inoperable [ 386.156647][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 386.163800][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 386.188327][ T5129] usb 4-1: USB disconnect, device number 16 [ 386.245985][ T1980] pvrusb2: Attached sub-driver cx25840 [ 386.273767][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 386.326250][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 386.437122][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.577316][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.632821][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.059506][T10010] FAULT_INJECTION: forcing a failure. [ 389.059506][T10010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.126955][T10010] CPU: 1 PID: 10010 Comm: syz.0.1347 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 389.137178][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 389.147261][T10010] Call Trace: [ 389.150546][T10010] [ 389.153487][T10010] dump_stack_lvl+0x241/0x360 [ 389.158222][T10010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.163529][T10010] ? __pfx__printk+0x10/0x10 [ 389.168137][T10010] ? __lock_acquire+0x1346/0x1fd0 [ 389.173172][T10010] should_fail_ex+0x3b0/0x4e0 [ 389.177883][T10010] strncpy_from_user+0x36/0x2f0 [ 389.182748][T10010] removexattr+0xa8/0x1c0 [ 389.187113][T10010] ? __pfx_removexattr+0x10/0x10 [ 389.192164][T10010] ? mnt_get_write_access+0x226/0x2b0 [ 389.197603][T10010] __se_sys_fremovexattr+0x142/0x1c0 [ 389.202944][T10010] do_syscall_64+0xf3/0x230 [ 389.207486][T10010] ? clear_bhb_loop+0x35/0x90 [ 389.212177][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.218081][T10010] RIP: 0033:0x7f68c4375b99 [ 389.222506][T10010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.242131][T10010] RSP: 002b:00007f68c5228048 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 389.250564][T10010] RAX: ffffffffffffffda RBX: 00007f68c4503f60 RCX: 00007f68c4375b99 [ 389.258549][T10010] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 389.266530][T10010] RBP: 00007f68c52280a0 R08: 0000000000000000 R09: 0000000000000000 [ 389.274506][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.282599][T10010] R13: 000000000000000b R14: 00007f68c4503f60 R15: 00007ffc8a1f2b18 [ 389.290607][T10010] [ 389.396607][ T5917] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 389.616835][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 389.635380][ T5917] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 389.657356][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.687735][ T5917] usb 4-1: config 0 descriptor?? [ 389.698257][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400 [ 389.705634][ T5917] pvrusb2: ********** [ 389.710883][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 389.722159][ T5917] pvrusb2: Important functionality might not be entirely working. [ 389.730435][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 389.768472][ T5917] pvrusb2: ********** [ 389.867350][ T784] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 389.926593][ T5128] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 390.058902][ T1980] pvrusb2: Invalid write control endpoint [ 390.060566][ T5917] usb 4-1: USB disconnect, device number 17 [ 390.092604][ T784] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 390.110584][ T784] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 390.127278][ T5128] usb 5-1: Using ep0 maxpacket: 8 [ 390.140031][ T784] usb 2-1: config 0 has no interface number 0 [ 390.142248][ T5128] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 390.162684][ T784] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 390.167643][ T785] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 390.182190][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.183392][ T784] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 390.222486][ T784] usb 2-1: config 0 interface 49 has no altsetting 0 [ 390.235908][ T1980] pvrusb2: Invalid write control endpoint [ 390.245314][ T784] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 390.254327][ T5128] usb 5-1: config 0 descriptor?? [ 390.255023][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.276720][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 390.278640][ T5128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 390.286408][ T784] usb 2-1: Product: syz [ 390.298420][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 390.307301][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 390.315263][ T5128] pvrusb2: ********** [ 390.317779][ T784] usb 2-1: Manufacturer: syz [ 390.321994][ T5128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 390.326071][ T784] usb 2-1: SerialNumber: syz [ 390.341712][ T1980] pvrusb2: Device being rendered inoperable [ 390.349869][ T5128] pvrusb2: Important functionality might not be entirely working. [ 390.353955][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 390.358977][ T5128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 390.372634][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 390.380318][ T5128] pvrusb2: ********** [ 390.400528][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 390.414740][ T784] usb 2-1: config 0 descriptor?? [ 390.427660][ T1980] pvrusb2: Attached sub-driver cx25840 [ 390.434191][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 390.444434][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 390.452517][ T785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.494029][ T785] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.566002][ T785] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 390.598330][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 390.608734][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 390.634215][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.642142][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.656260][ T784] asix 2-1:0.49 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 390.670643][ T25] usb 1-1: config 0 descriptor?? [ 390.682403][ T784] asix 2-1:0.49: probe with driver asix failed with error -71 [ 390.690552][ T25] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 390.713842][ T784] usb 2-1: USB disconnect, device number 18 [ 390.720230][ T785] usb 3-1: Product: syz [ 390.720288][ T785] usb 3-1: Manufacturer: syz [ 390.800240][ T785] usb 3-1: SerialNumber: syz [ 390.841695][ T785] usb 3-1: config 0 descriptor?? [ 391.201990][T10035] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 391.239054][ T1980] pvrusb2: Invalid write control endpoint [ 391.267907][ T5128] usb 5-1: USB disconnect, device number 25 [ 391.349318][T10045] ebt_limit: overflow, try lower: 0/0 [ 391.457218][ T1980] pvrusb2: Invalid write control endpoint [ 391.466108][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 391.504527][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 391.517671][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 391.528312][ T1980] pvrusb2: Device being rendered inoperable [ 391.528587][T10028] netlink: 'syz.2.1355': attribute type 5 has an invalid length. [ 391.534446][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 391.556619][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 391.571377][ T1980] pvrusb2: Attached sub-driver cx25840 [ 391.578583][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 391.624927][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 391.971289][T10054] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 392.239064][ T29] audit: type=1326 audit(1719991352.672:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.2.1355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb738375b99 code=0x0 [ 392.336734][ T25] gspca_sunplus: reg_w_riv err -110 [ 392.352004][ T25] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 392.395407][T10055] smk_cipso_doi:695 remove rc = -2 [ 392.403267][T10055] smk_cipso_doi:708 cipso add rc = -17 [ 393.703722][ T1158] usb 1-1: USB disconnect, device number 15 [ 393.769903][ T5128] usb 3-1: USB disconnect, device number 23 [ 395.716626][ T1158] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 395.927521][ T1158] usb 1-1: Using ep0 maxpacket: 16 [ 395.937289][T10099] FAULT_INJECTION: forcing a failure. [ 395.937289][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 395.959653][ T1158] usb 1-1: config 8 has an invalid interface number: 88 but max is 2 [ 395.971003][ T1158] usb 1-1: config 8 has an invalid interface number: 101 but max is 2 [ 395.996022][ T1158] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 396.016189][T10099] CPU: 0 PID: 10099 Comm: syz.4.1374 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 396.026423][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 396.036514][T10099] Call Trace: [ 396.039825][T10099] [ 396.042785][T10099] dump_stack_lvl+0x241/0x360 [ 396.047517][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.052767][T10099] ? __pfx__printk+0x10/0x10 [ 396.057401][T10099] ? __pfx___might_resched+0x10/0x10 [ 396.062710][T10099] should_fail_ex+0x3b0/0x4e0 [ 396.067414][T10099] ? dup_task_struct+0x57/0x8c0 [ 396.072275][T10099] should_failslab+0x9/0x20 [ 396.076787][T10099] kmem_cache_alloc_node_noprof+0x71/0x320 [ 396.082614][T10099] dup_task_struct+0x57/0x8c0 [ 396.087309][T10099] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.092529][T10099] ? lockdep_hardirqs_on+0x99/0x150 [ 396.097758][T10099] copy_process+0x5d1/0x3dc0 [ 396.102357][T10099] ? __pfx_lock_acquire+0x10/0x10 [ 396.107419][T10099] ? get_pid_task+0x23/0x1f0 [ 396.112047][T10099] ? __pfx_copy_process+0x10/0x10 [ 396.117083][T10099] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 396.122990][T10099] ? ksys_write+0x23e/0x2c0 [ 396.127518][T10099] kernel_clone+0x223/0x870 [ 396.132034][T10099] ? vfs_write+0x7c4/0xc90 [ 396.136475][T10099] ? __pfx_kernel_clone+0x10/0x10 [ 396.141526][T10099] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.147519][T10099] __x64_sys_clone+0x258/0x2a0 [ 396.152296][T10099] ? __pfx___x64_sys_clone+0x10/0x10 [ 396.157605][T10099] ? do_syscall_64+0x100/0x230 [ 396.162387][T10099] ? do_syscall_64+0xb6/0x230 [ 396.167088][T10099] do_syscall_64+0xf3/0x230 [ 396.171608][T10099] ? clear_bhb_loop+0x35/0x90 [ 396.176304][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.182221][T10099] RIP: 0033:0x7f8e6c775b99 [ 396.186656][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.206457][T10099] RSP: 002b:00007f8e6d611ff8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 396.214887][T10099] RAX: ffffffffffffffda RBX: 00007f8e6c903f60 RCX: 00007f8e6c775b99 [ 396.222869][T10099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.230848][T10099] RBP: 00007f8e6d6120a0 R08: 0000000000000000 R09: 0000000000000000 [ 396.238847][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.246843][T10099] R13: 000000000000000b R14: 00007f8e6c903f60 R15: 00007fffb8138368 [ 396.255097][T10099] [ 396.268307][ T1158] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 396.306582][ T1158] usb 1-1: config 8 has an invalid interface number: 182 but max is 2 [ 396.314834][ T1158] usb 1-1: config 8 has no interface number 0 [ 396.344915][ T1158] usb 1-1: config 8 has no interface number 1 [ 396.351772][ T1158] usb 1-1: config 8 has no interface number 2 [ 396.366190][ T1158] usb 1-1: config 8 interface 88 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 396.383540][ T1158] usb 1-1: config 8 interface 88 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 396.402634][ T1158] usb 1-1: config 8 interface 88 altsetting 3 endpoint 0x5 has an invalid bInterval 105, changing to 10 [ 396.416770][ T5917] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 396.423440][ T1158] usb 1-1: config 8 interface 101 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 396.444807][ T1158] usb 1-1: config 8 interface 101 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 396.461041][ T1158] usb 1-1: config 8 interface 101 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 396.480946][ T1158] usb 1-1: config 8 interface 101 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 396.495457][ T1158] usb 1-1: config 8 interface 101 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 396.510897][ T1158] usb 1-1: config 8 interface 101 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 396.531942][ T1158] usb 1-1: config 8 interface 101 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 396.563947][ T1158] usb 1-1: config 8 interface 101 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 396.584375][ T1158] usb 1-1: config 8 interface 101 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 396.601563][ T1158] usb 1-1: config 8 interface 182 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 396.621427][ T1158] usb 1-1: config 8 interface 182 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 396.623139][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.635864][ T1158] usb 1-1: config 8 interface 182 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 396.656621][ T1158] usb 1-1: config 8 interface 182 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 396.685122][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.690237][ T1158] usb 1-1: config 8 interface 182 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 396.746789][ T1158] usb 1-1: config 8 interface 88 has no altsetting 0 [ 396.747227][ T5917] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 396.777895][ T1158] usb 1-1: config 8 interface 101 has no altsetting 0 [ 396.797182][ T784] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 396.814016][ T1158] usb 1-1: config 8 interface 182 has no altsetting 0 [ 396.841143][ T1158] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=49.4f [ 396.851265][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.853944][ T1158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.871025][ T5917] usb 2-1: config 0 descriptor?? [ 396.904953][ T1158] usb 1-1: Product: 뛪쩄â¢è„”䟉鴊Ẹᡦ댎ꗟᖛۮ㾥䱮┓°͗êƒïš¼áž‘ᗇ껅ëæˆë¦í‹¼å璠䛲ì¼çª é¤¼ê­»é®€ [ 396.947878][ T1158] usb 1-1: Manufacturer: 녻앜砂 [ 396.965835][ T1158] usb 1-1: SerialNumber: syz [ 396.986707][ T784] usb 4-1: Using ep0 maxpacket: 32 [ 397.062589][ T784] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 397.085268][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.116308][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.126391][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.166192][ T784] usb 4-1: config 0 descriptor?? [ 397.219817][ T784] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 397.316295][ T1158] usb 1-1: USB disconnect, device number 16 [ 397.671676][T10107] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 397.702601][T10115] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1373'. [ 397.759358][T10115] 0ª: renamed from bond_slave_0 (while UP) [ 397.822834][T10115] 0ª: entered allmulticast mode [ 398.377612][ T5917] usb 2-1: string descriptor 0 read error: -71 [ 398.411247][ T5917] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71 [ 398.451113][ T5917] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 398.463806][T10127] tmpfs: Bad value for 'mpol' [ 398.478994][ T5917] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71 [ 398.519837][T10127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1382'. [ 398.536867][ T5917] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 398.540736][T10129] overlayfs: missing 'workdir' [ 398.557292][ T5917] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 398.599425][ T5917] usb 2-1: USB disconnect, device number 19 [ 398.867197][ T784] gspca_sunplus: reg_w_riv err -110 [ 398.920280][ T784] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 399.256550][ T784] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 399.476550][ T784] usb 1-1: Using ep0 maxpacket: 8 [ 399.500076][ T784] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 399.533145][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.569312][ T784] usb 1-1: config 0 descriptor?? [ 399.591271][ T784] pvrusb2: Hardware description: Terratec Grabster AV400 [ 399.612331][ T784] pvrusb2: ********** [ 399.619188][ T784] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 399.684851][ T784] pvrusb2: Important functionality might not be entirely working. [ 399.697219][ T1158] usb 4-1: USB disconnect, device number 18 [ 399.716198][T10153] usb usb8: usbfs: process 10153 (syz.4.1391) did not claim interface 0 before use [ 399.723882][ T784] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 399.787449][ T784] pvrusb2: ********** [ 400.206536][ T1980] pvrusb2: Invalid write control endpoint [ 400.216936][ T784] usb 1-1: USB disconnect, device number 17 [ 400.337835][ T1158] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 400.349757][ T1980] pvrusb2: Invalid write control endpoint [ 400.374151][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 400.569161][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 400.586360][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 401.498340][ T1980] pvrusb2: Device being rendered inoperable [ 401.510189][ T1158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.524851][ T1158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.531678][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 401.540266][ T1158] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 401.561764][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 401.604588][ T1158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.617688][ T1980] pvrusb2: Attached sub-driver cx25840 [ 401.623225][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 401.629147][ T1158] usb 4-1: config 0 descriptor?? [ 401.680280][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 401.893303][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.913255][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.019179][T10195] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1395'. [ 403.055946][T10195] 1ª: renamed from 50ª (while UP) [ 403.413190][ T1158] usb 4-1: string descriptor 0 read error: -71 [ 403.449687][ T1158] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 403.471610][ T1158] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 403.481561][ T1158] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 403.493462][ T1158] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 403.501994][ T1158] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 403.523391][ T1158] usb 4-1: USB disconnect, device number 19 [ 403.622590][T10212] sctp: [Deprecated]: syz.1.1409 (pid 10212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.622590][T10212] Use struct sctp_sack_info instead [ 403.685682][T10213] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 403.812097][T10217] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 403.906811][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 404.011405][T10223] netlink: 'syz.2.1415': attribute type 13 has an invalid length. [ 404.079267][T10223] veth0_macvtap: left promiscuous mode [ 404.095108][T10223] macvtap0: entered promiscuous mode [ 404.116779][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 404.128540][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 404.146750][T10223] macvtap0: refused to change device tx_queue_len [ 404.161514][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.214326][ T25] usb 5-1: config 0 descriptor?? [ 404.249386][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 404.272288][ T25] pvrusb2: ********** [ 404.298090][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 404.346677][ T25] pvrusb2: Important functionality might not be entirely working. [ 404.391009][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 404.421800][ T25] pvrusb2: ********** [ 405.379436][ T5091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.390339][ T5091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.407850][ T5091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.430961][ T5091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.446831][ T5091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 405.457742][ T5091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 405.595274][ T1980] pvrusb2: Invalid write control endpoint [ 405.663795][ T25] usb 5-1: USB disconnect, device number 26 [ 405.670646][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.815651][ T1980] pvrusb2: Invalid write control endpoint [ 405.844464][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 405.879715][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 405.897187][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 405.940741][ T1980] pvrusb2: Device being rendered inoperable [ 405.951874][T10254] sctp: [Deprecated]: syz.2.1423 (pid 10254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.951874][T10254] Use struct sctp_sack_info instead [ 405.966035][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 406.001362][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.017197][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 406.057623][ T1980] pvrusb2: Attached sub-driver cx25840 [ 406.063154][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 406.103020][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 406.302078][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.530113][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.990607][T10274] FAULT_INJECTION: forcing a failure. [ 406.990607][T10274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.013323][T10239] chnl_net:caif_netlink_parms(): no params data found [ 407.031936][T10274] CPU: 1 PID: 10274 Comm: syz.4.1427 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 407.042136][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 407.052210][T10274] Call Trace: [ 407.055492][T10274] [ 407.058425][T10274] dump_stack_lvl+0x241/0x360 [ 407.063131][T10274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.068363][T10274] ? __pfx__printk+0x10/0x10 [ 407.072972][T10274] ? smack_log+0x123/0x540 [ 407.077403][T10274] ? __pfx_lock_release+0x10/0x10 [ 407.082446][T10274] should_fail_ex+0x3b0/0x4e0 [ 407.087165][T10274] _copy_from_user+0x2f/0xe0 [ 407.091765][T10274] sw_sync_ioctl+0x13a/0x1060 [ 407.096468][T10274] ? smack_file_ioctl+0x2a1/0x3a0 [ 407.101525][T10274] ? __pfx_smack_file_ioctl+0x10/0x10 [ 407.106916][T10274] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 407.112042][T10274] ? __fget_files+0x3f6/0x470 [ 407.116743][T10274] ? __fget_files+0x29/0x470 [ 407.121357][T10274] ? bpf_lsm_file_ioctl+0x9/0x10 [ 407.126395][T10274] ? security_file_ioctl+0x87/0xb0 [ 407.131525][T10274] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 407.136649][T10274] __se_sys_ioctl+0xfc/0x170 [ 407.141300][T10274] do_syscall_64+0xf3/0x230 [ 407.145815][T10274] ? clear_bhb_loop+0x35/0x90 [ 407.150498][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.156393][T10274] RIP: 0033:0x7f8e6c775b99 [ 407.160816][T10274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.180430][T10274] RSP: 002b:00007f8e6d5f1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.188850][T10274] RAX: ffffffffffffffda RBX: 00007f8e6c904038 RCX: 00007f8e6c775b99 [ 407.196821][T10274] RDX: 0000000020000040 RSI: 0000000040045701 RDI: 0000000000000007 [ 407.204799][T10274] RBP: 00007f8e6d5f10a0 R08: 0000000000000000 R09: 0000000000000000 [ 407.212778][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.220743][T10274] R13: 000000000000006e R14: 00007f8e6c904038 R15: 00007fffb8138368 [ 407.228755][T10274] [ 407.483891][T10274] bridge1: entered promiscuous mode [ 407.537963][ T5091] Bluetooth: hci4: command tx timeout [ 408.323361][ T61] team0: left allmulticast mode [ 408.338569][ T61] team_slave_0: left allmulticast mode [ 408.361809][ T61] team_slave_1: left allmulticast mode [ 408.369851][T10299] sctp: [Deprecated]: syz.3.1433 (pid 10299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.369851][T10299] Use struct sctp_sack_info instead [ 408.404501][ T61] bridge0: port 3(team0) entered disabled state [ 408.448855][ T61] bridge_slave_1: left allmulticast mode [ 408.456937][ T61] bridge_slave_1: left promiscuous mode [ 408.484024][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.534136][ T61] bridge_slave_0: left allmulticast mode [ 408.541993][ T61] bridge_slave_0: left promiscuous mode [ 408.547988][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.897334][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 409.118122][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 409.172841][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=b0.87 [ 409.226401][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.253061][ T25] usb 1-1: config 0 descriptor?? [ 409.305085][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 409.315503][ T25] pvrusb2: ********** [ 409.320088][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 409.330610][ T25] pvrusb2: Important functionality might not be entirely working. [ 409.339037][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 409.356320][ T25] pvrusb2: ********** [ 409.588582][ T5091] Bluetooth: hci4: command tx timeout [ 409.595949][T10324] sctp: [Deprecated]: syz.3.1439 (pid 10324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.595949][T10324] Use struct sctp_sack_info instead [ 410.196705][ T61] bond0 (unregistering): (slave 50ª): Releasing backup interface [ 410.247215][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.290935][ T61] bond0 (unregistering): Released all slaves [ 410.464197][ T1980] pvrusb2: Invalid write control endpoint [ 410.487993][ T25] usb 1-1: USB disconnect, device number 18 [ 410.719623][ T1980] pvrusb2: Invalid write control endpoint [ 410.737392][ T1980] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 410.757407][ T1980] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 410.783047][ T1980] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 410.806757][ T1980] pvrusb2: Device being rendered inoperable [ 410.824138][ T1980] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 410.866870][ T1980] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 410.875613][ T1980] pvrusb2: Attached sub-driver cx25840 [ 410.902834][ T1980] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 410.943117][ T1980] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 410.968543][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.996209][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.029395][T10239] bridge_slave_0: entered allmulticast mode [ 411.058041][T10239] bridge_slave_0: entered promiscuous mode [ 411.105532][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.136734][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.176865][T10239] bridge_slave_1: entered allmulticast mode [ 411.184544][T10239] bridge_slave_1: entered promiscuous mode [ 411.261425][T10345] fuse: Bad value for 'fd' [ 411.658803][ T61] hsr_slave_0: left promiscuous mode [ 411.667033][ T5091] Bluetooth: hci4: command tx timeout [ 411.690765][ T61] hsr_slave_1: left promiscuous mode [ 411.720007][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.739199][T10357] sctp: [Deprecated]: syz.4.1448 (pid 10357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.739199][T10357] Use struct sctp_sack_info instead [ 411.757125][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.785081][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.831921][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.958785][ T61] veth1_macvtap: left promiscuous mode [ 411.993310][ T61] veth0_macvtap: left promiscuous mode [ 412.018738][ T61] veth1_vlan: left promiscuous mode [ 412.086701][ T61] veth0_vlan: left promiscuous mode [ 413.906308][ T4480] Bluetooth: hci4: command tx timeout [ 415.129180][T10404] fuse: Bad value for 'fd' [ 415.217866][ T61] team_slave_1 (unregistering): left promiscuous mode [ 415.237665][ T61] team0 (unregistering): Port device team_slave_1 removed [ 415.303848][ T61] team_slave_0 (unregistering): left promiscuous mode [ 415.333768][ T61] team0 (unregistering): Port device team_slave_0 removed [ 417.262072][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.402255][T10412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.469150][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.521542][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.529515][T10412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.659912][T10239] team0: Port device team_slave_0 added [ 417.701091][T10239] team0: Port device team_slave_1 added [ 418.059451][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.079896][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.166474][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.206285][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.258932][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.310833][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.651489][T10239] hsr_slave_0: entered promiscuous mode [ 418.679865][T10239] hsr_slave_1: entered promiscuous mode [ 418.700465][T10239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.720316][T10239] Cannot create hsr debugfs directory [ 419.597511][T10456] fuse: Bad value for 'fd' [ 419.759036][ T4480] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 419.772153][ T4480] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 419.782539][ T4480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 419.793151][ T4480] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 419.801341][ T4480] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 419.812698][ T4480] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.667124][T10479] sctp: [Deprecated]: syz.3.1474 (pid 10479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.667124][T10479] Use struct sctp_sack_info instead [ 421.906741][ T4480] Bluetooth: hci6: command tx timeout [ 422.295642][T10460] chnl_net:caif_netlink_parms(): no params data found [ 422.557507][T10239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.640369][T10239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.715850][T10239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.745422][T10239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.973183][T10460] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.006903][T10460] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.031434][T10460] bridge_slave_0: entered allmulticast mode [ 423.057023][T10460] bridge_slave_0: entered promiscuous mode [ 423.088355][T10460] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.117068][T10460] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.124401][T10460] bridge_slave_1: entered allmulticast mode [ 423.154131][T10460] bridge_slave_1: entered promiscuous mode [ 423.296088][T10460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.340162][T10460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.473051][T10512] fuse: Bad value for 'fd' [ 423.530476][T10460] team0: Port device team_slave_0 added [ 423.581450][T10460] team0: Port device team_slave_1 added [ 423.693494][T10460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.729031][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.791932][T10460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.805479][T10460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.822845][T10460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.919202][T10460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.987382][ T4480] Bluetooth: hci6: command tx timeout [ 424.216560][ T5131] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 424.301993][T10239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.363164][T10460] hsr_slave_0: entered promiscuous mode [ 424.377203][ T5131] usb 4-1: device descriptor read/64, error -71 [ 424.388178][T10460] hsr_slave_1: entered promiscuous mode [ 424.415475][T10460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.442941][T10460] Cannot create hsr debugfs directory [ 424.625089][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.667169][ T5131] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 424.730800][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.738093][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.748861][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.756199][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.777929][T10537] sctp: [Deprecated]: syz.0.1483 (pid 10537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.777929][T10537] Use struct sctp_sack_info instead [ 424.847078][ T5131] usb 4-1: device descriptor read/64, error -71 [ 424.969906][ T5131] usb usb4-port1: attempt power cycle [ 425.080580][T10460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.190468][T10239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.216036][T10239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.320942][T10460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.407399][ T5131] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 425.459106][ T5131] usb 4-1: device descriptor read/8, error -71 [ 425.527899][T10460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.767549][ T5131] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 425.769528][T10460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.818206][ T5131] usb 4-1: device descriptor read/8, error -71 [ 425.975490][T10239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.987429][ T5131] usb usb4-port1: unable to enumerate USB device [ 426.075705][ T4480] Bluetooth: hci6: command tx timeout [ 426.174429][T10239] veth0_vlan: entered promiscuous mode [ 426.245322][T10239] veth1_vlan: entered promiscuous mode [ 426.400223][T10239] veth0_macvtap: entered promiscuous mode [ 426.462386][T10239] veth1_macvtap: entered promiscuous mode [ 426.487393][T10460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.550940][T10460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.601044][T10460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.643595][T10460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.754800][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.789787][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.804218][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.840024][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.866715][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.879679][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.903442][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.926577][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.967396][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.010071][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.023656][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.038848][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.052429][T10239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.145110][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.185962][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.211702][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.233888][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.252845][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.264334][ T29] audit: type=1804 audit(1719991387.682:153): pid=10588 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1490" name="/newroot/218/bus/file0" dev="overlay" ino=1256 res=1 errno=0 [ 427.296589][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.316644][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.336164][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.347133][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.366555][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.385949][T10239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.402341][T10239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.431817][T10239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.545060][T10239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.564816][T10239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.588323][T10239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.620109][T10239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.019214][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.050611][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.114651][T10460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.146832][ T4480] Bluetooth: hci6: command tx timeout [ 428.210321][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.246798][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.260109][T10460] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.307671][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.314867][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.392970][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.400180][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.460933][T10613] pim6reg1: entered promiscuous mode [ 428.486812][T10613] pim6reg1: entered allmulticast mode [ 428.884657][T10460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.926801][T10460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.591320][T10460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.658151][T10643] xt_ipcomp: unknown flags 12 [ 429.802110][T10460] veth0_vlan: entered promiscuous mode [ 429.874821][T10460] veth1_vlan: entered promiscuous mode [ 430.040375][T10460] veth0_macvtap: entered promiscuous mode [ 430.072518][T10460] veth1_macvtap: entered promiscuous mode [ 430.168078][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.190427][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.211636][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.230186][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.252578][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.273323][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.295265][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.328956][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.349253][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.366140][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.381348][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.382401][ T785] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 430.408312][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.428024][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.462192][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.489920][T10460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.523212][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.576715][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.606551][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.626950][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.635810][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 430.659239][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.666494][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 430.695955][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.704640][T10655] fuse: Bad value for 'fd' [ 430.716483][ T785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.726758][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.750687][ T785] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.760123][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.776516][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.796057][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.807441][ T785] usb 1-1: config 0 descriptor?? [ 430.833848][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.856582][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.886572][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.935407][T10460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.960703][T10460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.977857][T10460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.010633][T10460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.027916][T10460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.046682][T10460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.065666][T10460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.266676][ T785] usbhid 1-1:0.0: can't add hid device: -71 [ 431.272774][ T785] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 431.327801][ T785] usb 1-1: USB disconnect, device number 19 [ 431.335895][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.383009][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.518786][ T9016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.550466][ T9016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.782286][T10665] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 431.842322][T10665] overlayfs: failed to set xattr on upper [ 431.898682][T10668] FAULT_INJECTION: forcing a failure. [ 431.898682][T10668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.956858][T10665] overlayfs: ...falling back to redirect_dir=nofollow. [ 431.963791][T10665] overlayfs: ...falling back to index=off. [ 432.016822][T10668] CPU: 1 PID: 10668 Comm: syz.1.1513 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 432.026259][T10665] overlayfs: ...falling back to uuid=null. [ 432.027028][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 432.027048][T10668] Call Trace: [ 432.027058][T10668] [ 432.027069][T10668] dump_stack_lvl+0x241/0x360 [ 432.053810][T10668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.059043][T10668] ? __pfx__printk+0x10/0x10 [ 432.063773][T10668] ? snprintf+0xda/0x120 [ 432.068062][T10668] should_fail_ex+0x3b0/0x4e0 [ 432.072787][T10668] _copy_to_user+0x2f/0xb0 [ 432.077308][T10668] simple_read_from_buffer+0xca/0x150 [ 432.082706][T10668] proc_fail_nth_read+0x1e9/0x250 [ 432.087771][T10668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.093350][T10668] ? rw_verify_area+0x520/0x6b0 [ 432.098247][T10668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 432.103814][T10668] vfs_read+0x204/0xbc0 [ 432.107988][T10668] ? __pfx_lock_release+0x10/0x10 [ 432.113031][T10668] ? __pfx_vfs_read+0x10/0x10 [ 432.117738][T10668] ? __fget_files+0x29/0x470 [ 432.122362][T10668] ? __fget_files+0x3f6/0x470 [ 432.127064][T10668] ksys_read+0x1a0/0x2c0 [ 432.131353][T10668] ? __pfx_ksys_read+0x10/0x10 [ 432.136150][T10668] ? do_syscall_64+0x100/0x230 [ 432.140946][T10668] ? do_syscall_64+0xb6/0x230 [ 432.145653][T10668] do_syscall_64+0xf3/0x230 [ 432.150190][T10668] ? clear_bhb_loop+0x35/0x90 [ 432.154985][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.160899][T10668] RIP: 0033:0x7f600fd7467c [ 432.165326][T10668] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 432.184954][T10668] RSP: 002b:00007f600f7de040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 432.193404][T10668] RAX: ffffffffffffffda RBX: 00007f600ff04038 RCX: 00007f600fd7467c [ 432.201382][T10668] RDX: 000000000000000f RSI: 00007f600f7de0b0 RDI: 0000000000000005 [ 432.209359][T10668] RBP: 00007f600f7de0a0 R08: 0000000000000000 R09: 0000000000000000 [ 432.217334][T10668] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 432.225308][T10668] R13: 000000000000006e R14: 00007f600ff04038 R15: 00007ffc2808c248 [ 432.233308][T10668] [ 432.344964][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.386818][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.395932][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.405604][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.413968][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 432.421730][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.770665][ T9016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.985157][ T9016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.139080][ T9016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.436374][T10697] BUG: Bad page state in process syz.2.1522 pfn:6f4dc [ 433.443900][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f4dc [ 433.452779][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 433.460016][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 433.468691][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 433.477353][T10697] page dumped because: page_pool leak [ 433.482776][T10697] page_owner tracks the page as allocated [ 433.488664][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390637245, free_ts 432846052079 [ 433.507419][T10697] post_alloc_hook+0x1f3/0x230 [ 433.512234][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 433.517887][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 433.523133][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 433.528700][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 433.534644][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 433.540122][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 433.545543][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 433.550578][T10697] __sys_bpf+0x48d/0x810 [ 433.554961][T10697] __x64_sys_bpf+0x7c/0x90 [ 433.559477][T10697] do_syscall_64+0xf3/0x230 [ 433.564033][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.570036][T10697] page last free pid 10676 tgid 10676 stack trace: [ 433.576597][T10697] free_unref_page+0xd19/0xea0 [ 433.581405][T10697] __put_partials+0xeb/0x130 [ 433.586047][T10697] put_cpu_partial+0x17c/0x250 [ 433.590923][T10697] __slab_free+0x2ea/0x3d0 [ 433.595393][T10697] qlist_free_all+0x9e/0x140 [ 433.600107][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 433.605642][T10697] __kasan_slab_alloc+0x23/0x80 [ 433.610610][T10697] __kmalloc_noprof+0x1a3/0x400 [ 433.615524][T10697] ops_init+0x8b/0x610 [ 433.619697][T10697] setup_net+0x515/0xca0 [ 433.623984][T10697] copy_net_ns+0x4e2/0x7b0 [ 433.628861][T10697] create_new_namespaces+0x425/0x7b0 [ 433.634204][T10697] unshare_nsproxy_namespaces+0x124/0x180 [ 433.640017][T10697] ksys_unshare+0x619/0xc10 [ 433.644575][T10697] __x64_sys_unshare+0x38/0x40 [ 433.649439][T10697] do_syscall_64+0xf3/0x230 [ 433.653994][T10697] Modules linked in: [ 433.657975][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 433.668166][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 433.678260][T10697] Call Trace: [ 433.681588][T10697] [ 433.684565][T10697] dump_stack_lvl+0x241/0x360 [ 433.689309][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.694608][T10697] ? __pfx_print_modules+0x10/0x10 [ 433.699779][T10697] ? __netif_receive_skb_core+0x3b1e/0x4420 [ 433.705737][T10697] bad_page+0x14c/0x170 [ 433.709948][T10697] free_unref_page+0xe3e/0xea0 [ 433.714792][T10697] ? compound_order+0x1a/0x60 [ 433.719518][T10697] skb_release_data+0x6b2/0x880 [ 433.724440][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 433.729351][T10697] packet_rcv+0x163/0x13e0 [ 433.733858][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 433.738766][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 433.744844][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 433.751493][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 433.758052][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 433.763340][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 433.769740][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 433.775969][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 433.782361][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 433.789106][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 433.794626][T10697] ? __phys_addr+0xba/0x170 [ 433.799225][T10697] ? build_skb_around+0x111/0x260 [ 433.804313][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 433.810289][T10697] netif_receive_skb_list+0x55/0x4b0 [ 433.815641][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 433.821243][T10697] ? __pfx___might_resched+0x10/0x10 [ 433.826581][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 433.832292][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 433.837885][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 433.843757][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 433.849100][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 433.854482][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 433.860459][T10697] ? _copy_from_user+0xa6/0xe0 [ 433.865272][T10697] ? bpf_test_init+0x15a/0x180 [ 433.870087][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 433.875603][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 433.881036][T10697] ? __pfx_lock_release+0x10/0x10 [ 433.886121][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.892070][T10697] ? __fget_files+0x29/0x470 [ 433.896718][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 433.902575][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 433.907754][T10697] __sys_bpf+0x48d/0x810 [ 433.912059][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 433.916896][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 433.923008][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 433.929381][T10697] ? do_syscall_64+0x100/0x230 [ 433.934210][T10697] __x64_sys_bpf+0x7c/0x90 [ 433.938681][T10697] do_syscall_64+0xf3/0x230 [ 433.943242][T10697] ? clear_bhb_loop+0x35/0x90 [ 433.947978][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.953928][T10697] RIP: 0033:0x7f102e175b99 [ 433.958384][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.978034][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.986498][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 433.994508][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 434.002527][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 434.010543][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.018559][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 434.026597][T10697] [ 434.029731][T10697] Disabling lock debugging due to kernel taint [ 434.035937][T10697] BUG: Bad page state in process syz.2.1522 pfn:6f4db [ 434.042844][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f4db [ 434.051685][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 434.058870][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 434.067536][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 434.076144][T10697] page dumped because: page_pool leak [ 434.081577][T10697] page_owner tracks the page as allocated [ 434.087345][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390618622, free_ts 432846052079 [ 434.106094][T10697] post_alloc_hook+0x1f3/0x230 [ 434.110930][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 434.116552][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 434.121791][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 434.127319][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 434.133250][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 434.138698][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 434.144112][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 434.149117][T10697] __sys_bpf+0x48d/0x810 [ 434.153404][T10697] __x64_sys_bpf+0x7c/0x90 [ 434.157901][T10697] do_syscall_64+0xf3/0x230 [ 434.162448][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.166574][ T5123] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 434.168402][T10697] page last free pid 10676 tgid 10676 stack trace: [ 434.182469][T10697] free_unref_page+0xd19/0xea0 [ 434.187299][T10697] __put_partials+0xeb/0x130 [ 434.191936][T10697] put_cpu_partial+0x17c/0x250 [ 434.196779][T10697] __slab_free+0x2ea/0x3d0 [ 434.201242][T10697] qlist_free_all+0x9e/0x140 [ 434.205888][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 434.211432][T10697] __kasan_slab_alloc+0x23/0x80 [ 434.216333][T10697] __kmalloc_noprof+0x1a3/0x400 [ 434.221268][T10697] ops_init+0x8b/0x610 [ 434.225376][T10697] setup_net+0x515/0xca0 [ 434.229691][T10697] copy_net_ns+0x4e2/0x7b0 [ 434.234138][T10697] create_new_namespaces+0x425/0x7b0 [ 434.239600][T10697] unshare_nsproxy_namespaces+0x124/0x180 [ 434.245354][T10697] ksys_unshare+0x619/0xc10 [ 434.250033][T10697] __x64_sys_unshare+0x38/0x40 [ 434.254949][T10697] do_syscall_64+0xf3/0x230 [ 434.259555][T10697] Modules linked in: [ 434.263488][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 434.275154][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 434.285241][T10697] Call Trace: [ 434.288553][T10697] [ 434.291519][T10697] dump_stack_lvl+0x241/0x360 [ 434.296262][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.301526][T10697] ? __pfx_print_modules+0x10/0x10 [ 434.306696][T10697] bad_page+0x14c/0x170 [ 434.310904][T10697] free_unref_page+0xe3e/0xea0 [ 434.315715][T10697] ? compound_order+0x1a/0x60 [ 434.320529][T10697] skb_release_data+0x6b2/0x880 [ 434.325441][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 434.330341][T10697] packet_rcv+0x163/0x13e0 [ 434.334820][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 434.339720][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 434.345768][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 434.352423][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 434.358978][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 434.364243][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 434.370650][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 434.376840][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 434.383194][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 434.389895][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 434.395102][T10697] ? __phys_addr+0xba/0x170 [ 434.399619][T10697] ? build_skb_around+0x111/0x260 [ 434.404740][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 434.410642][T10697] netif_receive_skb_list+0x55/0x4b0 [ 434.415942][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 434.421419][T10697] ? __pfx___might_resched+0x10/0x10 [ 434.426714][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 434.432366][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 434.438185][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 434.444087][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 434.449396][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 434.454709][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 434.460635][T10697] ? _copy_from_user+0xa6/0xe0 [ 434.465407][T10697] ? bpf_test_init+0x15a/0x180 [ 434.470183][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 434.475655][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 434.481047][T10697] ? __pfx_lock_release+0x10/0x10 [ 434.486084][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 434.491903][T10697] ? __fget_files+0x29/0x470 [ 434.496516][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 434.502350][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 434.507299][T10697] __sys_bpf+0x48d/0x810 [ 434.511629][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 434.516455][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 434.522469][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.528809][T10697] ? do_syscall_64+0x100/0x230 [ 434.533680][T10697] __x64_sys_bpf+0x7c/0x90 [ 434.538127][T10697] do_syscall_64+0xf3/0x230 [ 434.542657][T10697] ? clear_bhb_loop+0x35/0x90 [ 434.547355][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.553263][T10697] RIP: 0033:0x7f102e175b99 [ 434.557699][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.577318][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.585750][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 434.593735][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 434.601722][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 434.609706][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.617684][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 434.625672][T10697] [ 434.628821][T10697] BUG: Bad page state in process syz.2.1522 pfn:6f4da [ 434.635706][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f4da [ 434.639191][ T5123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.644506][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 434.655796][ T5091] Bluetooth: hci2: command tx timeout [ 434.662500][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 434.662530][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 434.668206][ T5123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.676500][T10697] page dumped because: page_pool leak [ 434.676522][T10697] page_owner tracks the page as allocated [ 434.676531][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390599644, free_ts 432846052079 [ 434.707009][ T5123] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 434.724632][T10697] post_alloc_hook+0x1f3/0x230 [ 434.724666][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 434.744231][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 434.749547][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 434.755050][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 434.761007][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 434.765322][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.766430][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 434.766465][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 434.766486][T10697] __sys_bpf+0x48d/0x810 [ 434.789095][T10697] __x64_sys_bpf+0x7c/0x90 [ 434.793565][T10697] do_syscall_64+0xf3/0x230 [ 434.795873][ T5123] usb 2-1: config 0 descriptor?? [ 434.798129][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.809026][T10697] page last free pid 10676 tgid 10676 stack trace: [ 434.815573][T10697] free_unref_page+0xd19/0xea0 [ 434.820416][T10697] __put_partials+0xeb/0x130 [ 434.825050][T10697] put_cpu_partial+0x17c/0x250 [ 434.829888][T10697] __slab_free+0x2ea/0x3d0 [ 434.834351][T10697] qlist_free_all+0x9e/0x140 [ 434.839004][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 434.844506][T10697] __kasan_slab_alloc+0x23/0x80 [ 434.849477][T10697] __kmalloc_noprof+0x1a3/0x400 [ 434.854365][T10697] ops_init+0x8b/0x610 [ 434.858489][T10697] setup_net+0x515/0xca0 [ 434.862765][T10697] copy_net_ns+0x4e2/0x7b0 [ 434.867230][T10697] create_new_namespaces+0x425/0x7b0 [ 434.872556][T10697] unshare_nsproxy_namespaces+0x124/0x180 [ 434.878329][T10697] ksys_unshare+0x619/0xc10 [ 434.882865][T10697] __x64_sys_unshare+0x38/0x40 [ 434.887692][T10697] do_syscall_64+0xf3/0x230 [ 434.892248][T10697] Modules linked in: [ 434.896180][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 434.907842][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 434.917934][T10697] Call Trace: [ 434.921245][T10697] [ 434.924211][T10697] dump_stack_lvl+0x241/0x360 [ 434.928967][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.934212][T10697] ? __pfx_print_modules+0x10/0x10 [ 434.939368][T10697] bad_page+0x14c/0x170 [ 434.943568][T10697] free_unref_page+0xe3e/0xea0 [ 434.948371][T10697] ? compound_order+0x1a/0x60 [ 434.953083][T10697] skb_release_data+0x6b2/0x880 [ 434.957981][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 434.962872][T10697] packet_rcv+0x163/0x13e0 [ 434.967337][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 434.972226][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 434.978267][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 434.984905][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 434.991461][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 434.996828][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 435.003208][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 435.009488][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 435.012759][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.015842][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 435.029782][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.030845][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 435.043803][T10697] ? __phys_addr+0xba/0x170 [ 435.048348][T10697] ? build_skb_around+0x111/0x260 [ 435.053405][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 435.059333][T10697] netif_receive_skb_list+0x55/0x4b0 [ 435.064684][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 435.070278][T10697] ? __pfx___might_resched+0x10/0x10 [ 435.075595][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 435.081279][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 435.087125][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 435.092974][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 435.098296][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 435.103631][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 435.109583][T10697] ? _copy_from_user+0xa6/0xe0 [ 435.114383][T10697] ? bpf_test_init+0x15a/0x180 [ 435.119281][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 435.124781][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 435.130173][T10697] ? __pfx_lock_release+0x10/0x10 [ 435.135214][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.141041][T10697] ? __fget_files+0x29/0x470 [ 435.145650][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.151475][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 435.156426][T10697] __sys_bpf+0x48d/0x810 [ 435.160685][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 435.165468][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.171455][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.177790][T10697] ? do_syscall_64+0x100/0x230 [ 435.182575][T10697] __x64_sys_bpf+0x7c/0x90 [ 435.187012][T10697] do_syscall_64+0xf3/0x230 [ 435.191537][T10697] ? clear_bhb_loop+0x35/0x90 [ 435.196231][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.202159][T10697] RIP: 0033:0x7f102e175b99 [ 435.206586][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.226201][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.234633][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 435.242612][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 435.250602][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 435.258581][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.266565][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 435.274562][T10697] [ 435.277694][T10697] BUG: Bad page state in process syz.2.1522 pfn:6f4d9 [ 435.284572][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x6f4d9 [ 435.293404][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 435.300581][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 435.309247][T10697] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 435.317882][T10697] page dumped because: page_pool leak [ 435.323276][T10697] page_owner tracks the page as allocated [ 435.329055][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390580949, free_ts 432846052079 [ 435.347796][T10697] post_alloc_hook+0x1f3/0x230 [ 435.352603][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 435.358303][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 435.363540][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 435.369064][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 435.374992][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 435.380443][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 435.385861][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 435.390854][T10697] __sys_bpf+0x48d/0x810 [ 435.395138][T10697] __x64_sys_bpf+0x7c/0x90 [ 435.399616][T10697] do_syscall_64+0xf3/0x230 [ 435.404162][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.410147][T10697] page last free pid 10676 tgid 10676 stack trace: [ 435.416693][T10697] free_unref_page+0xd19/0xea0 [ 435.421498][T10697] __put_partials+0xeb/0x130 [ 435.426119][T10697] put_cpu_partial+0x17c/0x250 [ 435.430962][T10697] __slab_free+0x2ea/0x3d0 [ 435.435431][T10697] qlist_free_all+0x9e/0x140 [ 435.440095][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 435.445612][T10697] __kasan_slab_alloc+0x23/0x80 [ 435.450545][T10697] __kmalloc_noprof+0x1a3/0x400 [ 435.455434][T10697] ops_init+0x8b/0x610 [ 435.459589][T10697] setup_net+0x515/0xca0 [ 435.463859][T10697] copy_net_ns+0x4e2/0x7b0 [ 435.468352][T10697] create_new_namespaces+0x425/0x7b0 [ 435.473691][T10697] unshare_nsproxy_namespaces+0x124/0x180 [ 435.479488][T10697] ksys_unshare+0x619/0xc10 [ 435.484036][T10697] __x64_sys_unshare+0x38/0x40 [ 435.488894][T10697] do_syscall_64+0xf3/0x230 [ 435.493447][T10697] Modules linked in: [ 435.497400][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 435.509056][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 435.519120][T10697] Call Trace: [ 435.522411][T10697] [ 435.525348][T10697] dump_stack_lvl+0x241/0x360 [ 435.530054][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.535360][T10697] ? __pfx_print_modules+0x10/0x10 [ 435.540502][T10697] bad_page+0x14c/0x170 [ 435.544688][T10697] free_unref_page+0xe3e/0xea0 [ 435.549561][T10697] ? compound_order+0x1a/0x60 [ 435.554429][T10697] skb_release_data+0x6b2/0x880 [ 435.559312][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 435.564185][T10697] packet_rcv+0x163/0x13e0 [ 435.568646][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 435.573522][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 435.579536][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 435.586146][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 435.592669][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 435.597893][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 435.604242][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 435.610427][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 435.616778][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 435.623472][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 435.628678][T10697] ? __phys_addr+0xba/0x170 [ 435.633208][T10697] ? build_skb_around+0x111/0x260 [ 435.638275][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 435.644221][T10697] netif_receive_skb_list+0x55/0x4b0 [ 435.649595][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 435.655077][T10697] ? __pfx___might_resched+0x10/0x10 [ 435.660407][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 435.666068][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 435.671637][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 435.677468][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 435.682765][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 435.688073][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 435.693991][T10697] ? _copy_from_user+0xa6/0xe0 [ 435.698772][T10697] ? bpf_test_init+0x15a/0x180 [ 435.703545][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 435.709030][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 435.714446][T10697] ? __pfx_lock_release+0x10/0x10 [ 435.719491][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.725319][T10697] ? __fget_files+0x29/0x470 [ 435.729929][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 435.735942][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 435.740911][T10697] __sys_bpf+0x48d/0x810 [ 435.745188][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 435.749989][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.756101][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.762444][T10697] ? do_syscall_64+0x100/0x230 [ 435.767240][T10697] __x64_sys_bpf+0x7c/0x90 [ 435.771685][T10697] do_syscall_64+0xf3/0x230 [ 435.776205][T10697] ? clear_bhb_loop+0x35/0x90 [ 435.780906][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.786817][T10697] RIP: 0033:0x7f102e175b99 [ 435.791240][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.810953][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.819491][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 435.827483][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 435.835457][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 435.843472][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.851458][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 435.859541][T10697] [ 435.862739][T10697] BUG: Bad page state in process syz.2.1522 pfn:6f4d8 [ 435.869652][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806f4de000 pfn:0x6f4d8 [ 435.879790][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 435.887060][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 435.895683][T10697] raw: ffff88806f4de000 0000000000000001 00000000ffffffff 0000000000000000 [ 435.904327][T10697] page dumped because: page_pool leak [ 435.909758][T10697] page_owner tracks the page as allocated [ 435.915504][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390562145, free_ts 432846052079 [ 435.934253][T10697] post_alloc_hook+0x1f3/0x230 [ 435.939094][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 435.944696][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 435.949986][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 435.955501][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 435.961477][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 435.966921][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 435.972342][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 435.977353][T10697] __sys_bpf+0x48d/0x810 [ 435.981650][T10697] __x64_sys_bpf+0x7c/0x90 [ 435.986110][T10697] do_syscall_64+0xf3/0x230 [ 435.990703][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.996677][T10697] page last free pid 10676 tgid 10676 stack trace: [ 436.003207][T10697] free_unref_page+0xd19/0xea0 [ 436.008038][T10697] __put_partials+0xeb/0x130 [ 436.012675][T10697] put_cpu_partial+0x17c/0x250 [ 436.017533][T10697] __slab_free+0x2ea/0x3d0 [ 436.022003][T10697] qlist_free_all+0x9e/0x140 [ 436.026672][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 436.032216][T10697] __kasan_slab_alloc+0x23/0x80 [ 436.037162][T10697] __kmalloc_noprof+0x1a3/0x400 [ 436.042075][T10697] ops_init+0x8b/0x610 [ 436.046185][T10697] setup_net+0x515/0xca0 [ 436.050507][T10697] copy_net_ns+0x4e2/0x7b0 [ 436.054970][T10697] create_new_namespaces+0x425/0x7b0 [ 436.060347][T10697] unshare_nsproxy_namespaces+0x124/0x180 [ 436.066115][T10697] ksys_unshare+0x619/0xc10 [ 436.070745][T10697] __x64_sys_unshare+0x38/0x40 [ 436.075586][T10697] do_syscall_64+0xf3/0x230 [ 436.080175][T10697] Modules linked in: [ 436.084111][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 436.095980][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 436.106067][T10697] Call Trace: [ 436.109403][T10697] [ 436.112378][T10697] dump_stack_lvl+0x241/0x360 [ 436.117109][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.122357][T10697] ? __pfx_print_modules+0x10/0x10 [ 436.127499][T10697] bad_page+0x14c/0x170 [ 436.131700][T10697] free_unref_page+0xe3e/0xea0 [ 436.136486][T10697] ? compound_order+0x1a/0x60 [ 436.141216][T10697] skb_release_data+0x6b2/0x880 [ 436.146102][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 436.150988][T10697] packet_rcv+0x163/0x13e0 [ 436.155465][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 436.160379][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 436.166414][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 436.173060][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 436.179620][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 436.184873][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.191261][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 436.197472][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.203850][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 436.210573][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 436.215788][T10697] ? __phys_addr+0xba/0x170 [ 436.220334][T10697] ? build_skb_around+0x111/0x260 [ 436.225403][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 436.231320][T10697] netif_receive_skb_list+0x55/0x4b0 [ 436.236646][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 436.242151][T10697] ? __pfx___might_resched+0x10/0x10 [ 436.247479][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 436.253263][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 436.258868][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 436.264729][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 436.270043][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 436.275377][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 436.281310][T10697] ? _copy_from_user+0xa6/0xe0 [ 436.286115][T10697] ? bpf_test_init+0x15a/0x180 [ 436.290918][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 436.296409][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 436.301831][T10697] ? __pfx_lock_release+0x10/0x10 [ 436.306897][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.312750][T10697] ? __fget_files+0x29/0x470 [ 436.317379][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.323235][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 436.328216][T10697] __sys_bpf+0x48d/0x810 [ 436.332488][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 436.337378][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.343385][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.349740][T10697] ? do_syscall_64+0x100/0x230 [ 436.354568][T10697] __x64_sys_bpf+0x7c/0x90 [ 436.359036][T10697] do_syscall_64+0xf3/0x230 [ 436.363766][T10697] ? clear_bhb_loop+0x35/0x90 [ 436.368499][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.374479][T10697] RIP: 0033:0x7f102e175b99 [ 436.378938][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.398587][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.407038][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 436.415079][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 436.423076][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 436.431089][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.439103][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 436.447126][T10697] [ 436.450247][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d7 [ 436.457158][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x692d7 [ 436.465965][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 436.473150][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 436.481843][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 436.490491][T10697] page dumped because: page_pool leak [ 436.495897][T10697] page_owner tracks the page as allocated [ 436.501677][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390543360, free_ts 432862593127 [ 436.520420][T10697] post_alloc_hook+0x1f3/0x230 [ 436.525223][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 436.530864][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 436.536118][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 436.541651][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 436.547705][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 436.553116][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 436.558556][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 436.563541][T10697] __sys_bpf+0x48d/0x810 [ 436.567859][T10697] __x64_sys_bpf+0x7c/0x90 [ 436.572319][T10697] do_syscall_64+0xf3/0x230 [ 436.576896][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.582830][T10697] page last free pid 10686 tgid 10684 stack trace: [ 436.589374][T10697] free_unref_page+0xd19/0xea0 [ 436.594177][T10697] __put_partials+0xeb/0x130 [ 436.598838][T10697] put_cpu_partial+0x17c/0x250 [ 436.603641][T10697] __slab_free+0x2ea/0x3d0 [ 436.608129][T10697] qlist_free_all+0x9e/0x140 [ 436.612767][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 436.618377][T10697] __kasan_slab_alloc+0x23/0x80 [ 436.623284][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 436.628569][T10697] nsim_bpf+0x720/0xd60 [ 436.632769][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 436.638478][T10697] map_create+0x90c/0x1200 [ 436.642930][T10697] __sys_bpf+0x6d1/0x810 [ 436.647238][T10697] __x64_sys_bpf+0x7c/0x90 [ 436.651688][T10697] do_syscall_64+0xf3/0x230 [ 436.656228][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.662194][T10697] Modules linked in: [ 436.666125][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 436.677782][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 436.687847][T10697] Call Trace: [ 436.691126][T10697] [ 436.694078][T10697] dump_stack_lvl+0x241/0x360 [ 436.698804][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.704024][T10697] ? __pfx_print_modules+0x10/0x10 [ 436.706524][ T5091] Bluetooth: hci2: command tx timeout [ 436.709157][T10697] bad_page+0x14c/0x170 [ 436.718722][T10697] free_unref_page+0xe3e/0xea0 [ 436.723505][T10697] ? compound_order+0x1a/0x60 [ 436.728192][T10697] skb_release_data+0x6b2/0x880 [ 436.733087][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 436.737988][T10697] packet_rcv+0x163/0x13e0 [ 436.742457][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 436.747336][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 436.753353][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 436.759993][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 436.766526][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 436.771757][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.778128][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 436.784328][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 436.790698][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 436.797418][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 436.802645][T10697] ? __phys_addr+0xba/0x170 [ 436.807177][T10697] ? build_skb_around+0x111/0x260 [ 436.812239][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 436.818178][T10697] netif_receive_skb_list+0x55/0x4b0 [ 436.823506][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 436.829002][T10697] ? __pfx___might_resched+0x10/0x10 [ 436.834314][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 436.839993][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 436.845615][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 436.851466][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 436.856799][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 436.862470][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 436.868418][T10697] ? _copy_from_user+0xa6/0xe0 [ 436.873394][T10697] ? bpf_test_init+0x15a/0x180 [ 436.878188][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 436.883695][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 436.889191][T10697] ? __pfx_lock_release+0x10/0x10 [ 436.894247][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.900096][T10697] ? __fget_files+0x29/0x470 [ 436.904729][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 436.910566][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 436.915625][T10697] __sys_bpf+0x48d/0x810 [ 436.919908][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 436.924708][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 436.930703][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.937068][T10697] ? do_syscall_64+0x100/0x230 [ 436.941882][T10697] __x64_sys_bpf+0x7c/0x90 [ 436.946345][T10697] do_syscall_64+0xf3/0x230 [ 436.950905][T10697] ? clear_bhb_loop+0x35/0x90 [ 436.955634][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.961582][T10697] RIP: 0033:0x7f102e175b99 [ 436.966038][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.985783][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.994241][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 437.002255][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 437.010260][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 437.018300][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.026326][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 437.034349][T10697] [ 437.037472][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d6 [ 437.044358][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x692d6 [ 437.053188][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 437.060371][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 437.069107][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 437.077740][T10697] page dumped because: page_pool leak [ 437.083126][T10697] page_owner tracks the page as allocated [ 437.088877][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390524617, free_ts 432862593127 [ 437.107607][T10697] post_alloc_hook+0x1f3/0x230 [ 437.112395][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 437.118005][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 437.123246][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 437.128766][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 437.134778][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 437.140209][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 437.145610][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 437.150599][T10697] __sys_bpf+0x48d/0x810 [ 437.154876][T10697] __x64_sys_bpf+0x7c/0x90 [ 437.159352][T10697] do_syscall_64+0xf3/0x230 [ 437.163897][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.169845][T10697] page last free pid 10686 tgid 10684 stack trace: [ 437.176366][T10697] free_unref_page+0xd19/0xea0 [ 437.181186][T10697] __put_partials+0xeb/0x130 [ 437.185813][T10697] put_cpu_partial+0x17c/0x250 [ 437.190639][T10697] __slab_free+0x2ea/0x3d0 [ 437.195094][T10697] qlist_free_all+0x9e/0x140 [ 437.199734][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 437.205232][T10697] __kasan_slab_alloc+0x23/0x80 [ 437.210144][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 437.215367][T10697] nsim_bpf+0x720/0xd60 [ 437.219575][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 437.225247][T10697] map_create+0x90c/0x1200 [ 437.229726][T10697] __sys_bpf+0x6d1/0x810 [ 437.234004][T10697] __x64_sys_bpf+0x7c/0x90 [ 437.238478][T10697] do_syscall_64+0xf3/0x230 [ 437.243017][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.248961][T10697] Modules linked in: [ 437.252887][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 437.264597][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 437.274675][T10697] Call Trace: [ 437.277961][T10697] [ 437.280898][T10697] dump_stack_lvl+0x241/0x360 [ 437.285607][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.290826][T10697] ? __pfx_print_modules+0x10/0x10 [ 437.295963][T10697] bad_page+0x14c/0x170 [ 437.300147][T10697] free_unref_page+0xe3e/0xea0 [ 437.304928][T10697] ? compound_order+0x1a/0x60 [ 437.309620][T10697] skb_release_data+0x6b2/0x880 [ 437.314487][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 437.319372][T10697] packet_rcv+0x163/0x13e0 [ 437.323821][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 437.328699][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 437.334721][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 437.341339][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 437.347867][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 437.353126][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 437.359508][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 437.365702][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 437.372074][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 437.378792][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 437.384008][T10697] ? __phys_addr+0xba/0x170 [ 437.388589][T10697] ? build_skb_around+0x111/0x260 [ 437.393638][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 437.399558][T10697] netif_receive_skb_list+0x55/0x4b0 [ 437.404875][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 437.410369][T10697] ? __pfx___might_resched+0x10/0x10 [ 437.415754][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 437.421422][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 437.427006][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 437.432866][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 437.438165][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 437.443501][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 437.449453][T10697] ? _copy_from_user+0xa6/0xe0 [ 437.454258][T10697] ? bpf_test_init+0x15a/0x180 [ 437.459061][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 437.464562][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 437.469978][T10697] ? __pfx_lock_release+0x10/0x10 [ 437.475044][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 437.481430][T10697] ? __fget_files+0x29/0x470 [ 437.486050][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 437.491890][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 437.496852][T10697] __sys_bpf+0x48d/0x810 [ 437.501140][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 437.505949][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 437.511956][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 437.518302][T10697] ? do_syscall_64+0x100/0x230 [ 437.523110][T10697] __x64_sys_bpf+0x7c/0x90 [ 437.527564][T10697] do_syscall_64+0xf3/0x230 [ 437.532087][T10697] ? clear_bhb_loop+0x35/0x90 [ 437.536801][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.542725][T10697] RIP: 0033:0x7f102e175b99 [ 437.547148][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.566777][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.575210][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 437.583204][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 437.591196][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 437.599189][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.607209][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 437.615229][T10697] [ 437.618351][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d5 [ 437.625241][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x692d5 [ 437.634093][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 437.641292][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 437.649936][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 437.658666][T10697] page dumped because: page_pool leak [ 437.664059][T10697] page_owner tracks the page as allocated [ 437.669839][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390506165, free_ts 432862593127 [ 437.688696][T10697] post_alloc_hook+0x1f3/0x230 [ 437.693579][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 437.699203][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 437.704457][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 437.710001][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 437.716025][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 437.721482][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 437.726937][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 437.731912][T10697] __sys_bpf+0x48d/0x810 [ 437.736187][T10697] __x64_sys_bpf+0x7c/0x90 [ 437.740660][T10697] do_syscall_64+0xf3/0x230 [ 437.745204][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.751168][T10697] page last free pid 10686 tgid 10684 stack trace: [ 437.757718][T10697] free_unref_page+0xd19/0xea0 [ 437.762519][T10697] __put_partials+0xeb/0x130 [ 437.767190][T10697] put_cpu_partial+0x17c/0x250 [ 437.772025][T10697] __slab_free+0x2ea/0x3d0 [ 437.776578][T10697] qlist_free_all+0x9e/0x140 [ 437.781224][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 437.786765][T10697] __kasan_slab_alloc+0x23/0x80 [ 437.791675][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 437.796950][T10697] nsim_bpf+0x720/0xd60 [ 437.801148][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 437.806865][T10697] map_create+0x90c/0x1200 [ 437.811326][T10697] __sys_bpf+0x6d1/0x810 [ 437.815593][T10697] __x64_sys_bpf+0x7c/0x90 [ 437.820063][T10697] do_syscall_64+0xf3/0x230 [ 437.824613][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.830586][T10697] Modules linked in: [ 437.834511][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 437.846166][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 437.856335][T10697] Call Trace: [ 437.859636][T10697] [ 437.862597][T10697] dump_stack_lvl+0x241/0x360 [ 437.867323][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.872562][T10697] ? __pfx_print_modules+0x10/0x10 [ 437.877715][T10697] bad_page+0x14c/0x170 [ 437.881901][T10697] free_unref_page+0xe3e/0xea0 [ 437.886727][T10697] ? compound_order+0x1a/0x60 [ 437.891423][T10697] skb_release_data+0x6b2/0x880 [ 437.896307][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 437.901178][T10697] packet_rcv+0x163/0x13e0 [ 437.905640][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 437.910537][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 437.916563][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 437.923238][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 437.929770][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 437.935008][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 437.941374][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 437.947563][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 437.953935][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 437.960716][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 437.965952][T10697] ? __phys_addr+0xba/0x170 [ 437.970496][T10697] ? build_skb_around+0x111/0x260 [ 437.975568][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 437.981499][T10697] netif_receive_skb_list+0x55/0x4b0 [ 437.986824][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 437.992327][T10697] ? __pfx___might_resched+0x10/0x10 [ 437.997648][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 438.003318][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 438.008889][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 438.014746][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 438.020058][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 438.025382][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 438.031302][T10697] ? _copy_from_user+0xa6/0xe0 [ 438.036109][T10697] ? bpf_test_init+0x15a/0x180 [ 438.040932][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 438.046453][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 438.051883][T10697] ? __pfx_lock_release+0x10/0x10 [ 438.057050][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 438.062902][T10697] ? __fget_files+0x29/0x470 [ 438.067614][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 438.073982][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 438.078948][T10697] __sys_bpf+0x48d/0x810 [ 438.083244][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 438.088065][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 438.094069][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.100468][T10697] ? do_syscall_64+0x100/0x230 [ 438.105255][T10697] __x64_sys_bpf+0x7c/0x90 [ 438.109726][T10697] do_syscall_64+0xf3/0x230 [ 438.114262][T10697] ? clear_bhb_loop+0x35/0x90 [ 438.118994][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.124927][T10697] RIP: 0033:0x7f102e175b99 [ 438.129358][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.148980][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.157437][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 438.165511][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 438.173662][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 438.181653][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.189652][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 438.197651][T10697] [ 438.200779][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d4 [ 438.207682][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x692d4 [ 438.216506][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 438.223677][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 438.232322][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 438.241010][T10697] page dumped because: page_pool leak [ 438.246454][T10697] page_owner tracks the page as allocated [ 438.252359][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390487589, free_ts 432862593127 [ 438.271124][T10697] post_alloc_hook+0x1f3/0x230 [ 438.275929][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 438.281565][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 438.286825][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 438.292313][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 438.298264][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 438.303691][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 438.309182][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 438.314164][T10697] __sys_bpf+0x48d/0x810 [ 438.318499][T10697] __x64_sys_bpf+0x7c/0x90 [ 438.322967][T10697] do_syscall_64+0xf3/0x230 [ 438.327560][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.333510][T10697] page last free pid 10686 tgid 10684 stack trace: [ 438.340082][T10697] free_unref_page+0xd19/0xea0 [ 438.344890][T10697] __put_partials+0xeb/0x130 [ 438.349573][T10697] put_cpu_partial+0x17c/0x250 [ 438.354395][T10697] __slab_free+0x2ea/0x3d0 [ 438.358919][T10697] qlist_free_all+0x9e/0x140 [ 438.363560][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 438.369118][T10697] __kasan_slab_alloc+0x23/0x80 [ 438.374028][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 438.379321][T10697] nsim_bpf+0x720/0xd60 [ 438.383523][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 438.389264][T10697] map_create+0x90c/0x1200 [ 438.393773][T10697] __sys_bpf+0x6d1/0x810 [ 438.398137][T10697] __x64_sys_bpf+0x7c/0x90 [ 438.402612][T10697] do_syscall_64+0xf3/0x230 [ 438.407199][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.413154][T10697] Modules linked in: [ 438.417133][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 438.428908][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 438.438999][T10697] Call Trace: [ 438.442306][T10697] [ 438.445258][T10697] dump_stack_lvl+0x241/0x360 [ 438.450021][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.455273][T10697] ? __pfx_print_modules+0x10/0x10 [ 438.460430][T10697] bad_page+0x14c/0x170 [ 438.464632][T10697] free_unref_page+0xe3e/0xea0 [ 438.469435][T10697] ? compound_order+0x1a/0x60 [ 438.474163][T10697] skb_release_data+0x6b2/0x880 [ 438.479168][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 438.484084][T10697] packet_rcv+0x163/0x13e0 [ 438.488563][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 438.493460][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 438.499528][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 438.506168][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 438.512721][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 438.517975][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 438.524351][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 438.530555][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 438.536942][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 438.543675][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 438.548917][T10697] ? __phys_addr+0xba/0x170 [ 438.553497][T10697] ? build_skb_around+0x111/0x260 [ 438.558570][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 438.564510][T10697] netif_receive_skb_list+0x55/0x4b0 [ 438.569850][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 438.575358][T10697] ? __pfx___might_resched+0x10/0x10 [ 438.580822][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 438.586511][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 438.592114][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 438.597975][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 438.603290][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 438.608627][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 438.614597][T10697] ? _copy_from_user+0xa6/0xe0 [ 438.619412][T10697] ? bpf_test_init+0x15a/0x180 [ 438.624225][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 438.629730][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 438.635150][T10697] ? __pfx_lock_release+0x10/0x10 [ 438.640215][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 438.646066][T10697] ? __fget_files+0x29/0x470 [ 438.650702][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 438.656551][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 438.661526][T10697] __sys_bpf+0x48d/0x810 [ 438.665813][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 438.670628][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 438.676646][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.683097][T10697] ? do_syscall_64+0x100/0x230 [ 438.687916][T10697] __x64_sys_bpf+0x7c/0x90 [ 438.692380][T10697] do_syscall_64+0xf3/0x230 [ 438.696924][T10697] ? clear_bhb_loop+0x35/0x90 [ 438.701651][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.707590][T10697] RIP: 0033:0x7f102e175b99 [ 438.712039][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.731688][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.740146][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 438.748154][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 438.756155][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 438.764158][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.772160][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 438.780175][T10697] [ 438.783577][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d3 [ 438.786630][ T5091] Bluetooth: hci2: command tx timeout [ 438.790465][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x692d3 [ 438.804630][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 438.811812][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 438.820474][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 438.829107][T10697] page dumped because: page_pool leak [ 438.834499][T10697] page_owner tracks the page as allocated [ 438.840284][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390469210, free_ts 432862593127 [ 438.859022][T10697] post_alloc_hook+0x1f3/0x230 [ 438.863830][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 438.869483][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 438.874720][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 438.880259][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 438.886185][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 438.891646][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 438.897095][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 438.902154][T10697] __sys_bpf+0x48d/0x810 [ 438.906486][T10697] __x64_sys_bpf+0x7c/0x90 [ 438.910944][T10697] do_syscall_64+0xf3/0x230 [ 438.915494][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.921460][T10697] page last free pid 10686 tgid 10684 stack trace: [ 438.928027][T10697] free_unref_page+0xd19/0xea0 [ 438.932829][T10697] __put_partials+0xeb/0x130 [ 438.937496][T10697] put_cpu_partial+0x17c/0x250 [ 438.942305][T10697] __slab_free+0x2ea/0x3d0 [ 438.946814][T10697] qlist_free_all+0x9e/0x140 [ 438.951445][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 438.957014][T10697] __kasan_slab_alloc+0x23/0x80 [ 438.961918][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 438.967180][T10697] nsim_bpf+0x720/0xd60 [ 438.971382][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 438.977098][T10697] map_create+0x90c/0x1200 [ 438.981564][T10697] __sys_bpf+0x6d1/0x810 [ 438.985859][T10697] __x64_sys_bpf+0x7c/0x90 [ 438.990418][T10697] do_syscall_64+0xf3/0x230 [ 438.994973][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.000957][T10697] Modules linked in: [ 439.004884][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 439.016550][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.026631][T10697] Call Trace: [ 439.029954][T10697] [ 439.032918][T10697] dump_stack_lvl+0x241/0x360 [ 439.037677][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.042929][T10697] ? __pfx_print_modules+0x10/0x10 [ 439.048089][T10697] bad_page+0x14c/0x170 [ 439.052297][T10697] free_unref_page+0xe3e/0xea0 [ 439.057102][T10697] ? compound_order+0x1a/0x60 [ 439.061817][T10697] skb_release_data+0x6b2/0x880 [ 439.066724][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 439.071622][T10697] packet_rcv+0x163/0x13e0 [ 439.076091][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 439.080986][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 439.087017][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 439.093656][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 439.100208][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 439.105465][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 439.111847][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 439.118057][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 439.124428][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 439.131147][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 439.136383][T10697] ? __phys_addr+0xba/0x170 [ 439.140928][T10697] ? build_skb_around+0x111/0x260 [ 439.145995][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 439.151931][T10697] netif_receive_skb_list+0x55/0x4b0 [ 439.157271][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 439.162777][T10697] ? __pfx___might_resched+0x10/0x10 [ 439.168099][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 439.173784][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 439.179375][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 439.185225][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 439.190548][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 439.195886][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 439.201844][T10697] ? _copy_from_user+0xa6/0xe0 [ 439.206650][T10697] ? bpf_test_init+0x15a/0x180 [ 439.211455][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 439.216958][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 439.222379][T10697] ? __pfx_lock_release+0x10/0x10 [ 439.227450][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.233302][T10697] ? __fget_files+0x29/0x470 [ 439.237937][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.243790][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 439.248767][T10697] __sys_bpf+0x48d/0x810 [ 439.253053][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 439.257869][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 439.263904][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.270290][T10697] ? do_syscall_64+0x100/0x230 [ 439.275106][T10697] __x64_sys_bpf+0x7c/0x90 [ 439.279563][T10697] do_syscall_64+0xf3/0x230 [ 439.284120][T10697] ? clear_bhb_loop+0x35/0x90 [ 439.288847][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.294793][T10697] RIP: 0033:0x7f102e175b99 [ 439.299242][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.318891][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.327348][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 439.335350][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 439.343359][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 439.351461][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.359459][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 439.367489][T10697] [ 439.370611][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d2 [ 439.377525][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x692d2 [ 439.386324][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 439.393598][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 439.402253][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 439.410896][T10697] page dumped because: page_pool leak [ 439.416292][T10697] page_owner tracks the page as allocated [ 439.422066][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390450469, free_ts 432862593127 [ 439.440801][T10697] post_alloc_hook+0x1f3/0x230 [ 439.445603][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 439.451230][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 439.456489][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 439.461987][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 439.467958][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 439.473374][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 439.478825][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 439.483795][T10697] __sys_bpf+0x48d/0x810 [ 439.488150][T10697] __x64_sys_bpf+0x7c/0x90 [ 439.492605][T10697] do_syscall_64+0xf3/0x230 [ 439.497183][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.503286][T10697] page last free pid 10686 tgid 10684 stack trace: [ 439.509868][T10697] free_unref_page+0xd19/0xea0 [ 439.514680][T10697] __put_partials+0xeb/0x130 [ 439.519448][T10697] put_cpu_partial+0x17c/0x250 [ 439.524263][T10697] __slab_free+0x2ea/0x3d0 [ 439.528757][T10697] qlist_free_all+0x9e/0x140 [ 439.533390][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 439.538944][T10697] __kasan_slab_alloc+0x23/0x80 [ 439.543866][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 439.549170][T10697] nsim_bpf+0x720/0xd60 [ 439.553358][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 439.559073][T10697] map_create+0x90c/0x1200 [ 439.563540][T10697] __sys_bpf+0x6d1/0x810 [ 439.567881][T10697] __x64_sys_bpf+0x7c/0x90 [ 439.572343][T10697] do_syscall_64+0xf3/0x230 [ 439.576925][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.582873][T10697] Modules linked in: [ 439.586833][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 439.598586][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.608672][T10697] Call Trace: [ 439.611976][T10697] [ 439.614930][T10697] dump_stack_lvl+0x241/0x360 [ 439.619659][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.624912][T10697] ? __pfx_print_modules+0x10/0x10 [ 439.630071][T10697] bad_page+0x14c/0x170 [ 439.634276][T10697] free_unref_page+0xe3e/0xea0 [ 439.639078][T10697] ? compound_order+0x1a/0x60 [ 439.643797][T10697] skb_release_data+0x6b2/0x880 [ 439.648721][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 439.653613][T10697] packet_rcv+0x163/0x13e0 [ 439.658093][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 439.662991][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 439.669040][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 439.675684][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 439.682227][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 439.687485][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 439.693864][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 439.700081][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 439.706465][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 439.713189][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 439.718432][T10697] ? __phys_addr+0xba/0x170 [ 439.722993][T10697] ? build_skb_around+0x111/0x260 [ 439.728062][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 439.733997][T10697] netif_receive_skb_list+0x55/0x4b0 [ 439.739336][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 439.744846][T10697] ? __pfx___might_resched+0x10/0x10 [ 439.750174][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 439.755867][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 439.761459][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 439.767310][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 439.772630][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 439.777972][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 439.783948][T10697] ? _copy_from_user+0xa6/0xe0 [ 439.788757][T10697] ? bpf_test_init+0x15a/0x180 [ 439.793572][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 439.799084][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 439.804506][T10697] ? __pfx_lock_release+0x10/0x10 [ 439.809590][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.815532][T10697] ? __fget_files+0x29/0x470 [ 439.820191][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.826045][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 439.831034][T10697] __sys_bpf+0x48d/0x810 [ 439.835326][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 439.840148][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 439.846176][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.852540][T10697] ? do_syscall_64+0x100/0x230 [ 439.857357][T10697] __x64_sys_bpf+0x7c/0x90 [ 439.861903][T10697] do_syscall_64+0xf3/0x230 [ 439.866468][T10697] ? clear_bhb_loop+0x35/0x90 [ 439.871188][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.877127][T10697] RIP: 0033:0x7f102e175b99 [ 439.881657][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.901310][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.909771][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 439.917783][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 439.925795][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 439.933893][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.941894][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 439.949916][T10697] [ 439.953056][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d1 [ 439.960021][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x692d1 [ 439.968843][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 439.975996][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 439.984655][T10697] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 439.993301][T10697] page dumped because: page_pool leak [ 439.998730][T10697] page_owner tracks the page as allocated [ 440.004469][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390431697, free_ts 432862593127 [ 440.023214][T10697] post_alloc_hook+0x1f3/0x230 [ 440.028043][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 440.033627][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 440.038903][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 440.044399][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 440.050368][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 440.055782][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 440.061234][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 440.066203][T10697] __sys_bpf+0x48d/0x810 [ 440.070514][T10697] __x64_sys_bpf+0x7c/0x90 [ 440.074969][T10697] do_syscall_64+0xf3/0x230 [ 440.079548][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.085482][T10697] page last free pid 10686 tgid 10684 stack trace: [ 440.092045][T10697] free_unref_page+0xd19/0xea0 [ 440.096868][T10697] __put_partials+0xeb/0x130 [ 440.101504][T10697] put_cpu_partial+0x17c/0x250 [ 440.106310][T10697] __slab_free+0x2ea/0x3d0 [ 440.110813][T10697] qlist_free_all+0x9e/0x140 [ 440.115447][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 440.121030][T10697] __kasan_slab_alloc+0x23/0x80 [ 440.125925][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 440.131194][T10697] nsim_bpf+0x720/0xd60 [ 440.135391][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 440.141108][T10697] map_create+0x90c/0x1200 [ 440.145565][T10697] __sys_bpf+0x6d1/0x810 [ 440.149887][T10697] __x64_sys_bpf+0x7c/0x90 [ 440.154343][T10697] do_syscall_64+0xf3/0x230 [ 440.158923][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.164856][T10697] Modules linked in: [ 440.168828][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 440.180496][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 440.190590][T10697] Call Trace: [ 440.193895][T10697] [ 440.196858][T10697] dump_stack_lvl+0x241/0x360 [ 440.201588][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.206939][T10697] ? __pfx_print_modules+0x10/0x10 [ 440.212099][T10697] bad_page+0x14c/0x170 [ 440.216303][T10697] free_unref_page+0xe3e/0xea0 [ 440.221108][T10697] ? compound_order+0x1a/0x60 [ 440.225826][T10697] skb_release_data+0x6b2/0x880 [ 440.230729][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 440.235628][T10697] packet_rcv+0x163/0x13e0 [ 440.240094][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 440.244984][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 440.251046][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 440.257682][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 440.264239][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 440.269502][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.275886][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 440.282097][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.288480][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 440.295204][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 440.300435][T10697] ? __phys_addr+0xba/0x170 [ 440.305069][T10697] ? build_skb_around+0x111/0x260 [ 440.307824][ T5123] usb 2-1: string descriptor 0 read error: -32 [ 440.310117][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 440.319870][ T5123] uclogic 0003:256C:006D.0015: interface is invalid, ignoring [ 440.322224][T10697] netif_receive_skb_list+0x55/0x4b0 [ 440.335008][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 440.340533][T10697] ? __pfx___might_resched+0x10/0x10 [ 440.345869][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 440.351572][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 440.357170][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 440.363027][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 440.368351][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 440.373697][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 440.379659][T10697] ? _copy_from_user+0xa6/0xe0 [ 440.384468][T10697] ? bpf_test_init+0x15a/0x180 [ 440.389283][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 440.394792][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 440.400178][T10697] ? __pfx_lock_release+0x10/0x10 [ 440.405223][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 440.411047][T10697] ? __fget_files+0x29/0x470 [ 440.415653][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 440.421480][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 440.426601][T10697] __sys_bpf+0x48d/0x810 [ 440.430855][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 440.435638][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.441636][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 440.447966][T10697] ? do_syscall_64+0x100/0x230 [ 440.452737][T10697] __x64_sys_bpf+0x7c/0x90 [ 440.457178][T10697] do_syscall_64+0xf3/0x230 [ 440.461708][T10697] ? clear_bhb_loop+0x35/0x90 [ 440.466391][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.472334][T10697] RIP: 0033:0x7f102e175b99 [ 440.476752][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.496389][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.504823][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 440.512891][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 440.520859][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 440.528845][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.536830][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 440.544830][T10697] [ 440.547926][T10697] BUG: Bad page state in process syz.2.1522 pfn:692d0 [ 440.554787][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880692d6000 pfn:0x692d0 [ 440.564888][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 440.572066][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 440.580700][T10697] raw: ffff8880692d6000 0000000000000001 00000000ffffffff 0000000000000000 [ 440.589330][T10697] page dumped because: page_pool leak [ 440.594693][T10697] page_owner tracks the page as allocated [ 440.600440][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390413278, free_ts 432862593127 [ 440.619241][T10697] post_alloc_hook+0x1f3/0x230 [ 440.624024][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 440.629657][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 440.631957][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.634880][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 440.642071][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.646599][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 440.658784][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 440.664161][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 440.669567][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 440.674546][T10697] __sys_bpf+0x48d/0x810 [ 440.678831][T10697] __x64_sys_bpf+0x7c/0x90 [ 440.683273][T10697] do_syscall_64+0xf3/0x230 [ 440.687815][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.693733][T10697] page last free pid 10686 tgid 10684 stack trace: [ 440.700262][T10697] free_unref_page+0xd19/0xea0 [ 440.705047][T10697] __put_partials+0xeb/0x130 [ 440.709676][T10697] put_cpu_partial+0x17c/0x250 [ 440.714470][T10697] __slab_free+0x2ea/0x3d0 [ 440.719023][T10697] qlist_free_all+0x9e/0x140 [ 440.723657][T10697] kasan_quarantine_reduce+0x14f/0x170 [ 440.729161][T10697] __kasan_slab_alloc+0x23/0x80 [ 440.734057][T10697] kmalloc_trace_noprof+0x132/0x2c0 [ 440.739311][T10697] nsim_bpf+0x720/0xd60 [ 440.743509][T10697] bpf_map_offload_map_alloc+0x40b/0x680 [ 440.749185][T10697] map_create+0x90c/0x1200 [ 440.753632][T10697] __sys_bpf+0x6d1/0x810 [ 440.757921][T10697] __x64_sys_bpf+0x7c/0x90 [ 440.762374][T10697] do_syscall_64+0xf3/0x230 [ 440.766932][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.772867][T10697] Modules linked in: [ 440.776828][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 440.788486][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 440.798546][T10697] Call Trace: [ 440.801820][T10697] [ 440.804745][T10697] dump_stack_lvl+0x241/0x360 [ 440.809448][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.814671][T10697] ? __pfx_print_modules+0x10/0x10 [ 440.819806][T10697] bad_page+0x14c/0x170 [ 440.823976][T10697] free_unref_page+0xe3e/0xea0 [ 440.828755][T10697] ? compound_order+0x1a/0x60 [ 440.833463][T10697] skb_release_data+0x6b2/0x880 [ 440.838331][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 440.843190][T10697] packet_rcv+0x163/0x13e0 [ 440.847625][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 440.852483][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 440.858505][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 440.865099][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 440.866554][ T5091] Bluetooth: hci2: command tx timeout [ 440.871598][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 440.882185][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.888536][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 440.894729][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 440.901094][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 440.907798][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 440.912994][T10697] ? __phys_addr+0xba/0x170 [ 440.917513][T10697] ? build_skb_around+0x111/0x260 [ 440.922576][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 440.928473][T10697] netif_receive_skb_list+0x55/0x4b0 [ 440.933777][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 440.939245][T10697] ? __pfx___might_resched+0x10/0x10 [ 440.944529][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 440.950171][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 440.955714][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 440.961549][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 440.966830][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 440.972211][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 440.978121][T10697] ? _copy_from_user+0xa6/0xe0 [ 440.982883][T10697] ? bpf_test_init+0x15a/0x180 [ 440.987649][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 440.993111][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 440.998505][T10697] ? __pfx_lock_release+0x10/0x10 [ 441.003545][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 441.009355][T10697] ? __fget_files+0x29/0x470 [ 441.013960][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 441.019775][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 441.024727][T10697] __sys_bpf+0x48d/0x810 [ 441.028986][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 441.033788][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.039790][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.046115][T10697] ? do_syscall_64+0x100/0x230 [ 441.050886][T10697] __x64_sys_bpf+0x7c/0x90 [ 441.055308][T10697] do_syscall_64+0xf3/0x230 [ 441.059821][T10697] ? clear_bhb_loop+0x35/0x90 [ 441.064501][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.070396][T10697] RIP: 0033:0x7f102e175b99 [ 441.074831][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.094438][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.102873][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 441.110845][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 441.118907][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 441.126882][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.134893][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 441.142888][T10697] [ 441.145976][T10697] BUG: Bad page state in process syz.2.1522 pfn:708ef [ 441.152883][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x708ef [ 441.161691][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 441.168870][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 441.177496][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 441.186086][T10697] page dumped because: page_pool leak [ 441.191486][T10697] page_owner tracks the page as allocated [ 441.197250][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390394565, free_ts 431731963239 [ 441.216056][T10697] post_alloc_hook+0x1f3/0x230 [ 441.220892][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 441.226560][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 441.231781][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 441.237277][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 441.243195][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 441.248610][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 441.254017][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 441.258994][T10697] __sys_bpf+0x48d/0x810 [ 441.263274][T10697] __x64_sys_bpf+0x7c/0x90 [ 441.267739][T10697] do_syscall_64+0xf3/0x230 [ 441.272275][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.278223][T10697] page last free pid 8626 tgid 8626 stack trace: [ 441.284586][T10697] free_unref_page+0xd19/0xea0 [ 441.289390][T10697] vfree+0x186/0x2e0 [ 441.293308][T10697] kcov_close+0x2b/0x50 [ 441.297499][T10697] __fput+0x24a/0x8a0 [ 441.301515][T10697] task_work_run+0x24f/0x310 [ 441.306126][T10697] do_exit+0xa27/0x27e0 [ 441.310331][T10697] do_group_exit+0x207/0x2c0 [ 441.314987][T10697] get_signal+0x16a1/0x1740 [ 441.319539][T10697] arch_do_signal_or_restart+0x96/0x860 [ 441.325113][T10697] syscall_exit_to_user_mode+0xc9/0x360 [ 441.330762][T10697] do_syscall_64+0x100/0x230 [ 441.335484][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.341440][T10697] Modules linked in: [ 441.345371][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 441.357015][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 441.367092][T10697] Call Trace: [ 441.370372][T10697] [ 441.373298][T10697] dump_stack_lvl+0x241/0x360 [ 441.377993][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.383200][T10697] ? __pfx_print_modules+0x10/0x10 [ 441.388332][T10697] bad_page+0x14c/0x170 [ 441.392493][T10697] free_unref_page+0xe3e/0xea0 [ 441.397281][T10697] ? compound_order+0x1a/0x60 [ 441.401956][T10697] skb_release_data+0x6b2/0x880 [ 441.406829][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 441.411685][T10697] packet_rcv+0x163/0x13e0 [ 441.416115][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 441.420983][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 441.426977][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 441.433577][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 441.440086][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 441.445305][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 441.451751][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 441.457918][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 441.464265][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 441.470948][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 441.476172][T10697] ? __phys_addr+0xba/0x170 [ 441.481133][T10697] ? build_skb_around+0x111/0x260 [ 441.486159][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 441.492057][T10697] netif_receive_skb_list+0x55/0x4b0 [ 441.497375][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 441.502842][T10697] ? __pfx___might_resched+0x10/0x10 [ 441.508152][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 441.513831][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 441.519388][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 441.525203][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 441.530501][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 441.535800][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 441.541729][T10697] ? _copy_from_user+0xa6/0xe0 [ 441.546508][T10697] ? bpf_test_init+0x15a/0x180 [ 441.551300][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 441.556780][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 441.562181][T10697] ? __pfx_lock_release+0x10/0x10 [ 441.567299][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 441.573108][T10697] ? __fget_files+0x29/0x470 [ 441.577723][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 441.583588][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 441.588529][T10697] __sys_bpf+0x48d/0x810 [ 441.592780][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 441.597570][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 441.603583][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.609920][T10697] ? do_syscall_64+0x100/0x230 [ 441.614701][T10697] __x64_sys_bpf+0x7c/0x90 [ 441.619128][T10697] do_syscall_64+0xf3/0x230 [ 441.623638][T10697] ? clear_bhb_loop+0x35/0x90 [ 441.628339][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.634321][T10697] RIP: 0033:0x7f102e175b99 [ 441.638734][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.658347][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.666834][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 441.674811][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 441.682783][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 441.690754][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.698743][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 441.706720][T10697] [ 441.709802][T10697] BUG: Bad page state in process syz.2.1522 pfn:708ee [ 441.716706][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x708ee [ 441.725486][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 441.732641][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 441.741263][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 441.749874][T10697] page dumped because: page_pool leak [ 441.755258][T10697] page_owner tracks the page as allocated [ 441.761026][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390375623, free_ts 431731980229 [ 441.779840][T10697] post_alloc_hook+0x1f3/0x230 [ 441.784623][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 441.790237][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 441.795484][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 441.801009][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 441.806958][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 441.812343][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 441.817891][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 441.822857][T10697] __sys_bpf+0x48d/0x810 [ 441.827153][T10697] __x64_sys_bpf+0x7c/0x90 [ 441.831689][T10697] do_syscall_64+0xf3/0x230 [ 441.836293][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.842236][T10697] page last free pid 8626 tgid 8626 stack trace: [ 441.848598][T10697] free_unref_page+0xd19/0xea0 [ 441.853375][T10697] vfree+0x186/0x2e0 [ 441.857357][T10697] kcov_close+0x2b/0x50 [ 441.861554][T10697] __fput+0x24a/0x8a0 [ 441.865538][T10697] task_work_run+0x24f/0x310 [ 441.870169][T10697] do_exit+0xa27/0x27e0 [ 441.874368][T10697] do_group_exit+0x207/0x2c0 [ 441.878996][T10697] get_signal+0x16a1/0x1740 [ 441.883546][T10697] arch_do_signal_or_restart+0x96/0x860 [ 441.889126][T10697] syscall_exit_to_user_mode+0xc9/0x360 [ 441.894720][T10697] do_syscall_64+0x100/0x230 [ 441.899355][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.905275][T10697] Modules linked in: [ 441.909220][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 441.920870][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 441.930925][T10697] Call Trace: [ 441.934301][T10697] [ 441.937237][T10697] dump_stack_lvl+0x241/0x360 [ 441.942017][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.947253][T10697] ? __pfx_print_modules+0x10/0x10 [ 441.952375][T10697] bad_page+0x14c/0x170 [ 441.956552][T10697] free_unref_page+0xe3e/0xea0 [ 441.961342][T10697] ? compound_order+0x1a/0x60 [ 441.966195][T10697] skb_release_data+0x6b2/0x880 [ 441.971064][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 441.975919][T10697] packet_rcv+0x163/0x13e0 [ 441.980351][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 441.985216][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 441.991302][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 441.997913][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 442.004515][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 442.009729][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 442.016066][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 442.022239][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 442.028593][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 442.035279][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 442.040487][T10697] ? __phys_addr+0xba/0x170 [ 442.045022][T10697] ? build_skb_around+0x111/0x260 [ 442.050056][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 442.055952][T10697] netif_receive_skb_list+0x55/0x4b0 [ 442.061255][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 442.066724][T10697] ? __pfx___might_resched+0x10/0x10 [ 442.072007][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 442.077674][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 442.083257][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 442.089179][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 442.094458][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 442.099753][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 442.105678][T10697] ? _copy_from_user+0xa6/0xe0 [ 442.110449][T10697] ? bpf_test_init+0x15a/0x180 [ 442.115300][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 442.122819][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 442.128591][T10697] ? __pfx_lock_release+0x10/0x10 [ 442.133663][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 442.139493][T10697] ? __fget_files+0x29/0x470 [ 442.144093][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 442.149917][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 442.154879][T10697] __sys_bpf+0x48d/0x810 [ 442.159139][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 442.163932][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 442.169925][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 442.176255][T10697] ? do_syscall_64+0x100/0x230 [ 442.181050][T10697] __x64_sys_bpf+0x7c/0x90 [ 442.185471][T10697] do_syscall_64+0xf3/0x230 [ 442.189997][T10697] ? clear_bhb_loop+0x35/0x90 [ 442.194678][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.200590][T10697] RIP: 0033:0x7f102e175b99 [ 442.205006][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.224626][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.233049][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 442.241044][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 442.249030][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 442.257002][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.264981][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 442.272970][T10697] [ 442.276059][T10697] BUG: Bad page state in process syz.2.1522 pfn:708ed [ 442.282973][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x708ed [ 442.291799][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 442.299068][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 442.307721][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 442.316330][T10697] page dumped because: page_pool leak [ 442.321789][T10697] page_owner tracks the page as allocated [ 442.327567][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390356888, free_ts 431731996979 [ 442.346342][T10697] post_alloc_hook+0x1f3/0x230 [ 442.351181][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 442.356806][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 442.362044][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 442.367581][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 442.373518][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 442.378968][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 442.384390][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 442.389428][T10697] __sys_bpf+0x48d/0x810 [ 442.393718][T10697] __x64_sys_bpf+0x7c/0x90 [ 442.398218][T10697] do_syscall_64+0xf3/0x230 [ 442.402767][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.408754][T10697] page last free pid 8626 tgid 8626 stack trace: [ 442.415102][T10697] free_unref_page+0xd19/0xea0 [ 442.419955][T10697] vfree+0x186/0x2e0 [ 442.423885][T10697] kcov_close+0x2b/0x50 [ 442.428111][T10697] __fput+0x24a/0x8a0 [ 442.432131][T10697] task_work_run+0x24f/0x310 [ 442.436792][T10697] do_exit+0xa27/0x27e0 [ 442.440986][T10697] do_group_exit+0x207/0x2c0 [ 442.445610][T10697] get_signal+0x16a1/0x1740 [ 442.450219][T10697] arch_do_signal_or_restart+0x96/0x860 [ 442.455812][T10697] syscall_exit_to_user_mode+0xc9/0x360 [ 442.461444][T10697] do_syscall_64+0x100/0x230 [ 442.466094][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.472074][T10697] Modules linked in: [ 442.476000][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 442.487659][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 442.497745][T10697] Call Trace: [ 442.501051][T10697] [ 442.504008][T10697] dump_stack_lvl+0x241/0x360 [ 442.508744][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.513988][T10697] ? __pfx_print_modules+0x10/0x10 [ 442.519206][T10697] bad_page+0x14c/0x170 [ 442.523375][T10697] free_unref_page+0xe3e/0xea0 [ 442.528156][T10697] ? compound_order+0x1a/0x60 [ 442.532848][T10697] skb_release_data+0x6b2/0x880 [ 442.537728][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 442.542600][T10697] packet_rcv+0x163/0x13e0 [ 442.547041][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 442.552032][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 442.558029][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 442.564624][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 442.567062][ T4480] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 442.571123][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 442.571172][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 442.571207][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 442.571248][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 442.571285][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 442.571321][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 442.571347][T10697] ? __phys_addr+0xba/0x170 [ 442.571380][T10697] ? build_skb_around+0x111/0x260 [ 442.571411][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 442.571440][T10697] netif_receive_skb_list+0x55/0x4b0 [ 442.571478][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 442.571514][T10697] ? __pfx___might_resched+0x10/0x10 [ 442.571544][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 442.571595][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 442.571629][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 442.571663][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 442.571686][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 442.571728][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 442.571774][T10697] ? _copy_from_user+0xa6/0xe0 [ 442.571802][T10697] ? bpf_test_init+0x15a/0x180 [ 442.571833][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 442.571869][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 442.571908][T10697] ? __pfx_lock_release+0x10/0x10 [ 442.571941][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 442.571974][T10697] ? __fget_files+0x29/0x470 [ 442.572006][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 442.572040][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 442.572068][T10697] __sys_bpf+0x48d/0x810 [ 442.572104][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 442.572149][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 442.572178][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 442.572206][T10697] ? do_syscall_64+0x100/0x230 [ 442.572245][T10697] __x64_sys_bpf+0x7c/0x90 [ 442.572280][T10697] do_syscall_64+0xf3/0x230 [ 442.572317][T10697] ? clear_bhb_loop+0x35/0x90 [ 442.572356][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.572391][T10697] RIP: 0033:0x7f102e175b99 [ 442.572411][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.572432][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.572460][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 442.572479][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 442.572496][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 442.572513][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.572529][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 442.572557][T10697] [ 442.572644][T10697] BUG: Bad page state in process syz.2.1522 pfn:708ec [ 442.572662][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x708ec [ 442.572685][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 442.572716][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000 [ 442.572739][T10697] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 442.572753][T10697] page dumped because: page_pool leak [ 442.572765][T10697] page_owner tracks the page as allocated [ 442.572775][T10697] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102820(GFP_ATOMIC|__GFP_NOWARN|__GFP_HARDWALL), pid 10697, tgid 10695 (syz.2.1522), ts 433390338091, free_ts 431732014134 [ 442.572815][T10697] post_alloc_hook+0x1f3/0x230 [ 442.572840][T10697] get_page_from_freelist+0x2e4c/0x2f10 [ 442.572869][T10697] __alloc_pages_noprof+0x256/0x6c0 [ 442.580813][ T4480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 442.585023][T10697] alloc_pages_bulk_noprof+0x729/0xd40 [ 442.591870][ T4480] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 442.597529][T10697] __page_pool_alloc_pages_slow+0x138/0x6a0 [ 442.604974][ T4480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 442.610549][T10697] bpf_test_run_xdp_live+0x810/0x1e60 [ 442.616582][ T4480] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 442.620284][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 442.625610][ T4480] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 442.631167][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 442.631195][T10697] __sys_bpf+0x48d/0x810 [ 442.631228][T10697] __x64_sys_bpf+0x7c/0x90 [ 442.631258][T10697] do_syscall_64+0xf3/0x230 [ 442.631292][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.631324][T10697] page last free pid 8626 tgid 8626 stack trace: [ 442.631339][T10697] free_unref_page+0xd19/0xea0 [ 442.631364][T10697] vfree+0x186/0x2e0 [ 442.631391][T10697] kcov_close+0x2b/0x50 [ 442.631415][T10697] __fput+0x24a/0x8a0 [ 442.631444][T10697] task_work_run+0x24f/0x310 [ 442.631475][T10697] do_exit+0xa27/0x27e0 [ 442.631503][T10697] do_group_exit+0x207/0x2c0 [ 442.631531][T10697] get_signal+0x16a1/0x1740 [ 442.631564][T10697] arch_do_signal_or_restart+0x96/0x860 [ 443.061727][T10697] syscall_exit_to_user_mode+0xc9/0x360 [ 443.067321][T10697] do_syscall_64+0x100/0x230 [ 443.072575][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.078557][T10697] Modules linked in: [ 443.082487][T10697] CPU: 0 PID: 10697 Comm: syz.2.1522 Tainted: G B 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 443.094135][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 443.104208][T10697] Call Trace: [ 443.107514][T10697] [ 443.110453][T10697] dump_stack_lvl+0x241/0x360 [ 443.115144][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.120359][T10697] ? __pfx_print_modules+0x10/0x10 [ 443.125481][T10697] bad_page+0x14c/0x170 [ 443.129675][T10697] free_unref_page+0xe3e/0xea0 [ 443.134457][T10697] ? compound_order+0x1a/0x60 [ 443.139182][T10697] skb_release_data+0x6b2/0x880 [ 443.144045][T10697] kfree_skb_reason+0x1a3/0x3b0 [ 443.148908][T10697] packet_rcv+0x163/0x13e0 [ 443.153363][T10697] ? __pfx_packet_rcv+0x10/0x10 [ 443.158250][T10697] __netif_receive_skb_list_core+0x8bd/0x980 [ 443.164338][T10697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 443.170951][T10697] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 443.177491][T10697] ? timekeeping_get_ns+0x2c0/0x420 [ 443.182705][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 443.189059][T10697] netif_receive_skb_list_internal+0xa51/0xe30 [ 443.195258][T10697] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 443.201606][T10697] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 443.208305][T10697] ? __pfx_eth_type_trans+0x10/0x10 [ 443.213528][T10697] ? __phys_addr+0xba/0x170 [ 443.218045][T10697] ? build_skb_around+0x111/0x260 [ 443.223081][T10697] ? __xdp_build_skb_from_frame+0x338/0x650 [ 443.228984][T10697] netif_receive_skb_list+0x55/0x4b0 [ 443.234282][T10697] bpf_test_run_xdp_live+0x194c/0x1e60 [ 443.239854][T10697] ? __pfx___might_resched+0x10/0x10 [ 443.245143][T10697] ? __mutex_unlock_slowpath+0x21d/0x750 [ 443.250788][T10697] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 443.256447][T10697] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 443.262286][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 443.267573][T10697] ? bpf_dispatcher_xdp+0x800/0x1000 [ 443.272871][T10697] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 443.278789][T10697] ? _copy_from_user+0xa6/0xe0 [ 443.283576][T10697] ? bpf_test_init+0x15a/0x180 [ 443.288351][T10697] ? xdp_convert_md_to_buff+0x5b/0x330 [ 443.293827][T10697] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 443.299228][T10697] ? __pfx_lock_release+0x10/0x10 [ 443.304273][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 443.310085][T10697] ? __fget_files+0x29/0x470 [ 443.314680][T10697] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 443.320491][T10697] bpf_prog_test_run+0x33a/0x3b0 [ 443.325452][T10697] __sys_bpf+0x48d/0x810 [ 443.329746][T10697] ? __pfx___sys_bpf+0x10/0x10 [ 443.334583][T10697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 443.340612][T10697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.346982][T10697] ? do_syscall_64+0x100/0x230 [ 443.351799][T10697] __x64_sys_bpf+0x7c/0x90 [ 443.356276][T10697] do_syscall_64+0xf3/0x230 [ 443.360827][T10697] ? clear_bhb_loop+0x35/0x90 [ 443.365634][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.371574][T10697] RIP: 0033:0x7f102e175b99 [ 443.376017][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.395658][T10697] RSP: 002b:00007f102ee9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.404116][T10697] RAX: ffffffffffffffda RBX: 00007f102e303f60 RCX: 00007f102e175b99 [ 443.412120][T10697] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 443.420139][T10697] RBP: 00007f102e1e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 443.428149][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.436241][T10697] R13: 000000000000000b R14: 00007f102e303f60 R15: 00007ffdf961e9f8 [ 443.444257][T10697] [ 443.447492][T10697] BUG: Bad page state in process syz.2.1522 pfn:708eb [ 443.454377][T10697] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x708eb [ 443.463202][T10697] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 443.470405][T10697] raw: 00fff00000000000 dead000000000040 ffff88801cef5000 0000000000000000