last executing test programs: 4.589523889s ago: executing program 4 (id=309): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 4.4873543s ago: executing program 0 (id=310): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 4.111167671s ago: executing program 0 (id=314): r0 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r4}, &(0x7f0000002480), &(0x7f00000024c0)=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3.756649633s ago: executing program 0 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r8}, 0xc) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="201a0200ffffffff850000003700000005ecffff0100000049765ea171cd9993a999edf3ff38e5caca0461a99594839fe78cf101ff34cbb9ca054e154184f3c9152735b725657cdcf00c481ab47151c04b770f5f0ab7c3bc71a750bb86b6ecf6a08caccf61e2de412a302700bc02"], &(0x7f0000000280)='GPL\x00', 0x4, 0x3c, &(0x7f00000002c0)=""/60, 0x1e00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80000000, 0x2, 0xee8}) setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e20, 0x4, @mcast1, 0x7}, {0xa, 0x4e24, 0x8001, @private1}, 0x1, {[0x5, 0xf, 0x2, 0x5, 0xe06, 0x1, 0x1, 0x31]}}, 0x5c) connect$unix(r9, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r11}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') 3.465809367s ago: executing program 2 (id=320): unshare(0x2040400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 3.143884709s ago: executing program 2 (id=323): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 2.850240463s ago: executing program 4 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffb1, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2.724324044s ago: executing program 2 (id=327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 2.40752138s ago: executing program 4 (id=330): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 2.276186855s ago: executing program 1 (id=331): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f00000011c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="ea283cc9a9bbe28be7a59e1c5dab02bc0cd832748afefd87c493d589b6cd9b711c40bf407b4cef2c51bd776d450b56b6c101c4b79c9cb14844afc31007f1220d27bd5181f462e7d6edc729ecc8a33dceb46a029e286364c941925c3c744905f391537daa96d325086389", 0x6a}, {&(0x7f00000003c0)="afe6706e7559fcfdc8a3331cb5789cfb2e160a13f6ffad4baf034758a12e8574e543f1e45d0344e6cc25d67247340e4366b355f80d16e23a0bce448d5166fcefba9cec2411db047ce6f295d25e1b1edaf0754f5b63f056b540757206dde88fdb6518c087b4579e98599fbfec0ebd512d25d00992bb859674f21003bc5f93efb4532b133d771d084602bdca0cca95f8400f96f0fe835a21ada6d3f0ab884de168c9808ae6f53239e827976ddc621a74d43818607f5c4c9faeddb77188d5b86df1467fd9d902b2ba8f5b95b9bee81769562346f07594d9fc7bac", 0xd9}, {&(0x7f0000000280)="63d854485313c201e2fb3e42238fde0f35ea7323c2562bea0637663fe367", 0x1e}, {&(0x7f0000000540)="e1d7eb0b3bf0659497307f1e00a138f18511f1175b49fa70123d19e4dfdd667501c9877ff85274c2b1f194bfb0d1fc6f7c4de6637ed63ce79f17122686f6a13c6a7af9e92fd49c7efcba55173cf2b43e9aae81be9b4f3663ba6600a9ec243d9c7aa28780347ace567650740be2e703cb0045325acbf1db7cda89de16876ebcb5437f27e4d7aea9ef46292da5517db374", 0x90}], 0x4}}], 0x2, 0x44008004) write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef) 2.257029318s ago: executing program 4 (id=332): fsync(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000180)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000480)={0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r7, @ANYRES32=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRESHEX=r0, @ANYRES64=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r10, 0x8943, &(0x7f0000000000)) 2.056961979s ago: executing program 0 (id=333): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x81, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f00000004c0)="269dada4", 0x4}], 0x1, 0x43, 0x4000000) 1.992284035s ago: executing program 1 (id=334): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f00000000c0)=0x3, 0x4) 1.932130253s ago: executing program 3 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) 1.772351043s ago: executing program 1 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) 1.724233443s ago: executing program 4 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) fsopen(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0}, 0x18) 1.723714926s ago: executing program 3 (id=338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring) 1.565449621s ago: executing program 4 (id=339): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0xcdb9, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) 1.523097981s ago: executing program 0 (id=340): syz_clone(0x4020500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x9, &(0x7f0000000180)=""/107) 1.522830157s ago: executing program 1 (id=341): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000001200)=@ethernet={0x306, @local}, 0x80) 1.432241729s ago: executing program 3 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}]}}]}, 0x38}}, 0x4048000) 1.319930452s ago: executing program 1 (id=343): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1}, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f00000006c0)=[{0x7, 0x7, 0x7, 0x3, @tick=0x85, {0x2, 0x3}, {0xd3, 0x5}, @addr={0x7, 0xf}}, {0x3, 0x0, 0x4, 0xdb, @tick=0xe, {0xf, 0x7f}, {0xe8, 0xc}, @result={0x9, 0x10001}}, {0x5, 0x4, 0x7, 0x1, @tick=0x37, {0x6e, 0xff}, {0x0, 0xc}, @connect={{0x1, 0x4}, {0x9, 0xa}}}], 0x54) syz_clone3(&(0x7f0000000040)={0xa00000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5002, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) syz_open_dev$usbmon(0x0, 0x80000000000005, 0xe003) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfdfe, @local, 'vcan0\x00'}}, 0x1e) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000002600)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.165018383s ago: executing program 3 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) 995.76375ms ago: executing program 2 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000000, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 862.431248ms ago: executing program 2 (id=346): r0 = socket$inet6(0xa, 0x3, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x91}, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 750.473786ms ago: executing program 3 (id=347): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x0, 0x6}, 0xc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000002000000000000003000000000000"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000000300)={&(0x7f0000000000)=""/26, 0x0, 0x1a}, 0x0) 556.04835ms ago: executing program 0 (id=348): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/!\x00', 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) socket(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x4000040) io_uring_setup(0x5ccf, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 529.088652ms ago: executing program 3 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) 500.519463ms ago: executing program 2 (id=350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=351): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="b9ff89540000000207030300000000000000000000000224000780080001400000000108000140000007ff08000140000000040800c00d00afa0173b0cf40203ff0c000640000000000001000008000540000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa6, 0x0, 0xfd, {0x4001, 0x0, [], [], 0x0, [0x1]}, 0x0, 0x1}}, 0x4c}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x100}, &(0x7f0000000600)=0x8) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000140)=ANY=[], 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 86.586010][ T5822] cgroup: Unknown subsys name 'net' [ 86.743682][ T5822] cgroup: Unknown subsys name 'cpuset' [ 86.753149][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.649034][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.352456][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.371124][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.379586][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.400741][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.410235][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.418450][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.439570][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.468269][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.480514][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.489124][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.498401][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.506361][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.510572][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.514160][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.529791][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.530444][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.555247][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.570054][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.579408][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.586360][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.588702][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.614977][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.624319][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.643028][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.650570][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.019626][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 92.199584][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.207444][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.215729][ T5832] bridge_slave_0: entered allmulticast mode [ 92.224739][ T5832] bridge_slave_0: entered promiscuous mode [ 92.229810][ T43] cfg80211: failed to load regulatory.db [ 92.276022][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.283472][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.291640][ T5832] bridge_slave_1: entered allmulticast mode [ 92.299849][ T5832] bridge_slave_1: entered promiscuous mode [ 92.343979][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.388682][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.493656][ T5832] team0: Port device team_slave_0 added [ 92.507769][ T5832] team0: Port device team_slave_1 added [ 92.656617][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.664779][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.691438][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.715857][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 92.740638][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.747625][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.774180][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.884529][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.982194][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 93.014884][ T5832] hsr_slave_0: entered promiscuous mode [ 93.021665][ T5832] hsr_slave_1: entered promiscuous mode [ 93.046332][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.053726][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.061037][ T5843] bridge_slave_0: entered allmulticast mode [ 93.068694][ T5843] bridge_slave_0: entered promiscuous mode [ 93.105323][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 93.125687][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.133427][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.140766][ T5843] bridge_slave_1: entered allmulticast mode [ 93.148047][ T5843] bridge_slave_1: entered promiscuous mode [ 93.295298][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.307470][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.377450][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.384743][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.392513][ T5836] bridge_slave_0: entered allmulticast mode [ 93.400658][ T5836] bridge_slave_0: entered promiscuous mode [ 93.448224][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.455420][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.463829][ T5836] bridge_slave_1: entered allmulticast mode [ 93.473145][ T5836] bridge_slave_1: entered promiscuous mode [ 93.487742][ T5843] team0: Port device team_slave_0 added [ 93.549815][ T5843] team0: Port device team_slave_1 added [ 93.579415][ T5845] Bluetooth: hci0: command tx timeout [ 93.620249][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.643096][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.650924][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.658428][ T5845] Bluetooth: hci3: command tx timeout [ 93.658751][ T5845] Bluetooth: hci1: command tx timeout [ 93.664531][ T5840] bridge_slave_0: entered allmulticast mode [ 93.676912][ T5840] bridge_slave_0: entered promiscuous mode [ 93.684347][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.691672][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.699015][ T5846] bridge_slave_0: entered allmulticast mode [ 93.706382][ T5846] bridge_slave_0: entered promiscuous mode [ 93.714860][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.722136][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.729776][ T5846] bridge_slave_1: entered allmulticast mode [ 93.737012][ T5846] bridge_slave_1: entered promiscuous mode [ 93.738485][ T5845] Bluetooth: hci2: command tx timeout [ 93.743119][ T5849] Bluetooth: hci4: command tx timeout [ 93.764616][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.786346][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.796199][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.803908][ T5840] bridge_slave_1: entered allmulticast mode [ 93.812464][ T5840] bridge_slave_1: entered promiscuous mode [ 93.898763][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.906031][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.933118][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.962535][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.982984][ T5836] team0: Port device team_slave_0 added [ 93.992942][ T5836] team0: Port device team_slave_1 added [ 94.000013][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.006981][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.033235][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.047459][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.068599][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.159845][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.204613][ T5846] team0: Port device team_slave_0 added [ 94.211798][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.220034][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.246892][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.259976][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.267559][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.293828][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.322589][ T5846] team0: Port device team_slave_1 added [ 94.366228][ T5840] team0: Port device team_slave_0 added [ 94.407201][ T5840] team0: Port device team_slave_1 added [ 94.428474][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.435636][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.462615][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.517507][ T5843] hsr_slave_0: entered promiscuous mode [ 94.524112][ T5843] hsr_slave_1: entered promiscuous mode [ 94.530913][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.538821][ T5843] Cannot create hsr debugfs directory [ 94.545305][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.552495][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.578865][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.642908][ T5836] hsr_slave_0: entered promiscuous mode [ 94.649957][ T5836] hsr_slave_1: entered promiscuous mode [ 94.656087][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.664620][ T5836] Cannot create hsr debugfs directory [ 94.682527][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.689751][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.716560][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.729881][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.737060][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.763737][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.800926][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.870711][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.883923][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.895021][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.964800][ T5846] hsr_slave_0: entered promiscuous mode [ 94.971543][ T5846] hsr_slave_1: entered promiscuous mode [ 94.977610][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.985965][ T5846] Cannot create hsr debugfs directory [ 95.082260][ T5840] hsr_slave_0: entered promiscuous mode [ 95.089150][ T5840] hsr_slave_1: entered promiscuous mode [ 95.095208][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.103640][ T5840] Cannot create hsr debugfs directory [ 95.580754][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.621474][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.646596][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.658078][ T5849] Bluetooth: hci0: command tx timeout [ 95.660306][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.738261][ T5849] Bluetooth: hci3: command tx timeout [ 95.738268][ T5845] Bluetooth: hci1: command tx timeout [ 95.758186][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.786851][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.801581][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.816967][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.824033][ T5845] Bluetooth: hci4: command tx timeout [ 95.824087][ T5849] Bluetooth: hci2: command tx timeout [ 95.866764][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.926415][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.946556][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.977167][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.992945][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.079669][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.141699][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.163331][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.177190][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.184499][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.203373][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.230992][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.258758][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.265937][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.301816][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.383674][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.421973][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.475903][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.483128][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.506629][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.526260][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.533489][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.563927][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.571130][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.594560][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.601896][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.665119][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.832169][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.854858][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.927535][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.985838][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.993112][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.022355][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.029666][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.091942][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.099206][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.134635][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.141915][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.194071][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.435647][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.488638][ T5832] veth0_vlan: entered promiscuous mode [ 97.533746][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.550696][ T5832] veth1_vlan: entered promiscuous mode [ 97.679001][ T5832] veth0_macvtap: entered promiscuous mode [ 97.707298][ T5832] veth1_macvtap: entered promiscuous mode [ 97.741469][ T5849] Bluetooth: hci0: command tx timeout [ 97.788221][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.820312][ T5849] Bluetooth: hci1: command tx timeout [ 97.820394][ T5845] Bluetooth: hci3: command tx timeout [ 97.853768][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.887486][ T5843] veth0_vlan: entered promiscuous mode [ 97.898754][ T5845] Bluetooth: hci4: command tx timeout [ 97.898763][ T5849] Bluetooth: hci2: command tx timeout [ 97.914294][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.948172][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957035][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.974074][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.024902][ T5843] veth1_vlan: entered promiscuous mode [ 98.156564][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.184748][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.272701][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.283008][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.283462][ T5843] veth0_macvtap: entered promiscuous mode [ 98.331173][ T5843] veth1_macvtap: entered promiscuous mode [ 98.399315][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.432268][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.443784][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.453037][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.484809][ T5840] veth0_vlan: entered promiscuous mode [ 98.494268][ T5836] veth0_vlan: entered promiscuous mode [ 98.509310][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.531132][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.540519][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.549995][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.600097][ T5846] veth0_vlan: entered promiscuous mode [ 98.609394][ T5840] veth1_vlan: entered promiscuous mode [ 98.624087][ T5836] veth1_vlan: entered promiscuous mode [ 98.646886][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.661077][ T5846] veth1_vlan: entered promiscuous mode [ 98.796856][ T5836] veth0_macvtap: entered promiscuous mode [ 98.803826][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.808311][ T5840] veth0_macvtap: entered promiscuous mode [ 98.845881][ T5836] veth1_macvtap: entered promiscuous mode [ 98.881711][ T5840] veth1_macvtap: entered promiscuous mode [ 98.983415][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.996660][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.007978][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.026303][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.091131][ T5846] veth0_macvtap: entered promiscuous mode [ 99.141167][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.170442][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.204541][ T5846] veth1_macvtap: entered promiscuous mode [ 99.794828][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.811407][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.821419][ T5845] Bluetooth: hci0: command tx timeout [ 99.826926][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.841612][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.849215][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.866054][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.883103][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.898996][ T5845] Bluetooth: hci1: command tx timeout [ 99.906496][ T5845] Bluetooth: hci3: command tx timeout [ 99.948923][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.982031][ T5849] Bluetooth: hci2: command tx timeout [ 99.987524][ T5849] Bluetooth: hci4: command tx timeout [ 100.021571][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.031086][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.041534][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.050434][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.082315][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.093333][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.105182][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.115569][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.222294][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.372398][ T5865] usb 1-1: device descriptor read/64, error -71 [ 100.397806][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.405835][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.419169][ T5963] binder: 5962:5963 ioctl 400c620e 200000000000 returned -22 [ 100.475047][ T2132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.506712][ T2132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.628301][ T5865] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.680418][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.697104][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.792265][ T5865] usb 1-1: device descriptor read/64, error -71 [ 100.923669][ T5865] usb usb1-port1: attempt power cycle [ 101.305230][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.342418][ T5865] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.361504][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.409148][ T5865] usb 1-1: device descriptor read/8, error -71 [ 101.486058][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.501326][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.516039][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.534137][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.688526][ T5865] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.729084][ T5865] usb 1-1: device descriptor read/8, error -71 [ 101.839047][ T5865] usb usb1-port1: unable to enumerate USB device [ 101.894724][ T5970] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 102.018794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.033153][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.049745][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.206411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.278000][ T5167] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 102.301103][ T5981] syz.2.9: attempt to access beyond end of device [ 102.301103][ T5981] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 102.335595][ T5981] (syz.2.9,5981,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 102.343394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 102.353585][ T5981] (syz.2.9,5981,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 102.400591][ T5981] (syz.2.9,5981,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.416621][ T5981] (syz.2.9,5981,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 102.532196][ T5167] usb 2-1: config 0 has an invalid interface number: 138 but max is 0 [ 102.554659][ T5167] usb 2-1: config 0 has no interface number 0 [ 102.605136][ T5167] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 102.648948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.669574][ T5167] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 102.716848][ T5167] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 102.731257][ T5167] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 102.740781][ T5167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.763452][ T5990] ======================================================= [ 102.763452][ T5990] WARNING: The mand mount option has been deprecated and [ 102.763452][ T5990] and is ignored by this kernel. Remove the mand [ 102.763452][ T5990] option from the mount to silence this warning. [ 102.763452][ T5990] ======================================================= [ 102.817541][ T5167] usb 2-1: config 0 descriptor?? [ 102.942123][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.076832][ T5167] usb 2-1: string descriptor 0 read error: -71 [ 103.134759][ T5167] usbtest 2-1:0.138: couldn't get endpoints, -22 [ 103.153831][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.175295][ T5167] usbtest 2-1:0.138: probe with driver usbtest failed with error -22 [ 103.199238][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.232734][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.254248][ T5926] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.265291][ T5167] usb 2-1: USB disconnect, device number 2 [ 103.290425][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.305422][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.328838][ T24] usb 3-1: config 0 descriptor?? [ 103.428263][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 103.439213][ T5926] usb 5-1: too many configurations: 128, using maximum allowed: 8 [ 103.483936][ T5926] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 103.507066][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.531402][ T5926] usb 5-1: Product: syz [ 103.535683][ T5926] usb 5-1: Manufacturer: syz [ 103.564412][ T5926] usb 5-1: config 0 descriptor?? [ 103.585470][ T5926] gspca_main: 2770:9120 too many config [ 103.640420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.736006][ T30] audit: type=1326 audit(1755474556.498:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5997 comm="syz.0.13" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa26b8ebe9 code=0x0 [ 103.743723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.844306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.947891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.049148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.058541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.256878][ T24] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 104.258379][ T1207] usb 5-1: USB disconnect, device number 2 [ 104.381143][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.450241][ T24] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.839856][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 104.930111][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14'. [ 104.959547][ T24] usb 3-1: USB disconnect, device number 2 [ 105.395951][ T6019] netlink: 'syz.4.17': attribute type 39 has an invalid length. [ 105.433381][ T6015] fido_id[6015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 106.280893][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.436481][ T6029] netlink: 'syz.2.19': attribute type 29 has an invalid length. [ 106.437968][ T5837] usb 2-1: device descriptor read/64, error -71 [ 106.446375][ T6029] netlink: 'syz.2.19': attribute type 29 has an invalid length. [ 106.463363][ T6029] netlink: 500 bytes leftover after parsing attributes in process `syz.2.19'. [ 106.481056][ T6029] unsupported nla_type 58 [ 106.675148][ T6032] process 'syz.2.20' launched '/dev/fd/5' with NULL argv: empty string added [ 106.864101][ T5837] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.901088][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 107.377332][ T5837] usb 2-1: device descriptor read/64, error -71 [ 107.748262][ T5837] usb usb2-port1: attempt power cycle [ 108.412509][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.609182][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.903606][ T5837] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.939935][ T5837] usb 2-1: device descriptor read/8, error -71 [ 109.082622][ T1207] IPVS: starting estimator thread 0... [ 109.208236][ T6055] IPVS: using max 22 ests per chain, 52800 per kthread [ 109.216120][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 109.237605][ T5915] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 109.253146][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.288080][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.326412][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.355727][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.402111][ T5915] usb 4-1: Product: syz [ 109.415807][ T5837] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.441852][ T5915] usb 4-1: Manufacturer: syz [ 109.480543][ T5915] usb 4-1: SerialNumber: syz [ 109.488875][ T5837] usb 2-1: device descriptor read/8, error -71 [ 109.599102][ T5837] usb usb2-port1: unable to enumerate USB device [ 110.022134][ T6070] bpq0: entered allmulticast mode [ 110.297488][ T5915] usb 4-1: 0:2 : does not exist [ 112.189418][ T5915] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 112.288552][ T5915] usb 4-1: USB disconnect, device number 2 [ 112.463125][ T6080] mmap: syz.2.32 (6080): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 112.657061][ T6092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.721201][ T6094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.759387][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.399660][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.591566][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 113.599314][ T5915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.613552][ T5915] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 113.630471][ T5915] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice=42.53 [ 113.639911][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.648396][ T5915] usb 5-1: Product: syz [ 113.652649][ T5915] usb 5-1: Manufacturer: syz [ 113.657421][ T5915] usb 5-1: SerialNumber: syz [ 113.858529][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.899437][ T5968] usb 5-1: USB disconnect, device number 3 [ 114.038046][ T5926] usb 4-1: device descriptor read/64, error -71 [ 114.277955][ T5926] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.448159][ T5926] usb 4-1: device descriptor read/64, error -71 [ 114.592356][ T5926] usb usb4-port1: attempt power cycle [ 115.778271][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.809186][ T5926] usb 4-1: device descriptor read/8, error -71 [ 116.068567][ T5926] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.161776][ T5926] usb 4-1: device descriptor read/8, error -71 [ 116.259397][ T5915] IPVS: starting estimator thread 0... [ 116.431062][ T5926] usb usb4-port1: unable to enumerate USB device [ 116.458870][ T6156] IPVS: using max 45 ests per chain, 108000 per kthread [ 117.128132][ T1207] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.254149][ T6161] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 117.268133][ T1207] usb 2-1: device descriptor read/64, error -71 [ 117.538569][ T1207] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.608104][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.677959][ T5979] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.697432][ T1207] usb 2-1: device descriptor read/64, error -71 [ 117.867094][ T1207] usb usb2-port1: attempt power cycle [ 117.917677][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.044460][ T5926] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 118.252009][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.268140][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.309829][ T5979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.324602][ T5979] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 118.348089][ T5979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.379539][ T5926] usb 4-1: config 0 descriptor?? [ 118.400323][ T5979] usb 5-1: config 0 descriptor?? [ 118.488775][ T1207] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.509621][ T1207] usb 2-1: device descriptor read/8, error -71 [ 118.748117][ T1207] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.790586][ T1207] usb 2-1: device descriptor read/8, error -71 [ 118.909604][ T5926] zeroplus 0003:0C12:0005.0002: report_id 0 is invalid [ 118.916613][ T5926] zeroplus 0003:0C12:0005.0002: item 0 0 1 8 parsing failed [ 118.939336][ T1207] usb usb2-port1: unable to enumerate USB device [ 118.940738][ T5926] zeroplus 0003:0C12:0005.0002: parse failed [ 118.967992][ T5926] zeroplus 0003:0C12:0005.0002: probe with driver zeroplus failed with error -22 [ 118.991786][ T5979] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 119.018071][ T5979] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 119.025369][ T5979] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 119.043743][ T5979] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 119.058383][ T5979] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 119.069860][ T5979] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 119.077398][ T5979] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 119.092592][ T5979] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 119.107287][ T1207] usb 4-1: USB disconnect, device number 7 [ 119.199896][ T5979] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 119.404016][ T6171] warning: `syz.4.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.495147][ T5979] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 119.528810][ T5979] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 119.579585][ T5979] usb 5-1: USB disconnect, device number 4 [ 119.708219][ T5926] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 120.067887][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 120.079147][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.717398][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.762684][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.824990][ T6192] loop7: detected capacity change from 0 to 7 [ 120.838101][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.893272][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.902780][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 120.912197][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.921555][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 120.930288][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.939540][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 120.957457][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.982985][ T5926] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 120.986304][ T6192] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.012908][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.043487][ T6192] Buffer I/O error on dev loop7, logical block 0, async page read [ 121.057501][ T6185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.069837][ T5926] hub 2-1:1.0: bad descriptor, ignoring hub [ 121.100471][ T5926] hub 2-1:1.0: probe with driver hub failed with error -5 [ 121.142235][ T6192] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.213314][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 121.253704][ T6192] Buffer I/O error on dev loop7, logical block 0, async page read [ 121.282827][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 122.188672][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 122.194658][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 122.200011][ T6192] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.244095][ T6192] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.277631][ T6192] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.329075][ T6192] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.341593][ T6192] ldm_validate_partition_table(): Disk read failed. [ 122.381799][ T6192] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.402570][ T6192] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.428110][ T6192] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.444781][ T6192] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.499421][ T5968] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 122.506493][ T6192] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.533215][ T6192] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.553885][ T6192] Dev loop7: unable to read RDB block 0 [ 122.580206][ T6192] loop7: unable to read partition table [ 122.588471][ T24] usb 2-1: USB disconnect, device number 11 [ 122.603387][ T6192] loop7: partition table beyond EOD, truncated [ 122.621384][ T6192] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 122.708076][ T1207] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.834749][ T5968] usb 4-1: device descriptor read/64, error -71 [ 122.909146][ T1207] usb 1-1: Using ep0 maxpacket: 8 [ 123.149067][ T5968] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 123.152255][ T1207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.383709][ T1207] usb 1-1: config 6 has an invalid interface number: 248 but max is 0 [ 123.418324][ T5968] usb 4-1: device descriptor read/64, error -71 [ 123.421848][ T1207] usb 1-1: config 6 has no interface number 0 [ 123.506861][ T5904] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.633336][ T1207] usb 1-1: config 6 interface 248 has no altsetting 0 [ 123.673125][ T1207] usb 1-1: string descriptor 0 read error: -22 [ 123.818983][ T5968] usb usb4-port1: attempt power cycle [ 123.821449][ T1207] usb 1-1: New USB device found, idVendor=0af0, idProduct=6951, bcdDevice= 5.55 [ 123.838648][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 123.873391][ T5904] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 123.883994][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.898119][ T5904] usb 2-1: config 1 has no interface number 0 [ 123.927092][ T5904] usb 2-1: config 1 interface 242 has no altsetting 0 [ 123.949608][ T1207] hso 1-1:6.248: Not our interface [ 123.961764][ T5904] usb 2-1: New USB device found, idVendor=2e16, idProduct=c101, bcdDevice= 7.df [ 123.977372][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.006225][ T5904] usb 2-1: Product: syz [ 124.010847][ T5904] usb 2-1: Manufacturer: syz [ 124.015499][ T5904] usb 2-1: SerialNumber: syz [ 124.185428][ T5968] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 124.205005][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.239320][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.254702][ T5968] usb 4-1: device descriptor read/8, error -71 [ 124.260203][ T5904] usb 2-1: USB disconnect, device number 12 [ 124.297007][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'. [ 124.436383][ T6236] 9pnet_fd: Insufficient options for proto=fd [ 124.507916][ T5968] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 124.565132][ T5968] usb 4-1: device descriptor read/8, error -71 [ 124.688410][ T5968] usb usb4-port1: unable to enumerate USB device [ 126.004737][ T6257] netlink: 152 bytes leftover after parsing attributes in process `syz.1.75'. [ 126.285138][ T5904] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 126.373390][ T6262] binder: 6258:6262 ioctl 8933 200000000240 returned -22 [ 126.421201][ T1207] usb 1-1: USB disconnect, device number 6 [ 126.439093][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 126.445413][ T6260] binder: 6258:6260 ioctl 4018620d 200000000100 returned -16 [ 126.477546][ T5904] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 126.498776][ T5904] usb 3-1: config 0 has no interface number 0 [ 126.542836][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 126.554250][ T5904] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 126.582644][ T6260] binder: 6258:6260 ioctl 4018620d 200000000100 returned -16 [ 126.593149][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.612407][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 126.622618][ T5904] usb 3-1: Product: syz [ 126.626941][ T5904] usb 3-1: Manufacturer: syz [ 126.648580][ T6260] binder: 6258:6260 ioctl 4018620d 200000000100 returned -16 [ 126.678202][ T5904] usb 3-1: SerialNumber: syz [ 126.690988][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 126.711586][ T6274] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 126.730193][ T5904] usb 3-1: config 0 descriptor?? [ 126.743463][ T6260] binder: 6258:6260 ioctl 4018620d 200000000100 returned -16 [ 126.774384][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 126.792566][ T6274] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.814430][ T6260] binder: 6258:6260 ioctl 4018620d 200000000100 returned -16 [ 126.840374][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 127.056846][ T6260] binder: 6258:6260 ioctl 4018620d 200000000100 returned -16 [ 127.057987][ T1207] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 127.072666][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 127.104671][ T6260] binder: 6258:6260 ioctl 4018620d 200000000100 returned -16 [ 127.146603][ T5904] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 127.207306][ T5904] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 127.222382][ T5904] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 127.231323][ T5904] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 127.269657][ T5904] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 127.311563][ T1207] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 127.422740][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.544614][ T1207] usb 4-1: config 0 descriptor?? [ 127.759371][ T6288] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 127.795878][ T6288] PKCS7: Only support pkcs7_signedData type [ 127.994830][ T1207] cp210x 4-1:0.0: cp210x converter detected [ 128.244166][ T6293] tipc: Started in network mode [ 128.251330][ T6293] tipc: Node identity c2ac730aaeee, cluster identity 4711 [ 128.263153][ T6293] tipc: Enabled bearer , priority 0 [ 128.276739][ T6287] syzkaller0: entered promiscuous mode [ 128.283660][ T6287] syzkaller0: entered allmulticast mode [ 128.386052][ T6287] tipc: Resetting bearer [ 128.399019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.412601][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.558097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.702286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.838099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.977956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.118011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.280454][ T5926] tipc: Node number set to 1816294154 [ 129.295176][ T6300] mmap: syz.4.83 (6300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.397973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.578876][ T1207] usb 4-1: cp210x converter now attached to ttyUSB1 [ 129.668085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.681808][ T6286] tipc: Resetting bearer [ 130.197744][ T1207] usb 3-1: USB disconnect, device number 3 [ 130.205377][ T6286] tipc: Disabling bearer [ 130.309305][ T1207] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 130.434025][ T1207] keyspan 3-1:0.133: device disconnected [ 130.555077][ T5979] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 130.727032][ T5979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.968230][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.987935][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 131.007961][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 131.034277][ T5979] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.078230][ T5979] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.117456][ T5979] usb 1-1: Manufacturer: syz [ 131.151181][ T5979] usb 1-1: config 0 descriptor?? [ 131.370297][ T6323] loop7: detected capacity change from 0 to 7 [ 131.398424][ T1207] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.428058][ C0] blk_print_req_error: 5 callbacks suppressed [ 131.428079][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.443559][ C0] buffer_io_error: 5 callbacks suppressed [ 131.443576][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.468747][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.494678][ T5979] rc_core: IR keymap rc-hauppauge not found [ 131.506243][ T5979] Registered IR keymap rc-empty [ 131.516114][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.528302][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.558973][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.562714][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 131.584348][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.600445][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 131.622115][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.642034][ T5979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 131.649857][ T1207] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.664976][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.674967][ T1207] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.695611][ T1207] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 131.713678][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.716707][ T5979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 131.727913][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.758342][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.782708][ T1207] usb 5-1: config 0 descriptor?? [ 131.800615][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.819683][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.828551][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 131.847165][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 131.870895][ T9] usb 4-1: USB disconnect, device number 12 [ 131.901047][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 131.918298][ T6323] ldm_validate_partition_table(): Disk read failed. [ 131.938930][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 131.941013][ T9] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 131.973700][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.993035][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.004825][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 132.025488][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.031315][ T9] cp210x 4-1:0.0: device disconnected [ 132.037772][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.049426][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 132.058356][ T6323] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.068683][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 132.085688][ T6323] Buffer I/O error on dev loop7, logical block 0, async page read [ 132.095649][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 132.116302][ T6323] Dev loop7: unable to read RDB block 0 [ 132.127896][ T6323] loop7: unable to read partition table [ 132.136070][ T6323] loop7: partition table beyond EOD, truncated [ 132.145271][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 132.152324][ T6323] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 132.168405][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 132.212456][ T5979] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 132.234502][ T1207] cypress 0003:04B4:0001.0004: item fetching failed at offset 5/7 [ 132.250908][ T5979] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 132.267246][ T1207] cypress 0003:04B4:0001.0004: parse failed [ 132.289577][ T5979] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.298912][ T1207] cypress 0003:04B4:0001.0004: probe with driver cypress failed with error -22 [ 132.378716][ T5979] usb 1-1: USB disconnect, device number 7 [ 132.786145][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 132.928037][ T5915] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.183619][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.206638][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.341249][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.385766][ T1207] usb 5-1: USB disconnect, device number 5 [ 133.397984][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.459508][ T5915] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 133.547520][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.595620][ T5915] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 133.625107][ T5915] usb 2-1: no configuration chosen from 1 choice [ 134.780845][ T6369] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 135.056396][ T6374] loop7: detected capacity change from 0 to 7 [ 135.079985][ T6374] ldm_validate_partition_table(): Disk read failed. [ 135.158851][ T6374] Dev loop7: unable to read RDB block 0 [ 135.164830][ T6374] loop7: unable to read partition table [ 135.176212][ T6374] loop7: partition table beyond EOD, truncated [ 135.234649][ T6374] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 135.348328][ T5979] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 135.512902][ T5979] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.531139][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.534215][ T1207] usb 2-1: USB disconnect, device number 13 [ 135.561105][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 135.581390][ T5979] usb 3-1: config 0 descriptor?? [ 135.652342][ T5979] cp210x 3-1:0.0: cp210x converter detected [ 135.668781][ T30] audit: type=1326 audit(1755474588.438:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 135.728001][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.764763][ T30] audit: type=1326 audit(1755474588.438:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 135.991928][ T30] audit: type=1326 audit(1755474588.438:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 136.016275][ T30] audit: type=1326 audit(1755474588.438:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 136.017992][ T24] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 139.727166][ T24] usb 5-1: config 0 has no interface number 0 [ 139.773069][ T30] audit: type=1326 audit(1755474588.438:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 142.370388][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=53.a6 [ 143.240292][ T5979] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 143.401433][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.414227][ T5979] cp210x 3-1:0.0: querying part number failed [ 143.431899][ T30] audit: type=1326 audit(1755474588.438:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 143.471726][ T24] usb 5-1: config 0 descriptor?? [ 143.497128][ T24] usb 5-1: can't set config #0, error -71 [ 143.518241][ T5979] usb 3-1: cp210x converter now attached to ttyUSB0 [ 143.541172][ T30] audit: type=1326 audit(1755474588.438:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 143.573685][ T24] usb 5-1: USB disconnect, device number 6 [ 143.669439][ T30] audit: type=1326 audit(1755474588.438:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 143.796061][ T10] usb 3-1: USB disconnect, device number 4 [ 143.853105][ T30] audit: type=1326 audit(1755474588.438:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 143.868730][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.978546][ T30] audit: type=1326 audit(1755474588.438:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 144.057240][ T10] cp210x 3-1:0.0: device disconnected [ 144.129691][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 144.779669][ T30] audit: type=1326 audit(1755474588.438:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 144.817935][ T30] audit: type=1326 audit(1755474588.438:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 144.839382][ T30] audit: type=1326 audit(1755474588.438:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 144.860774][ T30] audit: type=1326 audit(1755474588.438:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 144.930638][ T6407] Zero length message leads to an empty skb [ 144.997906][ T30] audit: type=1326 audit(1755474588.438:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 145.224532][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.111'. [ 145.279390][ T6416] netlink: 'syz.3.109': attribute type 2 has an invalid length. [ 145.328182][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.344275][ T6419] bridge0: port 3(syz_tun) entered blocking state [ 145.351816][ T6419] bridge0: port 3(syz_tun) entered disabled state [ 145.368464][ T6419] syz_tun: entered allmulticast mode [ 145.403733][ T6419] syz_tun: entered promiscuous mode [ 145.429837][ T6419] bridge0: port 3(syz_tun) entered blocking state [ 145.437237][ T6419] bridge0: port 3(syz_tun) entered forwarding state [ 145.478109][ T24] usb 5-1: device descriptor read/64, error -71 [ 145.737989][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.868014][ T1207] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 146.052876][ T24] usb 5-1: device descriptor read/64, error -71 [ 146.065279][ T1207] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 146.164714][ T1207] usb 3-1: config 0 has no interface number 0 [ 146.326382][ T1207] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 146.722534][ T1207] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 146.866377][ T1207] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 146.964705][ T1207] usb 3-1: Product: syz [ 146.990927][ T1207] usb 3-1: Manufacturer: syz [ 147.016172][ T1207] usb 3-1: SerialNumber: syz [ 147.028264][ T24] usb usb5-port1: attempt power cycle [ 147.049130][ T1207] usb 3-1: config 0 descriptor?? [ 147.112720][ T6425] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 147.201415][ T1207] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 147.228180][ T1207] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 147.274276][ T1207] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 147.350580][ T1207] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 147.399341][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.404876][ T1207] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 147.497360][ T1207] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 148.178632][ T1207] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 148.321001][ T1207] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 148.341233][ T6436] sctp: failed to load transform for md5: -2 [ 148.390745][ T1207] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 148.408233][ T6440] sctp: failed to load transform for md5: -2 [ 148.461742][ T1207] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 148.520251][ T6450] sctp: failed to load transform for md5: -2 [ 148.607789][ T6445] sctp: failed to load transform for md5: -2 [ 148.828501][ T10] usb 3-1: USB disconnect, device number 5 [ 149.010391][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 149.146052][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 149.261113][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 149.392742][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 149.480444][ T10] keyspan 3-1:0.107: device disconnected [ 149.507932][ T24] usb 5-1: device descriptor read/8, error -71 [ 149.757930][ T5904] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 149.849277][ T6479] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 149.878221][ T6479] netlink: 208 bytes leftover after parsing attributes in process `syz.4.126'. [ 149.984255][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.011435][ T5904] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.067943][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.149119][ T5904] usb 2-1: config 0 descriptor?? [ 150.480185][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 150.486500][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 150.888104][ T10] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 151.110235][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.258010][ T10] usb 4-1: config 0 has no interface number 0 [ 151.264231][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 151.273719][ T5904] usb 2-1: USB disconnect, device number 14 [ 151.350530][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.124'. [ 151.368031][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.407190][ T10] usb 4-1: config 0 descriptor?? [ 151.597320][ T6504] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 151.776694][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 152.024691][ T10] usb 4-1: selecting invalid altsetting 1 [ 152.031730][ T5904] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 152.168431][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 152.208801][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 152.333249][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.422133][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.480705][ T5904] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.538263][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.590083][ T5904] usb 2-1: config 0 descriptor?? [ 152.628300][ T5904] usb 2-1: can't set config #0, error -71 [ 152.660626][ T10] DVB: Unable to find symbol cx22700_attach() [ 152.685029][ T5904] usb 2-1: USB disconnect, device number 15 [ 152.807614][ T6521] 9pnet_fd: Insufficient options for proto=fd [ 152.843241][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 152.871368][ T10] DVB: Unable to find symbol tda10046_attach() [ 152.890855][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 153.268951][ T5926] usb 4-1: USB disconnect, device number 13 [ 153.820872][ T6532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.135'. [ 153.823053][ T6525] kvm: pic: non byte read [ 153.901246][ T6525] kvm: pic: level sensitive irq not supported [ 153.901419][ T6525] kvm: pic: non byte read [ 153.933139][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.128066][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 154.398773][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.667845][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 154.831695][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 154.858473][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 154.868404][ T5905] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 154.886981][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.907000][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 154.918778][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 154.930653][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 154.970208][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 154.993546][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 155.012470][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 155.022218][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.031918][ T10] usb 2-1: Product: syz [ 155.036645][ T10] usb 2-1: Manufacturer: syz [ 155.042341][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 155.060473][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 155.073638][ T10] usb 2-1: SerialNumber: syz [ 155.080769][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 155.092907][ T5905] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 155.107849][ T10] usb 2-1: config 0 descriptor?? [ 155.124339][ T6530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.138045][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.153621][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.175041][ T5905] usb 5-1: config 0 descriptor?? [ 155.188404][ T6541] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 155.428990][ T10] usb 2-1: USB disconnect, device number 16 [ 155.472258][ T6470] udevd[6470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.712237][ T5905] waltop 0003:172F:0500.0005: unknown main item tag 0x0 [ 155.742763][ T5905] waltop 0003:172F:0500.0005: unknown main item tag 0x0 [ 155.758104][ T5905] waltop 0003:172F:0500.0005: unknown main item tag 0x0 [ 155.781407][ T5905] waltop 0003:172F:0500.0005: unknown main item tag 0x0 [ 155.798052][ T5905] waltop 0003:172F:0500.0005: unknown main item tag 0x0 [ 155.815472][ T5905] waltop 0003:172F:0500.0005: unknown main item tag 0x0 [ 155.825596][ T5905] waltop 0003:172F:0500.0005: unknown main item tag 0x0 [ 155.854649][ T5905] waltop 0003:172F:0500.0005: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.4-1/input0 [ 155.917902][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 155.935047][ T5905] usb 5-1: USB disconnect, device number 11 [ 156.111155][ T6553] fido_id[6553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 156.130896][ T6555] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 156.147262][ T5926] IPVS: starting estimator thread 0... [ 156.257951][ T6558] IPVS: using max 24 ests per chain, 57600 per kthread [ 156.837454][ T6572] fuse: Bad value for 'fd' [ 158.502219][ T6588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.155'. [ 158.595278][ T6594] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.613624][ T6594] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.632296][ T6596] afs: Unknown parameter 'smackfs\e]' [ 158.677074][ T6594] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.689456][ T6594] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.700833][ T6594] geneve2: entered allmulticast mode [ 158.723697][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 158.737409][ T6601] netlink: 44 bytes leftover after parsing attributes in process `syz.0.159'. [ 158.774574][ T6594] syz.4.158 uses obsolete (PF_INET,SOCK_PACKET) [ 158.805005][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.158'. [ 158.859087][ T6606] netlink: 'syz.4.158': attribute type 10 has an invalid length. [ 159.057337][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 159.057358][ T30] audit: type=1800 audit(1755474611.798:68): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.160" name="bus" dev="overlay" ino=181 res=0 errno=0 [ 159.125835][ T6606] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 159.757111][ T6618] ptrace attach of "./syz-executor exec"[5843] was attempted by "\x09   0 "[6618] [ 159.987053][ T6618] ptrace attach of "./syz-executor exec"[5843] was attempted by "/sys/kernel/kexec_loaded 0    @           [ 160.142860][ T6613] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 160.260539][ T6613] macsec1: entered allmulticast mode [ 160.272932][ T6613] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 160.294026][ T6613] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 160.311283][ T6613] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 160.735821][ T6630] 9pnet_fd: Insufficient options for proto=fd [ 161.537722][ T6639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.878196][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 161.927453][ T6647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.171'. [ 164.703240][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 164.842822][ T6677] netlink: 80 bytes leftover after parsing attributes in process `syz.4.176'. [ 165.080688][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 165.457618][ T10] usb 2-1: config 0 has an invalid interface number: 97 but max is 0 [ 165.465980][ T10] usb 2-1: config 0 has no interface number 0 [ 165.500039][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=17.22 [ 165.527915][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.536151][ T10] usb 2-1: Product: syz [ 165.546777][ T10] usb 2-1: Manufacturer: syz [ 165.590231][ T10] usb 2-1: SerialNumber: syz [ 165.645534][ T10] usb 2-1: config 0 descriptor?? [ 165.674632][ T6677] comedi comedi1: pcl711: I/O port conflict (0x4f27,16) [ 166.037930][ T5926] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.767424][ T10] snd-usb-audio 2-1:0.97: probe with driver snd-usb-audio failed with error -71 [ 166.779507][ T5926] usb 3-1: device descriptor read/64, error -71 [ 166.787463][ T10] usb 2-1: USB disconnect, device number 17 [ 167.443402][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.810777][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 167.928001][ T5926] usb 3-1: device descriptor read/64, error -71 [ 168.188464][ T5926] usb usb3-port1: attempt power cycle [ 168.419549][ T5979] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 168.528297][ T5926] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 168.531018][ T6717] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 168.568104][ T5968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.598205][ T5979] usb 2-1: Using ep0 maxpacket: 16 [ 168.623768][ T5926] usb 3-1: device descriptor read/8, error -71 [ 168.694125][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.710714][ T5979] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.723482][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.902468][ T5968] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.935982][ T5979] usb 2-1: config 0 descriptor?? [ 169.045674][ T5968] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.094146][ T5968] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.107023][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.718616][ T6713] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 169.747782][ T6723] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 169.755884][ T6723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.191'. [ 169.765185][ T6723] dummy0: entered promiscuous mode [ 169.774094][ T6723] bridge0: port 3(dummy0) entered blocking state [ 169.780951][ T6723] bridge0: port 3(dummy0) entered disabled state [ 169.787948][ T6723] dummy0: entered allmulticast mode [ 169.799569][ T6723] bridge0: port 3(dummy0) entered blocking state [ 169.800399][ T5968] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.806227][ T6723] bridge0: port 3(dummy0) entered forwarding state [ 170.414317][ T5979] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 170.552370][ T5968] usb 1-1: USB disconnect, device number 8 [ 170.702741][ T6470] udevd[6470]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.713650][ T5849] Bluetooth: hci4: unexpected event 0x36 length: 6 < 7 [ 170.849056][ T5905] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 170.984510][ T6736] input: syz0 as /devices/virtual/input/input6 [ 171.031537][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.052784][ T6733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.193'. [ 171.066728][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 171.114023][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 171.133617][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 171.143996][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 171.181466][ T5905] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 171.374048][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.400037][ T5905] usb 5-1: Product: syz [ 171.404611][ T5905] usb 5-1: Manufacturer: syz [ 171.411221][ T5905] usb 5-1: SerialNumber: syz [ 171.505900][ T5905] usb 5-1: config 0 descriptor?? [ 171.515689][ T10] usb 2-1: USB disconnect, device number 18 [ 171.537665][ T6730] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 171.640895][ T5905] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 171.928478][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.002974][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.051033][ T6750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.123174][ T6747] evm: overlay not supported [ 172.161234][ T5968] hid-generic 0000:0D17:0000.0007: unknown main item tag 0x0 [ 172.224244][ T5968] hid-generic 0000:0D17:0000.0007: unknown main item tag 0x0 [ 172.234775][ T5905] usb 5-1: USB disconnect, device number 12 [ 172.246272][ T5968] hid-generic 0000:0D17:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 172.609926][ T6758] fido_id[6758]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.863147][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 173.928154][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 174.277347][ T5849] Bluetooth: hci2: Malformed Event: 0x02 [ 174.502555][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 175.196995][ T6796] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.279706][ T5968] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 176.462613][ T5968] usb 1-1: Using ep0 maxpacket: 16 [ 176.488282][ T5968] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.540480][ T5968] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.563420][ T5968] usb 1-1: config 1 has no interface number 1 [ 176.593345][ T5968] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 176.688951][ T5968] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 176.746154][ T5968] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.761879][ T5968] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 176.770450][ T5968] usb 1-1: Product: syz [ 176.774744][ T5968] usb 1-1: Manufacturer: syz [ 176.779519][ T5968] usb 1-1: SerialNumber: syz [ 177.173199][ T5968] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 177.218058][ T5968] usb 1-1: 2:1 : format type 23 is not supported yet [ 177.380356][ T5968] usb 1-1: USB disconnect, device number 9 [ 177.421040][ T6819] overlay: filesystem on ./bus not supported [ 177.524595][ T6394] udevd[6394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.681195][ T6822] capability: warning: `syz.1.213' uses 32-bit capabilities (legacy support in use) [ 177.778164][ T6827] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 180.012376][ T6846] binder: 6845:6846 ioctl c0306201 2000000003c0 returned -14 [ 180.247932][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 181.040579][ T6850] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 181.196101][ T6850] netlink: 224 bytes leftover after parsing attributes in process `syz.2.223'. [ 181.289885][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.304238][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.393950][ T6856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.038977][ T10] usb 5-1: config 0 descriptor?? [ 182.050513][ T10] cp210x 5-1:0.0: cp210x converter detected [ 184.159349][ T10] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 184.166908][ T10] cp210x 5-1:0.0: querying part number failed [ 184.291948][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 184.309362][ T10] usb 5-1: USB disconnect, device number 13 [ 184.325553][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.354538][ T10] cp210x 5-1:0.0: device disconnected [ 184.487285][ T30] audit: type=1326 audit(1755474637.248:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 184.611207][ T5905] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 184.627892][ T30] audit: type=1326 audit(1755474637.248:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 184.661161][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 184.727913][ T30] audit: type=1326 audit(1755474637.288:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 184.815613][ T30] audit: type=1326 audit(1755474637.288:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 184.870996][ T5905] usb 2-1: not running at top speed; connect to a high speed hub [ 184.890115][ T5905] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 184.909399][ T30] audit: type=1326 audit(1755474637.288:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 184.937999][ T5905] usb 2-1: config 1 has no interface number 1 [ 184.954455][ T5905] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 185.006644][ T30] audit: type=1326 audit(1755474637.288:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 185.068204][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.088154][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.108522][ T30] audit: type=1326 audit(1755474637.288:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 185.137854][ T5905] usb 2-1: Product: syz [ 185.152433][ T5905] usb 2-1: Manufacturer: syz [ 185.157113][ T5905] usb 2-1: SerialNumber: syz [ 185.195172][ T30] audit: type=1326 audit(1755474637.288:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 185.257639][ T30] audit: type=1326 audit(1755474637.298:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 185.328096][ T30] audit: type=1326 audit(1755474637.298:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6875 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 185.464455][ T5905] usb 2-1: failed to enable PITCH for EP 0x82 [ 185.629883][ T5905] usb 2-1: USB disconnect, device number 19 [ 185.832325][ T6400] udevd[6400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.104314][ T6904] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 188.090228][ T6918] tipc: Enabled bearer , priority 10 [ 188.466875][ T6933] netlink: 1 bytes leftover after parsing attributes in process `syz.4.255'. [ 188.478649][ T6933] xt_policy: neither incoming nor outgoing policy selected [ 188.926822][ T1207] IPVS: starting estimator thread 0... [ 189.027986][ T6949] IPVS: using max 26 ests per chain, 62400 per kthread [ 189.350678][ T6961] loop9: detected capacity change from 0 to 7 [ 189.373980][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 189.399776][ T6961] buffer_io_error: 20 callbacks suppressed [ 189.399795][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.427760][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 189.461590][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.465004][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 189.515794][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.608292][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.706009][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 189.718124][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.750113][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 189.761167][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.768590][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 189.793801][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.817074][ T6961] ldm_validate_partition_table(): Disk read failed. [ 189.837165][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.847715][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 189.847733][ T30] audit: type=1326 audit(1755474642.618:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26b8ebe9 code=0x7ffc0000 [ 189.854543][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.951041][ T6961] Buffer I/O error on dev loop9, logical block 0, async page read [ 189.998144][ T30] audit: type=1326 audit(1755474642.658:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ffa26b8ebe9 code=0x7ffc0000 [ 190.039533][ T6961] Dev loop9: unable to read RDB block 0 [ 190.045514][ T6961] loop9: unable to read partition table [ 190.093168][ T30] audit: type=1326 audit(1755474642.658:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26b8ebe9 code=0x7ffc0000 [ 190.112876][ T6961] loop9: partition table beyond EOD, truncated [ 190.147068][ T6961] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 190.147068][ T6961] ) failed (rc=-5) [ 190.187519][ T30] audit: type=1326 audit(1755474642.658:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ffa26b8ebe9 code=0x7ffc0000 [ 190.230399][ T6987] 9pnet_fd: Insufficient options for proto=fd [ 190.257179][ T30] audit: type=1326 audit(1755474642.658:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26b8ebe9 code=0x7ffc0000 [ 190.348003][ T30] audit: type=1326 audit(1755474642.658:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6976 comm="syz.0.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa26b8ebe9 code=0x7ffc0000 [ 190.601782][ T30] audit: type=1326 audit(1755474643.358:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 190.692566][ T30] audit: type=1326 audit(1755474643.368:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 190.799148][ T30] audit: type=1326 audit(1755474643.368:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 190.850640][ T30] audit: type=1326 audit(1755474643.368:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.4.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0080f8ebe9 code=0x7ffc0000 [ 191.389824][ T7017] tipc: Started in network mode [ 191.422389][ T7017] tipc: Node identity 6add4937f3c2, cluster identity 4711 [ 191.453287][ T7017] tipc: Enabled bearer , priority 0 [ 191.509136][ T7018] syzkaller0: entered promiscuous mode [ 191.514705][ T7018] syzkaller0: entered allmulticast mode [ 191.594032][ T7017] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.705454][ T7017] tipc: Resetting bearer [ 191.751036][ T7016] tipc: Resetting bearer [ 191.852314][ T7016] tipc: Disabling bearer [ 194.626674][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.633424][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.686057][ T7088] bridge0: entered allmulticast mode [ 194.704967][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 194.722240][ T7088] syz_tun: left allmulticast mode [ 194.735639][ T7068] serio: Serial port ptm0 [ 194.744504][ T7088] syz_tun: left promiscuous mode [ 194.768809][ T7088] bridge0: port 3(syz_tun) entered disabled state [ 194.853156][ T7088] bridge_slave_1: left allmulticast mode [ 194.867169][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 194.867189][ T30] audit: type=1326 audit(1755474647.628:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 194.867601][ T7088] bridge_slave_1: left promiscuous mode [ 194.920796][ T30] audit: type=1326 audit(1755474647.668:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 194.991081][ T30] audit: type=1326 audit(1755474647.668:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 194.996135][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.071675][ T30] audit: type=1326 audit(1755474647.708:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7092 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a5d8ebe9 code=0x7ffc0000 [ 195.204285][ T7088] bridge_slave_0: left allmulticast mode [ 195.218332][ T7088] bridge_slave_0: left promiscuous mode [ 195.231068][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.565176][ T7108] loop9: detected capacity change from 0 to 7 [ 195.583135][ T7108] buffer_io_error: 9 callbacks suppressed [ 195.583154][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.605295][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.622090][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.665064][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.711484][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.751975][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.776197][ T7088] bridge0 (unregistering): left allmulticast mode [ 195.802047][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.878010][ T7108] ldm_validate_partition_table(): Disk read failed. [ 195.884758][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.942059][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 195.974821][ T7108] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.007409][ T7108] Dev loop9: unable to read RDB block 0 [ 196.038360][ T7108] loop9: unable to read partition table [ 196.044335][ T7108] loop9: partition table beyond EOD, truncated [ 196.079426][ T7108] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 196.079426][ T7108] ) failed (rc=-5) [ 196.403356][ T7121] syz.4.332 (7121) used greatest stack depth: 16184 bytes left [ 197.243959][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'. [ 197.915085][ T7166] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 198.080729][ T7174] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 198.156968][ T7166] team0: Port device dummy0 added [ 198.205467][ T7170] tipc: Started in network mode [ 198.210721][ T7170] tipc: Node identity 3ee865316a17, cluster identity 4711 [ 198.233264][ T7170] tipc: Enabled bearer , priority 0 [ 198.273993][ T7168] tipc: Disabling bearer [ 198.301948][ T7174] [ 198.304405][ T7174] ====================================================== [ 198.311463][ T7174] WARNING: possible circular locking dependency detected [ 198.318507][ T7174] 6.16.0-syzkaller #0 Not tainted [ 198.323569][ T7174] ------------------------------------------------------ [ 198.330618][ T7174] syz.0.348/7174 is trying to acquire lock: [ 198.336541][ T7174] ffff88807d29ce00 (team->team_lock_key){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 198.346317][ T7174] [ 198.346317][ T7174] but task is already holding lock: [ 198.353692][ T7174] ffff88804c7aad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 198.363409][ T7174] [ 198.363409][ T7174] which lock already depends on the new lock. [ 198.363409][ T7174] [ 198.373928][ T7174] [ 198.373928][ T7174] the existing dependency chain (in reverse order) is: [ 198.383140][ T7174] [ 198.383140][ T7174] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 198.391617][ T7174] lock_acquire+0x120/0x360 [ 198.396664][ T7174] __mutex_lock+0x182/0xe80 [ 198.401792][ T7174] dev_set_mtu+0x10e/0x260 [ 198.406753][ T7174] team_add_slave+0x8b8/0x2840 [ 198.412051][ T7174] do_set_master+0x530/0x6d0 [ 198.417176][ T7174] do_setlink+0xcf0/0x41c0 [ 198.422218][ T7174] rtnl_newlink+0x160b/0x1c70 [ 198.427445][ T7174] rtnetlink_rcv_msg+0x7cc/0xb70 [ 198.432923][ T7174] netlink_rcv_skb+0x205/0x470 [ 198.438307][ T7174] netlink_unicast+0x75c/0x8e0 [ 198.443600][ T7174] netlink_sendmsg+0x805/0xb30 [ 198.448910][ T7174] __sock_sendmsg+0x21c/0x270 [ 198.454113][ T7174] ____sys_sendmsg+0x505/0x830 [ 198.459598][ T7174] ___sys_sendmsg+0x21f/0x2a0 [ 198.465074][ T7174] __x64_sys_sendmsg+0x19b/0x260 [ 198.470581][ T7174] do_syscall_64+0xfa/0x3b0 [ 198.475616][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.482036][ T7174] [ 198.482036][ T7174] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 198.490045][ T7174] validate_chain+0xb9b/0x2140 [ 198.495341][ T7174] __lock_acquire+0xab9/0xd20 [ 198.500896][ T7174] lock_acquire+0x120/0x360 [ 198.505951][ T7174] __mutex_lock+0x182/0xe80 [ 198.511071][ T7174] team_device_event+0x182/0xa20 [ 198.516633][ T7174] notifier_call_chain+0x1b3/0x3e0 [ 198.522297][ T7174] __dev_notify_flags+0x18d/0x2e0 [ 198.527856][ T7174] netif_change_flags+0xe8/0x1a0 [ 198.533327][ T7174] do_setlink+0xc55/0x41c0 [ 198.538278][ T7174] rtnl_newlink+0x160b/0x1c70 [ 198.543589][ T7174] rtnetlink_rcv_msg+0x7cc/0xb70 [ 198.549095][ T7174] netlink_rcv_skb+0x205/0x470 [ 198.554409][ T7174] netlink_unicast+0x75c/0x8e0 [ 198.559719][ T7174] netlink_sendmsg+0x805/0xb30 [ 198.565020][ T7174] __sock_sendmsg+0x21c/0x270 [ 198.570266][ T7174] ____sys_sendmsg+0x505/0x830 [ 198.575653][ T7174] ___sys_sendmsg+0x21f/0x2a0 [ 198.580863][ T7174] __x64_sys_sendmsg+0x19b/0x260 [ 198.586334][ T7174] do_syscall_64+0xfa/0x3b0 [ 198.591366][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.597791][ T7174] [ 198.597791][ T7174] other info that might help us debug this: [ 198.597791][ T7174] [ 198.608112][ T7174] Possible unsafe locking scenario: [ 198.608112][ T7174] [ 198.615624][ T7174] CPU0 CPU1 [ 198.621012][ T7174] ---- ---- [ 198.626470][ T7174] lock(&dev_instance_lock_key#3); [ 198.631694][ T7174] lock(team->team_lock_key); [ 198.638990][ T7174] lock(&dev_instance_lock_key#3); [ 198.646724][ T7174] lock(team->team_lock_key); [ 198.651517][ T7174] [ 198.651517][ T7174] *** DEADLOCK *** [ 198.651517][ T7174] [ 198.659749][ T7174] 2 locks held by syz.0.348/7174: [ 198.664868][ T7174] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 198.673951][ T7174] #1: ffff88804c7aad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 198.684080][ T7174] [ 198.684080][ T7174] stack backtrace: [ 198.689974][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.0.348 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 198.689994][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.690004][ T7174] Call Trace: [ 198.690011][ T7174] [ 198.690018][ T7174] dump_stack_lvl+0x189/0x250 [ 198.690039][ T7174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.690056][ T7174] ? __pfx__printk+0x10/0x10 [ 198.690076][ T7174] ? print_lock_name+0xde/0x100 [ 198.690096][ T7174] print_circular_bug+0x2ee/0x310 [ 198.690116][ T7174] check_noncircular+0x134/0x160 [ 198.690137][ T7174] validate_chain+0xb9b/0x2140 [ 198.690158][ T7174] ? __lock_acquire+0xab9/0xd20 [ 198.690177][ T7174] __lock_acquire+0xab9/0xd20 [ 198.690193][ T7174] ? team_device_event+0x182/0xa20 [ 198.690207][ T7174] lock_acquire+0x120/0x360 [ 198.690220][ T7174] ? team_device_event+0x182/0xa20 [ 198.690236][ T7174] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 198.690263][ T7174] __mutex_lock+0x182/0xe80 [ 198.690278][ T7174] ? team_device_event+0x182/0xa20 [ 198.690295][ T7174] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 198.690316][ T7174] ? team_device_event+0x182/0xa20 [ 198.690330][ T7174] ? __pfx___mutex_lock+0x10/0x10 [ 198.690345][ T7174] ? __timer_delete_sync+0x218/0x2d0 [ 198.690373][ T7174] team_device_event+0x182/0xa20 [ 198.690389][ T7174] notifier_call_chain+0x1b3/0x3e0 [ 198.690409][ T7174] __dev_notify_flags+0x18d/0x2e0 [ 198.690433][ T7174] ? __pfx___dev_notify_flags+0x10/0x10 [ 198.690453][ T7174] ? __dev_change_flags+0x4cc/0x6d0 [ 198.690478][ T7174] ? __pfx___dev_change_flags+0x10/0x10 [ 198.690504][ T7174] netif_change_flags+0xe8/0x1a0 [ 198.690528][ T7174] do_setlink+0xc55/0x41c0 [ 198.690552][ T7174] ? trace_sched_exit_tp+0x38/0x120 [ 198.690578][ T7174] ? __pfx_do_setlink+0x10/0x10 [ 198.690602][ T7174] ? __lock_acquire+0xab9/0xd20 [ 198.690618][ T7174] ? do_raw_spin_lock+0x121/0x290 [ 198.690641][ T7174] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 198.690665][ T7174] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.690681][ T7174] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 198.690704][ T7174] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 198.690730][ T7174] ? rcu_is_watching+0x15/0xb0 [ 198.690748][ T7174] ? __mutex_lock+0xa6d/0xe80 [ 198.690772][ T7174] ? __mutex_lock+0x51b/0xe80 [ 198.690790][ T7174] ? rtnl_newlink+0x8db/0x1c70 [ 198.690810][ T7174] ? __pfx___mutex_lock+0x10/0x10 [ 198.690830][ T7174] ? ns_capable+0x8a/0xf0 [ 198.690846][ T7174] ? rtnl_link_get_net_capable+0x16a/0x350 [ 198.690868][ T7174] rtnl_newlink+0x160b/0x1c70 [ 198.690887][ T7174] ? netlink_sendmsg+0x805/0xb30 [ 198.690913][ T7174] ? __pfx_rtnl_newlink+0x10/0x10 [ 198.690940][ T7174] ? kasan_quarantine_put+0xdd/0x220 [ 198.690963][ T7174] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.690980][ T7174] ? nlmon_xmit+0xb0/0x100 [ 198.690998][ T7174] ? kmem_cache_free+0x18f/0x400 [ 198.691016][ T7174] ? __local_bh_enable_ip+0x12d/0x1c0 [ 198.691031][ T7174] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.691046][ T7174] ? __local_bh_enable_ip+0x12d/0x1c0 [ 198.691061][ T7174] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 198.691078][ T7174] ? __dev_queue_xmit+0x27e/0x3a70 [ 198.691093][ T7174] ? __dev_queue_xmit+0x27e/0x3a70 [ 198.691107][ T7174] ? __dev_queue_xmit+0x27e/0x3a70 [ 198.691122][ T7174] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 198.691139][ T7174] ? __lock_acquire+0xab9/0xd20 [ 198.691161][ T7174] ? __pfx_rtnl_newlink+0x10/0x10 [ 198.691180][ T7174] rtnetlink_rcv_msg+0x7cc/0xb70 [ 198.691201][ T7174] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 198.691220][ T7174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.691238][ T7174] ? ref_tracker_free+0x63a/0x7d0 [ 198.691254][ T7174] ? __copy_skb_header+0xa7/0x550 [ 198.691269][ T7174] ? __pfx_ref_tracker_free+0x10/0x10 [ 198.691285][ T7174] ? __skb_clone+0x63/0x7a0 [ 198.691301][ T7174] netlink_rcv_skb+0x205/0x470 [ 198.691322][ T7174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.691342][ T7174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.691367][ T7174] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.691387][ T7174] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.691409][ T7174] netlink_unicast+0x75c/0x8e0 [ 198.691431][ T7174] netlink_sendmsg+0x805/0xb30 [ 198.691456][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.691480][ T7174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.691495][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.691516][ T7174] __sock_sendmsg+0x21c/0x270 [ 198.691535][ T7174] ____sys_sendmsg+0x505/0x830 [ 198.691560][ T7174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.691586][ T7174] ? import_iovec+0x74/0xa0 [ 198.691608][ T7174] ___sys_sendmsg+0x21f/0x2a0 [ 198.691631][ T7174] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.691667][ T7174] ? __fget_files+0x2a/0x420 [ 198.691683][ T7174] ? __fget_files+0x3a0/0x420 [ 198.691703][ T7174] __x64_sys_sendmsg+0x19b/0x260 [ 198.691727][ T7174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.691759][ T7174] ? rcu_is_watching+0x15/0xb0 [ 198.691777][ T7174] ? do_syscall_64+0xbe/0x3b0 [ 198.691795][ T7174] do_syscall_64+0xfa/0x3b0 [ 198.691811][ T7174] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.691826][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.691841][ T7174] ? clear_bhb_loop+0x60/0xb0 [ 198.691858][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.691873][ T7174] RIP: 0033:0x7ffa26b8ebe9 [ 198.691888][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.691901][ T7174] RSP: 002b:00007ffa279ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.691918][ T7174] RAX: ffffffffffffffda RBX: 00007ffa26db6180 RCX: 00007ffa26b8ebe9 [ 198.691929][ T7174] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 198.691939][ T7174] RBP: 00007ffa26c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 198.691949][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.691958][ T7174] R13: 00007ffa26db6218 R14: 00007ffa26db6180 R15: 00007ffc6ae89378 [ 198.691975][ T7174] [ 199.350259][ T7174] team0: Port device dummy0 removed [ 199.422004][ T7174] bond0: (slave dummy0): Enslaving as an active interface with an up link