last executing test programs: 8.959144129s ago: executing program 0 (id=645): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x140200, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 7.237540886s ago: executing program 2 (id=647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 7.123590187s ago: executing program 0 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 6.959916523s ago: executing program 0 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637288"], 0xe) 6.807451288s ago: executing program 1 (id=653): socket(0x1e, 0x6, 0x18000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000014a, &(0x7f00000001c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x22, 0x2, 0x3, &(0x7f0000000240)) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x81, 0x0, 0x32314258, 0x4, 0x4, [{0xff}, {0xffffffff}, {0x0, 0x1}, {0x0, 0x76dfbff1}, {0xfffffffe, 0x2}, {0xfffffffd}, {0x0, 0x10}], 0x0, 0x20}}) 6.492274468s ago: executing program 2 (id=654): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.275325837s ago: executing program 1 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) 3.604466719s ago: executing program 2 (id=658): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000240)={'veth1_to_batadv\x00', @ifru_settings={0x3, 0xa, @fr_pvc=0x0}}) 3.527935437s ago: executing program 0 (id=659): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x480800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'wg0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x1c, 0x3, 0x3, 0x2, 0x1, 0x5, 0x4, 0xc, 0x6, 0x3c, [0x4, 0x2, 0x41fb, 0x7ff, 0x8, 0x0, 0x7, 0x3]}}) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.491859441s ago: executing program 1 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000000000800100"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.432616386s ago: executing program 2 (id=662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.175714931s ago: executing program 3 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x2280850, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@orlov}, {@nodelalloc}, {@grpjquota}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") dup3(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(0x0, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000056c0)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000001800)=""/240, 0xf0}], 0x3, &(0x7f0000001a00)=""/205, 0xcd}, 0x45}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004200)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/129, 0x81}, {&(0x7f0000003d00)=""/173, 0xad}, {0x0}, {&(0x7f0000004080)=""/76, 0x4c}], 0x5, &(0x7f0000004280)=""/189, 0xbd}, 0xed}], 0x3, 0x2000, &(0x7f0000005800)) pipe2$9p(&(0x7f00000000c0), 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000180)={0x4000}) 1.993493197s ago: executing program 1 (id=664): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xd1, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffd}, 0x48) 1.804671054s ago: executing program 1 (id=665): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, &(0x7f00000002c0), 0x6, 0x0) r5 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="9110b70000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x3, 0x0, 0x0, 0x0, 0x1c, 0xffffffff}, 0x0) r8 = socket(0x10, 0x2, 0x0) keyctl$clear(0x7, 0xffffffffffffffff) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r9, 0x29, 0x9, 0x5, 0x3, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x8, 0x20, 0x80000000, 0x10000}}) 1.300862824s ago: executing program 3 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 1.023592891s ago: executing program 3 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 875.929555ms ago: executing program 3 (id=668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair(0xa, 0x3, 0x87, &(0x7f0000000280)) 657.456197ms ago: executing program 0 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000002"], 0x50) 587.449673ms ago: executing program 3 (id=670): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r1, 0x89b0, &(0x7f0000000240)={'veth1_to_batadv\x00', @ifru_settings={0x3, 0xa, @fr_pvc=0x0}}) 412.21023ms ago: executing program 2 (id=671): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="0000ffffffffe8fffffffffffffd2e", @ANYRES64], 0x48) 254.660846ms ago: executing program 0 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x66) 246.148706ms ago: executing program 3 (id=673): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) 116.143839ms ago: executing program 2 (id=674): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 0s ago: executing program 1 (id=675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 81.580644][ T5779] cgroup: Unknown subsys name 'net' [ 81.720033][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.396658][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.155181][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.163810][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.176958][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.185412][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.194118][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.204553][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.212956][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.220855][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.228323][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.237965][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.238795][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.246389][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.253717][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.262262][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.267021][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.275570][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.282636][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.288396][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.323952][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.353324][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.361427][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.368774][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.380510][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.392881][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.918699][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 85.936429][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 86.056570][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.071978][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.188780][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.196332][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.204278][ T5798] bridge_slave_0: entered allmulticast mode [ 86.212438][ T5798] bridge_slave_0: entered promiscuous mode [ 86.238646][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.246186][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.253867][ T5793] bridge_slave_0: entered allmulticast mode [ 86.261004][ T5793] bridge_slave_0: entered promiscuous mode [ 86.269034][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.276592][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.284188][ T5793] bridge_slave_1: entered allmulticast mode [ 86.291500][ T5793] bridge_slave_1: entered promiscuous mode [ 86.299103][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.306546][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.313861][ T5798] bridge_slave_1: entered allmulticast mode [ 86.320933][ T5798] bridge_slave_1: entered promiscuous mode [ 86.404251][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.445702][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.453303][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.460572][ T5790] bridge_slave_0: entered allmulticast mode [ 86.468427][ T5790] bridge_slave_0: entered promiscuous mode [ 86.478220][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.490052][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.526994][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.534468][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.542006][ T5790] bridge_slave_1: entered allmulticast mode [ 86.549067][ T5790] bridge_slave_1: entered promiscuous mode [ 86.569539][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.590572][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.598357][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.605780][ T5788] bridge_slave_0: entered allmulticast mode [ 86.613322][ T5788] bridge_slave_0: entered promiscuous mode [ 86.675782][ T5798] team0: Port device team_slave_0 added [ 86.683839][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.691161][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.698451][ T5788] bridge_slave_1: entered allmulticast mode [ 86.705825][ T5788] bridge_slave_1: entered promiscuous mode [ 86.715363][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.727968][ T5793] team0: Port device team_slave_0 added [ 86.735857][ T5798] team0: Port device team_slave_1 added [ 86.788670][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.818311][ T5793] team0: Port device team_slave_1 added [ 86.839651][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.884160][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.891431][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.918397][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.933769][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.945987][ T5790] team0: Port device team_slave_0 added [ 86.966039][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.973429][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.999491][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.050236][ T5790] team0: Port device team_slave_1 added [ 87.057291][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.065241][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.091890][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.104912][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.112056][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.139023][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.189991][ T5788] team0: Port device team_slave_0 added [ 87.208719][ T5788] team0: Port device team_slave_1 added [ 87.320159][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.327648][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.358582][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.369851][ T5804] Bluetooth: hci2: command tx timeout [ 87.403488][ T5793] hsr_slave_0: entered promiscuous mode [ 87.414976][ T5793] hsr_slave_1: entered promiscuous mode [ 87.441473][ T5804] Bluetooth: hci0: command tx timeout [ 87.441496][ T50] Bluetooth: hci3: command tx timeout [ 87.441726][ T50] Bluetooth: hci1: command tx timeout [ 87.447474][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.466780][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.499006][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.513068][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.520069][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.551970][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.567897][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.576872][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.608528][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.726141][ T5798] hsr_slave_0: entered promiscuous mode [ 87.732940][ T5798] hsr_slave_1: entered promiscuous mode [ 87.739850][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.748490][ T5798] Cannot create hsr debugfs directory [ 87.774071][ T5788] hsr_slave_0: entered promiscuous mode [ 87.781005][ T5788] hsr_slave_1: entered promiscuous mode [ 87.787224][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.794923][ T5788] Cannot create hsr debugfs directory [ 87.874508][ T5790] hsr_slave_0: entered promiscuous mode [ 87.882400][ T5790] hsr_slave_1: entered promiscuous mode [ 87.888669][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.897321][ T5790] Cannot create hsr debugfs directory [ 88.271359][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.285604][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.301014][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.314861][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.375281][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.406756][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.417727][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.430149][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.503805][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.537389][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.574404][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.586984][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.671965][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.682507][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.695956][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.708496][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.739633][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.813021][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.826061][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.869308][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.876762][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.888266][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.895443][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.936796][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.984033][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.991251][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.002930][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.010132][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.099120][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.119105][ T5793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.130048][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.188977][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.235925][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.243158][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.255284][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.262663][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.285786][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.368890][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.425399][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.432621][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.441814][ T50] Bluetooth: hci2: command tx timeout [ 89.469352][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.476662][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.522335][ T50] Bluetooth: hci0: command tx timeout [ 89.527819][ T50] Bluetooth: hci1: command tx timeout [ 89.537180][ T5803] Bluetooth: hci3: command tx timeout [ 89.680275][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.760268][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.810158][ T5793] veth0_vlan: entered promiscuous mode [ 89.838474][ T5793] veth1_vlan: entered promiscuous mode [ 89.943442][ T5798] veth0_vlan: entered promiscuous mode [ 89.984076][ T5798] veth1_vlan: entered promiscuous mode [ 90.006515][ T5793] veth0_macvtap: entered promiscuous mode [ 90.045179][ T5793] veth1_macvtap: entered promiscuous mode [ 90.087671][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.134433][ T5798] veth0_macvtap: entered promiscuous mode [ 90.155657][ T5798] veth1_macvtap: entered promiscuous mode [ 90.175763][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.208815][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.230421][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.257136][ T5788] veth0_vlan: entered promiscuous mode [ 90.276143][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.286153][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.296084][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.305849][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.334139][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.345060][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.358286][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.369770][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.380388][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.395808][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.418516][ T5788] veth1_vlan: entered promiscuous mode [ 90.427849][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.438410][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.447664][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.456441][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.559192][ T5790] veth0_vlan: entered promiscuous mode [ 90.660284][ T5788] veth0_macvtap: entered promiscuous mode [ 90.666841][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.675625][ T5788] veth1_macvtap: entered promiscuous mode [ 90.687613][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.694755][ T5790] veth1_vlan: entered promiscuous mode [ 90.699035][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.719048][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.779471][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.806155][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.824618][ T5790] veth0_macvtap: entered promiscuous mode [ 90.846473][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.857384][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.867950][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.878814][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.891500][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.903136][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.914838][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.924813][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.935473][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.948326][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.958775][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.977033][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.985353][ T5790] veth1_macvtap: entered promiscuous mode [ 90.994739][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.007855][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.019976][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.029015][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.090179][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.106162][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.116617][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.128361][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.138285][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.148906][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.164560][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.177067][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.188905][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.199456][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.213783][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.225093][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.235772][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.247941][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.275924][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.288649][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.298107][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.307951][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.393883][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.421232][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.521778][ T50] Bluetooth: hci2: command tx timeout [ 91.557379][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.577204][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.590598][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.601658][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.602390][ T50] Bluetooth: hci1: command tx timeout [ 91.615769][ T5803] Bluetooth: hci3: command tx timeout [ 91.617715][ T5804] Bluetooth: hci0: command tx timeout [ 91.660272][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.668774][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.991144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.021476][ T5891] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.061180][ T5861] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.094680][ T5891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.103773][ T5886] random: crng reseeded on system resumption [ 92.280866][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 92.281552][ T785] cfg80211: failed to load regulatory.db [ 92.294241][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.314738][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.336336][ T5861] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.379141][ T5861] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.394184][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.436505][ T5861] usb 2-1: Product: syz [ 92.461573][ T5861] usb 2-1: Manufacturer: syz [ 92.481609][ T5861] usb 2-1: SerialNumber: syz [ 92.539016][ T5861] cdc_ncm 2-1:1.0: skipping garbage [ 92.550728][ T5861] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 92.557717][ T5861] cdc_ncm 2-1:1.0: bind() failure [ 93.276419][ T5861] IPVS: starting estimator thread 0... [ 93.331148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.441712][ T5916] IPVS: using max 25 ests per chain, 60000 per kthread [ 93.601132][ T5804] Bluetooth: hci2: command tx timeout [ 93.612508][ T5861] usb 2-1: USB disconnect, device number 2 [ 93.682007][ T5804] Bluetooth: hci1: command tx timeout [ 93.682052][ T50] Bluetooth: hci3: command tx timeout [ 93.687463][ T5804] Bluetooth: hci0: command tx timeout [ 94.201292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.209924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.259143][ T5924] syz.3.9[5924]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.681195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.304921][ T5943] binder_alloc: 5942: pid 5942 spamming oneway? 2 buffers allocated for a total size of 5120 [ 96.952354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.572085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.575544][ T5953] loop0: detected capacity change from 0 to 8 [ 97.587203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 97.723076][ T5953] SQUASHFS error: xz decompression failed, data probably corrupt [ 97.744642][ T5953] SQUASHFS error: Failed to read block 0x108: -5 [ 97.768540][ T5953] SQUASHFS error: Unable to read metadata cache entry [106] [ 97.790195][ T5953] SQUASHFS error: Unable to read inode 0x11f [ 97.825519][ T5940] loop3: detected capacity change from 0 to 40427 [ 97.858092][ T5940] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 97.871900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 97.883815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.926622][ T5940] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 97.994783][ T5940] F2FS-fs (loop3): invalid crc value [ 98.096813][ T5940] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.391517][ T5940] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.428368][ T5940] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.675631][ T5972] QAT: Device 253 not found [ 98.738690][ T27] audit: type=1804 audit(1760670450.415:2): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.14" name="/newroot/5/file0/bus" dev="loop3" ino=11 res=1 errno=0 [ 98.811271][ T5976] trusted_key: encrypted_key: insufficient parameters specified [ 99.215365][ T5973] syz.3.14: attempt to access beyond end of device [ 99.215365][ T5973] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 101.977329][ T6006] netlink: 'syz.3.29': attribute type 29 has an invalid length. [ 102.015657][ T6006] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29'. [ 102.025150][ T6006] netlink: 'syz.3.29': attribute type 29 has an invalid length. [ 102.260345][ T6006] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29'. [ 102.280528][ T6005] netlink: 'syz.3.29': attribute type 29 has an invalid length. [ 102.289908][ T6005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29'. [ 102.542618][ T27] audit: type=1326 audit(1760670454.225:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.3.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ee7b8eec9 code=0x0 [ 102.583227][ T6015] netlink: 64 bytes leftover after parsing attributes in process `syz.0.33'. [ 102.870988][ T5119] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.110825][ T5119] usb 3-1: Using ep0 maxpacket: 16 [ 103.186101][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 103.286067][ T5119] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.320875][ T5119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.346827][ T5119] usb 3-1: Product: syz [ 103.380761][ T5119] usb 3-1: Manufacturer: syz [ 103.385439][ T5119] usb 3-1: SerialNumber: syz [ 103.444962][ T5119] usb 3-1: config 0 descriptor?? [ 103.492141][ T5119] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.529953][ T5119] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 103.907832][ T6026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.248779][ T5119] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 104.739836][ T5119] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 104.773182][ T5119] em28xx 3-1:0.0: board has no eeprom [ 105.906354][ T6013] em28xx 3-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 105.920990][ T5119] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 105.928868][ T5119] em28xx 3-1:0.0: dvb set to bulk mode. [ 106.049524][ T5879] em28xx 3-1:0.0: Binding DVB extension [ 106.171840][ T5119] usb 3-1: USB disconnect, device number 2 [ 106.211795][ T5119] em28xx 3-1:0.0: Disconnecting em28xx [ 106.397046][ T5879] em28xx 3-1:0.0: Registering input extension [ 106.435923][ T5119] em28xx 3-1:0.0: Closing input extension [ 106.513180][ T5119] em28xx 3-1:0.0: Freeing device [ 109.770793][ T6088] process 'syz.1.45' launched './file0' with NULL argv: empty string added [ 113.285186][ T6121] warning: `syz.2.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.441881][ T6132] Zero length message leads to an empty skb [ 115.540793][ T5803] Bluetooth: hci3: command tx timeout [ 116.630844][ T5879] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.828645][ T5879] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.863868][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.910037][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.957730][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.998410][ T5879] usb 4-1: Product: syz [ 117.018855][ T5879] usb 4-1: Manufacturer: syz [ 117.049300][ T5879] usb 4-1: SerialNumber: syz [ 117.083017][ T5879] usb 4-1: config 0 descriptor?? [ 117.116267][ T5879] usb 4-1: selecting invalid altsetting 0 [ 117.403738][ T5841] usb 4-1: USB disconnect, device number 2 [ 117.678267][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.900900][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.265465][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 118.365132][ T23] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 118.420800][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.443195][ T23] usb 1-1: Product: syz [ 118.468602][ T23] usb 1-1: Manufacturer: syz [ 118.483808][ T23] usb 1-1: SerialNumber: syz [ 118.541905][ T23] usb 1-1: config 0 descriptor?? [ 118.574975][ T23] usb 1-1: bad CDC descriptors [ 118.778817][ T6173] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 118.786804][ T6173] netlink: 44 bytes leftover after parsing attributes in process `syz.3.76'. [ 118.861168][ T6173] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 118.929074][ T6173] netlink: 44 bytes leftover after parsing attributes in process `syz.3.76'. [ 119.062633][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.077790][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.094360][ T6177] binder: 6176:6177 ioctl c0306201 200000000240 returned -11 [ 119.138366][ T6170] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 119.171391][ T6170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.76'. [ 119.528122][ T27] audit: type=1326 audit(1760670471.205:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.76" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ee7b8eec9 code=0x0 [ 120.130777][ T5879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.350923][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 120.365109][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.427692][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.500938][ T5879] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.558520][ T5879] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.568511][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.583036][ T5879] usb 2-1: Product: syz [ 120.587249][ T5879] usb 2-1: Manufacturer: syz [ 120.604942][ T5879] usb 2-1: SerialNumber: syz [ 120.646170][ T5879] cdc_ncm 2-1:1.0: skipping garbage [ 120.675961][ T5879] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 120.706363][ T5879] cdc_ncm 2-1:1.0: bind() failure [ 120.871196][ T6188] input: syz0 as /devices/virtual/input/input6 [ 121.026368][ T23] usb 2-1: USB disconnect, device number 3 [ 121.366634][ T23] usb 1-1: USB disconnect, device number 2 [ 121.728920][ T6199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.736721][ T6199] IPv6: NLM_F_CREATE should be set when creating new route [ 121.765584][ T6199] lo: entered allmulticast mode [ 121.872851][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.84'. [ 121.889416][ T6199] tunl0: entered allmulticast mode [ 121.934369][ T6206] binder: 6205:6206 ioctl c0306201 200000000240 returned -11 [ 121.946251][ T6199] gre0: entered allmulticast mode [ 122.154803][ T6199] gretap0: entered allmulticast mode [ 122.244684][ T6199] erspan0: entered allmulticast mode [ 122.299962][ T6199] ip_vti0: entered allmulticast mode [ 122.339206][ T6199] ip6_vti0: entered allmulticast mode [ 122.402044][ T6199] sit0: entered allmulticast mode [ 122.505290][ T6199] ip6tnl0: entered allmulticast mode [ 122.571199][ T6199] ip6gre0: entered allmulticast mode [ 122.625893][ T6199] syz_tun: entered allmulticast mode [ 122.731030][ T6199] ip6gretap0: entered allmulticast mode [ 122.790874][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.800369][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.818310][ T6199] bridge0: entered allmulticast mode [ 122.861410][ T6199] vcan0: entered allmulticast mode [ 122.882604][ T6199] bond0: entered allmulticast mode [ 122.887922][ T6199] bond_slave_0: entered allmulticast mode [ 122.893835][ T6199] bond_slave_1: entered allmulticast mode [ 122.927882][ T6199] team0: entered allmulticast mode [ 122.933210][ T6199] team_slave_0: entered allmulticast mode [ 122.938972][ T6199] team_slave_1: entered allmulticast mode [ 122.967551][ T6199] dummy0: entered allmulticast mode [ 122.997448][ T6199] nlmon0: entered allmulticast mode [ 123.009813][ T6199] caif0: entered allmulticast mode [ 123.016913][ T6199] batadv0: entered allmulticast mode [ 123.041622][ T6199] vxcan0: entered allmulticast mode [ 123.049230][ T6199] vxcan1: entered allmulticast mode [ 123.057961][ T6199] veth0: entered allmulticast mode [ 123.074860][ T6199] veth1: entered allmulticast mode [ 123.113354][ T6199] wg0: entered allmulticast mode [ 123.127733][ T6199] wg1: entered allmulticast mode [ 123.148986][ T6199] wg2: entered allmulticast mode [ 123.159108][ T6199] veth0_to_bridge: entered allmulticast mode [ 123.181652][ T6199] veth1_to_bridge: entered allmulticast mode [ 123.206630][ T6199] veth0_to_bond: entered allmulticast mode [ 123.225851][ T6199] veth1_to_bond: entered allmulticast mode [ 123.246029][ T6199] veth0_to_team: entered allmulticast mode [ 123.293210][ T6199] veth1_to_team: entered allmulticast mode [ 123.320418][ T6199] veth0_to_batadv: entered allmulticast mode [ 123.337364][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.349251][ T6199] batadv_slave_0: entered allmulticast mode [ 123.374925][ T6199] veth1_to_batadv: entered allmulticast mode [ 123.386299][ T6199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.397250][ T6199] batadv_slave_1: entered allmulticast mode [ 123.410866][ T6199] xfrm0: entered allmulticast mode [ 123.421772][ T6199] veth0_to_hsr: entered allmulticast mode [ 123.435156][ T6199] hsr_slave_0: entered allmulticast mode [ 123.445214][ T6199] veth1_to_hsr: entered allmulticast mode [ 123.464099][ T6199] hsr_slave_1: entered allmulticast mode [ 123.486509][ T6199] hsr0: entered allmulticast mode [ 123.507788][ T6199] veth1_virt_wifi: entered allmulticast mode [ 123.521778][ T6199] veth0_virt_wifi: entered allmulticast mode [ 123.538155][ T6199] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 123.546958][ T6199] veth1_vlan: entered allmulticast mode [ 123.557988][ T6199] veth0_vlan: entered allmulticast mode [ 123.590274][ T6199] vlan0: entered allmulticast mode [ 123.596226][ T6199] vlan1: entered allmulticast mode [ 123.606922][ T6199] macvlan0: entered allmulticast mode [ 123.619595][ T6199] macvlan1: entered allmulticast mode [ 123.629532][ T6199] ipvlan0: entered allmulticast mode [ 123.635325][ T6199] ipvlan1: entered allmulticast mode [ 123.642527][ T6199] veth1_macvtap: entered allmulticast mode [ 123.663093][ T6199] veth0_macvtap: entered allmulticast mode [ 123.689164][ T6199] macvtap0: entered allmulticast mode [ 123.713023][ T6199] macsec0: entered allmulticast mode [ 123.738512][ T6199] geneve0: entered allmulticast mode [ 123.761915][ T6199] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.771205][ T6199] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.780135][ T6199] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.796839][ T6199] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.806444][ T6199] geneve1: entered allmulticast mode [ 123.822500][ T6199] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 123.861833][ T6199] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 123.882003][ T6199] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 123.905278][ T6199] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 123.956566][ T6199] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 123.991378][ T6199] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 124.007197][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.84'. [ 124.073387][ T6199] syz.0.85 (6199) used greatest stack depth: 19856 bytes left [ 124.386719][ T6265] loop2: detected capacity change from 0 to 1024 [ 124.407213][ T6265] ======================================================= [ 124.407213][ T6265] WARNING: The mand mount option has been deprecated and [ 124.407213][ T6265] and is ignored by this kernel. Remove the mand [ 124.407213][ T6265] option from the mount to silence this warning. [ 124.407213][ T6265] ======================================================= [ 124.612252][ T5796] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.948134][ T6285] syzkaller0: entered promiscuous mode [ 125.962774][ T6285] syzkaller0: entered allmulticast mode [ 126.243658][ T6288] bridge0: entered promiscuous mode [ 126.250876][ T6288] bridge0: port 3(macsec1) entered blocking state [ 126.257407][ T6288] bridge0: port 3(macsec1) entered disabled state [ 126.264028][ T6288] macsec1: entered allmulticast mode [ 126.269330][ T6288] bridge0: entered allmulticast mode [ 126.279328][ T6288] macsec1: left allmulticast mode [ 126.284508][ T6288] bridge0: left allmulticast mode [ 126.331937][ T6288] bridge0: left promiscuous mode [ 128.217237][ T6306] loop3: detected capacity change from 0 to 1024 [ 128.273328][ T5796] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.578807][ T6326] bridge0: entered promiscuous mode [ 129.585361][ T6326] bridge0: port 3(macsec1) entered blocking state [ 129.592046][ T6326] bridge0: port 3(macsec1) entered disabled state [ 129.598623][ T6326] macsec1: entered allmulticast mode [ 129.604064][ T6326] bridge0: entered allmulticast mode [ 129.623086][ T6326] macsec1: left allmulticast mode [ 129.628198][ T6326] bridge0: left allmulticast mode [ 129.655945][ T6326] bridge0: left promiscuous mode [ 129.671181][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.970145][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 130.074647][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 130.318211][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 130.340911][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 130.398969][ T5879] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 130.608604][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.421274][ T5879] usb 3-1: Product: syz [ 131.425506][ T5879] usb 3-1: Manufacturer: syz [ 131.430151][ T5879] usb 3-1: SerialNumber: syz [ 131.509693][ T5879] usb 3-1: config 0 descriptor?? [ 131.568739][ T6322] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.620279][ T5879] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 131.630971][ T5879] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 131.641418][ T5879] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 131.651233][ T5879] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 131.660138][ T5879] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 131.969844][ T6322] netlink: 'syz.2.114': attribute type 5 has an invalid length. [ 132.007839][ T6322] ip6erspan0: entered promiscuous mode [ 132.107067][ T6350] loop3: detected capacity change from 0 to 1024 [ 132.212325][ T5796] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.640052][ T6351] bridge0: port 3(macsec0) entered blocking state [ 132.655420][ T6351] bridge0: port 3(macsec0) entered disabled state [ 132.710908][ T6351] macsec0: entered allmulticast mode [ 132.720295][ T6351] veth1_macvtap: entered allmulticast mode [ 132.776521][ T6351] macsec0: entered promiscuous mode [ 132.807385][ T6351] bridge0: port 3(macsec0) entered blocking state [ 132.814287][ T6351] bridge0: port 3(macsec0) entered forwarding state [ 133.169442][ T6361] syzkaller0: entered promiscuous mode [ 133.213567][ T6361] syzkaller0: entered allmulticast mode [ 133.223292][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.230126][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.897097][ T5455] mcba_usb 3-1:0.0 can0: bit-timing not yet defined [ 134.639636][ T5879] usb 3-1: USB disconnect, device number 3 [ 134.669310][ T5879] mcba_usb 3-1:0.0 can0: device disconnected [ 135.049850][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 135.338495][ T27] audit: type=1326 audit(1760670487.015:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.2.137" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7b8eec9 code=0x0 [ 137.628433][ T27] audit: type=1326 audit(1760670489.305:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.692999][ T27] audit: type=1326 audit(1760670489.305:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.794739][ T27] audit: type=1326 audit(1760670489.305:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.833780][ T27] audit: type=1326 audit(1760670489.305:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.856223][ T27] audit: type=1326 audit(1760670489.305:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.883217][ T27] audit: type=1326 audit(1760670489.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.918448][ T27] audit: type=1326 audit(1760670489.305:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.966656][ T27] audit: type=1326 audit(1760670489.305:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 137.990494][ T27] audit: type=1326 audit(1760670489.305:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.2.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf7b8eec9 code=0x7ffc0000 [ 138.054696][ T6447] kernel profiling enabled (shift: 63) [ 138.060778][ T6447] profiling shift: 63 too large [ 140.864238][ T6473] loop0: detected capacity change from 0 to 1024 [ 143.068492][ T6495] syz.0.156 (6495): drop_caches: 2 [ 143.574417][ T6491] syz.2.155 (6491) used greatest stack depth: 19336 bytes left [ 145.419474][ T6519] loop3: detected capacity change from 0 to 1024 [ 145.908276][ T6525] netlink: 'syz.1.165': attribute type 12 has an invalid length. [ 146.382532][ T6529] binder_alloc: 6528: binder_alloc_buf, no vma [ 148.220811][ T6243] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.275573][ T6556] loop1: detected capacity change from 0 to 1024 [ 148.551438][ T6243] usb 4-1: Using ep0 maxpacket: 32 [ 148.559688][ T6243] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.575073][ T6243] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.594462][ T6243] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.627855][ T6243] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.654344][ T6243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.674789][ T6243] usb 4-1: Product: syz [ 148.686613][ T6243] usb 4-1: Manufacturer: syz [ 148.702072][ T6243] usb 4-1: SerialNumber: syz [ 148.722208][ T6243] cdc_ncm 4-1:1.0: skipping garbage [ 148.733994][ T6243] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 148.748397][ T6243] cdc_ncm 4-1:1.0: bind() failure [ 148.938303][ T6545] input: syz0 as /devices/virtual/input/input8 [ 149.071227][ T6243] usb 4-1: USB disconnect, device number 3 [ 150.511220][ T6234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.711670][ T6234] usb 3-1: Using ep0 maxpacket: 8 [ 150.726402][ T6234] usb 3-1: config 0 has no interfaces? [ 150.733801][ T6234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.738394][ T6593] loop3: detected capacity change from 0 to 1024 [ 150.752952][ T6234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.775260][ T6234] usb 3-1: config 0 descriptor?? [ 150.791685][ T5796] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.990931][ T6243] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.240798][ T6243] usb 2-1: Using ep0 maxpacket: 32 [ 153.250432][ T6243] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.273045][ T6243] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 153.298724][ T6243] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.337083][ T6243] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.351936][ T6243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.375861][ T6243] usb 2-1: Product: syz [ 153.386812][ T6243] usb 2-1: Manufacturer: syz [ 153.397208][ T6243] usb 2-1: SerialNumber: syz [ 153.420741][ T6243] cdc_ncm 2-1:1.0: skipping garbage [ 153.433865][ T6243] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 153.450946][ T6243] cdc_ncm 2-1:1.0: bind() failure [ 153.579332][ T6243] usb 3-1: USB disconnect, device number 4 [ 153.641217][ T6609] input: syz0 as /devices/virtual/input/input9 [ 153.686053][ T6244] usb 2-1: USB disconnect, device number 4 [ 155.140572][ T6637] loop2: detected capacity change from 0 to 1024 [ 155.203918][ T6148] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.434619][ T6640] syz.3.202 uses obsolete (PF_INET,SOCK_PACKET) [ 156.104700][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 156.104717][ T27] audit: type=1400 audit(1760670507.785:33): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6651 comm="syz.3.210" [ 157.480804][ T27] audit: type=1326 audit(1760670509.135:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.1.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb88c38eec9 code=0x0 [ 158.176708][ T6677] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.607563][ T6689] netlink: 48 bytes leftover after parsing attributes in process `syz.2.218'. [ 159.851968][ T6697] syzkaller0: entered promiscuous mode [ 159.881027][ T6697] syzkaller0: entered allmulticast mode [ 162.011624][ T6721] binder: 6718:6721 ioctl 40046205 0 returned -22 [ 163.390959][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.821759][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 164.531855][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 164.561079][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.600330][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.644093][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.681638][ T23] usb 3-1: config 0 descriptor?? [ 164.712291][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 165.131959][ T6244] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.414584][ T6244] usb 4-1: config 0 has no interfaces? [ 165.420128][ T6244] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.432626][ T6244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.444784][ T6244] usb 4-1: config 0 descriptor?? [ 165.683895][ T6244] usb 4-1: USB disconnect, device number 4 [ 166.459969][ T6769] syzkaller0: entered promiscuous mode [ 166.475957][ T6769] syzkaller0: entered allmulticast mode [ 166.562513][ T6237] usb 3-1: USB disconnect, device number 5 [ 167.865303][ T6237] IPVS: starting estimator thread 0... [ 167.980852][ T6789] IPVS: using max 26 ests per chain, 62400 per kthread [ 169.707605][ T6801] binder: 6800:6801 ioctl c0306201 200000000240 returned -11 [ 170.564573][ T6806] netlink: 'syz.1.249': attribute type 12 has an invalid length. [ 170.764978][ T6814] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 171.307316][ T6824] syzkaller0: entered promiscuous mode [ 171.331743][ T6824] syzkaller0: entered allmulticast mode [ 172.660882][ T6834] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.612896][ T6854] bridge0: entered promiscuous mode [ 173.620257][ T6854] bridge0: port 4(macsec1) entered blocking state [ 173.626914][ T6854] bridge0: port 4(macsec1) entered disabled state [ 173.633714][ T6854] macsec1: entered allmulticast mode [ 173.639038][ T6854] bridge0: entered allmulticast mode [ 174.926269][ T6854] macsec1: left allmulticast mode [ 174.931674][ T6854] bridge0: left allmulticast mode [ 174.939550][ T6854] bridge0: left promiscuous mode [ 176.500635][ C1] sched: RT throttling activated [ 178.645348][ T6892] loop0: detected capacity change from 0 to 1024 [ 178.788209][ T6148] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.708081][ T6913] bridge0: entered promiscuous mode [ 180.715102][ T6913] bridge0: port 3(macsec1) entered blocking state [ 180.722619][ T6913] bridge0: port 3(macsec1) entered disabled state [ 180.729281][ T6913] macsec1: entered allmulticast mode [ 180.735094][ T6913] bridge0: entered allmulticast mode [ 181.421470][ T6913] macsec1: left allmulticast mode [ 181.426596][ T6913] bridge0: left allmulticast mode [ 181.464311][ T6913] bridge0: left promiscuous mode [ 182.894420][ T6936] loop3: detected capacity change from 0 to 1024 [ 182.996383][ T5796] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.630748][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.590877][ T6970] syzkaller0: entered promiscuous mode [ 185.596420][ T6970] syzkaller0: entered allmulticast mode [ 185.633043][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 185.643419][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.667339][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.697260][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.734806][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.748970][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.765923][ T23] usb 3-1: Product: syz [ 185.777429][ T23] usb 3-1: Manufacturer: syz [ 185.876838][ T23] usb 3-1: SerialNumber: syz [ 185.939774][ T23] cdc_ncm 3-1:1.0: skipping garbage [ 185.965686][ T23] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 185.975883][ T23] cdc_ncm 3-1:1.0: bind() failure [ 186.138610][ T6978] loop3: detected capacity change from 0 to 1024 [ 186.219231][ T6956] input: syz0 as /devices/virtual/input/input10 [ 186.474487][ T6248] usb 3-1: USB disconnect, device number 6 [ 187.192151][ T6981] netlink: 80 bytes leftover after parsing attributes in process `syz.0.313'. [ 187.733538][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 188.691223][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 188.705331][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 188.784859][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 188.805843][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.827760][ T23] usb 4-1: Product: syz [ 188.837134][ T23] usb 4-1: SerialNumber: syz [ 189.006219][ T7005] mmap: syz.2.320 (7005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.138318][ T23] usbhid 4-1:1.0: can't add hid device: -71 [ 189.152354][ T23] usbhid: probe of 4-1:1.0 failed with error -71 [ 189.174614][ T23] usb 4-1: USB disconnect, device number 5 [ 189.177888][ T7007] loop0: detected capacity change from 0 to 1024 [ 189.244478][ T6148] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.490961][ T6248] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.650706][ T6248] usb 2-1: Using ep0 maxpacket: 32 [ 190.662506][ T6248] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.681108][ T6248] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.690078][ T6248] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.713463][ T6248] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.722884][ T6248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.762792][ T6248] usb 2-1: Product: syz [ 190.767173][ T6248] usb 2-1: Manufacturer: syz [ 190.818171][ T6248] usb 2-1: SerialNumber: syz [ 191.121153][ T6248] cdc_ncm 2-1:1.0: skipping garbage [ 191.374905][ T7009] input: syz0 as /devices/virtual/input/input11 [ 191.381379][ T6248] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 191.439907][ T6248] cdc_ncm 2-1:1.0: bind() failure [ 191.570950][ T23] usb 2-1: USB disconnect, device number 5 [ 191.816159][ T7031] loop0: detected capacity change from 0 to 1024 [ 191.866665][ T7035] netlink: 148 bytes leftover after parsing attributes in process `syz.3.331'. [ 191.916977][ T5796] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.575720][ T7035] syz.3.331 (7035): drop_caches: 2 [ 194.645170][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.654216][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.521021][ T7056] sctp: failed to load transform for md5: -2 [ 197.327134][ T7079] bridge0: entered promiscuous mode [ 197.334040][ T7079] bridge0: port 3(macsec1) entered blocking state [ 197.340709][ T7079] bridge0: port 3(macsec1) entered disabled state [ 197.347368][ T7079] macsec1: entered allmulticast mode [ 197.352848][ T7079] bridge0: entered allmulticast mode [ 198.112448][ T7079] macsec1: left allmulticast mode [ 198.117556][ T7079] bridge0: left allmulticast mode [ 198.170184][ T7079] bridge0: left promiscuous mode [ 198.569744][ T27] audit: type=1326 audit(1760670550.245:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee7b8eec9 code=0x7ffc0000 [ 198.620696][ T27] audit: type=1326 audit(1760670550.275:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee7b8eec9 code=0x7ffc0000 [ 198.677748][ T27] audit: type=1326 audit(1760670550.275:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7ee7b8eec9 code=0x7ffc0000 [ 198.809358][ T27] audit: type=1326 audit(1760670550.275:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee7b8eec9 code=0x7ffc0000 [ 198.888316][ T27] audit: type=1326 audit(1760670550.275:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.3.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee7b8eec9 code=0x7ffc0000 [ 199.779183][ T7090] random: crng reseeded on system resumption [ 201.116088][ T7114] gretap1: entered promiscuous mode [ 201.266931][ T7117] binder: BINDER_SET_CONTEXT_MGR already set [ 201.279214][ T7117] binder: 7115:7117 ioctl 4018620d 200000000040 returned -16 [ 203.950707][ T5861] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.140710][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 204.162812][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.190667][ T5861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.210114][ T5861] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.236430][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.256238][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.280779][ T5861] usb 1-1: Product: syz [ 204.290924][ T5861] usb 1-1: Manufacturer: syz [ 204.295549][ T5861] usb 1-1: SerialNumber: syz [ 204.341480][ T5861] cdc_ncm 1-1:1.0: skipping garbage [ 204.346880][ T5861] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 204.370579][ T5861] cdc_ncm 1-1:1.0: bind() failure [ 204.553073][ T7148] input: syz0 as /devices/virtual/input/input12 [ 204.629614][ T5861] usb 1-1: USB disconnect, device number 3 [ 205.043427][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 205.108769][ T7170] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 205.223099][ T7170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.243226][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.258459][ T23] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.281171][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.294681][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 205.305272][ T23] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 205.325515][ T7172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.332336][ T23] usb 2-1: Product: syz [ 205.339598][ T23] usb 2-1: Manufacturer: syz [ 205.357316][ T23] usb 2-1: SerialNumber: syz [ 205.358734][ T7172] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 205.384161][ T7172] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 205.405028][ T23] usb 2-1: config 0 descriptor?? [ 205.560426][ T23] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 205.665706][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.989788][ T6237] usb 2-1: USB disconnect, device number 6 [ 207.179598][ T7198] bridge0: entered promiscuous mode [ 207.186525][ T7198] bridge0: port 3(macsec1) entered blocking state [ 207.193254][ T7198] bridge0: port 3(macsec1) entered disabled state [ 207.199915][ T7198] macsec1: entered allmulticast mode [ 207.205551][ T7198] bridge0: entered allmulticast mode [ 207.976859][ T7198] macsec1: left allmulticast mode [ 207.982850][ T7198] bridge0: left allmulticast mode [ 208.003882][ T7198] bridge0: left promiscuous mode [ 210.100098][ T7222] loop1: detected capacity change from 0 to 1024 [ 210.234435][ T5796] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.660976][ T7231] binder: 7230:7231 ioctl c0306201 200000000240 returned -11 [ 212.085185][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 212.092159][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 212.093132][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 212.098213][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 212.290764][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.338636][ T7248] loop1: detected capacity change from 0 to 1024 [ 213.060940][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 213.446062][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.446677][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 213.487892][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.507347][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.523818][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.533371][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.541563][ T5917] usb 1-1: Product: syz [ 213.545979][ T5917] usb 1-1: Manufacturer: syz [ 213.550856][ T5917] usb 1-1: SerialNumber: syz [ 213.564552][ T5917] cdc_ncm 1-1:1.0: skipping garbage [ 213.575045][ T5917] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 213.582333][ T5917] cdc_ncm 1-1:1.0: bind() failure [ 213.696441][ T7257] binder: 7256:7257 ioctl c0306201 200000000240 returned -11 [ 213.768059][ T7241] input: syz0 as /devices/virtual/input/input13 [ 213.821958][ T5917] usb 1-1: USB disconnect, device number 4 [ 214.786233][ T7276] loop0: detected capacity change from 0 to 1024 [ 214.883703][ T5796] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.254170][ T7286] binder: 7285:7286 ioctl c0306201 200000000240 returned -11 [ 216.761462][ T6244] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.913737][ T7299] bridge0: entered promiscuous mode [ 216.926497][ T7299] bridge0: port 3(macsec1) entered blocking state [ 216.933631][ T7299] bridge0: port 3(macsec1) entered disabled state [ 216.941589][ T7299] macsec1: entered allmulticast mode [ 216.946986][ T7299] bridge0: entered allmulticast mode [ 217.221810][ T7299] macsec1: left allmulticast mode [ 217.226992][ T7299] bridge0: left allmulticast mode [ 217.246068][ T7299] bridge0: left promiscuous mode [ 217.640713][ T6244] usb 1-1: Using ep0 maxpacket: 32 [ 217.647880][ T6244] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.667406][ T6244] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.686487][ T6244] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.709897][ T6244] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.736646][ T6244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.795265][ T6244] usb 1-1: Product: syz [ 217.799984][ T6244] usb 1-1: Manufacturer: syz [ 217.820210][ T6244] usb 1-1: SerialNumber: syz [ 217.871773][ T6244] cdc_ncm 1-1:1.0: skipping garbage [ 217.877026][ T6244] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 217.889402][ T6244] cdc_ncm 1-1:1.0: bind() failure [ 217.954549][ T7297] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 218.097393][ T6244] usb 1-1: USB disconnect, device number 5 [ 220.162863][ T7331] binder: 7330:7331 ioctl 4018620d 0 returned -22 [ 220.186938][ T7331] binder: 7330:7331 ioctl c0306201 200000000240 returned -11 [ 221.068790][ T7342] vivid-001: ================= START STATUS ================= [ 221.113925][ T7342] vivid-001: RDS Tx I/O Mode: Controls [ 221.129082][ T7342] vivid-001: RDS Program ID: 32904 [ 221.148690][ T7342] vivid-001: RDS Program Type: 3 [ 221.317991][ T7342] vivid-001: RDS PS Name: VIVID-TX [ 221.354376][ T7342] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 221.385637][ T7342] vivid-001: RDS Stereo: true [ 221.395648][ T7342] vivid-001: RDS Artificial Head: false [ 221.405815][ T7342] vivid-001: RDS Compressed: false [ 221.416321][ T7342] vivid-001: RDS Dynamic PTY: false [ 221.426414][ T7342] vivid-001: RDS Traffic Announcement: false [ 221.434446][ T7342] vivid-001: RDS Traffic Program: true [ 221.449289][ T7342] vivid-001: RDS Music: true [ 221.455812][ T7342] vivid-001: ================== END STATUS ================== [ 221.825799][ T7358] loop3: detected capacity change from 0 to 1024 [ 221.858076][ T7360] binder: 7359:7360 ioctl 4018620d 0 returned -22 [ 221.912324][ T6148] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.923387][ T7360] binder: 7359:7360 ioctl c0306201 200000000240 returned -11 [ 224.168381][ T7384] binder: 7382:7384 ioctl 4018620d 0 returned -22 [ 224.189661][ T7384] binder: 7382:7384 ioctl c0306201 200000000240 returned -11 [ 224.840783][ T5917] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 225.043895][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.095638][ T5917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.133936][ T5917] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 225.167463][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.185513][ T5917] usb 3-1: config 0 descriptor?? [ 225.206309][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 225.235523][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 225.271347][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 225.291531][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 225.320241][ T5917] usb 3-1: media controller created [ 225.334327][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.446968][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 225.457186][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 225.465234][ T7399] dvb-usb: bulk message failed: -22 (2/0) [ 225.482795][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 225.503162][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 225.528943][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 225.602371][ T5917] usb 3-1: USB disconnect, device number 7 [ 225.709417][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 225.889931][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 226.794811][ T7424] binder: BINDER_SET_CONTEXT_MGR already set [ 226.806743][ T7424] binder: 7421:7424 ioctl 4018620d 200000000040 returned -16 [ 226.869933][ T7424] binder: 7421:7424 ioctl c0306201 200000000240 returned -11 [ 228.930792][ T6244] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 229.125066][ T6244] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.151722][ T6244] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.180897][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 229.197813][ T6244] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 229.218583][ T6244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.250257][ T6244] usb 1-1: config 0 descriptor?? [ 229.309292][ T6244] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 229.328528][ T6244] dvb-usb: bulk message failed: -22 (3/0) [ 229.348351][ T6244] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 229.359728][ T6244] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 229.371235][ T6244] usb 1-1: media controller created [ 229.385516][ T6244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.390883][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 229.432204][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.450751][ T6244] dvb-usb: bulk message failed: -22 (6/0) [ 229.466881][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.478997][ T6244] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 229.513113][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.534301][ T6244] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 229.566011][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.583108][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.602955][ T23] usb 2-1: Product: syz [ 229.615264][ T23] usb 2-1: Manufacturer: syz [ 229.618183][ T6244] dvb-usb: schedule remote query interval to 150 msecs. [ 229.651604][ T6244] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 229.670332][ T23] usb 2-1: SerialNumber: syz [ 229.689421][ T23] cdc_ncm 2-1:1.0: skipping garbage [ 229.701907][ T23] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 229.724209][ T6244] usb 1-1: USB disconnect, device number 6 [ 229.749528][ T23] cdc_ncm 2-1:1.0: bind() failure [ 229.835109][ T6244] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 229.896291][ T23] usb 2-1: USB disconnect, device number 7 [ 230.442876][ T7468] netlink: 80 bytes leftover after parsing attributes in process `syz.3.466'. [ 230.840690][ T27] audit: type=1400 audit(1760670582.495:40): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7471 comm="syz.2.468" [ 232.130842][ T5879] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 232.337486][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.350117][ T5879] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 232.360183][ T5879] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 232.369681][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.383272][ T5879] usb 2-1: config 0 descriptor?? [ 232.404175][ T5879] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 232.417310][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 232.443995][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 232.456199][ T5879] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 232.465173][ T5879] usb 2-1: media controller created [ 232.491147][ T6234] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 232.492796][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.529045][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 232.539993][ T5879] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 232.557638][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 232.578535][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 232.586317][ T5879] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 232.616771][ T5879] usb 2-1: USB disconnect, device number 8 [ 232.644372][ T5879] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 232.682789][ T6234] usb 1-1: Using ep0 maxpacket: 16 [ 232.689635][ T6234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 183, changing to 11 [ 232.702245][ T6234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25700, setting to 1024 [ 232.713596][ T6234] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.726779][ T6234] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 232.736600][ T6234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.773240][ T6234] usb 1-1: config 0 descriptor?? [ 232.779015][ T7491] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 232.818260][ T6234] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 232.831346][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 233.009711][ T6234] usb 1-1: USB disconnect, device number 7 [ 233.021103][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 233.043331][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.058093][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.067189][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.082695][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.093015][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.101150][ T23] usb 3-1: Product: syz [ 233.105337][ T23] usb 3-1: Manufacturer: syz [ 233.109935][ T23] usb 3-1: SerialNumber: syz [ 233.124472][ T23] cdc_ncm 3-1:1.0: skipping garbage [ 233.129715][ T23] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 233.137152][ T23] cdc_ncm 3-1:1.0: bind() failure [ 233.268088][ T7501] netlink: 80 bytes leftover after parsing attributes in process `syz.1.478'. [ 233.329433][ T6234] usb 3-1: USB disconnect, device number 8 [ 233.728339][ T7507] binder: BINDER_SET_CONTEXT_MGR already set [ 233.738292][ T7507] binder: 7506:7507 ioctl 4018620d 200000000040 returned -16 [ 233.748035][ T7507] binder: 7506:7507 ioctl c0306201 200000000240 returned -11 [ 234.158484][ T7522] netlink: 'syz.3.482': attribute type 12 has an invalid length. [ 234.590886][ T6243] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 234.784598][ T6243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.825315][ T6243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 234.894453][ T6243] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 234.927371][ T6243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.000457][ T6243] usb 2-1: config 0 descriptor?? [ 235.033495][ T6243] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 235.040181][ T6243] dvb-usb: bulk message failed: -22 (3/0) [ 235.091595][ T6243] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 235.151223][ T6243] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 235.170737][ T6243] usb 2-1: media controller created [ 235.180373][ T6243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.220081][ T6243] dvb-usb: bulk message failed: -22 (6/0) [ 235.241941][ T6243] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 235.289173][ T6243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 235.385044][ T6243] dvb-usb: schedule remote query interval to 150 msecs. [ 235.399784][ T6243] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 235.435360][ T6243] usb 2-1: USB disconnect, device number 9 [ 235.514339][ T6243] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 236.302436][ T7535] binder: 7534:7535 ioctl c0306201 0 returned -14 [ 236.334626][ T7535] binder: 7534:7535 ioctl c0306201 200000000240 returned -11 [ 236.403676][ T7538] syzkaller0: entered promiscuous mode [ 236.427200][ T7538] syzkaller0: entered allmulticast mode [ 236.670063][ T7546] netlink: 80 bytes leftover after parsing attributes in process `syz.2.494'. [ 237.562345][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.780794][ T23] usb 2-1: device descriptor read/64, error -71 [ 238.070934][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.375353][ T23] usb 2-1: device descriptor read/64, error -71 [ 238.470294][ T7576] binder: 7575:7576 ioctl c0306201 0 returned -14 [ 238.480218][ T7576] binder: 7575:7576 ioctl c0306201 200000000240 returned -11 [ 238.501000][ T23] usb usb2-port1: attempt power cycle [ 238.980747][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 239.061547][ T23] usb 2-1: device descriptor read/8, error -71 [ 239.361092][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 239.458807][ T23] usb 2-1: device descriptor read/8, error -71 [ 239.640890][ T23] usb usb2-port1: unable to enumerate USB device [ 239.821404][ T7594] ptrace attach of "./syz-executor exec"[5788] was attempted by "./syz-executor exec"[7594] [ 240.589081][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 242.702028][ T7621] capability: warning: `syz.2.517' uses 32-bit capabilities (legacy support in use) [ 242.720827][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 243.397902][ T7641] usb usb8: usbfs: process 7641 (syz.0.522) did not claim interface 0 before use [ 245.920781][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 245.928789][ T7641] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 246.161661][ T7641] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 246.178705][ T7674] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 246.300856][ T7641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.319795][ T7641] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.405121][ T7641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.428213][ T7641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 246.465236][ T7641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.471946][ T7641] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.780776][ T6244] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 247.025785][ T6244] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 247.297704][ T7686] bridge0: entered promiscuous mode [ 247.305642][ T7686] bridge0: port 3(macsec1) entered blocking state [ 247.312304][ T7686] bridge0: port 3(macsec1) entered disabled state [ 247.318932][ T7686] macsec1: entered allmulticast mode [ 247.324314][ T7686] bridge0: entered allmulticast mode [ 247.502055][ T6244] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 247.515354][ T6244] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 247.524512][ T6244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.532864][ T6244] usb 3-1: Product: syz [ 247.537051][ T6244] usb 3-1: Manufacturer: syz [ 247.541708][ T6244] usb 3-1: SerialNumber: syz [ 247.551310][ T6244] usb 3-1: config 0 descriptor?? [ 247.621230][ T7680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.637260][ T7686] macsec1: left allmulticast mode [ 247.642507][ T7686] bridge0: left allmulticast mode [ 247.649526][ T7686] bridge0: left promiscuous mode [ 247.681611][ T7680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.809972][ T6244] usb 3-1: ucan: probing device on interface #0 [ 247.821709][ T6244] usb 3-1: ucan: invalid EP count (1) [ 247.833650][ T6244] usb 3-1: ucan: probe failed; try to update the device firmware [ 248.001668][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 248.322739][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 248.480898][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 248.481016][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 248.917472][ T7713] loop3: detected capacity change from 0 to 1024 [ 250.400948][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 250.732587][ T7728] bridge0: entered promiscuous mode [ 250.745368][ T7728] bridge0: port 3(macsec1) entered blocking state [ 250.752642][ T7728] bridge0: port 3(macsec1) entered disabled state [ 250.760680][ T7728] macsec1: entered allmulticast mode [ 250.766077][ T7728] bridge0: entered allmulticast mode [ 251.023871][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 251.030201][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 251.044900][ T7728] macsec1: left allmulticast mode [ 251.050052][ T7728] bridge0: left allmulticast mode [ 251.224571][ T6243] usb 3-1: USB disconnect, device number 9 [ 251.272737][ T7728] bridge0: left promiscuous mode [ 251.491936][ T5879] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 251.518742][ T5879] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.766401][ T7742] loop2: detected capacity change from 0 to 1024 [ 253.973818][ T7772] loop1: detected capacity change from 0 to 1024 [ 255.680786][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 256.084830][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.092510][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.519167][ T27] audit: type=1326 audit(1760670608.195:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.1.572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb88c38eec9 code=0x0 [ 256.875714][ T7801] input: syz0 as /devices/virtual/input/input20 [ 257.600576][ T7810] loop2: detected capacity change from 0 to 1024 [ 257.640844][ T5879] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 257.664652][ T5796] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.727053][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.826738][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.836141][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.847576][ T5879] usb 4-1: Product: syz [ 258.852109][ T5879] usb 4-1: Manufacturer: syz [ 258.856745][ T5879] usb 4-1: SerialNumber: syz [ 258.873214][ T5879] usb 4-1: config 0 descriptor?? [ 258.933096][ T5879] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 259.059429][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.143921][ T6237] usb 4-1: USB disconnect, device number 6 [ 259.393975][ T7822] vivid-000: ================= START STATUS ================= [ 259.418140][ T7822] vivid-000: Test Pattern: 75% Colorbar [ 259.440438][ T7822] vivid-000: Fill Percentage of Frame: 100 [ 259.536133][ T7822] vivid-000: Horizontal Movement: No Movement [ 259.553768][ T7822] vivid-000: Vertical Movement: No Movement [ 259.580720][ T7822] vivid-000: OSD Text Mode: All [ 259.601490][ T7822] vivid-000: Show Border: false [ 259.608612][ T7822] vivid-000: Show Square: false [ 259.615165][ T7822] vivid-000: Sensor Flipped Horizontally: false [ 259.622602][ T7822] vivid-000: Sensor Flipped Vertically: false [ 259.629730][ T7822] vivid-000: Insert SAV Code in Image: false [ 259.636236][ T7822] vivid-000: Insert EAV Code in Image: false [ 259.644073][ T7822] vivid-000: Insert Video Guard Band: false [ 259.710907][ T7822] vivid-000: Reduced Framerate: false [ 259.753553][ T7822] vivid-000: Enable Capture Cropping: true [ 259.781063][ T7822] vivid-000: Enable Capture Composing: true [ 259.791229][ T7822] vivid-000: Enable Capture Scaler: true [ 259.809895][ T7822] vivid-000: Timestamp Source: End of Frame [ 259.819993][ T7822] vivid-000: Colorspace: SMPTE 170M [ 259.851318][ T7822] vivid-000: Transfer Function: Default [ 259.867205][ T7822] vivid-000: Y'CbCr Encoding: Default [ 259.874606][ T7822] vivid-000: HSV Encoding: Hue 0-179 [ 259.881018][ T7822] vivid-000: Quantization: Default [ 259.887525][ T7822] vivid-000: Apply Alpha To Red Only: false [ 259.897633][ T7822] vivid-000: Standard Aspect Ratio: 4x3 [ 259.920173][ T7822] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 259.938468][ T7822] vivid-000: DV Timings: 640x480p59 inactive [ 259.949590][ T7822] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 259.958258][ T7822] vivid-000: Maximum EDID Blocks: 2 [ 259.964332][ T7822] vivid-000: Limited RGB Range (16-235): false [ 259.971775][ T7822] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 259.980292][ T7822] vivid-000: Power Present: 0x00000001 [ 259.987312][ T7822] tpg source WxH: 720x576 (Y'CbCr) [ 259.992777][ T7822] tpg field: 4 [ 259.996301][ T7822] tpg crop: 16x16@0x8 [ 260.000356][ T7822] tpg compose: 64x64@0x0 [ 260.100940][ T7822] tpg colorspace: 1 [ 260.131599][ T7822] tpg transfer function: 0/0 [ 260.136432][ T7822] tpg Y'CbCr encoding: 0/0 [ 260.142343][ T7822] tpg quantization: 0/0 [ 260.146870][ T7822] tpg RGB range: 0/2 [ 260.156931][ T7822] vivid-000: ================== END STATUS ================== [ 260.769211][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 261.866828][ T7866] binder: 7861:7866 ioctl 40046205 0 returned -22 [ 263.984552][ T7900] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 265.460788][ T6244] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 265.682772][ T6244] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 265.724137][ T6244] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 265.734525][ T6244] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 265.754381][ T6244] usb 1-1: Manufacturer: syz [ 265.776761][ T6244] usb 1-1: config 0 descriptor?? [ 265.920763][ T6244] rc_core: IR keymap rc-hauppauge not found [ 265.936332][ T6244] Registered IR keymap rc-empty [ 265.954560][ T6244] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 266.020868][ T6244] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 266.074344][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 266.661474][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.721280][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.970976][ T6237] usb 1-1: USB disconnect, device number 8 [ 268.234423][ T6237] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 268.440764][ T6237] usb 2-1: Using ep0 maxpacket: 32 [ 268.465619][ T6237] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 268.523284][ T6237] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 268.544533][ T6237] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 268.558554][ T6237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.570389][ T6237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 268.584777][ T6237] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 268.647675][ T6237] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 268.677299][ T6237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.722230][ T6237] usb 2-1: config 0 descriptor?? [ 268.784150][ T7974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.939319][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.972729][ T6237] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 269.006769][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.154683][ C0] usblp0: nonzero read bulk status received: -71 [ 269.155136][ T6237] usb 2-1: USB disconnect, device number 14 [ 269.174422][ T7956] usblp0: error -71 reading from printer [ 269.208567][ T6237] usblp0: removed [ 270.777301][ T8018] loop2: detected capacity change from 0 to 1024 [ 272.304880][ T8032] wg2: entered promiscuous mode [ 272.309833][ T8032] wg2: entered allmulticast mode [ 272.853599][ T8058] loop2: detected capacity change from 0 to 1024 [ 272.936671][ T6148] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.589975][ T8113] loop2: detected capacity change from 0 to 1024 [ 279.188293][ T8138] loop3: detected capacity change from 0 to 1024 [ 279.258982][ T5796] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.311264][ T8148] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 282.319686][ T8148] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 283.095516][ T8177] bridge0: port 3(macsec1) entered blocking state [ 283.102732][ T8177] bridge0: port 3(macsec1) entered disabled state [ 283.110533][ T8177] macsec1: entered allmulticast mode [ 283.412740][ T8177] macsec1: left allmulticast mode [ 283.733493][ T8183] loop3: detected capacity change from 0 to 1024 [ 283.785091][ T5796] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.584297][ T6234] IPVS: starting estimator thread 0... [ 284.751209][ T8195] IPVS: using max 23 ests per chain, 55200 per kthread [ 286.093138][ C0] [ 286.095549][ C0] ====================================================== [ 286.102614][ C0] WARNING: possible circular locking dependency detected [ 286.109665][ C0] syzkaller #0 Not tainted [ 286.114074][ C0] ------------------------------------------------------ [ 286.121082][ C0] syz.0.672/8213 is trying to acquire lock: [ 286.126967][ C0] ffff8880b8e29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 286.135584][ C0] [ 286.135584][ C0] but task is already holding lock: [ 286.142941][ C0] ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 286.151818][ C0] [ 286.151818][ C0] which lock already depends on the new lock. [ 286.151818][ C0] [ 286.162211][ C0] [ 286.162211][ C0] the existing dependency chain (in reverse order) is: [ 286.171220][ C0] [ 286.171220][ C0] -> #1 (&base->lock){-.-.}-{2:2}: [ 286.178520][ C0] _raw_spin_lock_irqsave+0xa8/0xf0 [ 286.184238][ C0] lock_timer_base+0x123/0x270 [ 286.189531][ C0] __mod_timer+0xf9/0xdb0 [ 286.194383][ C0] queue_delayed_work_on+0x12a/0x1e0 [ 286.200274][ C0] kvfree_call_rcu+0x541/0x780 [ 286.205561][ C0] rtnl_register_internal+0x486/0x590 [ 286.211455][ C0] rtnl_register+0x32/0x70 [ 286.216395][ C0] ip_rt_init+0x2ec/0x390 [ 286.221261][ C0] ip_init+0xe/0x20 [ 286.225585][ C0] inet_init+0x2c1/0x3e0 [ 286.230344][ C0] do_one_initcall+0x1fd/0x750 [ 286.235630][ C0] do_initcall_level+0x137/0x1f0 [ 286.241087][ C0] do_initcalls+0x69/0xd0 [ 286.245937][ C0] kernel_init_freeable+0x3d2/0x570 [ 286.251655][ C0] kernel_init+0x1d/0x1c0 [ 286.256508][ C0] ret_from_fork+0x48/0x80 [ 286.261455][ C0] ret_from_fork_asm+0x11/0x20 [ 286.266848][ C0] [ 286.266848][ C0] -> #0 (krc.lock){..-.}-{2:2}: [ 286.273881][ C0] __lock_acquire+0x2ddb/0x7c80 [ 286.279250][ C0] lock_acquire+0x197/0x410 [ 286.284269][ C0] _raw_spin_lock+0x2e/0x40 [ 286.289293][ C0] kvfree_call_rcu+0x15a/0x780 [ 286.294582][ C0] trie_delete_elem+0x535/0x6a0 [ 286.299974][ C0] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 286.305971][ C0] bpf_trace_run3+0x1e7/0x400 [ 286.311176][ C0] __bpf_trace_timer_start+0x14a/0x1b0 [ 286.317160][ C0] enqueue_timer+0x398/0x530 [ 286.322449][ C0] __mod_timer+0x977/0xdb0 [ 286.327407][ C0] mrp_join_timer+0x13f/0x170 [ 286.332610][ C0] call_timer_fn+0x16e/0x530 [ 286.337717][ C0] __run_timers+0x52d/0x7d0 [ 286.342752][ C0] run_timer_softirq+0x67/0xf0 [ 286.348048][ C0] handle_softirqs+0x280/0x820 [ 286.353331][ C0] __irq_exit_rcu+0xc7/0x190 [ 286.358523][ C0] irq_exit_rcu+0x9/0x20 [ 286.363283][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 286.369443][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.375944][ C0] __sanitizer_cov_trace_pc+0x0/0x60 [ 286.381783][ C0] unwind_next_frame+0x501/0x2970 [ 286.387357][ C0] arch_stack_walk+0x144/0x190 [ 286.392645][ C0] stack_trace_save+0x9c/0xe0 [ 286.397840][ C0] save_stack+0xf7/0x1f0 [ 286.402622][ C0] __set_page_owner+0x1d/0x60 [ 286.407822][ C0] post_alloc_hook+0x1cd/0x210 [ 286.413107][ C0] get_page_from_freelist+0x195c/0x19f0 [ 286.419177][ C0] __alloc_pages+0x1e3/0x460 [ 286.424466][ C0] alloc_slab_page+0x5d/0x170 [ 286.429670][ C0] new_slab+0x87/0x2e0 [ 286.434261][ C0] ___slab_alloc+0xc6d/0x1300 [ 286.439485][ C0] __kmem_cache_alloc_node+0x1a2/0x260 [ 286.445477][ C0] __kmalloc_node+0xa4/0x230 [ 286.450609][ C0] kvmalloc_node+0x70/0x180 [ 286.455634][ C0] pfifo_fast_init+0x238/0x6a0 [ 286.460916][ C0] qdisc_create_dflt+0x11e/0x430 [ 286.466366][ C0] mq_init+0x2e3/0x660 [ 286.470969][ C0] qdisc_create_dflt+0x11e/0x430 [ 286.476426][ C0] dev_activate+0x1d0/0x11a0 [ 286.481548][ C0] __dev_open+0x338/0x430 [ 286.486418][ C0] __dev_change_flags+0x20e/0x6a0 [ 286.492009][ C0] dev_change_flags+0x88/0x1a0 [ 286.497301][ C0] dev_ifsioc+0x6a7/0xe20 [ 286.502155][ C0] dev_ioctl+0x7e2/0x1170 [ 286.507004][ C0] sock_do_ioctl+0x226/0x2f0 [ 286.512134][ C0] sock_ioctl+0x623/0x7a0 [ 286.517011][ C0] __se_sys_ioctl+0xfd/0x170 [ 286.522136][ C0] do_syscall_64+0x55/0xb0 [ 286.527100][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.533524][ C0] [ 286.533524][ C0] other info that might help us debug this: [ 286.533524][ C0] [ 286.543749][ C0] Possible unsafe locking scenario: [ 286.543749][ C0] [ 286.551214][ C0] CPU0 CPU1 [ 286.556577][ C0] ---- ---- [ 286.561939][ C0] lock(&base->lock); [ 286.566007][ C0] lock(krc.lock); [ 286.572332][ C0] lock(&base->lock); [ 286.578917][ C0] lock(krc.lock); [ 286.582723][ C0] [ 286.582723][ C0] *** DEADLOCK *** [ 286.582723][ C0] [ 286.590859][ C0] 5 locks held by syz.0.672/8213: [ 286.595877][ C0] #0: ffffffff8dfbb688 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7d2/0x1170 [ 286.604670][ C0] #1: ffffc90000007c00 ((&app->join_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbf/0x530 [ 286.614325][ C0] #2: ffff88814c71e4c8 (&app->lock){+.-.}-{2:2}, at: mrp_join_timer+0xd8/0x170 [ 286.623378][ C0] #3: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 286.632734][ C0] #4: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 286.642142][ C0] [ 286.642142][ C0] stack backtrace: [ 286.648042][ C0] CPU: 0 PID: 8213 Comm: syz.0.672 Not tainted syzkaller #0 [ 286.655319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.665380][ C0] Call Trace: [ 286.668658][ C0] [ 286.671505][ C0] dump_stack_lvl+0x16c/0x230 [ 286.676187][ C0] ? load_image+0x3b0/0x3b0 [ 286.680690][ C0] ? show_regs_print_info+0x20/0x20 [ 286.685891][ C0] ? print_circular_bug+0x12b/0x1a0 [ 286.691131][ C0] check_noncircular+0x2bd/0x3c0 [ 286.696105][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 286.701321][ C0] ? lockdep_lock+0xe0/0x220 [ 286.705925][ C0] ? _find_first_zero_bit+0xd3/0x100 [ 286.711224][ C0] __lock_acquire+0x2ddb/0x7c80 [ 286.716093][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 286.721215][ C0] ? __stack_depot_save+0x560/0x630 [ 286.726429][ C0] ? verify_lock_unused+0x140/0x140 [ 286.731627][ C0] ? kasan_save_stack+0x4d/0x60 [ 286.736474][ C0] ? kasan_save_stack+0x3e/0x60 [ 286.741321][ C0] ? __kasan_record_aux_stack+0xaf/0xc0 [ 286.746867][ C0] ? kvfree_call_rcu+0xee/0x780 [ 286.751719][ C0] ? trie_delete_elem+0x535/0x6a0 [ 286.756749][ C0] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 286.762386][ C0] ? bpf_trace_run3+0x1e7/0x400 [ 286.767239][ C0] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 286.772876][ C0] ? enqueue_timer+0x398/0x530 [ 286.777637][ C0] ? __mod_timer+0x977/0xdb0 [ 286.782234][ C0] ? mrp_join_timer+0x13f/0x170 [ 286.787121][ C0] ? call_timer_fn+0x16e/0x530 [ 286.791883][ C0] ? __run_timers+0x52d/0x7d0 [ 286.796559][ C0] ? run_timer_softirq+0x67/0xf0 [ 286.801506][ C0] ? handle_softirqs+0x280/0x820 [ 286.806442][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 286.811214][ C0] ? irq_exit_rcu+0x9/0x20 [ 286.815634][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 286.821457][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.827728][ C0] ? audit_tree_destroy_watch+0x20/0x20 [ 286.833284][ C0] ? unwind_next_frame+0x501/0x2970 [ 286.838505][ C0] ? stack_trace_save+0x9c/0xe0 [ 286.843442][ C0] ? save_stack+0xf7/0x1f0 [ 286.847863][ C0] ? __set_page_owner+0x1d/0x60 [ 286.852720][ C0] lock_acquire+0x197/0x410 [ 286.857225][ C0] ? kvfree_call_rcu+0x15a/0x780 [ 286.862166][ C0] ? qdisc_create_dflt+0x11e/0x430 [ 286.867275][ C0] ? dev_activate+0x1d0/0x11a0 [ 286.872036][ C0] ? __dev_open+0x338/0x430 [ 286.876560][ C0] ? sock_do_ioctl+0x226/0x2f0 [ 286.881322][ C0] ? sock_ioctl+0x623/0x7a0 [ 286.885835][ C0] ? __se_sys_ioctl+0xfd/0x170 [ 286.890600][ C0] ? do_syscall_64+0x55/0xb0 [ 286.895193][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.901260][ C0] ? read_lock_is_recursive+0x20/0x20 [ 286.906644][ C0] ? __phys_addr+0xba/0x170 [ 286.911150][ C0] _raw_spin_lock+0x2e/0x40 [ 286.915652][ C0] ? kvfree_call_rcu+0x15a/0x780 [ 286.920596][ C0] kvfree_call_rcu+0x15a/0x780 [ 286.925370][ C0] ? call_rcu+0x930/0x930 [ 286.929706][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 286.935600][ C0] ? _raw_spin_unlock+0x40/0x40 [ 286.940480][ C0] trie_delete_elem+0x535/0x6a0 [ 286.945349][ C0] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 286.950805][ C0] bpf_trace_run3+0x1e7/0x400 [ 286.955499][ C0] ? bpf_trace_run3+0xf4/0x400 [ 286.960273][ C0] ? bpf_trace_run2+0x3c0/0x3c0 [ 286.965127][ C0] ? __bpf_trace_timer_start+0x133/0x1b0 [ 286.970765][ C0] __bpf_trace_timer_start+0x14a/0x1b0 [ 286.976233][ C0] ? __bpf_trace_timer_class+0x100/0x100 [ 286.981873][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 286.987766][ C0] ? _raw_spin_unlock+0x40/0x40 [ 286.992615][ C0] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 286.997992][ C0] enqueue_timer+0x398/0x530 [ 287.002585][ C0] __mod_timer+0x977/0xdb0 [ 287.007024][ C0] mrp_join_timer+0x13f/0x170 [ 287.011710][ C0] call_timer_fn+0x16e/0x530 [ 287.016302][ C0] ? mrp_init_applicant+0x4e0/0x4e0 [ 287.021508][ C0] ? call_timer_fn+0xbf/0x530 [ 287.026204][ C0] ? __run_timers+0x7d0/0x7d0 [ 287.030886][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.036090][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 287.041294][ C0] ? mrp_init_applicant+0x4e0/0x4e0 [ 287.046509][ C0] __run_timers+0x52d/0x7d0 [ 287.051017][ C0] ? detach_timer+0x2b0/0x2b0 [ 287.055694][ C0] ? lock_chain_count+0x20/0x20 [ 287.060545][ C0] run_timer_softirq+0x67/0xf0 [ 287.065318][ C0] handle_softirqs+0x280/0x820 [ 287.070090][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 287.074854][ C0] ? do_softirq+0x180/0x180 [ 287.079363][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 287.084587][ C0] __irq_exit_rcu+0xc7/0x190 [ 287.089177][ C0] ? irq_exit_rcu+0x20/0x20 [ 287.093682][ C0] irq_exit_rcu+0x9/0x20 [ 287.097922][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 287.103562][ C0] [ 287.106490][ C0] [ 287.109421][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.115403][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 287.121469][ C0] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d cc fc c4 0c 48 89 de 5b e9 53 88 56 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d e0 2c 7e 7e 65 8b 15 e1 2c 7e [ 287.141075][ C0] RSP: 0018:ffffc900038d6f10 EFLAGS: 00000202 [ 287.147140][ C0] RAX: ffffffff8e61bbf0 RBX: ffffffff8e61bbf4 RCX: ffff88807a28da00 [ 287.155110][ C0] RDX: 0000000000000002 RSI: ffffffff81d125db RDI: ffffffff81d10c91 [ 287.163100][ C0] RBP: ffffffff8e61bbf4 R08: ffffc900038d70b0 R09: 0000000000000001 [ 287.171079][ C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8e61bbf8 [ 287.179080][ C0] R13: ffffffff81d10c91 R14: ffffffff81d125db R15: ffffffff8e61bbf4 [ 287.187051][ C0] ? get_page_from_freelist+0x195b/0x19f0 [ 287.192780][ C0] ? get_page_from_freelist+0x11/0x19f0 [ 287.198337][ C0] ? get_page_from_freelist+0x195b/0x19f0 [ 287.204061][ C0] ? get_page_from_freelist+0x11/0x19f0 [ 287.209613][ C0] unwind_next_frame+0x501/0x2970 [ 287.214668][ C0] ? get_page_from_freelist+0x195b/0x19f0 [ 287.220394][ C0] ? get_page_from_freelist+0x195c/0x19f0 [ 287.226123][ C0] ? get_page_from_freelist+0x195c/0x19f0 [ 287.231846][ C0] ? stack_trace_save+0xe0/0xe0 [ 287.236700][ C0] arch_stack_walk+0x144/0x190 [ 287.241464][ C0] ? get_page_from_freelist+0x195c/0x19f0 [ 287.247193][ C0] stack_trace_save+0x9c/0xe0 [ 287.251872][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 287.256999][ C0] ? mark_lock+0x94/0x320 [ 287.261335][ C0] save_stack+0xf7/0x1f0 [ 287.265585][ C0] ? __reset_page_owner+0x190/0x190 [ 287.270790][ C0] ? seqcount_lockdep_reader_access+0x103/0x180 [ 287.277031][ C0] ? post_alloc_hook+0x1cd/0x210 [ 287.281980][ C0] ? get_page_from_freelist+0x195c/0x19f0 [ 287.287738][ C0] ? get_page_from_freelist+0x6a8/0x19f0 [ 287.293376][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 287.298422][ C0] __set_page_owner+0x1d/0x60 [ 287.303162][ C0] post_alloc_hook+0x1cd/0x210 [ 287.307938][ C0] get_page_from_freelist+0x195c/0x19f0 [ 287.313503][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 287.318877][ C0] ? prepare_alloc_pages+0x366/0x5f0 [ 287.324171][ C0] __alloc_pages+0x1e3/0x460 [ 287.328770][ C0] ? zone_statistics+0x170/0x170 [ 287.333719][ C0] alloc_slab_page+0x5d/0x170 [ 287.338405][ C0] new_slab+0x87/0x2e0 [ 287.342509][ C0] ___slab_alloc+0xc6d/0x1300 [ 287.347195][ C0] ? kvmalloc_node+0x70/0x180 [ 287.351886][ C0] __kmem_cache_alloc_node+0x1a2/0x260 [ 287.357364][ C0] ? kvmalloc_node+0x70/0x180 [ 287.362056][ C0] ? kvmalloc_node+0x70/0x180 [ 287.366738][ C0] __kmalloc_node+0xa4/0x230 [ 287.371345][ C0] kvmalloc_node+0x70/0x180 [ 287.375855][ C0] pfifo_fast_init+0x238/0x6a0 [ 287.380618][ C0] qdisc_create_dflt+0x11e/0x430 [ 287.385551][ C0] mq_init+0x2e3/0x660 [ 287.389621][ C0] ? trace_net_dev_xmit_timeout+0x1c0/0x1c0 [ 287.395511][ C0] ? qdisc_alloc+0x777/0xa50 [ 287.400099][ C0] qdisc_create_dflt+0x11e/0x430 [ 287.405031][ C0] ? dev_activate+0x1ab/0x11a0 [ 287.409794][ C0] dev_activate+0x1d0/0x11a0 [ 287.414385][ C0] __dev_open+0x338/0x430 [ 287.418732][ C0] ? dev_open+0x170/0x170 [ 287.423070][ C0] __dev_change_flags+0x20e/0x6a0 [ 287.428101][ C0] ? dev_get_flags+0x1c0/0x1c0 [ 287.432866][ C0] ? rcu_is_watching+0x15/0xb0 [ 287.437632][ C0] ? trace_contention_end+0x39/0xe0 [ 287.442835][ C0] ? __mutex_lock+0x304/0xcc0 [ 287.447520][ C0] dev_change_flags+0x88/0x1a0 [ 287.452290][ C0] dev_ifsioc+0x6a7/0xe20 [ 287.456619][ C0] ? dev_ioctl+0x1170/0x1170 [ 287.461209][ C0] ? dev_load+0x21/0x1f0 [ 287.465457][ C0] ? dev_load+0x21/0x1f0 [ 287.469701][ C0] dev_ioctl+0x7e2/0x1170 [ 287.474036][ C0] sock_do_ioctl+0x226/0x2f0 [ 287.478623][ C0] ? sock_show_fdinfo+0xb0/0xb0 [ 287.483479][ C0] sock_ioctl+0x623/0x7a0 [ 287.487821][ C0] ? sock_poll+0x3d0/0x3d0 [ 287.492253][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 287.497189][ C0] ? security_file_ioctl+0x80/0xa0 [ 287.502324][ C0] ? sock_poll+0x3d0/0x3d0 [ 287.506749][ C0] __se_sys_ioctl+0xfd/0x170 [ 287.511341][ C0] do_syscall_64+0x55/0xb0 [ 287.515763][ C0] ? clear_bhb_loop+0x40/0x90 [ 287.520439][ C0] ? clear_bhb_loop+0x40/0x90 [ 287.525125][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.531020][ C0] RIP: 0033:0x7f5617f8eec9 [ 287.535441][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.555250][ C0] RSP: 002b:00007f5618de1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.563681][ C0] RAX: ffffffffffffffda RBX: 00007f56181e5fa0 RCX: 00007f5617f8eec9 [ 287.571675][ C0] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 287.579653][ C0] RBP: 00007f5618011f91 R08: 0000000000000000 R09: 0000000000000000 [ 287.587627][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.595604][ C0] R13: 00007f56181e6038 R14: 00007f56181e5fa0 R15: 00007fff24663368 [ 287.603587][ C0]