last executing test programs: 9.770571889s ago: executing program 4 (id=744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="870000008500000020000010"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeea]}, 0x45c) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000280)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x45c) syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) r2 = syz_io_uring_setup(0x2026, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x4, 0x3, 0x3, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x148e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x266, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 9.143035899s ago: executing program 4 (id=749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) 8.833146239s ago: executing program 4 (id=752): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) pwrite64(r1, &(0x7f00000001c0)="e3fe69a9b2674333db5b64a97e80092d643279565e85cf9ba868b042f68904dd8b090141cd275d6bed2987216c4c33dfc3c95eeb0b8243008092ed29837fae733369527a08e9a3adedf6a435fc87225fea59c2af5615", 0x56, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00292b7076cc00000000000a000000"], 0x14}}, 0x0) 7.118008221s ago: executing program 4 (id=756): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000005c0)=""/85, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r2 = dup(r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r5 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907c64010101ac143faa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000640)={@local, @link_local, @void, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "dff9fd33e855ed76"}}}}, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './bus', [{0x20, '#! '}, {0x20, 'LaR^'}]}, 0x12) 6.706863187s ago: executing program 2 (id=759): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) setresuid(0xee01, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) r1 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000002c0)={0x0, 'batadv0\x00', {0x4}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0xff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0xff}, 0x18) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800f1de2ddb18709ec700000000000000000000100001800c0002800500010000000000300003802c000180"], 0x58}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d8240000280001000200000800000000"], 0x24d8}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x62040, 0x104) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r5, 0xc) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 6.253942557s ago: executing program 2 (id=760): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc60040003", 0x17}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.103606942s ago: executing program 3 (id=762): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4}, &(0x7f00000006c0)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r5}, 0x14) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x20000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0xb8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/39], 0xb8}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 5.966851835s ago: executing program 1 (id=763): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0xfc, 0x7ffffcb9}]}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000180)="9a12b73a1b40e71428efe72ecc7eff8407de4a594c0046f531e0ca4727f6a4b6bd3f8de27950549b6c1cecd238b492", 0x2f}], 0x1, 0x1, 0x0, 0x0) 5.806723832s ago: executing program 2 (id=764): socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x402) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b405000000009ed2d9dbe14f9cd7329fb6ba074ec1bf00007110870000000000a600000000000000950004000000000023e1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000001000000000030000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000380)={0x0, &(0x7f0000000040)=[{0x8006, 0x2, 0x6, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x125ec}], 0x1}, 0x700) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f0000000000)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0x30) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYBLOB="4800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028008000200030000000c0020000000000000000000d1e70054ecf048d498a2490dcc97e36576a5e02dec2ec370c5e76a673c7cbe489038455d48c5841e465f99b3a25211749f024c553d0c64ec65b5e01a50e983"], 0x48}}, 0x0) write(r5, &(0x7f0000000340)="18000000010005", 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000400), 0x8, 0x34, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000880)={{0xfa, 0x2}, 'port0\x00', 0x0, 0x40400, 0x0, 0x5e3, 0x222c9bc3, 0x100, 0x76, 0x0, 0x0, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 5.638018937s ago: executing program 0 (id=766): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) pwrite64(r1, &(0x7f00000001c0)="e3fe69a9b2674333db5b64a97e80092d643279565e85cf9ba868b042f68904dd8b090141cd275d6bed2987216c4c33dfc3c95eeb0b8243008092ed29837fae733369527a08e9a3adedf6a435fc87225fea59c2af5615", 0x56, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00292b7076cc00000000000a000000"], 0x14}}, 0x0) 5.38175274s ago: executing program 0 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioprio_get$pid(0x2, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x46, 0x0) eventfd(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x48, r2, 0x100, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x8, 0x39}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x20000094) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xffffffffffffff0b) socket$netlink(0x10, 0x3, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="01", 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000100)=ANY=[], 0x6) ppoll(&(0x7f0000000100)=[{r5, 0x181}, {r4, 0x1114}], 0x2, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) chdir(&(0x7f0000000140)='./bus\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) 4.825393473s ago: executing program 4 (id=768): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.689882187s ago: executing program 3 (id=769): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="ddee93ae", 0x4) iopl(0x3) iopl(0x8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\xcd\xe3/c\x88\xfd?\x94Rh\xf1\xe4T\x906`__\xc9\x9f\xdbB\"\x85\\\xb9\xfc\xfdW\x8d\x0f\xd8\xe1p\xc4\xfb-`:\x95_\xcaJ9\x95\xe2\xa0\x87)\xc3\xa0@O0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1200, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="51c70100000000001c0012800b0001006d616373656300000c00028005000d000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0}, 0x0) 4.484030189s ago: executing program 2 (id=772): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000040)=""/150, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x149800, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x7}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe000001e}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000180)={0x10000008}) epoll_pwait2(r5, &(0x7f00000000c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000015c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) 4.445848797s ago: executing program 4 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigaction(0x1c, &(0x7f00000001c0)={&(0x7f0000000080)="660f71e00ad0e5f2430f1c04332e410f51fb420f0f83cf00000096c4c3791d6f590064f20f12c5e4228f897c816e00c403416dd9f1", 0x10000000, 0x0, {[0x100]}}, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x20}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mremap(&(0x7f0000ac3000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000b6a000/0x3000)=nil) rt_sigaction(0x2c, &(0x7f0000000300)={&(0x7f0000000000)="c4a3f55cb8807569f5826740dfb953000000440f3466400fc6c803c4a2b93712c4a2cd3ed4c441f55831432bd5f2656642c1c5bd6f", 0x88000001, &(0x7f00000003c0)="c4e233f663ac67f365470f99cb64660f3adf27f2c4027d298c6e0000000045a971090000c4a3f963a40767000000f8f0ff42e1c4230d680c1099c4c24da77800f36d", {[0x3]}}, 0x0, 0x8, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 4.342116088s ago: executing program 1 (id=774): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc60040003", 0x17}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.016839954s ago: executing program 3 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0x801, 0xffc3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x40100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x7}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x20040000) 3.954657498s ago: executing program 1 (id=776): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x4e5f, &(0x7f0000000580)={0x0, 0xf3b1, 0x10100, 0x0, 0x276}, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000002000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000001000"/28], 0x50) pipe(&(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB="08001f0005"], 0x4c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008804"]) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = inotify_init1(0x0) fcntl$setown(r9, 0x8, 0xffffffffffffffff) fcntl$getownex(r9, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r10, &(0x7f0000000600)='fd/4\x00') 3.886034139s ago: executing program 0 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) pwrite64(r1, &(0x7f00000001c0)="e3fe69a9b2674333db5b64a97e80092d643279565e85cf9ba868b042f68904dd8b090141cd275d6bed2987216c4c33dfc3c95eeb0b8243008092ed29837fae733369527a08e9a3adedf6a435fc87225fea59c2af5615", 0x56, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a00292b7076cc00000000000a000000"], 0x14}}, 0x0) 3.644591928s ago: executing program 3 (id=778): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000005c0)=""/85, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r2 = dup(r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r5 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907c64010101ac143faa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000640)={@local, @link_local, @void, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "dff9fd33e855ed76"}}}}, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './bus', [{0x20, '#! '}, {0x20, 'LaR^'}]}, 0x12) 3.468659137s ago: executing program 0 (id=779): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4}, &(0x7f00000006c0)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'crc32-generic\x00'}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r5}, 0x14) socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x20000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0xb8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/39], 0xb8}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 3.314017781s ago: executing program 1 (id=780): prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') unshare(0x26020480) fallocate(r0, 0x11, 0x0, 0x229) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) setpgid(0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/27}, 0x23, 0x0, 0x0) msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0) ptrace$getregset(0x4204, 0x0, 0x201, 0x0) mlock2(&(0x7f00001b2000/0x3000)=nil, 0x3000, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000200), 0x4, 0xc000) mmap$usbmon(&(0x7f00001b4000/0x1000)=nil, 0x1000, 0x200000c, 0x20010, r5, 0x79) io_uring_setup(0x282c, &(0x7f0000000580)={0x0, 0x58a4, 0x0, 0x0, 0x36e}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 2.363356212s ago: executing program 0 (id=781): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="ddee93ae", 0x4) iopl(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\xcd\xe3/c\x88\xfd?\x94Rh\xf1\xe4T\x906`__\xc9\x9f\xdbB\"\x85\\\xb9\xfc\xfdW\x8d\x0f\xd8\xe1p\xc4\xfb-`:\x95_\xcaJ9\x95\xe2\xa0\x87)\xc3\xa0@O0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x327c02, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030500000000000000000000f5ffffffffff07000100"], 0x20}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x210, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xf2e563ad55b58274, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 1.744572167s ago: executing program 1 (id=785): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) ioperm(0x0, 0x1, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={0x0, 0x0, 0x4004}, 0x18) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x0) 0s ago: executing program 2 (id=786): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc60040003", 0x17}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ing provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 384.365049][ T6684] Falling back ldisc for ptm0. [ 384.574687][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.828234][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.895043][ T1056] bond0 (unregistering): Released all slaves [ 386.009403][ T6679] team0: Port device syz_tun added [ 386.289775][ T6701] No control pipe specified [ 386.360419][ T6702] sctp: [Deprecated]: syz.2.244 (pid 6702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.360419][ T6702] Use struct sctp_sack_info instead [ 386.543055][ T5273] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 386.776768][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 386.798891][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 386.859615][ T5273] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 386.902114][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.910233][ T5273] usb 1-1: Product: syz [ 386.941826][ T5273] usb 1-1: Manufacturer: syz [ 386.958209][ T5273] usb 1-1: SerialNumber: syz [ 386.996289][ T5273] usb 1-1: config 0 descriptor?? [ 387.021341][ T5273] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 387.062126][ T5273] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 387.417419][ T6714] No control pipe specified [ 387.509241][ T6715] sctp: [Deprecated]: syz.3.248 (pid 6715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.509241][ T6715] Use struct sctp_sack_info instead [ 388.352302][ T5273] em28xx 1-1:0.0: chip ID is em2874 [ 389.222257][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 389.404250][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.468635][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 389.513898][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.532701][ T1056] hsr_slave_0: left promiscuous mode [ 389.543763][ T8] usb 4-1: config 0 descriptor?? [ 389.642840][ T1056] hsr_slave_1: left promiscuous mode [ 389.659897][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.686785][ T5273] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 389.712309][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.744695][ T5273] em28xx 1-1:0.0: board has no eeprom [ 389.770291][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.780877][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 389.795860][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.832508][ T1056] veth1_macvtap: left promiscuous mode [ 389.838154][ T1056] veth0_macvtap: left promiscuous mode [ 389.844037][ T1056] veth1_vlan: left promiscuous mode [ 389.849438][ T1056] veth0_vlan: left promiscuous mode [ 389.872210][ T5273] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 389.924585][ T5273] em28xx 1-1:0.0: dvb set to bulk mode. [ 390.089489][ T5273] usb 1-1: USB disconnect, device number 10 [ 390.096974][ T5273] em28xx 1-1:0.0: Disconnecting em28xx [ 390.102611][ T5237] em28xx 1-1:0.0: Binding DVB extension [ 390.299588][ T5237] em28xx 1-1:0.0: Registering input extension [ 390.404876][ T8] pwc: send_video_command error -71 [ 390.410155][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 390.463327][ T8] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 390.632373][ T5237] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 390.642795][ T5237] Registered IR keymap rc-empty [ 390.648363][ T5237] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 390.659730][ T5237] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 390.672472][ T8] usb 4-1: USB disconnect, device number 5 [ 390.673307][ T5237] em28xx 1-1:0.0: Input extension successfully initialized [ 391.307484][ T5273] em28xx 1-1:0.0: Closing input extension [ 391.415289][ T5273] em28xx 1-1:0.0: Freeing device [ 391.886721][ T6651] coredump: 8(syz.1.232): written to core: VMAs: 41, size 97472512; core: 68523342 bytes, pos 97480704 [ 392.230665][ T5237] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 392.265804][ T6754] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 392.265804][ T6754] The task syz.2.257 (6754) triggered the difference, watch for misbehavior. [ 392.614876][ T5237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.662190][ T5237] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.671380][ T5237] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.748968][ T5237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.769253][ T5237] usb 2-1: config 0 descriptor?? [ 395.285038][ T4607] Bluetooth: hci0: command 0x0c1a tx timeout [ 395.305941][ T5237] usb 2-1: string descriptor 0 read error: -71 [ 395.312327][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 395.325233][ T5237] usb 2-1: USB disconnect, device number 7 [ 395.668503][ T6780] FAULT_INJECTION: forcing a failure. [ 395.668503][ T6780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.729958][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.1.262 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 395.740280][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 395.750389][ T6780] Call Trace: [ 395.753710][ T6780] [ 395.756679][ T6780] dump_stack_lvl+0x241/0x360 [ 395.761418][ T6780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.766703][ T6780] ? __pfx__printk+0x10/0x10 [ 395.771357][ T6780] ? snprintf+0xda/0x120 [ 395.775649][ T6780] should_fail_ex+0x3b0/0x4e0 [ 395.780373][ T6780] _copy_to_user+0x2f/0xb0 [ 395.785100][ T6780] simple_read_from_buffer+0xca/0x150 [ 395.790522][ T6780] proc_fail_nth_read+0x1e9/0x250 [ 395.795596][ T6780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.801194][ T6780] ? rw_verify_area+0x55e/0x6f0 [ 395.806093][ T6780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.811700][ T6780] vfs_read+0x201/0xbc0 [ 395.815910][ T6780] ? __pfx_lock_release+0x10/0x10 [ 395.820988][ T6780] ? __pfx_vfs_read+0x10/0x10 [ 395.825712][ T6780] ? __fget_files+0x3f3/0x470 [ 395.830443][ T6780] ? __fdget_pos+0x24e/0x320 [ 395.835074][ T6780] ksys_read+0x1a0/0x2c0 [ 395.839394][ T6780] ? __pfx_ksys_read+0x10/0x10 [ 395.844211][ T6780] ? do_syscall_64+0x100/0x230 [ 395.849038][ T6780] ? do_syscall_64+0xb6/0x230 [ 395.853861][ T6780] do_syscall_64+0xf3/0x230 [ 395.858417][ T6780] ? clear_bhb_loop+0x35/0x90 [ 395.863145][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.869081][ T6780] RIP: 0033:0x7ff5c217c93c [ 395.873537][ T6780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 395.893185][ T6780] RSP: 002b:00007ff5c2e91030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.901657][ T6780] RAX: ffffffffffffffda RBX: 00007ff5c2335f80 RCX: 00007ff5c217c93c [ 395.909669][ T6780] RDX: 000000000000000f RSI: 00007ff5c2e910a0 RDI: 0000000000000003 [ 395.917677][ T6780] RBP: 00007ff5c2e91090 R08: 0000000000000000 R09: 0000000000000000 [ 395.925689][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.933704][ T6780] R13: 0000000000000000 R14: 00007ff5c2335f80 R15: 00007fffcb8f3ce8 [ 395.941750][ T6780] [ 396.062540][ T5237] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 396.122443][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 396.223596][ T5237] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 396.242821][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 396.260454][ T5237] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 396.432686][ T5237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.476069][ T5237] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 397.625006][ T5237] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 397.716023][ T30] audit: type=1804 audit(1726801288.300:2): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.264" name="/newroot/16/bus/bus" dev="overlay" ino=118 res=1 errno=0 [ 397.776647][ T6798] evm: overlay not supported [ 397.871061][ T6785] x_tables: duplicate underflow at hook 2 [ 397.903931][ T6798] Invalid ELF header magic: != ELF [ 397.970068][ T5237] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 398.008831][ T5237] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 398.050968][ T5237] usb 5-1: USB disconnect, device number 11 [ 399.512723][ T6817] pimreg: entered allmulticast mode [ 403.087900][ T6831] binder: 6830:6831 ioctl c018620c 200001c0 returned -22 [ 404.857185][ T5237] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 405.094018][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.125550][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.161794][ T5237] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 405.195169][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.234074][ T5237] usb 1-1: config 0 descriptor?? [ 405.325883][ T6852] xt_hashlimit: invalid interval [ 405.972889][ T5273] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 406.114892][ T6842] warning: `syz.0.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 406.176305][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.223543][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.282515][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 406.287208][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.280'. [ 406.290265][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.358686][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.379534][ T5273] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 406.392994][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.430853][ T5273] usb 3-1: config 0 descriptor?? [ 406.559582][ T6842] vlan2: entered promiscuous mode [ 406.664035][ T6842] bond0: entered promiscuous mode [ 406.703823][ T6842] bond_slave_0: entered promiscuous mode [ 406.745152][ T6842] bond_slave_1: entered promiscuous mode [ 406.781143][ T6842] vlan2: entered allmulticast mode [ 406.813315][ T6842] bond0: entered allmulticast mode [ 406.852328][ T6842] bond_slave_0: entered allmulticast mode [ 406.903298][ T6842] bond_slave_1: entered allmulticast mode [ 406.986134][ T6842] bond0: left allmulticast mode [ 407.017642][ T6842] bond_slave_0: left allmulticast mode [ 407.089239][ T6842] bond_slave_1: left allmulticast mode [ 407.145927][ T6842] bond0: left promiscuous mode [ 407.216789][ T6842] bond_slave_0: left promiscuous mode [ 407.278520][ T6842] bond_slave_1: left promiscuous mode [ 407.613117][ T5237] usbhid 1-1:0.0: can't add hid device: -71 [ 407.634785][ T5237] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 407.647580][ T5237] usb 1-1: USB disconnect, device number 11 [ 409.628129][ T5273] usbhid 3-1:0.0: can't add hid device: -71 [ 409.646804][ T5273] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 409.695579][ T5273] usb 3-1: USB disconnect, device number 18 [ 409.786181][ T6889] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.919511][ T5271] psmouse serio15: Failed to reset mouse on : -5 [ 409.919535][ T5313] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 409.933725][ T5274] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 410.952115][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 410.958252][ T5313] usb 2-1: Using ep0 maxpacket: 8 [ 410.970126][ T5274] usb 1-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=1e.e1 [ 410.992467][ T5313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.013229][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.022448][ T5313] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.039934][ T5274] usb 1-1: Product: syz [ 411.064574][ T5313] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.074601][ T5274] usb 1-1: Manufacturer: syz [ 411.079486][ T5274] usb 1-1: SerialNumber: syz [ 411.087012][ T5313] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.102392][ T5274] usb 1-1: config 0 descriptor?? [ 411.111783][ T5274] gspca_main: tv8532-2.14.0 probing 0923:010f [ 411.121275][ T5313] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 411.131175][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.139953][ T5313] usb 2-1: Product: syz [ 411.148932][ T5313] usb 2-1: Manufacturer: syz [ 411.154587][ T5313] usb 2-1: SerialNumber: syz [ 411.159678][ T6911] netlink: 'syz.2.300': attribute type 9 has an invalid length. [ 411.188094][ T6911] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.300'. [ 411.195709][ T5313] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input23 [ 411.304526][ T6915] dccp_flush_write_queue: CCID did not manage to send all packets [ 411.425324][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 411.485647][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.531766][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.538264][ T5274] usb 1-1: USB disconnect, device number 12 [ 411.543931][ T4654] bcm5974 2-1:1.0: could not read from device [ 411.554263][ T6912] netlink: 'syz.2.300': attribute type 9 has an invalid length. [ 411.585598][ T4654] bcm5974 2-1:1.0: could not read from device [ 411.611909][ T6912] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.300'. [ 411.615183][ T4654] bcm5974 2-1:1.0: could not read from device [ 411.651974][ T5313] usb 2-1: USB disconnect, device number 8 [ 411.662905][ T4654] bcm5974 2-1:1.0: could not read from device [ 416.629781][ T5271] misc userio: Buffer overflowed, userio client isn't keeping up [ 418.342383][ T6965] netlink: 'syz.3.313': attribute type 9 has an invalid length. [ 418.357041][ T6965] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.313'. [ 418.410922][ T6966] netlink: 'syz.3.313': attribute type 9 has an invalid length. [ 418.425938][ T6966] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.313'. [ 418.467259][ T6965] dccp_flush_write_queue: CCID did not manage to send all packets [ 418.582121][ T5237] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 418.755484][ T6973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.315'. [ 418.765306][ T5237] usb 2-1: Using ep0 maxpacket: 8 [ 418.783025][ T5237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.798554][ T5237] usb 2-1: config 0 has no interfaces? [ 418.807878][ T5237] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 418.817627][ T5237] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 418.827229][ T5237] usb 2-1: Product: syz [ 418.831830][ T5237] usb 2-1: SerialNumber: syz [ 418.845351][ T5237] usb 2-1: config 0 descriptor?? [ 418.892864][ T5273] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 418.945131][ T5271] input: PS/2 Generic Mouse as /devices/serio15/input/input22 [ 419.052412][ T5273] usb 4-1: Using ep0 maxpacket: 8 [ 419.070800][ T5273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.092954][ T5273] usb 4-1: config 0 has no interfaces? [ 419.103221][ T5273] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 419.107282][ T6954] vlan2: entered promiscuous mode [ 419.117945][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 419.127208][ T5273] usb 4-1: Product: syz [ 419.132547][ T6954] bridge0: entered promiscuous mode [ 419.132646][ T5273] usb 4-1: SerialNumber: syz [ 419.156071][ T5273] usb 4-1: config 0 descriptor?? [ 419.162903][ T6954] bridge0: port 3(vlan2) entered blocking state [ 419.172170][ T5271] psmouse serio15: Failed to enable mouse on [ 419.177389][ T6954] bridge0: port 3(vlan2) entered disabled state [ 419.212393][ T6954] vlan2: entered allmulticast mode [ 419.240075][ T6954] bridge0: entered allmulticast mode [ 419.267846][ T6954] vlan2: left allmulticast mode [ 419.273443][ T6954] bridge0: left allmulticast mode [ 419.291641][ T6954] bridge0: left promiscuous mode [ 419.397259][ T5237] usb 2-1: USB disconnect, device number 9 [ 419.446987][ T6970] vlan2: entered promiscuous mode [ 419.456674][ T6970] bridge0: entered promiscuous mode [ 419.466417][ T6970] bridge0: port 3(vlan2) entered blocking state [ 419.474852][ T6970] bridge0: port 3(vlan2) entered disabled state [ 419.483760][ T6970] vlan2: entered allmulticast mode [ 419.489088][ T6970] bridge0: entered allmulticast mode [ 419.500401][ T6970] vlan2: left allmulticast mode [ 419.580384][ T6970] bridge0: left allmulticast mode [ 419.650539][ T6970] bridge0: left promiscuous mode [ 419.878527][ T5271] usb 4-1: USB disconnect, device number 6 [ 420.915243][ T4607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.055030][ T4607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.064438][ T4607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.073374][ T4607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.081098][ T4607] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 421.089496][ T4607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.529871][ T6995] netlink: 'syz.3.324': attribute type 9 has an invalid length. [ 421.589526][ T6995] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.324'. [ 422.395737][ T6996] dccp_flush_write_queue: CCID did not manage to send all packets [ 422.650192][ T1056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.978700][ T1056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.004946][ T6998] netlink: 'syz.3.324': attribute type 9 has an invalid length. [ 423.025163][ T6998] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.324'. [ 423.391950][ T5238] Bluetooth: hci2: command tx timeout [ 423.855178][ T1056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.055200][ T1056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.086758][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 425.044864][ T7021] netlink: 452 bytes leftover after parsing attributes in process `syz.3.328'. [ 425.245884][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'. [ 425.442607][ T5238] Bluetooth: hci2: command tx timeout [ 425.989330][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.024146][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.042283][ T6982] bridge_slave_0: entered allmulticast mode [ 426.062618][ T6982] bridge_slave_0: entered promiscuous mode [ 426.081788][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.102235][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.109517][ T6982] bridge_slave_1: entered allmulticast mode [ 426.159831][ T6982] bridge_slave_1: entered promiscuous mode [ 426.300058][ T1056] bridge_slave_1: left allmulticast mode [ 426.313372][ T1056] bridge_slave_1: left promiscuous mode [ 426.327535][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.363912][ T1056] bridge_slave_0: left allmulticast mode [ 426.371816][ T1056] bridge_slave_0: left promiscuous mode [ 426.383336][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.412125][ T6030] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 426.582330][ T6030] usb 3-1: Using ep0 maxpacket: 8 [ 426.658597][ T6030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.813926][ T6030] usb 3-1: config 0 has no interfaces? [ 426.915121][ T6030] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 427.033316][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 427.203905][ T6030] usb 3-1: Product: syz [ 427.208138][ T6030] usb 3-1: SerialNumber: syz [ 427.216145][ T6030] usb 3-1: config 0 descriptor?? [ 427.293361][ T5273] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 427.463226][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 427.503430][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 427.528357][ T5238] Bluetooth: hci2: command tx timeout [ 427.538841][ T5273] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.564437][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.574443][ T5273] usb 4-1: Product: syz [ 427.578792][ T5273] usb 4-1: Manufacturer: syz [ 427.583590][ T5273] usb 4-1: SerialNumber: syz [ 427.592743][ T6030] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 427.602736][ T5273] usb 4-1: config 0 descriptor?? [ 427.611368][ T5273] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 427.622249][ T5273] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 427.788634][ T6030] usb 1-1: Using ep0 maxpacket: 16 [ 427.832529][ T6030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 427.859382][ T6030] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.892064][ T6030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.912362][ T6030] usb 1-1: Product: syz [ 427.916597][ T6030] usb 1-1: Manufacturer: syz [ 427.921222][ T6030] usb 1-1: SerialNumber: syz [ 427.928739][ T6030] usb 1-1: config 0 descriptor?? [ 427.937997][ T6030] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 427.957123][ T6030] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 428.075790][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.096336][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.112172][ T1056] bond0 (unregistering): Released all slaves [ 428.134916][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.153539][ T7035] vlan2: entered promiscuous mode [ 428.172732][ T7035] bridge0: entered promiscuous mode [ 428.200571][ T7035] bridge0: port 3(vlan2) entered blocking state [ 428.211643][ T7035] bridge0: port 3(vlan2) entered disabled state [ 428.218972][ T7035] vlan2: entered allmulticast mode [ 428.238427][ T7035] bridge0: entered allmulticast mode [ 428.256412][ T7035] vlan2: left allmulticast mode [ 428.261429][ T7035] bridge0: left allmulticast mode [ 428.288096][ T7035] bridge0: left promiscuous mode [ 428.363749][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.468993][ T5273] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 428.518263][ T8] usb 3-1: USB disconnect, device number 19 [ 428.529062][ T6982] team0: Port device team_slave_0 added [ 428.548371][ T5273] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 428.554010][ T6030] em28xx 1-1:0.0: chip ID is em2874 [ 428.566766][ T5273] em28xx 4-1:0.0: board has no eeprom [ 428.591014][ T6982] team0: Port device team_slave_1 added [ 428.662436][ T5273] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 428.670329][ T5273] em28xx 4-1:0.0: dvb set to bulk mode. [ 428.697985][ T5271] em28xx 4-1:0.0: Binding DVB extension [ 428.717018][ T5273] usb 4-1: USB disconnect, device number 7 [ 428.739200][ T5273] em28xx 4-1:0.0: Disconnecting em28xx [ 428.805686][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.822055][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.841139][ T5271] em28xx 4-1:0.0: Registering input extension [ 428.856015][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.883894][ T1056] hsr_slave_0: left promiscuous mode [ 428.899441][ T5273] em28xx 4-1:0.0: Closing input extension [ 429.102886][ T1056] hsr_slave_1: left promiscuous mode [ 429.115633][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.123121][ T5273] em28xx 4-1:0.0: Freeing device [ 429.186031][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.646820][ T5238] Bluetooth: hci2: command tx timeout [ 429.891725][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.914935][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.930682][ T6030] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 429.963475][ T6030] em28xx 1-1:0.0: board has no eeprom [ 430.037841][ T1056] veth1_macvtap: left promiscuous mode [ 430.051524][ T1056] veth0_macvtap: left promiscuous mode [ 430.062271][ T6030] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 430.062440][ T1056] veth1_vlan: left promiscuous mode [ 430.086432][ T1056] veth0_vlan: left promiscuous mode [ 430.092644][ T6030] em28xx 1-1:0.0: dvb set to bulk mode. [ 430.103409][ T8] em28xx 1-1:0.0: Binding DVB extension [ 430.203926][ T7080] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 430.301573][ T8] em28xx 1-1:0.0: Registering input extension [ 430.510687][ T5273] usb 1-1: USB disconnect, device number 13 [ 430.532377][ T8] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 430.546138][ T8] Registered IR keymap rc-empty [ 430.575594][ T5273] em28xx 1-1:0.0: Disconnecting em28xx [ 430.606399][ T8] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 430.716121][ T8] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 430.777561][ T7089] FAULT_INJECTION: forcing a failure. [ 430.777561][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 430.804285][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.0.342 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 430.814583][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 430.824678][ T7089] Call Trace: [ 430.827965][ T7089] [ 430.830902][ T7089] dump_stack_lvl+0x241/0x360 [ 430.835605][ T7089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.840819][ T7089] ? __pfx__printk+0x10/0x10 [ 430.845433][ T7089] ? fs_reclaim_acquire+0x93/0x140 [ 430.850548][ T7089] ? __pfx___might_resched+0x10/0x10 [ 430.855847][ T7089] should_fail_ex+0x3b0/0x4e0 [ 430.860536][ T7089] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 430.866264][ T7089] should_failslab+0xac/0x100 [ 430.870954][ T7089] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 430.876682][ T7089] __kmalloc_noprof+0xd8/0x400 [ 430.881463][ T7089] tomoyo_realpath_from_path+0xcf/0x5e0 [ 430.887115][ T7089] tomoyo_path_number_perm+0x23a/0x880 [ 430.892594][ T7089] ? tomoyo_path_number_perm+0x208/0x880 [ 430.898240][ T7089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 430.904263][ T7089] ? __fget_files+0x29/0x470 [ 430.908875][ T7089] ? __fget_files+0x3f3/0x470 [ 430.913574][ T7089] security_file_ioctl+0xc6/0x2a0 [ 430.918616][ T7089] __se_sys_ioctl+0x47/0x170 [ 430.923217][ T7089] do_syscall_64+0xf3/0x230 [ 430.927734][ T7089] ? clear_bhb_loop+0x35/0x90 [ 430.932431][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.938422][ T7089] RIP: 0033:0x7f76ef77def9 [ 430.942845][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.962480][ T7089] RSP: 002b:00007f76f060b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.970905][ T7089] RAX: ffffffffffffffda RBX: 00007f76ef935f80 RCX: 00007f76ef77def9 [ 430.978884][ T7089] RDX: 0000000000000000 RSI: 00000000400455cb RDI: 0000000000000004 [ 430.986860][ T7089] RBP: 00007f76f060b090 R08: 0000000000000000 R09: 0000000000000000 [ 430.994858][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.002837][ T7089] R13: 0000000000000000 R14: 00007f76ef935f80 R15: 00007ffe870a9408 [ 431.010826][ T7089] [ 431.014295][ T8] em28xx 1-1:0.0: Input extension successfully initialized [ 431.044170][ T5273] em28xx 1-1:0.0: Closing input extension [ 431.104800][ T7089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 431.212521][ T5273] em28xx 1-1:0.0: Freeing device [ 432.531671][ T7105] netlink: 'syz.1.345': attribute type 9 has an invalid length. [ 432.541320][ T7105] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.345'. [ 432.645121][ T7109] dccp_flush_write_queue: CCID did not manage to send all packets [ 433.328381][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 433.753964][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 435.626048][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.636370][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.662629][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.742338][ T7137] netlink: 'syz.2.352': attribute type 4 has an invalid length. [ 435.781681][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 436.033994][ T7108] netlink: 'syz.1.345': attribute type 9 has an invalid length. [ 436.068840][ T7108] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.345'. [ 436.101217][ T6982] hsr_slave_0: entered promiscuous mode [ 436.123189][ T6982] hsr_slave_1: entered promiscuous mode [ 436.273589][ T6982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.421960][ T6982] Cannot create hsr debugfs directory [ 436.951316][ T5313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 437.202044][ T5313] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 437.372398][ T5313] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 437.460207][ T5313] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.672243][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.693653][ T5313] usb 4-1: config 0 descriptor?? [ 437.715789][ T5313] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 439.003624][ T5273] usb 4-1: USB disconnect, device number 8 [ 439.082506][ T5271] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 439.263435][ T5271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.284720][ T5271] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 439.345129][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.387997][ T6982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 439.448525][ T5271] usb 2-1: config 0 descriptor?? [ 439.683043][ T5271] pwc: Askey VC010 type 2 USB webcam detected. [ 439.908144][ T6982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 440.075822][ T7176] vhci_hcd: invalid port number 0 [ 440.133634][ T6982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.164563][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.171201][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.300643][ T6982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 440.328087][ T5271] pwc: send_video_command error -71 [ 440.344269][ T5271] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 440.369044][ T5271] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 440.420267][ T5271] usb 2-1: USB disconnect, device number 10 [ 440.610987][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.688782][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.765654][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.772841][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.813559][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.820788][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.145158][ T7216] netlink: 'syz.1.367': attribute type 9 has an invalid length. [ 441.194515][ T7216] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.367'. [ 441.271938][ T7225] dccp_flush_write_queue: CCID did not manage to send all packets [ 441.298952][ T7218] netlink: 'syz.1.367': attribute type 9 has an invalid length. [ 441.341394][ T7218] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.367'. [ 442.139880][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.822262][ T5313] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 443.675009][ T6982] veth0_vlan: entered promiscuous mode [ 443.701265][ T6982] veth1_vlan: entered promiscuous mode [ 443.742521][ T5313] usb 2-1: Using ep0 maxpacket: 8 [ 443.757102][ T6982] veth0_macvtap: entered promiscuous mode [ 443.773713][ T5313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.790218][ T6982] veth1_macvtap: entered promiscuous mode [ 443.796435][ T5313] usb 2-1: config 0 has no interfaces? [ 443.811958][ T5313] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 443.821334][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 443.844205][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.862336][ T5313] usb 2-1: Product: syz [ 443.866563][ T5313] usb 2-1: SerialNumber: syz [ 443.879199][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.897636][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.909537][ T5313] usb 2-1: config 0 descriptor?? [ 443.949467][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.965903][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.997191][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.026127][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.058698][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.094528][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.139265][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.196361][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.227124][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.262429][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.300870][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.332383][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.362285][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.402758][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.426756][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.460273][ T7246] vlan2: entered promiscuous mode [ 444.481554][ T7246] bridge0: entered promiscuous mode [ 444.494622][ T7246] bridge0: port 3(vlan2) entered blocking state [ 444.519130][ T7246] bridge0: port 3(vlan2) entered disabled state [ 444.546344][ T7246] vlan2: entered allmulticast mode [ 444.565739][ T7246] bridge0: entered allmulticast mode [ 444.613327][ T7246] vlan2: left allmulticast mode [ 444.618354][ T7246] bridge0: left allmulticast mode [ 444.672725][ T7246] bridge0: left promiscuous mode [ 444.784721][ T6982] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.814638][ T6982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.316292][ T6982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.339660][ T7290] sctp: [Deprecated]: syz.0.376 (pid 7290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.339660][ T7290] Use struct sctp_sack_info instead [ 445.634392][ T6982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.833774][ T5237] usb 2-1: USB disconnect, device number 11 [ 446.033416][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.066272][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.165716][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.195347][ T7302] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 446.204436][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.292121][ T3373] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 446.474163][ T3373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.663481][ T3373] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 446.672808][ T3373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.684301][ T3373] usb 4-1: config 0 descriptor?? [ 446.696327][ T3373] pwc: Askey VC010 type 2 USB webcam detected. [ 446.937717][ T7314] sctp: [Deprecated]: syz.4.317 (pid 7314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.937717][ T7314] Use struct sctp_sack_info instead [ 447.698569][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 447.706069][ T5224] Bluetooth: hci0: command 0x0c1a tx timeout [ 447.712368][ T5224] Bluetooth: hci1: command 0x0406 tx timeout [ 447.944195][ T3373] pwc: send_video_command error -71 [ 447.949466][ T3373] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 449.146496][ T3373] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 449.159102][ T3373] usb 4-1: USB disconnect, device number 9 [ 453.938327][ T5313] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 454.102388][ T5313] usb 5-1: Using ep0 maxpacket: 8 [ 454.112900][ T5313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.149390][ T5313] usb 5-1: config 0 has no interfaces? [ 454.169734][ T5313] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 454.242490][ T5313] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 454.250820][ T5313] usb 5-1: Product: syz [ 454.302048][ T5313] usb 5-1: SerialNumber: syz [ 454.339985][ T5313] usb 5-1: config 0 descriptor?? [ 454.632321][ T7346] vlan2: entered promiscuous mode [ 454.637431][ T7346] bridge0: entered promiscuous mode [ 454.654797][ T7346] bridge0: port 3(vlan2) entered blocking state [ 454.722512][ T7346] bridge0: port 3(vlan2) entered disabled state [ 454.743548][ T7346] vlan2: entered allmulticast mode [ 454.772331][ T7346] bridge0: entered allmulticast mode [ 454.818059][ T7346] vlan2: left allmulticast mode [ 454.846450][ T7346] bridge0: left allmulticast mode [ 454.910892][ T7346] bridge0: left promiscuous mode [ 455.078223][ T3373] usb 5-1: USB disconnect, device number 12 [ 455.643143][ T30] audit: type=1326 audit(1726801346.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 455.875348][ T30] audit: type=1326 audit(1726801346.280:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 456.317289][ T30] audit: type=1326 audit(1726801346.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 456.432159][ T30] audit: type=1326 audit(1726801346.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 456.511855][ T30] audit: type=1326 audit(1726801346.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 456.992060][ T30] audit: type=1326 audit(1726801346.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x0 [ 459.471141][ T7435] sctp: [Deprecated]: syz.3.404 (pid 7435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.471141][ T7435] Use struct sctp_sack_info instead [ 461.868957][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 461.900125][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 461.919441][ T5237] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 462.013978][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 462.032488][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 462.102168][ T5237] usb 3-1: Using ep0 maxpacket: 8 [ 462.109963][ T5237] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.147472][ T5237] usb 3-1: config 0 has no interfaces? [ 462.170400][ T5237] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 462.202335][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 462.211793][ T5237] usb 3-1: Product: syz [ 462.239962][ T5237] usb 3-1: SerialNumber: syz [ 462.263308][ T5237] usb 3-1: config 0 descriptor?? [ 462.399849][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 462.422152][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 462.665695][ T7454] vlan2: entered promiscuous mode [ 462.693291][ T7454] bridge0: entered promiscuous mode [ 462.733687][ T7454] bridge0: port 3(vlan2) entered blocking state [ 462.740066][ T7454] bridge0: port 3(vlan2) entered disabled state [ 462.802574][ T7454] vlan2: entered allmulticast mode [ 462.818194][ T7454] bridge0: entered allmulticast mode [ 462.838583][ T7454] vlan2: left allmulticast mode [ 462.838607][ T7454] bridge0: left allmulticast mode [ 462.840324][ T7454] bridge0: left promiscuous mode [ 463.448135][ T5303] usb 3-1: USB disconnect, device number 20 [ 464.437588][ T7486] netlink: 'syz.3.417': attribute type 9 has an invalid length. [ 464.445485][ T7486] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.417'. [ 464.655826][ T7489] netlink: 'syz.3.417': attribute type 9 has an invalid length. [ 464.679477][ T7496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.770921][ T7489] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.417'. [ 466.154667][ T30] audit: type=1326 audit(1726801356.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7520 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf537def9 code=0x7ffc0000 [ 466.264452][ T30] audit: type=1326 audit(1726801356.770:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7520 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf537def9 code=0x7ffc0000 [ 466.286655][ T30] audit: type=1326 audit(1726801356.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7520 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cf537def9 code=0x7ffc0000 [ 466.308564][ T30] audit: type=1326 audit(1726801356.790:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7520 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf537def9 code=0x7ffc0000 [ 466.331208][ T30] audit: type=1326 audit(1726801356.790:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7520 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf537def9 code=0x7ffc0000 [ 466.540938][ T30] audit: type=1326 audit(1726801356.800:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7520 comm="syz.3.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cf537def9 code=0x7ffc0000 [ 466.622283][ T30] audit: type=1326 audit(1726801356.800:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7520 comm="syz.3.426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cf537def9 code=0x0 [ 468.352290][ T5237] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 468.723511][ T5237] usb 2-1: Using ep0 maxpacket: 8 [ 468.743392][ T5237] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.753698][ T5237] usb 2-1: config 0 has no interfaces? [ 468.770448][ T5237] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 468.781505][ T5237] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 468.800182][ T5237] usb 2-1: Product: syz [ 468.804504][ T5237] usb 2-1: SerialNumber: syz [ 468.821098][ T5237] usb 2-1: config 0 descriptor?? [ 471.261283][ T7549] vlan2: entered promiscuous mode [ 471.280734][ T7549] bridge0: entered promiscuous mode [ 471.329215][ T7549] bridge0: port 3(vlan2) entered blocking state [ 471.387510][ T7549] bridge0: port 3(vlan2) entered disabled state [ 471.419545][ T7549] vlan2: entered allmulticast mode [ 471.656135][ T7549] bridge0: entered allmulticast mode [ 471.820458][ T7582] sctp: [Deprecated]: syz.4.438 (pid 7582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.820458][ T7582] Use struct sctp_sack_info instead [ 471.894001][ T7549] vlan2: left allmulticast mode [ 471.964982][ T7549] bridge0: left allmulticast mode [ 472.364847][ T7549] bridge0: left promiscuous mode [ 473.789546][ T5303] usb 2-1: USB disconnect, device number 12 [ 477.999371][ T7644] rdma_op ffff88807ed911f0 conn xmit_rdma 0000000000000000 [ 478.583814][ T7656] sctp: [Deprecated]: syz.4.456 (pid 7656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.583814][ T7656] Use struct sctp_sack_info instead [ 479.174366][ T3373] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 479.530434][ T3373] usb 1-1: Using ep0 maxpacket: 8 [ 479.538022][ T3373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.549562][ T3373] usb 1-1: config 0 has no interfaces? [ 479.559409][ T3373] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 479.568894][ T3373] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 480.263712][ T3373] usb 1-1: Product: syz [ 480.766330][ T3373] usb 1-1: SerialNumber: syz [ 480.923356][ T3373] usb 1-1: config 0 descriptor?? [ 480.936586][ T3373] usb 1-1: can't set config #0, error -71 [ 480.959102][ T3373] usb 1-1: USB disconnect, device number 14 [ 481.422859][ T7680] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 483.190678][ T7700] rdma_op ffff88807ed8a9f0 conn xmit_rdma 0000000000000000 [ 484.653961][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 484.678923][ T5273] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 484.694233][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 484.912438][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 484.923251][ T5273] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.962809][ T5273] usb 5-1: config 0 has no interfaces? [ 484.970101][ T5273] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 485.002219][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 485.010545][ T5273] usb 5-1: Product: syz [ 485.062144][ T5273] usb 5-1: SerialNumber: syz [ 485.109824][ T5273] usb 5-1: config 0 descriptor?? [ 485.725845][ T7738] netlink: 'syz.2.480': attribute type 9 has an invalid length. [ 486.196161][ T7738] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.480'. [ 486.218841][ T7712] vlan2: entered promiscuous mode [ 486.248161][ T7712] bridge0: entered promiscuous mode [ 486.259969][ T7712] bridge0: port 3(vlan2) entered blocking state [ 486.267161][ T7712] bridge0: port 3(vlan2) entered disabled state [ 486.276221][ T7712] vlan2: entered allmulticast mode [ 486.281403][ T7712] bridge0: entered allmulticast mode [ 486.359679][ T7712] vlan2: left allmulticast mode [ 486.368777][ T7712] bridge0: left allmulticast mode [ 486.380137][ T7712] bridge0: left promiscuous mode [ 486.385949][ T7746] dccp_flush_write_queue: CCID did not manage to send all packets [ 486.435918][ T7748] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 486.481536][ T7741] netlink: 'syz.2.480': attribute type 9 has an invalid length. [ 486.493365][ T6030] usb 5-1: USB disconnect, device number 13 [ 486.501190][ T7741] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.480'. [ 487.148763][ T7758] rdma_op ffff88806213d1f0 conn xmit_rdma 0000000000000000 [ 487.867202][ T7771] sctp: [Deprecated]: syz.0.486 (pid 7771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.867202][ T7771] Use struct sctp_sack_info instead [ 488.018827][ T7768] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 488.064003][ T7768] macsec1: entered promiscuous mode [ 488.343029][ T5238] Bluetooth: hci5: command 0x0406 tx timeout [ 488.934545][ T7787] rdma_op ffff888031cf79f0 conn xmit_rdma 0000000000000000 [ 490.555136][ T6030] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 490.732793][ T6030] usb 3-1: Using ep0 maxpacket: 8 [ 490.743692][ T6030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.011401][ T6030] usb 3-1: config 0 has no interfaces? [ 491.540982][ T6030] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 491.583382][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 491.662039][ T6030] usb 3-1: Product: syz [ 491.666268][ T6030] usb 3-1: SerialNumber: syz [ 491.723764][ T6030] usb 3-1: config 0 descriptor?? [ 492.057332][ T7812] vlan2: entered promiscuous mode [ 492.074234][ T7812] bridge0: entered promiscuous mode [ 492.091558][ T7812] bridge0: port 3(vlan2) entered blocking state [ 492.119476][ T7812] bridge0: port 3(vlan2) entered disabled state [ 492.163812][ T7812] vlan2: entered allmulticast mode [ 492.182096][ T3373] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 492.186648][ T7812] bridge0: entered allmulticast mode [ 492.197084][ T7812] vlan2: left allmulticast mode [ 492.202479][ T7812] bridge0: left allmulticast mode [ 492.208678][ T7812] bridge0: left promiscuous mode [ 492.336856][ T5271] usb 3-1: USB disconnect, device number 21 [ 492.346586][ T3373] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.383435][ T3373] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 492.403582][ T3373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.425511][ T3373] usb 5-1: config 0 descriptor?? [ 492.437309][ T3373] pwc: Askey VC010 type 2 USB webcam detected. [ 492.707221][ T7834] vhci_hcd: invalid port number 0 [ 492.729443][ T3373] pwc: send_video_command error -71 [ 492.736675][ T3373] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 492.748392][ T3373] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 493.358785][ T3373] usb 5-1: USB disconnect, device number 14 [ 494.902806][ T5273] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 495.072295][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 495.099963][ T5273] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 495.146303][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.175574][ T5273] usb 5-1: Product: syz [ 495.233359][ T5273] usb 5-1: Manufacturer: syz [ 495.392055][ T5273] usb 5-1: SerialNumber: syz [ 495.436143][ T5273] usb 5-1: config 0 descriptor?? [ 495.652291][ T5273] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 496.235698][ T7894] sctp: [Deprecated]: syz.3.519 (pid 7894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.235698][ T7894] Use struct sctp_sack_info instead [ 497.873869][ T7910] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 497.952158][ T6030] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 498.492474][ T6030] usb 3-1: Using ep0 maxpacket: 8 [ 498.509119][ T6030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.536845][ T6030] usb 3-1: config 0 has no interfaces? [ 498.834575][ T6030] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 498.869277][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 499.062154][ T5273] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 499.135443][ T6030] usb 3-1: Product: syz [ 499.139734][ T6030] usb 3-1: SerialNumber: syz [ 499.172285][ T6030] usb 3-1: config 0 descriptor?? [ 499.199694][ T6030] usb 5-1: USB disconnect, device number 15 [ 499.436685][ T7905] vlan2: entered promiscuous mode [ 499.454044][ T7905] bridge0: entered promiscuous mode [ 499.465942][ T7905] bridge0: port 3(vlan2) entered blocking state [ 499.492326][ T7905] bridge0: port 3(vlan2) entered disabled state [ 499.511771][ T7905] vlan2: entered allmulticast mode [ 499.517190][ T7905] bridge0: entered allmulticast mode [ 499.524647][ T7905] vlan2: left allmulticast mode [ 499.529579][ T7905] bridge0: left allmulticast mode [ 499.535908][ T7905] bridge0: left promiscuous mode [ 499.682505][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 499.752826][ T5313] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 499.832143][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 499.844018][ T5273] usb 3-1: USB disconnect, device number 22 [ 499.849646][ T8] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 499.873249][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.890529][ T8] usb 2-1: Product: syz [ 499.900293][ T8] usb 2-1: Manufacturer: syz [ 499.910332][ T8] usb 2-1: SerialNumber: syz [ 499.919296][ T8] usb 2-1: config 0 descriptor?? [ 499.931684][ T8] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 499.941876][ T5313] usb 1-1: Using ep0 maxpacket: 16 [ 499.952279][ T5313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 499.967435][ T5313] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 499.981040][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.989959][ T5313] usb 1-1: Product: syz [ 499.995800][ T5313] usb 1-1: Manufacturer: syz [ 500.000829][ T5313] usb 1-1: SerialNumber: syz [ 500.011210][ T5313] usb 1-1: config 0 descriptor?? [ 500.029455][ T5313] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 500.040778][ T5313] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 500.378528][ T8] gp8psk: usb in 137 operation failed. [ 500.379154][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.412291][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 500.442833][ T8] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 500.455367][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.472234][ T8] usb 2-1: media controller created [ 500.524932][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.720483][ T5313] em28xx 1-1:0.0: chip ID is em2874 [ 500.742460][ T8] gp8psk_fe: Frontend revision 1 attached [ 500.749001][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 500.760025][ T8] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 500.832738][ T7950] sctp: [Deprecated]: syz.2.535 (pid 7950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.832738][ T7950] Use struct sctp_sack_info instead [ 500.852418][ T8] gp8psk: usb in 138 operation failed. [ 500.863918][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 500.877054][ T8] gp8psk: found Genpix USB device pID = 201 (hex) [ 500.890885][ T8] usb 2-1: USB disconnect, device number 13 [ 501.533166][ T8] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 501.609719][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.616475][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.845562][ T3373] kernel write not supported for file /sg0 (pid: 3373 comm: kworker/1:2) [ 502.629843][ T5313] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 502.648239][ T5273] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 502.673539][ T5313] em28xx 1-1:0.0: board has no eeprom [ 502.772146][ T5313] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 502.780075][ T5313] em28xx 1-1:0.0: dvb set to bulk mode. [ 502.792807][ T8] em28xx 1-1:0.0: Binding DVB extension [ 502.802278][ T5273] usb 3-1: device descriptor read/64, error -71 [ 503.502684][ T5273] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 503.616198][ T5313] usb 1-1: USB disconnect, device number 15 [ 503.623452][ T5313] em28xx 1-1:0.0: Disconnecting em28xx [ 503.656583][ T7980] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 503.760498][ T8] em28xx 1-1:0.0: Registering input extension [ 503.802265][ T5273] usb 3-1: device descriptor read/64, error -71 [ 503.882054][ T8] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 503.889356][ T8] Registered IR keymap rc-empty [ 503.969856][ T8] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 503.998851][ T5273] usb usb3-port1: attempt power cycle [ 504.015281][ T1167] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 504.077108][ T8] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 504.269584][ T8] em28xx 1-1:0.0: Input extension successfully initialized [ 504.277728][ T5313] em28xx 1-1:0.0: Closing input extension [ 504.322142][ T1167] usb 4-1: device descriptor read/64, error -71 [ 504.347673][ T5313] em28xx 1-1:0.0: Freeing device [ 504.442632][ T5273] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 504.497260][ T5273] usb 3-1: device descriptor read/8, error -71 [ 504.564791][ T1167] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 504.732207][ T1167] usb 4-1: device descriptor read/64, error -71 [ 504.926629][ T1167] usb usb4-port1: attempt power cycle [ 505.042724][ T8004] sctp: [Deprecated]: syz.1.548 (pid 8004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.042724][ T8004] Use struct sctp_sack_info instead [ 505.042809][ T5273] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 505.143272][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 505.157560][ T5273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.183587][ T5273] usb 3-1: config 0 has no interfaces? [ 505.209036][ T5273] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 505.233660][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 505.250080][ T5273] usb 3-1: Product: syz [ 505.256660][ T5273] usb 3-1: SerialNumber: syz [ 505.266191][ T5273] usb 3-1: config 0 descriptor?? [ 505.282423][ T1167] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 505.318498][ T1167] usb 4-1: device descriptor read/8, error -71 [ 505.654593][ T1167] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 505.694089][ T8000] vlan2: entered promiscuous mode [ 505.709284][ T1167] usb 4-1: device descriptor read/8, error -71 [ 505.729195][ T8000] bridge0: entered promiscuous mode [ 505.766847][ T8000] bridge0: port 3(vlan2) entered blocking state [ 505.822222][ T8000] bridge0: port 3(vlan2) entered disabled state [ 505.828728][ T8000] vlan2: entered allmulticast mode [ 505.841884][ T8000] bridge0: entered allmulticast mode [ 505.872208][ T5271] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 505.903827][ T1167] usb usb4-port1: unable to enumerate USB device [ 505.911731][ T8000] vlan2: left allmulticast mode [ 505.916753][ T8000] bridge0: left allmulticast mode [ 505.925497][ T8000] bridge0: left promiscuous mode [ 506.027605][ T8011] syzkaller0: entered promiscuous mode [ 506.037030][ T5271] usb 1-1: Using ep0 maxpacket: 16 [ 506.054728][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 506.072258][ T8011] syzkaller0: entered allmulticast mode [ 506.080351][ T5271] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 506.105130][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.134995][ T5271] usb 1-1: Product: syz [ 506.148997][ T5271] usb 1-1: Manufacturer: syz [ 506.165552][ T5271] usb 1-1: SerialNumber: syz [ 506.207335][ T5271] usb 1-1: config 0 descriptor?? [ 506.220252][ T5271] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 506.232531][ T5271] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 506.539362][ T6032] usb 3-1: USB disconnect, device number 26 [ 507.028055][ T5271] em28xx 1-1:0.0: chip ID is em2874 [ 508.307419][ T5271] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 508.325983][ T5271] em28xx 1-1:0.0: board has no eeprom [ 508.397652][ T5271] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 508.423385][ T5271] em28xx 1-1:0.0: dvb set to bulk mode. [ 508.429060][ T5273] em28xx 1-1:0.0: Binding DVB extension [ 508.587806][ T5273] em28xx 1-1:0.0: Registering input extension [ 508.685691][ T5273] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 508.692517][ T5273] Registered IR keymap rc-empty [ 508.710967][ T5273] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 508.733972][ T5273] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 508.789400][ T8044] netlink: 'syz.2.556': attribute type 1 has an invalid length. [ 508.800708][ T5273] em28xx 1-1:0.0: Input extension successfully initialized [ 511.023222][ T6032] usb 1-1: USB disconnect, device number 16 [ 511.029991][ T6032] em28xx 1-1:0.0: Disconnecting em28xx [ 511.062103][ T6032] em28xx 1-1:0.0: Closing input extension [ 511.317002][ T6032] em28xx 1-1:0.0: Freeing device [ 511.398007][ T8062] sctp: [Deprecated]: syz.0.560 (pid 8062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.398007][ T8062] Use struct sctp_sack_info instead [ 512.692294][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 512.898407][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 513.294022][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.482644][ T8] usb 3-1: config 0 has no interfaces? [ 513.718636][ T8] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 513.740941][ T8] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 513.749852][ T8] usb 3-1: Product: syz [ 513.754141][ T8] usb 3-1: SerialNumber: syz [ 513.760932][ T8] usb 3-1: config 0 descriptor?? [ 515.361225][ T5313] usb 3-1: USB disconnect, device number 27 [ 517.492621][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 517.657085][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 517.842075][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 517.851186][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.864110][ T8] usb 1-1: config 0 descriptor?? [ 517.895246][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 518.777662][ T8128] sctp: [Deprecated]: syz.2.575 (pid 8128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.777662][ T8128] Use struct sctp_sack_info instead [ 519.443062][ T8] usb 1-1: USB disconnect, device number 17 [ 525.232246][ T3373] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 525.333447][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.452974][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.462530][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.470538][ T5915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.486034][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.508959][ T8166] netlink: 'syz.2.586': attribute type 9 has an invalid length. [ 525.545805][ T8166] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.586'. [ 525.582858][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 525.590369][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 525.726551][ T5915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.737534][ T3373] usb 5-1: Using ep0 maxpacket: 8 [ 525.748669][ T3373] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.388971][ T8167] netlink: 'syz.2.586': attribute type 9 has an invalid length. [ 526.430624][ T8167] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.586'. [ 526.476777][ T5915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.481192][ T3373] usb 5-1: config 0 has no interfaces? [ 526.494712][ T3373] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 526.513249][ T3373] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 526.524528][ T3373] usb 5-1: Product: syz [ 526.542722][ T3373] usb 5-1: SerialNumber: syz [ 526.566341][ T3373] usb 5-1: config 0 descriptor?? [ 526.760949][ T5915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.791199][ T8152] vlan2: entered promiscuous mode [ 526.796884][ T8152] bridge0: entered promiscuous mode [ 526.805663][ T8152] bridge0: port 3(vlan2) entered blocking state [ 526.812780][ T8152] bridge0: port 3(vlan2) entered disabled state [ 526.819413][ T8152] vlan2: entered allmulticast mode [ 526.826045][ T8152] bridge0: entered allmulticast mode [ 526.846025][ T8152] vlan2: left allmulticast mode [ 526.851315][ T8152] bridge0: left allmulticast mode [ 526.876127][ T8152] bridge0: left promiscuous mode [ 526.920942][ T8182] sctp: [Deprecated]: syz.1.589 (pid 8182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.920942][ T8182] Use struct sctp_sack_info instead [ 527.270279][ T5313] usb 5-1: USB disconnect, device number 16 [ 527.683586][ T5238] Bluetooth: hci1: command tx timeout [ 527.926254][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 528.189894][ T5915] bridge_slave_1: left allmulticast mode [ 528.347934][ T5915] bridge_slave_1: left promiscuous mode [ 528.353968][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.359293][ T8192] netlink: 'syz.1.592': attribute type 9 has an invalid length. [ 528.384201][ T8192] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.592'. [ 528.413201][ T5915] bridge_slave_0: left allmulticast mode [ 528.422096][ T5915] bridge_slave_0: left promiscuous mode [ 528.425630][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 528.427874][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.474991][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.501010][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.512957][ T8195] dccp_flush_write_queue: CCID did not manage to send all packets [ 528.538459][ T8] usb 3-1: config 0 descriptor?? [ 528.556803][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 529.817789][ T5238] Bluetooth: hci1: command tx timeout [ 529.999076][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.037104][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.058976][ T5915] bond0 (unregistering): Released all slaves [ 530.090273][ T8163] chnl_net:caif_netlink_parms(): no params data found [ 530.132166][ T8194] netlink: 'syz.1.592': attribute type 9 has an invalid length. [ 530.139884][ T8194] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.592'. [ 532.092137][ T5227] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.098288][ T5227] Bluetooth: hci1: command tx timeout [ 532.114174][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 532.220254][ T5273] usb 3-1: USB disconnect, device number 28 [ 532.345398][ T8163] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.383368][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.409976][ T8163] bridge_slave_0: entered allmulticast mode [ 533.326126][ T8163] bridge_slave_0: entered promiscuous mode [ 533.365518][ T8163] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.420995][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.455120][ T8163] bridge_slave_1: entered allmulticast mode [ 533.504022][ T8163] bridge_slave_1: entered promiscuous mode [ 533.557678][ T8247] netlink: 'syz.4.600': attribute type 9 has an invalid length. [ 533.565977][ T8247] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.600'. [ 534.082749][ T5915] hsr_slave_0: left promiscuous mode [ 534.173291][ T5238] Bluetooth: hci1: command tx timeout [ 534.250590][ T5915] hsr_slave_1: left promiscuous mode [ 534.484589][ T30] audit: type=1326 audit(1726801425.080:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8256 comm="syz.1.602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x0 [ 535.299598][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.331521][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.532845][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.550728][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.560605][ T8265] capability: warning: `syz.1.604' uses deprecated v2 capabilities in a way that may be insecure [ 535.650292][ T5915] veth1_macvtap: left promiscuous mode [ 535.678059][ T5915] veth0_macvtap: left promiscuous mode [ 535.709745][ T5915] veth1_vlan: left promiscuous mode [ 535.721259][ T5915] veth0_vlan: left promiscuous mode [ 535.912222][ T3373] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 536.072347][ T3373] usb 1-1: device descriptor read/64, error -71 [ 536.182527][ T5915] pimreg (unregistering): left allmulticast mode [ 536.575047][ T3373] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 536.764817][ T3373] usb 1-1: device descriptor read/64, error -71 [ 536.882497][ T3373] usb usb1-port1: attempt power cycle [ 537.262409][ T3373] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 537.365026][ T3373] usb 1-1: device descriptor read/8, error -71 [ 537.474909][ T5273] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 537.672824][ T3373] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 537.741880][ T5273] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 537.757606][ T3373] usb 1-1: device descriptor read/8, error -71 [ 537.870895][ T5273] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.900052][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.932475][ T5273] usb 5-1: config 0 descriptor?? [ 537.941320][ T5273] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 537.949515][ T3373] usb usb1-port1: unable to enumerate USB device [ 538.235513][ T5915] team0 (unregistering): Port device team_slave_1 removed [ 538.361752][ T5915] team0 (unregistering): Port device team_slave_0 removed [ 540.466033][ T5313] usb 5-1: USB disconnect, device number 17 [ 540.705356][ T8300] netlink: 'syz.4.612': attribute type 9 has an invalid length. [ 540.724392][ T8300] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.612'. [ 540.798133][ T8300] dccp_flush_write_queue: CCID did not manage to send all packets [ 541.033097][ T30] audit: type=1326 audit(1726801431.630:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8302 comm="syz.4.613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90f657def9 code=0x0 [ 541.287369][ T5227] Bluetooth: hci0: command 0x0c1a tx timeout [ 541.309153][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 541.318192][ T8163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.410971][ T8163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.689318][ T8163] team0: Port device team_slave_0 added [ 542.816561][ T8163] team0: Port device team_slave_1 added [ 542.989980][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.047157][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.196084][ T8163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.241805][ T8163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.292906][ T8163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.352425][ T8163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.239171][ T8163] hsr_slave_0: entered promiscuous mode [ 546.163481][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 547.164367][ T8163] hsr_slave_1: entered promiscuous mode [ 547.254602][ T8163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.262300][ T8163] Cannot create hsr debugfs directory [ 550.129473][ T8354] netlink: 'syz.0.623': attribute type 9 has an invalid length. [ 550.164746][ T8354] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.623'. [ 550.402960][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 550.414257][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 550.422769][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 550.431443][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 550.451686][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 550.462128][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.779266][ T8361] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 551.480296][ T8356] chnl_net:caif_netlink_parms(): no params data found [ 551.600907][ T8163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.721002][ T8163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.772152][ T5227] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 551.991670][ T8163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 552.112354][ T8163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 552.314730][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.399816][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.453260][ T8356] bridge_slave_0: entered allmulticast mode [ 552.513905][ T8356] bridge_slave_0: entered promiscuous mode [ 552.565699][ T5227] Bluetooth: hci3: command tx timeout [ 552.583634][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.672206][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.694831][ T8356] bridge_slave_1: entered allmulticast mode [ 552.701873][ T8356] bridge_slave_1: entered promiscuous mode [ 552.854912][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.869658][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.883186][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.917038][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.924859][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 552.962587][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 552.968681][ T8356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.093966][ T8356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.708059][ T8356] team0: Port device team_slave_0 added [ 553.955497][ T8356] team0: Port device team_slave_1 added [ 554.642235][ T5238] Bluetooth: hci3: command tx timeout [ 554.687913][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.751231][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.786778][ T8356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.045440][ T5238] Bluetooth: hci6: command tx timeout [ 556.110624][ T6031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.400031][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.803104][ T5238] Bluetooth: hci3: command tx timeout [ 556.922135][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.082110][ T8356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.183017][ T8416] netlink: 'syz.0.632': attribute type 9 has an invalid length. [ 557.222061][ T8416] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.632'. [ 557.316135][ T6031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.744577][ T6031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.789115][ T8428] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 557.837988][ T8356] hsr_slave_0: entered promiscuous mode [ 557.857075][ T8356] hsr_slave_1: entered promiscuous mode [ 557.937306][ T8356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.996404][ T8356] Cannot create hsr debugfs directory [ 558.083101][ T5238] Bluetooth: hci6: command tx timeout [ 558.255391][ T6031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.962260][ T5238] Bluetooth: hci3: command tx timeout [ 559.186701][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 560.106180][ T8163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.162516][ T5238] Bluetooth: hci6: command tx timeout [ 560.292760][ T6031] bridge_slave_1: left allmulticast mode [ 560.310967][ T6031] bridge_slave_1: left promiscuous mode [ 560.331394][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.351670][ T6031] bridge_slave_0: left allmulticast mode [ 560.364639][ T6031] bridge_slave_0: left promiscuous mode [ 560.734652][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.407783][ T5238] Bluetooth: hci6: command tx timeout [ 563.263374][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.282303][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.213564][ T8499] netlink: 'syz.1.642': attribute type 1 has an invalid length. [ 566.805694][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.826251][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.848492][ T6031] bond0 (unregistering): Released all slaves [ 567.178167][ T8163] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.244873][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.252157][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.427893][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.451400][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.477934][ T8393] bridge_slave_0: entered allmulticast mode [ 567.501271][ T8393] bridge_slave_0: entered promiscuous mode [ 567.581758][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.589009][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.655836][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.676968][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.689705][ T8393] bridge_slave_1: entered allmulticast mode [ 567.705503][ T8393] bridge_slave_1: entered promiscuous mode [ 567.848874][ T6031] hsr_slave_0: left promiscuous mode [ 567.886625][ T6031] hsr_slave_1: left promiscuous mode [ 567.900852][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.917045][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.951106][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.959070][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.025271][ T6031] veth1_macvtap: left promiscuous mode [ 568.030969][ T6031] veth0_macvtap: left promiscuous mode [ 568.048586][ T6031] veth1_vlan: left promiscuous mode [ 568.057728][ T6031] veth0_vlan: left promiscuous mode [ 568.899663][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 568.949399][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 569.485486][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.497568][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.657762][ T30] audit: type=1326 audit(1726801460.250:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 569.659840][ T8544] FAULT_INJECTION: forcing a failure. [ 569.659840][ T8544] name failslab, interval 1, probability 0, space 0, times 0 [ 569.682128][ T30] audit: type=1326 audit(1726801460.250:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 569.727970][ T30] audit: type=1326 audit(1726801460.250:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 569.737674][ T8544] CPU: 0 UID: 0 PID: 8544 Comm: syz.1.646 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 569.750607][ T30] audit: type=1326 audit(1726801460.250:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 569.759516][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 569.759535][ T8544] Call Trace: [ 569.759544][ T8544] [ 569.759554][ T8544] dump_stack_lvl+0x241/0x360 [ 569.759598][ T8544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.759632][ T8544] ? __pfx__printk+0x10/0x10 [ 569.759666][ T8544] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 569.759699][ T8544] ? __pfx___might_resched+0x10/0x10 [ 569.759735][ T8544] should_fail_ex+0x3b0/0x4e0 [ 569.827632][ T8544] should_failslab+0xac/0x100 [ 569.832344][ T8544] ? __alloc_skb+0x1c3/0x440 [ 569.836963][ T8544] kmem_cache_alloc_node_noprof+0x71/0x320 [ 569.842792][ T8544] __alloc_skb+0x1c3/0x440 [ 569.847232][ T8544] ? __pfx___alloc_skb+0x10/0x10 [ 569.852188][ T8544] ? rcu_is_watching+0x15/0xb0 [ 569.856966][ T8544] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 569.862350][ T8544] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 569.868002][ T8544] audit_log_start+0x186/0xa30 [ 569.872785][ T8544] ? __pfx_audit_log_start+0x10/0x10 [ 569.878088][ T8544] ? migrate_enable+0x3b5/0x520 [ 569.882966][ T8544] ? __pfx_migrate_enable+0x10/0x10 [ 569.888195][ T8544] ? __pfx___cant_migrate+0x10/0x10 [ 569.893416][ T8544] audit_seccomp+0x63/0x1f0 [ 569.897948][ T8544] ? migrate_disable+0xce/0x180 [ 569.902820][ T8544] __seccomp_filter+0xb38/0x1fe0 [ 569.907788][ T8544] ? vfs_write+0x7bf/0xc90 [ 569.912232][ T8544] ? __pfx___seccomp_filter+0x10/0x10 [ 569.917630][ T8544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 569.923634][ T8544] ? __fget_files+0x3f3/0x470 [ 569.928357][ T8544] ? __secure_computing+0x125/0x370 [ 569.933589][ T8544] syscall_trace_enter+0xa8/0x150 [ 569.938638][ T8544] do_syscall_64+0xcc/0x230 [ 569.943170][ T8544] ? clear_bhb_loop+0x35/0x90 [ 569.947866][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.953776][ T8544] RIP: 0033:0x7ff5c217def9 [ 569.958205][ T8544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.977830][ T8544] RSP: 002b:00007ff5c2e91038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 569.986273][ T8544] RAX: ffffffffffffffda RBX: 00007ff5c2335f80 RCX: 00007ff5c217def9 [ 569.994258][ T8544] RDX: 0000000020000000 RSI: 0000000020000280 RDI: 00000000200001c0 [ 570.002272][ T8544] RBP: 00007ff5c2e91090 R08: 0000000000000000 R09: 0000000000000000 [ 570.010277][ T8544] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 570.018433][ T8544] R13: 0000000000000000 R14: 00007ff5c2335f80 R15: 00007fffcb8f3ce8 [ 570.026431][ T8544] [ 570.031743][ T30] audit: type=1326 audit(1726801460.250:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 570.053874][ T30] audit: type=1326 audit(1726801460.250:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x7ffc0000 [ 570.075519][ T30] audit: type=1326 audit(1726801460.250:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5c217c890 code=0x7ffc0000 [ 570.097259][ T30] audit: type=1326 audit(1726801460.250:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5c217c9df code=0x7ffc0000 [ 570.151903][ T8544] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 570.159784][ T8544] audit: out of memory in audit_log_start [ 570.171195][ T8393] team0: Port device team_slave_0 added [ 570.205442][ T8545] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 570.228814][ T8393] team0: Port device team_slave_1 added [ 571.185289][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.220405][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.394330][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.423334][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.430515][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.759950][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.368549][ T8393] hsr_slave_0: entered promiscuous mode [ 572.376793][ T8393] hsr_slave_1: entered promiscuous mode [ 572.383732][ T8393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.393638][ T8393] Cannot create hsr debugfs directory [ 572.450279][ T8356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 572.479148][ T8356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 573.414793][ T6031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.440967][ T8573] netlink: 'syz.1.652': attribute type 9 has an invalid length. [ 573.450051][ T8573] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.652'. [ 573.466121][ T8573] dccp_flush_write_queue: CCID did not manage to send all packets [ 573.482493][ T8356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 573.649766][ T6031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.671664][ T8356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 574.911911][ T6031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.973956][ T6031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.156824][ T8163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.288283][ T6031] bridge_slave_1: left allmulticast mode [ 578.302485][ T6031] bridge_slave_1: left promiscuous mode [ 578.308328][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.354315][ T6031] bridge_slave_0: left allmulticast mode [ 578.360032][ T6031] bridge_slave_0: left promiscuous mode [ 578.367763][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.395392][ T8621] syz.1.660 uses obsolete (PF_INET,SOCK_PACKET) [ 579.945376][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.985300][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.999798][ T6031] bond0 (unregistering): Released all slaves [ 580.049983][ T8163] veth0_vlan: entered promiscuous mode [ 580.093442][ T8163] veth1_vlan: entered promiscuous mode [ 580.160378][ T8163] veth0_macvtap: entered promiscuous mode [ 580.187219][ T8163] veth1_macvtap: entered promiscuous mode [ 580.219061][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.240520][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.251061][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.261984][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.272026][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.283013][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.373082][ T8634] input: syz0 as /devices/virtual/input/input37 [ 580.531202][ T8163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.139907][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.158050][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.182112][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.193224][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.222988][ T8163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.234807][ T8163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.247938][ T8163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.311461][ T8163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.334649][ T8643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 581.345661][ T8163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.360071][ T8163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.369575][ T8163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.454959][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.582202][ T6031] hsr_slave_0: left promiscuous mode [ 581.588690][ T6031] hsr_slave_1: left promiscuous mode [ 581.609955][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.622244][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.632961][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.640454][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.661684][ T6031] veth1_macvtap: left promiscuous mode [ 581.667794][ T6031] veth0_macvtap: left promiscuous mode [ 581.673537][ T6031] veth1_vlan: left promiscuous mode [ 581.679469][ T6031] veth0_vlan: left promiscuous mode [ 584.870764][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 584.900645][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 584.909847][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.235053][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.247831][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 585.263837][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.622050][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 585.732355][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 586.613745][ T8356] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.857288][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.864438][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.941891][ T8393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 586.993879][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.001070][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.041715][ T8393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 587.093707][ T8393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 587.378122][ T5227] Bluetooth: hci2: command tx timeout [ 587.389336][ T8393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 587.484496][ T8684] input: syz0 as /devices/virtual/input/input39 [ 588.835528][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.494976][ T5227] Bluetooth: hci2: command tx timeout [ 589.698737][ T6031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.886786][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 589.967072][ T6031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.031270][ T6031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.070994][ T8393] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.108787][ T6031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.119920][ T5273] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 590.138397][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.147295][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.155148][ T8662] bridge_slave_0: entered allmulticast mode [ 590.163426][ T8662] bridge_slave_0: entered promiscuous mode [ 590.171330][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.179374][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 590.184763][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.195084][ T8662] bridge_slave_1: entered allmulticast mode [ 590.201901][ T8662] bridge_slave_1: entered promiscuous mode [ 590.210108][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.217270][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.240939][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.258120][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.265376][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.273618][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 590.283615][ T5273] usb 1-1: config index 0 descriptor too short (expected 64742, got 92) [ 590.292239][ T5273] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 590.302673][ T5273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.313676][ T5273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 590.323010][ T5273] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.344044][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 590.351446][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 590.371473][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.372677][ T5273] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.384082][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 590.403574][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.403794][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.418132][ T5273] usb 1-1: Product: syz [ 590.423268][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.427002][ T5273] usb 1-1: Manufacturer: syz [ 590.438352][ T5273] usb 1-1: SerialNumber: syz [ 590.440943][ T8] usb 2-1: Product: syz [ 590.451057][ T5273] cdc_ncm 1-1:1.0: skipping garbage [ 590.458727][ T5273] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 590.474795][ T8] usb 2-1: Manufacturer: syz [ 590.479525][ T8] usb 2-1: SerialNumber: syz [ 590.481020][ T5273] cdc_ncm 1-1:1.0: bind() failure [ 590.509046][ T8] usb 2-1: config 0 descriptor?? [ 590.523375][ T8] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 590.546607][ T8] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 590.557142][ T8662] team0: Port device team_slave_0 added [ 590.603267][ T8662] team0: Port device team_slave_1 added [ 590.681885][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.696344][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.707837][ T1167] usb 1-1: USB disconnect, device number 22 [ 590.723426][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.797930][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.809427][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.835364][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.843667][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.870303][ T6031] bridge_slave_1: left allmulticast mode [ 590.886989][ T6031] bridge_slave_1: left promiscuous mode [ 590.901627][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.916057][ T6031] bridge_slave_0: left allmulticast mode [ 590.931824][ T6031] bridge_slave_0: left promiscuous mode [ 590.938024][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.170224][ T8] em28xx 2-1:0.0: chip ID is em2874 [ 591.427091][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.450139][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.471244][ T6031] bond0 (unregistering): Released all slaves [ 591.534138][ T5238] Bluetooth: hci2: command tx timeout [ 591.571110][ T8662] hsr_slave_0: entered promiscuous mode [ 591.585915][ T8662] hsr_slave_1: entered promiscuous mode [ 591.626447][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.654871][ T8662] Cannot create hsr debugfs directory [ 591.943217][ T6031] hsr_slave_0: left promiscuous mode [ 591.974454][ T6031] hsr_slave_1: left promiscuous mode [ 592.006981][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.043353][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.082391][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.112882][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.206337][ T6031] veth1_macvtap: left promiscuous mode [ 592.221472][ T6031] veth0_macvtap: left promiscuous mode [ 592.243490][ T6031] veth1_vlan: left promiscuous mode [ 592.249004][ T6031] veth0_vlan: left promiscuous mode [ 592.472622][ T8] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 592.480758][ T8] em28xx 2-1:0.0: board has no eeprom [ 592.612029][ T8] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 592.864339][ T8] em28xx 2-1:0.0: dvb set to bulk mode. [ 592.870924][ T5313] em28xx 2-1:0.0: Binding DVB extension [ 592.881391][ T8] usb 2-1: USB disconnect, device number 14 [ 592.888937][ T8] em28xx 2-1:0.0: Disconnecting em28xx [ 593.025649][ T8757] input: syz0 as /devices/virtual/input/input40 [ 593.642135][ T5238] Bluetooth: hci2: command tx timeout [ 593.743123][ T5313] em28xx 2-1:0.0: Registering input extension [ 593.887458][ T5313] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 593.897513][ T5313] Registered IR keymap rc-empty [ 593.904951][ T5313] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 593.971301][ T5313] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input41 [ 594.023031][ T5313] em28xx 2-1:0.0: Input extension successfully initialized [ 594.053917][ T8] em28xx 2-1:0.0: Closing input extension [ 594.263135][ T8] em28xx 2-1:0.0: Freeing device [ 595.196363][ T8770] Falling back ldisc for pty22. [ 595.381758][ T8766] delete_channel: no stack [ 595.737543][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 595.737567][ T30] audit: type=1800 audit(1726801486.330:46): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.683" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 595.790525][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 595.874700][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 597.160111][ T8798] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 597.716325][ T8356] veth0_vlan: entered promiscuous mode [ 597.878254][ T8356] veth1_vlan: entered promiscuous mode [ 597.943007][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.140919][ T8356] veth0_macvtap: entered promiscuous mode [ 598.247096][ T8356] veth1_macvtap: entered promiscuous mode [ 598.383562][ T5273] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 598.420761][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.452050][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.477868][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.499102][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.522698][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.543682][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.562036][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.568306][ T5273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.582019][ T8356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 598.582047][ T8356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.583410][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.622055][ T5273] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 598.631263][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.668399][ T5273] usb 2-1: config 0 descriptor?? [ 598.700490][ T5273] pwc: Askey VC010 type 2 USB webcam detected. [ 598.735785][ T8356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.767656][ T8356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.786917][ T8356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.807172][ T8356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.958317][ T5273] pwc: send_video_command error -71 [ 598.972687][ T5273] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 598.984576][ T5273] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 599.017951][ T5273] usb 2-1: USB disconnect, device number 15 [ 599.118052][ T8393] veth0_vlan: entered promiscuous mode [ 599.154954][ T8393] veth1_vlan: entered promiscuous mode [ 599.336701][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.365584][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.405046][ T8787] coredump: 525(syz.0.683): written to core: VMAs: 43, size 100081664; core: 64542374 bytes, pos 100089856 [ 599.412698][ T8393] veth0_macvtap: entered promiscuous mode [ 599.528318][ T8393] veth1_macvtap: entered promiscuous mode [ 599.572435][ T8662] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 599.595366][ T8662] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 599.624803][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.630030][ T8662] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 599.650055][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.664074][ T30] audit: type=1326 audit(1726801490.260:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.1.690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5c217def9 code=0x0 [ 599.700637][ T8662] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 599.800856][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.850219][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.894140][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.912409][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.938606][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.968854][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.001268][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.094028][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.220873][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.405982][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.432597][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.444115][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.483617][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.612087][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.023054][ T8835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.621'. [ 601.045931][ T8393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.077283][ T8393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.102070][ T8393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.034036][ T8393] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.786305][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.841034][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.853319][ T8861] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 602.954798][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.990632][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.096343][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.107531][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.143521][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.150655][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.270312][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.277491][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.281714][ T8865] fuse: Unknown parameter '0x0000000000000003' [ 603.337486][ T8662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 603.352922][ T8662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.058287][ T30] audit: type=1326 audit(1726801494.650:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.0.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76ef77def9 code=0x0 [ 604.325407][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.422397][ T5271] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 604.638632][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.645913][ T8662] veth0_vlan: entered promiscuous mode [ 604.886270][ T5271] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 604.942357][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.116935][ T5271] usb 5-1: config 0 descriptor?? [ 605.134828][ T5271] pwc: Askey VC010 type 2 USB webcam detected. [ 605.135537][ T8662] veth1_vlan: entered promiscuous mode [ 605.583397][ T8877] vhci_hcd: invalid port number 0 [ 606.112254][ T1167] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 606.251288][ T5271] pwc: send_video_command error -71 [ 606.263215][ T5271] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 606.273421][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.281179][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.289082][ T5271] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 606.335872][ T8662] veth0_macvtap: entered promiscuous mode [ 606.353491][ T5271] usb 5-1: USB disconnect, device number 18 [ 606.360101][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.393300][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.395303][ T8662] veth1_macvtap: entered promiscuous mode [ 606.400832][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.448976][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.472776][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.480330][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.502372][ T1167] usb 2-1: config 0 has no interfaces? [ 606.507934][ T1167] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 606.518678][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.539900][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.541974][ T1167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.556601][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.576387][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.587732][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.594364][ T1167] usb 2-1: config 0 descriptor?? [ 606.617270][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.631602][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.651781][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.663896][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.682434][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.692456][ T8915] netlink: 'syz.0.706': attribute type 6 has an invalid length. [ 606.711603][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.719464][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.730440][ T8915] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.706'. [ 606.732120][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.750496][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.784744][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.785500][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.802136][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802173][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802198][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802223][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802249][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802275][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802301][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802326][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802351][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802377][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802403][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802429][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802455][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802482][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802509][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.802534][ T3373] hid-generic 0000:04AD:0000.000A: unknown main item tag 0x0 [ 606.825115][ T3373] hid-generic 0000:04AD:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 606.857089][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.940374][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.042815][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.067616][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.069872][ T1167] usb 2-1: USB disconnect, device number 16 [ 607.146771][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.211310][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.245306][ T8941] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 607.251986][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.293872][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.325942][ T30] audit: type=1326 audit(1726801497.920:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8942 comm="syz.4.711" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d637def9 code=0x0 [ 607.353117][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.403120][ T8662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.442549][ T8662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.494442][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.566361][ T8662] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.584622][ T8662] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.621746][ T8662] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.522462][ T8662] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.154706][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.204457][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.208990][ T5911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.281990][ T5911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.403401][ T8978] netlink: 40 bytes leftover after parsing attributes in process `syz.4.716'. [ 610.881029][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 611.028664][ T8982] netlink: 'syz.1.717': attribute type 9 has an invalid length. [ 611.064126][ T8982] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.717'. [ 611.128688][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.152455][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 611.173020][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.223991][ T8] usb 1-1: config 0 descriptor?? [ 611.244341][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 611.406664][ T30] audit: type=1326 audit(1726801502.000:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8992 comm="syz.4.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d637def9 code=0x0 [ 611.474494][ T8977] vhci_hcd: invalid port number 0 [ 611.504828][ T8] pwc: send_video_command error -71 [ 611.511791][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 611.539729][ T8] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 611.580335][ T8] usb 1-1: USB disconnect, device number 23 [ 611.699928][ T9008] netlink: 'syz.4.724': attribute type 1 has an invalid length. [ 614.530792][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.729'. [ 614.720619][ T9042] netlink: 'syz.4.732': attribute type 9 has an invalid length. [ 614.818356][ T9042] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.732'. [ 615.142093][ T30] audit: type=1326 audit(1726801505.720:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9044 comm="syz.0.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76ef77def9 code=0x0 [ 615.572153][ T5271] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 615.745283][ T5271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.803134][ T5271] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 615.841111][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.885740][ T5271] usb 1-1: config 0 descriptor?? [ 615.915429][ T5271] pwc: Askey VC010 type 2 USB webcam detected. [ 616.150062][ T9056] vhci_hcd: invalid port number 0 [ 616.193468][ T5271] pwc: send_video_command error -71 [ 616.238021][ T5271] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 616.259967][ T5271] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 616.282048][ T5271] usb 1-1: USB disconnect, device number 24 [ 616.905749][ T9073] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 617.103027][ T9079] input: syz1 as /devices/virtual/input/input42 [ 617.382778][ T9087] netlink: 'syz.3.747': attribute type 9 has an invalid length. [ 617.434172][ T9087] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.747'. [ 617.502120][ T5273] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 617.521288][ T9087] dccp_flush_write_queue: CCID did not manage to send all packets [ 617.640570][ T30] audit: type=1326 audit(1726801508.220:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9091 comm="syz.4.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d637def9 code=0x0 [ 617.696049][ T5273] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.724533][ T5273] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.757293][ T5273] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 617.776365][ T5273] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 617.788604][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.262832][ T9088] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 619.716434][ T5273] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 619.733556][ T5273] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input43 [ 619.803241][ T5271] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 619.812675][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 619.841571][ T5273] usb 1-1: USB disconnect, device number 25 [ 619.994103][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.019084][ T5271] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 620.034610][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.073838][ T5271] usb 5-1: config 0 descriptor?? [ 620.123258][ T5271] pwc: Askey VC010 type 2 USB webcam detected. [ 620.393517][ T9118] vhci_hcd: invalid port number 0 [ 620.521133][ T5271] pwc: send_video_command error -71 [ 620.540803][ T5271] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 620.562194][ T5271] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 620.595475][ T5271] usb 5-1: USB disconnect, device number 19 [ 620.625386][ T9132] netlink: 'syz.2.760': attribute type 9 has an invalid length. [ 620.657612][ T9132] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.760'. [ 620.701633][ T9138] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 622.080237][ T9162] batadv0: entered promiscuous mode [ 622.100634][ T9162] macsec1: entered promiscuous mode [ 622.132328][ T9162] macsec1: entered allmulticast mode [ 622.158164][ T9162] batadv0: entered allmulticast mode [ 622.175431][ T9162] batadv0: left allmulticast mode [ 622.180989][ T9162] batadv0: left promiscuous mode [ 622.386760][ T9170] netlink: 'syz.1.774': attribute type 9 has an invalid length. [ 622.415075][ T9170] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.774'. [ 622.457745][ T9170] dccp_flush_write_queue: CCID did not manage to send all packets [ 622.813103][ T9176] netlink: 'syz.3.775': attribute type 8 has an invalid length. [ 622.843630][ T9176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.331073][ T9192] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 623.430231][ T5271] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 623.606819][ T5271] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.637666][ T5271] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 623.669291][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.707574][ T5271] usb 4-1: config 0 descriptor?? [ 623.728344][ T5271] pwc: Askey VC010 type 2 USB webcam detected. [ 623.995446][ T9189] vhci_hcd: invalid port number 0 [ 624.134272][ T5271] pwc: send_video_command error -71 [ 624.146366][ T5271] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 624.160592][ T5271] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 624.209771][ T5271] usb 4-1: USB disconnect, device number 14 [ 624.484034][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.491136][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 738.541892][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 738.548909][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9172/1:b..l [ 738.557420][ C1] rcu: (detected by 1, t=10502 jiffies, g=41697, q=1471418 ncpus=2) [ 738.565523][ C1] task:syz.4.773 state:R running task stack:24912 pid:9172 tgid:9167 ppid:8393 flags:0x00004002 [ 738.579147][ C1] Call Trace: [ 738.582460][ C1] [ 738.585427][ C1] __schedule+0x17ae/0x4a10 [ 738.590001][ C1] ? __pfx___schedule+0x10/0x10 [ 738.594897][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 738.600928][ C1] ? __lock_acquire+0x1384/0x2050 [ 738.606008][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 738.611344][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 738.616502][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 738.622292][ C1] irqentry_exit+0x5e/0x90 [ 738.626745][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 738.632770][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 738.638094][ C1] Code: 2b 00 74 08 4c 89 f7 e8 7a f4 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 738.657753][ C1] RSP: 0018:ffffc900098b6e40 EFLAGS: 00000206 [ 738.663870][ C1] RAX: 0000000000000001 RBX: 1ffff92001316dd4 RCX: b155c5136ebb2f00 [ 738.671882][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aea00 RDI: ffffffff8c6009c0 [ 738.679892][ C1] RBP: ffffc900098b6fa0 R08: ffffffff94219887 R09: 1ffffffff2843310 [ 738.687903][ C1] R10: dffffc0000000000 R11: fffffbfff2843311 R12: 1ffff92001316dd0 [ 738.695956][ C1] R13: dffffc0000000000 R14: ffffc900098b6ea0 R15: 0000000000000246 [ 738.703998][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 738.709086][ C1] ? debug_check_no_obj_freed+0x561/0x580 [ 738.714875][ C1] ? page_ext_get+0x20/0x2a0 [ 738.719603][ C1] page_ext_get+0x3d/0x2a0 [ 738.724054][ C1] ? page_ext_get+0x20/0x2a0 [ 738.728689][ C1] __reset_page_owner+0x30/0x430 [ 738.733681][ C1] ? page_ext_get+0x1d6/0x2a0 [ 738.738409][ C1] free_unref_folios+0x100f/0x1ac0 [ 738.743581][ C1] folios_put_refs+0x76e/0x860 [ 738.748406][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 738.753742][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 738.758994][ C1] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 738.765376][ C1] shmem_undo_range+0x6de/0x1df0 [ 738.770366][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 738.775693][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 738.781138][ C1] ? __kernel_text_address+0xd/0x40 [ 738.786412][ C1] ? unwind_get_return_address+0x4d/0x90 [ 738.792122][ C1] ? __pfx_validate_chain+0x10/0x10 [ 738.797359][ C1] ? arch_stack_walk+0xfd/0x150 [ 738.802278][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 738.807975][ C1] shmem_evict_inode+0x29b/0xa80 [ 738.812976][ C1] ? inode_wait_for_writeback+0x111/0x2a0 [ 738.818751][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 738.824272][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 738.829526][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 738.835045][ C1] evict+0x4e8/0x9b0 [ 738.839003][ C1] ? __pfx_evict+0x10/0x10 [ 738.843482][ C1] ? iput+0x713/0xa50 [ 738.847514][ C1] __dentry_kill+0x20d/0x630 [ 738.852160][ C1] ? dput+0x37/0x2b0 [ 738.856094][ C1] dput+0x19f/0x2b0 [ 738.859948][ C1] __fput+0x5d2/0x880 [ 738.863982][ C1] task_work_run+0x24f/0x310 [ 738.868624][ C1] ? __pfx_task_work_run+0x10/0x10 [ 738.873787][ C1] ? switch_task_namespaces+0xe4/0x110 [ 738.879294][ C1] do_exit+0xa2f/0x27f0 [ 738.883514][ C1] ? __pfx_do_exit+0x10/0x10 [ 738.888160][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 738.893635][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 738.899672][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 738.906053][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 738.911224][ C1] do_group_exit+0x207/0x2c0 [ 738.915854][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 738.921115][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 738.926383][ C1] get_signal+0x176f/0x1810 [ 738.930948][ C1] ? __pfx_get_signal+0x10/0x10 [ 738.935859][ C1] arch_do_signal_or_restart+0x96/0x860 [ 738.941459][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 738.947664][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 738.953715][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 738.959487][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 738.965098][ C1] do_syscall_64+0x100/0x230 [ 738.969741][ C1] ? clear_bhb_loop+0x35/0x90 [ 738.974483][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.980423][ C1] RIP: 0033:0x7fd2d637def9 [ 738.984873][ C1] RSP: 002b:00007fd2d7197038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 738.993335][ C1] RAX: 0000000000010106 RBX: 00007fd2d6536058 RCX: 00007fd2d637def9 [ 739.001363][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 739.009499][ C1] RBP: 00007fd2d63f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 739.017516][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 739.025541][ C1] R13: 0000000000000000 R14: 00007fd2d6536058 R15: 00007ffc2154d018 [ 739.033572][ C1] [ 739.036650][ C1] rcu: rcu_preempt kthread starved for 7986 jiffies! g41697 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 739.047799][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 739.057808][ C1] rcu: RCU grace-period kthread stack dump: [ 739.063726][ C1] task:rcu_preempt state:R running task stack:26352 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 739.075514][ C1] Call Trace: [ 739.078821][ C1] [ 739.081786][ C1] __schedule+0x17ae/0x4a10 [ 739.086356][ C1] ? __pfx___schedule+0x10/0x10 [ 739.091254][ C1] ? __pfx_lock_release+0x10/0x10 [ 739.096332][ C1] ? __asan_memset+0x23/0x50 [ 739.100971][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 739.106825][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 739.113207][ C1] ? schedule+0x90/0x320 [ 739.117493][ C1] schedule+0x14b/0x320 [ 739.121691][ C1] schedule_timeout+0x1be/0x310 [ 739.126578][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 739.131990][ C1] ? __pfx_process_timeout+0x10/0x10 [ 739.137321][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 739.142919][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 739.147822][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 739.153090][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 739.159285][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 739.164628][ C1] ? finish_swait+0xd4/0x1e0 [ 739.169266][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 739.173911][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 739.179153][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 739.185094][ C1] ? __kthread_parkme+0x169/0x1d0 [ 739.190168][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 739.195423][ C1] kthread+0x2f0/0x390 [ 739.199528][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 739.204772][ C1] ? __pfx_kthread+0x10/0x10 [ 739.209412][ C1] ret_from_fork+0x4b/0x80 [ 739.213877][ C1] ? __pfx_kthread+0x10/0x10 [ 739.218502][ C1] ret_from_fork_asm+0x1a/0x30 [ 739.223355][ C1] [ 739.226404][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 739.232755][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 739.242765][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 739.252852][ C1] RIP: 0010:__asan_memset+0x5/0x50 [ 739.258014][ C1] Code: 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 [ 739.277669][ C1] RSP: 0018:ffffc90000a17bf0 EFLAGS: 00000246 [ 739.283784][ C1] RAX: 0000000000000000 RBX: ffffc90000a17c6c RCX: 0000000000000000 [ 739.291793][ C1] RDX: 0000000000000030 RSI: 0000000000000000 RDI: ffffc90000a17ca0 [ 739.299807][ C1] RBP: ffffc90000a17d50 R08: ffffc90000a17c77 R09: 0000000000000000 [ 739.307817][ C1] R10: ffffc90000a17c40 R11: fffff52000142f8f R12: 1ffff92000142f84 [ 739.315829][ C1] R13: dffffc0000000000 R14: ffffc90000a17c40 R15: 00000000181414ac [ 739.323850][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 739.332825][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.339450][ C1] CR2: 00007ffcae2409ac CR3: 000000005157c000 CR4: 00000000003506f0 [ 739.347471][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 739.355486][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 739.363497][ C1] Call Trace: [ 739.366824][ C1] [ 739.369699][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 739.376092][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 739.381794][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 739.387262][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 739.393140][ C1] ? timekeeping_advance+0x7ce/0xa90 [ 739.398486][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 739.404790][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 739.410217][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 739.415897][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 739.421160][ C1] ? update_process_times+0x1ce/0x230 [ 739.426577][ C1] ? tick_nohz_handler+0x37c/0x500 [ 739.431734][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 739.437236][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 739.442697][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 739.448484][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 739.454602][ C1] ? hrtimer_interrupt+0x396/0x990 [ 739.459784][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 739.465977][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 739.471826][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.478030][ C1] ? __asan_memset+0x5/0x50 [ 739.482678][ C1] __inet_dev_addr_type+0xdf/0x4f0 [ 739.487838][ C1] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 739.493688][ C1] ? NF_HOOK+0x29e/0x450 [ 739.497969][ C1] ? irq_exit_rcu+0x9/0x30 [ 739.502423][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 739.508298][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.514594][ C1] ? acpi_idle_enter+0xe4/0x140 [ 739.519488][ C1] ? cpuidle_enter_state+0x109/0x470 [ 739.524824][ C1] ? cpuidle_enter+0x5d/0xa0 [ 739.529461][ C1] ? do_idle+0x375/0x5d0 [ 739.533768][ C1] ? cpu_startup_entry+0x42/0x60 [ 739.538757][ C1] ? common_startup_64+0x13e/0x147 [ 739.544001][ C1] ? l3mdev_fib_table+0x14b/0x160 [ 739.549075][ C1] ip_route_me_harder+0x3a5/0x1300 [ 739.554248][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 739.559843][ C1] ? trace_kmalloc+0x1f/0xd0 [ 739.564475][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 739.571135][ C1] synproxy_send_tcp+0x356/0x6c0 [ 739.576148][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 739.582019][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 739.588393][ C1] ? synproxy_pernet+0x45/0x270 [ 739.593469][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 739.598724][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 739.604498][ C1] ? nf_ip_checksum+0x13a/0x500 [ 739.609408][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 739.614670][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 739.620444][ C1] ? __pfx_validate_chain+0x10/0x10 [ 739.625692][ C1] nft_do_chain+0x4ad/0x1da0 [ 739.630346][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 739.635417][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 739.640867][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 739.646131][ C1] nft_do_chain_inet+0x418/0x6b0 [ 739.651125][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 739.656632][ C1] ? ipt_do_table+0x312/0x1860 [ 739.661473][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 739.666974][ C1] nf_hook_slow+0xc3/0x220 [ 739.671507][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 739.677526][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 739.683634][ C1] NF_HOOK+0x29e/0x450 [ 739.687745][ C1] ? NF_HOOK+0x9a/0x450 [ 739.691937][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 739.696565][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 739.702588][ C1] ? ip_rcv_finish+0x406/0x560 [ 739.707391][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 739.712540][ C1] NF_HOOK+0x3a4/0x450 [ 739.716643][ C1] ? __lock_acquire+0x1384/0x2050 [ 739.721728][ C1] ? NF_HOOK+0x9a/0x450 [ 739.725933][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 739.730560][ C1] ? ip_rcv_core+0x801/0xd10 [ 739.735196][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 739.740358][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 739.744913][ C1] __netif_receive_skb+0x2bf/0x650 [ 739.750110][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 739.755196][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 739.760865][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 739.766895][ C1] ? __pfx_lock_release+0x10/0x10 [ 739.771967][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 739.777123][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 739.782230][ C1] process_backlog+0x662/0x15b0 [ 739.787134][ C1] ? process_backlog+0x33b/0x15b0 [ 739.792211][ C1] ? __pfx_process_backlog+0x10/0x10 [ 739.797544][ C1] ? xdp_do_check_flushed+0x217/0x240 [ 739.802964][ C1] __napi_poll+0xcb/0x490 [ 739.807345][ C1] net_rx_action+0x89b/0x1240 [ 739.812087][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 739.817272][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 739.823664][ C1] handle_softirqs+0x2c5/0x980 [ 739.828482][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 739.833295][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 739.838633][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 739.843882][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 739.848515][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 739.853770][ C1] irq_exit_rcu+0x9/0x30 [ 739.858052][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 739.863737][ C1] [ 739.866693][ C1] [ 739.869656][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.875682][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 739.881003][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 55 48 b3 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 739.900655][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 739.906803][ C1] RAX: ffff88801ced8000 RBX: ffff888020aac064 RCX: 0000000001851761 [ 739.914862][ C1] RDX: 0000000000000001 RSI: ffff888020aac000 RDI: ffff888020aac064 [ 739.922881][ C1] RBP: 000000000003a878 R08: ffff8880b8937e9b R09: 1ffff11017126fd3 [ 739.930899][ C1] R10: dffffc0000000000 R11: ffffffff8bb67c80 R12: ffff88801ffc1800 [ 739.938928][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f112840 [ 739.946950][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 739.952325][ C1] acpi_idle_enter+0xe4/0x140 [ 739.957049][ C1] cpuidle_enter_state+0x109/0x470 [ 739.962216][ C1] ? __pfx_menu_select+0x10/0x10 [ 739.967201][ C1] cpuidle_enter+0x5d/0xa0 [ 739.971721][ C1] do_idle+0x375/0x5d0 [ 739.975831][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 739.982213][ C1] ? __pfx_do_idle+0x10/0x10 [ 739.986841][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 739.992110][ C1] cpu_startup_entry+0x42/0x60 [ 739.996915][ C1] start_secondary+0x102/0x110 [ 740.001723][ C1] common_startup_64+0x13e/0x147 [ 740.006718][ C1] [ 742.625132][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 743.726128][ T1267] ieee802154 phy1 wpan1: encryption failed: -22