last executing test programs: 1m26.050570455s ago: executing program 3 (id=413): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89fd, &(0x7f0000000180)={'bridge_slave_1\x00', 0x101}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x84}, {0xbd1}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x20) 1m22.08462384s ago: executing program 3 (id=425): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setuid(0xee01) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f00000001c0)={"3c9c4cf3d3ca1dfa7be938aaf5cbb540f53bc2d492d188af35c79db17de648af", r2, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000002340)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) close_range(r6, 0xffffffffffffffff, 0x0) 1m21.729346579s ago: executing program 3 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a281b0000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m18.280108818s ago: executing program 3 (id=437): r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400005000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) 1m16.49756058s ago: executing program 3 (id=442): mknod(&(0x7f0000000300)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{}, &(0x7f00000008c0), &(0x7f00000000c0)}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x5}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0xc, 0x2}, {0x9}, {0x0, 0x2}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0xa, 0x5}, {0x5, 0x2}, {0xa, 0x3}, {0x1, 0x2}, {0xe}]}, @union={0xe, 0x8, 0x0, 0x5, 0x1, 0x4, [{0xe, 0x0, 0x6}, {0x4, 0x0, 0x3}, {0x5, 0x2}, {0x7, 0x1, 0x1}, {0x2, 0x0, 0x4}, {0x2, 0x0, 0x6}, {0x3, 0x2, 0x1}, {0x8, 0x2, 0x10}]}]}, {0x0, [0x61]}}, &(0x7f0000000500)=""/134, 0x107, 0x86, 0x1, 0x8, 0x0, @void, @value}, 0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000024000/0x1000)=nil}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) mount$tmpfs(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1008800, &(0x7f0000000c80)={[{@gid={'gid', 0x3d, r6}}, {@gid={'gid', 0x3d, r7}}, {@huge_within_size}, {@huge_within_size}, {@grpquota}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}], [{@euid_gt={'euid>', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x36, 0x34, 0x32, 0x33, 0x39, 0x35, 0x38], 0x2d, [0x64, 0x62, 0x33, 0x36], 0x2d, [0x30, 0x38, 0x65, 0x63], 0x2d, [0x35, 0x36, 0x62, 0x32], 0x2d, [0x62, 0x65, 0x0, 0x65, 0x38, 0x39, 0x31, 0x35]}}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '#%'}}, {@subj_type={'subj_type', 0x3d, 'sit0\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '/dev/kvm\x00'}}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x105, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x6, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r16 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f0000000040)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x4964}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @generic={0xd, 0x8, 0xc, 0x2, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x79, &(0x7f0000000280)=""/121, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x9, r1, 0x8, &(0x7f00000005c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x3, &(0x7f0000000880)=[r5, r9, r10, r13, r14, r15, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x1, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x6}, {0x0, 0x2, 0x7, 0xa}], 0x10, 0x343b30fd, @void, @value}, 0x94) fcntl$setstatus(r0, 0x4, 0x42400) write(r0, &(0x7f0000000000)="7c0adb4508f3d49eff0f1d8ba536febf867a6586882cb319f865c75e4f9c2cfe33020dff62d5cb02be012cb4dd98ebaab47371a9c28b93aebd4285935b0e25c1d1b516be3e1b104eece2916ce7565ebc0bbdd70a2de23e9c48b4786890d9791fb7d3c9dabd3e975a788225fc", 0x6c) open$dir(&(0x7f0000000380)='./file0\x00', 0x6102, 0x32) 1m13.734405494s ago: executing program 3 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 58.033183826s ago: executing program 32 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 22.456670947s ago: executing program 0 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 21.661346446s ago: executing program 0 (id=653): inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000004) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 16.797385489s ago: executing program 5 (id=668): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$chown(0x4, r0, 0x0, 0x0) 16.666338071s ago: executing program 5 (id=669): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000000)='\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000b00006110200000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9807836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f52"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) 16.529786359s ago: executing program 0 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x130b, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x18, 0x0, &(0x7f0000001100)) 15.382383439s ago: executing program 0 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r3, 0x101) 15.334147001s ago: executing program 5 (id=676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x2, 0x0, 0x0) 14.246607135s ago: executing program 0 (id=679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000340)="89e7ee2c7cdad9b4b47380c988ca8d1737ba4615961b71317b27bb", 0x1b}, {&(0x7f0000000580)="0519", 0x2}, {&(0x7f00000004c0)='(u', 0x2}], 0x3) 14.239593519s ago: executing program 5 (id=680): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() sigaltstack(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r10, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 8.585442873s ago: executing program 4 (id=695): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x200, 0xd, 0x0, 0x1}, {0xd2f, 0x0, 0x0, 0x6}, {0x5, 0x8, 0x3, 0xff}]}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 8.492413242s ago: executing program 1 (id=696): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) 7.088871444s ago: executing program 2 (id=698): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r5, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044044) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) syz_usb_connect(0x3, 0x10e, &(0x7f0000000500)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e", @ANYBLOB="19dd"], 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x0) 5.644117361s ago: executing program 4 (id=699): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6520, 0x40800) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x137) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.535836436s ago: executing program 4 (id=700): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r4, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) 3.703879138s ago: executing program 1 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0xbc, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000040)={0x30, 0x30, 0x30}}, 0x40}, @decrefs={0x40046307, 0x2}, @increfs, @dead_binder_done, @increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x8}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x7ffffffd, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x8000012f, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x5, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x130b, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x18, 0x0, &(0x7f0000001100)) 3.672920601s ago: executing program 0 (id=702): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) 3.554550451s ago: executing program 4 (id=703): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.321745003s ago: executing program 5 (id=704): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000800034000000000090002000000000002"], 0x30}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) unshare(0x24060400) unshare(0x2a020400) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59deb", 0x0, 0x30}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3.086010673s ago: executing program 2 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2.57468149s ago: executing program 1 (id=706): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffd}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/104, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.440953259s ago: executing program 2 (id=707): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x100, 0x603ac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x20014090) 2.299863175s ago: executing program 1 (id=708): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = socket$inet6(0xa, 0x1, 0x7f11) sendto$inet6(r2, 0x0, 0x0, 0x4000001, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffff0bb}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x439, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x64}}, 0x0) 2.058454761s ago: executing program 2 (id=709): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x0) 2.058146348s ago: executing program 5 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(0x0, 0x15d) r3 = open(0x0, 0x143042, 0xfd) ftruncate(r3, 0x2008002) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c80)) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)=@chain) 1.087196184s ago: executing program 2 (id=711): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x94f, &(0x7f0000000300)={0x0, 0xd27d, 0x100}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_sync_fs\x00'}, 0x18) sync() 369.80107ms ago: executing program 1 (id=712): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x800320, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 291.010173ms ago: executing program 4 (id=713): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 62.298244ms ago: executing program 1 (id=714): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffff81, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r5, &(0x7f0000000240)="04ec1a", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) shutdown(r5, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ipvlan0\x00', 0x100}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 62.022798ms ago: executing program 4 (id=715): sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) write(r1, &(0x7f00000002c0)="02000000", 0x4) 0s ago: executing program 2 (id=716): r0 = syz_io_uring_setup(0x4c40, &(0x7f0000000480)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) eventfd2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 68.613720][ T5809] cgroup: Unknown subsys name 'net' [ 68.749046][ T5809] cgroup: Unknown subsys name 'cpuset' [ 68.758017][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.199856][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.518618][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.525018][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.474246][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.482966][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.491506][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.499590][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.507478][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.515885][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.523434][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.531107][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.539083][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.566460][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.574973][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.583564][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.591824][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.600083][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.607712][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.610673][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.616018][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.622784][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.637542][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.645353][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.653640][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.653691][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.661492][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.676970][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.678215][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.687468][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.692083][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.698320][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.717633][ T5830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.725546][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.088428][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 73.145221][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 73.226366][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 73.240715][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 73.370090][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.378879][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.386421][ T5825] bridge_slave_0: entered allmulticast mode [ 73.395442][ T5825] bridge_slave_0: entered promiscuous mode [ 73.410684][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.417835][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.425033][ T5824] bridge_slave_0: entered allmulticast mode [ 73.432185][ T5824] bridge_slave_0: entered promiscuous mode [ 73.442079][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.449918][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.457277][ T5824] bridge_slave_1: entered allmulticast mode [ 73.463925][ T5824] bridge_slave_1: entered promiscuous mode [ 73.475658][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.482802][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.490161][ T5825] bridge_slave_1: entered allmulticast mode [ 73.496874][ T5825] bridge_slave_1: entered promiscuous mode [ 73.509500][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.581380][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.590718][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.599288][ T5834] bridge_slave_0: entered allmulticast mode [ 73.608160][ T5834] bridge_slave_0: entered promiscuous mode [ 73.619097][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.632597][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.641958][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.649663][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.657061][ T5819] bridge_slave_0: entered allmulticast mode [ 73.663731][ T5819] bridge_slave_0: entered promiscuous mode [ 73.683650][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.691029][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.698341][ T5834] bridge_slave_1: entered allmulticast mode [ 73.705007][ T5834] bridge_slave_1: entered promiscuous mode [ 73.719453][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.726898][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.734268][ T5819] bridge_slave_1: entered allmulticast mode [ 73.741352][ T5819] bridge_slave_1: entered promiscuous mode [ 73.749752][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.795097][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.817688][ T5824] team0: Port device team_slave_0 added [ 73.825444][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.838038][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.849780][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.878105][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.888946][ T5824] team0: Port device team_slave_1 added [ 73.907401][ T5825] team0: Port device team_slave_0 added [ 73.946131][ T5825] team0: Port device team_slave_1 added [ 73.977370][ T5819] team0: Port device team_slave_0 added [ 74.001044][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.008511][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.016513][ T5831] bridge_slave_0: entered allmulticast mode [ 74.023178][ T5831] bridge_slave_0: entered promiscuous mode [ 74.032644][ T5834] team0: Port device team_slave_0 added [ 74.039862][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.046991][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.073098][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.086321][ T5819] team0: Port device team_slave_1 added [ 74.102077][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.109335][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.135430][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.148021][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.155045][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.181143][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.192336][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.200072][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.207669][ T5831] bridge_slave_1: entered allmulticast mode [ 74.214331][ T5831] bridge_slave_1: entered promiscuous mode [ 74.228678][ T5834] team0: Port device team_slave_1 added [ 74.248330][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.255337][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.281420][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.317387][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.342405][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.349501][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.375727][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.395493][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.414887][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.421948][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.448927][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.460876][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.468019][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.494174][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.533374][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.540750][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.566884][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.599606][ T5825] hsr_slave_0: entered promiscuous mode [ 74.606093][ T5825] hsr_slave_1: entered promiscuous mode [ 74.617321][ T5831] team0: Port device team_slave_0 added [ 74.627740][ T5824] hsr_slave_0: entered promiscuous mode [ 74.633928][ T5824] hsr_slave_1: entered promiscuous mode [ 74.640411][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.648667][ T5824] Cannot create hsr debugfs directory [ 74.684542][ T5831] team0: Port device team_slave_1 added [ 74.729520][ T5834] hsr_slave_0: entered promiscuous mode [ 74.736278][ T5834] hsr_slave_1: entered promiscuous mode [ 74.742287][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.750418][ T5834] Cannot create hsr debugfs directory [ 74.763129][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.770199][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.797057][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.797103][ T5830] Bluetooth: hci1: command tx timeout [ 74.808703][ T5836] Bluetooth: hci2: command tx timeout [ 74.813171][ T5841] Bluetooth: hci4: command tx timeout [ 74.818840][ T5836] Bluetooth: hci3: command tx timeout [ 74.824292][ T5823] Bluetooth: hci0: command tx timeout [ 74.867694][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.874779][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.901030][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.919751][ T5819] hsr_slave_0: entered promiscuous mode [ 74.926272][ T5819] hsr_slave_1: entered promiscuous mode [ 74.932269][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.940004][ T5819] Cannot create hsr debugfs directory [ 75.029801][ T5831] hsr_slave_0: entered promiscuous mode [ 75.036795][ T5831] hsr_slave_1: entered promiscuous mode [ 75.042779][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.051069][ T5831] Cannot create hsr debugfs directory [ 75.293758][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.305021][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.319924][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.337655][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.373569][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.382933][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.396868][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.411082][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.458407][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.476382][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.487617][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.513128][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.556691][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.580650][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.602143][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.630471][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.663347][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.677874][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.690853][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.701211][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.796444][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.828209][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.862419][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.874704][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.898623][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.905992][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.929715][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.940691][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.947835][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.983032][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.994097][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.001279][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.020967][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.044613][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.051784][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.061695][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.068937][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.079687][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.086815][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.120099][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.153049][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.160225][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.211978][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.219118][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.240681][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.341847][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.374307][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.381535][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.458349][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.466080][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.620318][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.684648][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.707895][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.827923][ T5825] veth0_vlan: entered promiscuous mode [ 76.840590][ T5824] veth0_vlan: entered promiscuous mode [ 76.870599][ T5825] veth1_vlan: entered promiscuous mode [ 76.886106][ T5841] Bluetooth: hci0: command tx timeout [ 76.891577][ T5841] Bluetooth: hci1: command tx timeout [ 76.893756][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.897883][ T5823] Bluetooth: hci2: command tx timeout [ 76.909695][ T5830] Bluetooth: hci4: command tx timeout [ 76.909782][ T5836] Bluetooth: hci3: command tx timeout [ 76.923477][ T5824] veth1_vlan: entered promiscuous mode [ 76.994690][ T5825] veth0_macvtap: entered promiscuous mode [ 77.005082][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.023409][ T5825] veth1_macvtap: entered promiscuous mode [ 77.060035][ T5824] veth0_macvtap: entered promiscuous mode [ 77.087302][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.100195][ T5824] veth1_macvtap: entered promiscuous mode [ 77.118240][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.129722][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.140471][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.150013][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.158812][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.186017][ T5819] veth0_vlan: entered promiscuous mode [ 77.198139][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.209211][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.220243][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.249104][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.260365][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.271838][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.287608][ T5819] veth1_vlan: entered promiscuous mode [ 77.304440][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.315053][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.324358][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.335445][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.362409][ T5831] veth0_vlan: entered promiscuous mode [ 77.384918][ T5834] veth0_vlan: entered promiscuous mode [ 77.407811][ T5831] veth1_vlan: entered promiscuous mode [ 77.444468][ T5834] veth1_vlan: entered promiscuous mode [ 77.506350][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.514926][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.526066][ T5819] veth0_macvtap: entered promiscuous mode [ 77.544533][ T5831] veth0_macvtap: entered promiscuous mode [ 77.569426][ T5819] veth1_macvtap: entered promiscuous mode [ 77.591116][ T5831] veth1_macvtap: entered promiscuous mode [ 77.620762][ T5834] veth0_macvtap: entered promiscuous mode [ 77.628789][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.641253][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.663864][ T5834] veth1_macvtap: entered promiscuous mode [ 77.677151][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.685096][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.697181][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.708211][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.718513][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.729394][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.741197][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.751762][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.762808][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.774208][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.784882][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.794982][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.807318][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.818607][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.853861][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.865465][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.876271][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.887620][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.899275][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.914302][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.924933][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.941075][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.950299][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.964619][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.970573][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.977087][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.001816][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.012338][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.022998][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.034389][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.047030][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.057098][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.060122][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.064943][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.078271][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.090053][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.098904][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.109619][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.120377][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.130969][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.143021][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.153062][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.164299][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.174344][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.184848][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.196425][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.215235][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.226667][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.238003][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.249058][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.258965][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.269771][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.279871][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.290598][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.301895][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.319139][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.358624][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.370046][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.379179][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.623926][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.644752][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.767648][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.775537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.801896][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 78.833501][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.842916][ T5920] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 78.859878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.872889][ T5920] gretap1: entered promiscuous mode [ 78.878918][ T5920] gretap1: entered allmulticast mode [ 78.912476][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.935013][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.956054][ T5836] Bluetooth: hci2: command tx timeout [ 78.956103][ T5823] Bluetooth: hci1: command tx timeout [ 78.962389][ T5836] Bluetooth: hci4: command tx timeout [ 78.967619][ T5841] Bluetooth: hci3: command tx timeout [ 78.972877][ T5836] Bluetooth: hci0: command tx timeout [ 78.993173][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.032072][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 79.074099][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.125821][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.133842][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.147435][ T5875] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.327451][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 79.342194][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.382548][ T5875] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 79.405755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.428392][ T5875] usb 3-1: config 128 has an invalid descriptor of length 58, skipping remainder of the config [ 79.545448][ T5875] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 79.579506][ T5875] usb 3-1: config 128 has no interface number 0 [ 79.664387][ T5875] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 49, changing to 9 [ 79.840340][ T5875] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 9292, setting to 1024 [ 80.021024][ T5875] usb 3-1: config 128 interface 127 has no altsetting 0 [ 80.213695][ T5941] kernel profiling enabled (shift: 7) [ 80.223220][ T5875] usb 3-1: Dual-Role OTG device on HNP port [ 80.548110][ T5875] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 80.756241][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.774672][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.784650][ T5875] usb 3-1: Product: syz [ 80.789366][ T5875] usb 3-1: Manufacturer: syz [ 80.794386][ T5875] usb 3-1: SerialNumber: syz [ 80.802582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.812474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 80.821490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.830440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.840248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.098734][ T5836] Bluetooth: hci1: command tx timeout [ 81.104335][ T5836] Bluetooth: hci0: command tx timeout [ 81.111023][ T5836] Bluetooth: hci3: command tx timeout [ 81.117544][ T5836] Bluetooth: hci4: command tx timeout [ 81.123517][ T5836] Bluetooth: hci2: command tx timeout [ 81.533858][ T5948] can: request_module (can-proto-0) failed. [ 81.608129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.646808][ T5923] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.756163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 81.766128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.806743][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 81.848272][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.861249][ T5877] usb 1-1: config 0 has no interfaces? [ 81.868909][ T5877] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 81.885622][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.893690][ T5877] usb 1-1: Product: syz [ 81.913342][ T5877] usb 1-1: Manufacturer: syz [ 81.935474][ T5877] usb 1-1: SerialNumber: syz [ 81.956460][ T5877] usb 1-1: config 0 descriptor?? [ 82.192221][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.213906][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.357199][ T5960] Zero length message leads to an empty skb [ 83.224237][ T5875] usb 3-1: USB disconnect, device number 2 [ 84.787336][ T5874] usb 1-1: USB disconnect, device number 2 [ 84.898672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.561702][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.626180][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.786469][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 85.853870][ T5978] overlayfs: failed to resolve './file1': -2 [ 85.868289][ T5874] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 85.992029][ T5874] usb 4-1: config 0 has no interface number 0 [ 86.010731][ T5874] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.021857][ T5874] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.114112][ T5874] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 86.170107][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 86.188850][ T5874] usb 4-1: Product: syz [ 86.199010][ T5874] usb 4-1: SerialNumber: syz [ 86.302576][ T5874] usb 4-1: config 0 descriptor?? [ 86.422739][ T5874] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 86.444392][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 86.478944][ T5874] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 86.493010][ T5985] netlink: 140 bytes leftover after parsing attributes in process `syz.2.28'. [ 86.766108][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 86.794364][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.467373][ T124] cfg80211: failed to load regulatory.db [ 87.608766][ T5820] usb 4-1: USB disconnect, device number 2 [ 87.785038][ T5820] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 88.074512][ T6001] Set syz0 is full, maxelem 0 reached [ 88.121325][ T6001] xt_HMARK: proto mask must be zero with L3 mode [ 89.092590][ T6002] fuse: Unknown parameter 'hash' [ 89.247116][ T6007] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.175723][ T30] audit: type=1326 audit(1743023764.831:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.4.42" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f756af8d169 code=0x0 [ 91.108048][ T6040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.47'. [ 92.816660][ T5874] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 93.433440][ T5874] usb 3-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 93.461421][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.509272][ T5874] usb 3-1: config 0 descriptor?? [ 93.528812][ T5874] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 93.857960][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.938742][ T5874] gspca_sn9c20x: Write register 1000 failed -110 [ 94.969151][ T5874] gspca_sn9c20x: Device initialization failed [ 95.117908][ T5874] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 95.860000][ T6103] mmap: syz.2.52 (6103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.077326][ T6104] ipip0: entered promiscuous mode [ 96.082619][ T6104] ipip0: entered allmulticast mode [ 96.286711][ T1207] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.549448][ T1207] usb 1-1: Using ep0 maxpacket: 8 [ 96.663726][ T1207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.794344][ T1207] usb 1-1: config 0 has an invalid interface number: 240 but max is 0 [ 96.800890][ T5820] usb 2-1: device descriptor read/all, error -71 [ 96.834509][ T1207] usb 1-1: config 0 has no interface number 0 [ 96.868653][ T1207] usb 1-1: config 0 interface 240 has no altsetting 0 [ 96.930463][ T1207] usb 1-1: string descriptor 0 read error: -71 [ 96.958559][ T1207] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ef [ 97.011488][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.033087][ T6116] x_tables: duplicate underflow at hook 1 [ 97.052245][ T1207] usb 1-1: config 0 descriptor?? [ 97.080848][ T1207] usb 1-1: can't set config #0, error -71 [ 97.115099][ T1207] usb 1-1: USB disconnect, device number 3 [ 97.663644][ T6124] capability: warning: `syz.0.66' uses 32-bit capabilities (legacy support in use) [ 98.044277][ T5877] usb 3-1: USB disconnect, device number 3 [ 98.143428][ T6104] syz.2.52 (6104) used greatest stack depth: 18216 bytes left [ 98.856362][ T1207] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.885676][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 99.892520][ T1207] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.913407][ T1207] usb 3-1: language id specifier not provided by device, defaulting to English [ 99.924965][ T1207] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 99.934752][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.945821][ T1207] usb 3-1: Product: syz [ 99.950593][ T1207] usb 3-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳󫋚 [ 99.970454][ T1207] usb 3-1: SerialNumber: syz [ 100.015474][ T1207] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 100.043980][ T6129] netlink: 'syz.4.69': attribute type 11 has an invalid length. [ 100.253739][ T1207] usb 3-1: USB disconnect, device number 4 [ 102.281649][ T6187] warning: `syz.3.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.620568][ T6204] input: syz0 as /devices/virtual/input/input7 [ 103.656516][ T6214] loop2: detected capacity change from 0 to 7 [ 103.743688][ T6214] Dev loop2: unable to read RDB block 7 [ 103.764608][ T6217] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.796476][ T6214] loop2: unable to read partition table [ 103.850154][ T6214] loop2: partition table beyond EOD, truncated [ 103.885881][ T6214] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 103.926687][ T5197] Dev loop2: unable to read RDB block 7 [ 103.945786][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.975409][ T5197] loop2: unable to read partition table [ 104.000170][ T5197] loop2: partition table beyond EOD, truncated [ 104.101610][ T6221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.161659][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 114.925720][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.099861][ T5874] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 115.158268][ T5874] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 115.208969][ T5874] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.245064][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.289886][ T5874] usb 4-1: Product: syz [ 115.306489][ T5874] usb 4-1: Manufacturer: syz [ 115.328102][ T5874] usb 4-1: SerialNumber: syz [ 116.246034][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.254764][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.548660][ T5874] cdc_ncm 4-1:1.0: bind() failure [ 117.578075][ T5874] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 117.673224][ T5874] cdc_ncm 4-1:1.1: bind() failure [ 117.843228][ T5874] usb 4-1: USB disconnect, device number 3 [ 118.015766][ T5820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.186278][ T6372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 118.196249][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 118.216875][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.223518][ T5820] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 118.243051][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.255963][ T6367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.327076][ T5820] usb 1-1: config 0 descriptor?? [ 118.391203][ T6381] gtp0: entered promiscuous mode [ 118.822357][ T5820] hid (null): global environment stack underflow [ 118.845607][ T5820] hid (null): bogus close delimiter [ 118.850901][ T5820] hid (null): global environment stack underflow [ 118.915921][ T5820] hid (null): global environment stack underflow [ 119.020077][ T5820] usb 1-1: USB disconnect, device number 4 [ 124.309556][ T6465] netlink: 'syz.3.155': attribute type 11 has an invalid length. [ 124.726460][ T1207] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.983794][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.160538][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.276177][ T1207] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 125.324465][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.394844][ T1207] usb 2-1: config 0 descriptor?? [ 125.685911][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.905875][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 125.924344][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.208796][ T1207] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 126.216021][ T5874] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 126.225272][ T1207] arvo 0003:1E7D:30D4.0002: item fetching failed at offset 5/7 [ 126.239486][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.359179][ T6501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.426153][ T1207] arvo 0003:1E7D:30D4.0002: parse failed [ 126.456254][ T1207] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -22 [ 126.480120][ T5874] usb 5-1: config 0 descriptor?? [ 126.518001][ T1207] usb 2-1: USB disconnect, device number 4 [ 127.069155][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.285848][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 127.635712][ T5873] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 127.644832][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.685752][ T5873] usb 3-1: Product: syz [ 127.689988][ T5873] usb 3-1: Manufacturer: syz [ 127.694609][ T5873] usb 3-1: SerialNumber: syz [ 127.734484][ T5873] usb 3-1: config 0 descriptor?? [ 127.750019][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 127.758979][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 127.786286][ T5874] usb 5-1: USB disconnect, device number 2 [ 127.885293][ T6522] syz.1.169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.903377][ T6522] xt_policy: too many policy elements [ 128.430662][ T5873] hub 3-1:0.0: bad descriptor, ignoring hub [ 128.441004][ T5873] hub 3-1:0.0: probe with driver hub failed with error -5 [ 128.459436][ T5873] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 128.547478][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 128.675265][ T5873] gspca_vc032x: reg_w err -71 [ 128.692648][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.710606][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.730881][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.751155][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.781736][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.806663][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.812024][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.837725][ T6535] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 128.849993][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.856204][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.867886][ T6535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 128.894337][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.905127][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.910598][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.935961][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.941978][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.950906][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.957742][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.963080][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.972660][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 128.983275][ T5873] gspca_vc032x: I2c Bus Busy Wait 00 [ 129.122069][ T5873] gspca_vc032x: Unknown sensor... [ 129.138262][ T5873] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 129.256754][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.395981][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.725884][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 129.729422][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 129.729459][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.730729][ T10] usb 2-1: config 0 descriptor?? [ 129.732070][ T5873] usb 3-1: USB disconnect, device number 5 [ 129.873484][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 129.873523][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.886935][ T47] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 129.886973][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.886997][ T47] usb 1-1: Product: syz [ 129.887015][ T47] usb 1-1: Manufacturer: syz [ 129.887031][ T47] usb 1-1: SerialNumber: syz [ 129.889747][ T47] usb 1-1: config 0 descriptor?? [ 129.893530][ T47] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 129.933502][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 130.535708][ T5877] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.585046][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.627061][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 130.648628][ T10] usb 2-1: media controller created [ 130.664090][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.819271][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 130.833809][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.855611][ T10] az6027: usb out operation failed. (-71) [ 130.865446][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.880253][ T10] az6027: usb out operation failed. (-71) [ 131.602235][ T10] stb0899_attach: Driver disabled by Kconfig [ 131.608940][ T5877] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 131.620805][ T10] az6027: no front-end attached [ 131.620805][ T10] [ 131.628659][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.637321][ T10] az6027: usb out operation failed. (-71) [ 131.643112][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 131.652486][ T5877] usb 4-1: config 0 descriptor?? [ 131.661081][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 131.700276][ T6562] capability: warning: `syz.1.183' uses deprecated v2 capabilities in a way that may be insecure [ 131.717208][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 131.724314][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 131.741244][ T10] usb 2-1: USB disconnect, device number 5 [ 132.406873][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 132.802985][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 132.819490][ T5877] playstation 0003:054C:05C4.0003: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 132.891945][ T5875] usb 1-1: USB disconnect, device number 5 [ 132.973779][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980273][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.095965][ T6577] __vm_enough_memory: pid: 6577, comm: syz.2.188, bytes: 21200364277760 not enough memory for the allocation [ 133.296728][ T5877] playstation 0003:054C:05C4.0003: Failed to retrieve feature with reportID 163: -32 [ 133.306364][ T5877] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 firmware info: -32 [ 133.308464][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.318639][ T5877] playstation 0003:054C:05C4.0003: Failed to get firmware info from DualShock4 [ 133.443262][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.731216][ T5877] playstation 0003:054C:05C4.0003: HW/FW version data in sysfs will be invalid. [ 134.243835][ T5877] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0003/input/input10 [ 134.743021][ T5877] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0003/input/input11 [ 134.780375][ T6577] team0 (unregistering): Port device team_slave_0 removed [ 134.781268][ T5877] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0003/input/input12 [ 134.810385][ T6577] team0 (unregistering): Port device team_slave_1 removed [ 134.894054][ T5877] playstation 0003:054C:05C4.0003: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 137.575863][ T5877] usb 4-1: USB disconnect, device number 4 [ 138.907469][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 139.153882][ T6639] input: syz0 as /devices/virtual/input/input13 [ 139.195998][ T124] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.596088][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.996377][ T124] usb 2-1: Using ep0 maxpacket: 8 [ 140.046886][ T5875] usb 5-1: device descriptor read/64, error -71 [ 140.077148][ T124] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.087244][ T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.095241][ T124] usb 2-1: Product: syz [ 140.110364][ T124] usb 2-1: Manufacturer: syz [ 140.115217][ T124] usb 2-1: SerialNumber: syz [ 140.154239][ T124] usb 2-1: config 0 descriptor?? [ 140.340160][ T6644] gre1: entered promiscuous mode [ 140.345250][ T6644] gre1: entered allmulticast mode [ 140.408720][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.432567][ T124] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.448444][ T6651] cramfs: wrong magic [ 140.458701][ T5875] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.481987][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.500199][ T6651] cramfs: wrong magic [ 140.518662][ T6654] netlink: 14 bytes leftover after parsing attributes in process `syz.3.208'. [ 140.528443][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.535397][ T6651] cramfs: wrong magic [ 140.543339][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.550406][ T6651] cramfs: wrong magic [ 140.624835][ T5875] usb 5-1: device descriptor read/64, error -71 [ 140.655344][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.663458][ T6651] cramfs: wrong magic [ 140.683718][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.720252][ T6651] cramfs: wrong magic [ 140.724570][ T124] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 140.738078][ T5875] usb usb5-port1: attempt power cycle [ 140.757182][ T124] usb 2-1: USB disconnect, device number 6 [ 140.775708][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.789191][ T6651] cramfs: wrong magic [ 140.805286][ T6651] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 140.831591][ T6651] cramfs: wrong magic [ 140.933453][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.862451][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.938958][ T5875] usb 5-1: device descriptor read/8, error -71 [ 142.352445][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.403275][ T6654] bond0 (unregistering): Released all slaves [ 145.108927][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 145.141371][ T6702] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 146.237723][ T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.511091][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 146.648050][ T47] usb 5-1: config 0 has no interfaces? [ 146.653627][ T47] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 146.663499][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.866471][ T47] usb 5-1: config 0 descriptor?? [ 146.905747][ T5874] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 146.978063][ T6723] netlink: 160 bytes leftover after parsing attributes in process `syz.3.230'. [ 147.063471][ T6727] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 147.072186][ T6727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.232'. [ 147.087755][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 147.099199][ T5874] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 147.109885][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.118388][ T6729] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 147.145418][ T5874] usb 3-1: config 0 descriptor?? [ 147.151476][ T6717] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.047328][ T6717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.071548][ T6717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.508694][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 148.519709][ T5874] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.592797][ T5874] usb 3-1: USB disconnect, device number 6 [ 149.172509][ T47] usb 5-1: USB disconnect, device number 7 [ 149.305630][ T124] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.364512][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 149.380489][ T6751] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 149.398067][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 149.455681][ T124] usb 1-1: device descriptor read/64, error -71 [ 149.639702][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 149.845970][ T124] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.995881][ T124] usb 1-1: device descriptor read/64, error -71 [ 150.071033][ T6772] trusted_key: encrypted_key: insufficient parameters specified [ 150.107324][ T124] usb usb1-port1: attempt power cycle [ 150.230459][ T6780] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 150.333397][ T6782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.445662][ T124] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.503477][ T124] usb 1-1: device descriptor read/8, error -71 [ 151.661504][ T6790] input: syz1 as /devices/virtual/input/input14 [ 151.755640][ T6790] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 151.762605][ T6790] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.827460][ T6790] vhci_hcd vhci_hcd.0: Device attached [ 151.874071][ T6790] vhci_hcd vhci_hcd.0: port 0 already used [ 152.015850][ T6797] vhci_hcd: connection closed [ 152.076573][ T12] vhci_hcd: stop threads [ 152.145196][ T47] usb 42-1: SetAddress Request (2) to port 0 [ 152.288210][ T12] vhci_hcd: release socket [ 152.299680][ T47] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 152.432907][ T12] vhci_hcd: disconnect device [ 152.622951][ T6809] netlink: 6080 bytes leftover after parsing attributes in process `syz.3.262'. [ 152.632212][ T47] usb 42-1: enqueue for inactive port 0 [ 152.652855][ T6811] netlink: 160 bytes leftover after parsing attributes in process `syz.2.264'. [ 153.578388][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 154.042405][ T47] usb usb42-port1: attempt power cycle [ 154.423025][ T6849] netlink: 140 bytes leftover after parsing attributes in process `syz.4.275'. [ 154.837897][ T47] usb usb42-port1: unable to enumerate USB device [ 155.884240][ T6873] ucma_write: process 139 (syz.4.285) changed security contexts after opening file descriptor, this is not allowed. [ 156.082415][ T6888] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 156.885430][ T6903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.558887][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.787947][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 160.852002][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.861524][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.869693][ T10] usb 4-1: Product: syz [ 160.874907][ T10] usb 4-1: Manufacturer: syz [ 160.915672][ T10] usb 4-1: SerialNumber: syz [ 160.932150][ T10] usb 4-1: config 0 descriptor?? [ 161.086461][ T10] usb 4-1: can't set config #0, error -71 [ 161.103699][ T10] usb 4-1: USB disconnect, device number 5 [ 161.417182][ T6953] bridge0: port 3(vlan2) entered blocking state [ 161.448644][ T6953] bridge0: port 3(vlan2) entered disabled state [ 161.466211][ T6953] vlan2: entered allmulticast mode [ 161.471399][ T6953] batadv0: entered allmulticast mode [ 162.465339][ T6953] vlan2: entered promiscuous mode [ 162.565998][ T6953] batadv0: entered promiscuous mode [ 162.721460][ T6953] bridge0: port 3(vlan2) entered blocking state [ 162.729296][ T6953] bridge0: port 3(vlan2) entered forwarding state [ 163.016820][ T6962] tipc: Invalid UDP bearer configuration [ 163.016854][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 163.289097][ T6957] netlink: 'syz.2.311': attribute type 11 has an invalid length. [ 163.495742][ T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.503397][ T55] Bluetooth: hci4: link tx timeout [ 163.509262][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.520766][ T55] Bluetooth: hci4: link tx timeout [ 163.526097][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.618264][ T6989] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 163.739227][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.775719][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.814149][ T47] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 163.834441][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.855444][ T47] usb 5-1: config 0 descriptor?? [ 163.927173][ T47] pwc: Askey VC010 type 2 USB webcam detected. [ 163.955781][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 164.087496][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 164.113084][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 164.736423][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 164.746185][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 164.840392][ T10] usb 2-1: Product: syz [ 164.844637][ T10] usb 2-1: Manufacturer: syz [ 164.844923][ T47] pwc: recv_control_msg error -32 req 02 val 2b00 [ 164.849532][ T10] usb 2-1: SerialNumber: syz [ 164.993488][ T47] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.008318][ T47] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.028783][ T47] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.039328][ T10] usb 2-1: config 0 descriptor?? [ 165.047629][ T47] pwc: recv_control_msg error -32 req 04 val 1300 [ 165.448617][ T47] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.457633][ T47] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.464806][ T47] pwc: recv_control_msg error -32 req 02 val 2100 [ 165.465870][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'. [ 165.472180][ T47] pwc: recv_control_msg error -32 req 04 val 1500 [ 165.488457][ T47] pwc: recv_control_msg error -32 req 02 val 2500 [ 165.496343][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.509923][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.320'. [ 165.519297][ T47] pwc: recv_control_msg error -32 req 02 val 2400 [ 165.535863][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.566495][ T47] pwc: recv_control_msg error -32 req 02 val 2600 [ 165.600111][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 165.656220][ T6977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.317'. [ 165.704645][ T7008] netlink: 148 bytes leftover after parsing attributes in process `syz.4.317'. [ 165.725186][ T47] pwc: recv_control_msg error -32 req 02 val 2900 [ 165.793801][ T47] pwc: recv_control_msg error -32 req 02 val 2800 [ 166.120936][ T47] pwc: recv_control_msg error -71 req 04 val 1200 [ 166.225957][ T47] pwc: Registered as video103. [ 166.246700][ T47] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 166.279918][ T47] usb 5-1: USB disconnect, device number 8 [ 166.552263][ T7029] loop2: detected capacity change from 0 to 7 [ 166.573891][ T7029] Dev loop2: unable to read RDB block 7 [ 166.583861][ T7029] loop2: unable to read partition table [ 166.606636][ T7029] loop2: partition table beyond EOD, truncated [ 166.613043][ T7029] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 166.657158][ T5197] Dev loop2: unable to read RDB block 7 [ 166.662853][ T5197] loop2: unable to read partition table [ 166.676043][ T5877] usb 2-1: USB disconnect, device number 7 [ 166.682481][ T5197] loop2: partition table beyond EOD, truncated [ 166.890915][ T5875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.072957][ T5875] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 167.335049][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.719273][ T5875] usb 4-1: config 0 descriptor?? [ 167.738489][ T5875] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 168.187379][ T5875] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 168.829506][ T5875] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 169.074810][ T7069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.428412][ T5875] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.756190][ T1207] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.775905][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 170.748935][ T5875] usb 1-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 170.761320][ T5875] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice= 5.ad [ 170.777121][ T5912] usb 4-1: USB disconnect, device number 6 [ 170.787264][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.795425][ T5875] usb 1-1: Product: syz [ 171.364118][ T5875] usb 1-1: Manufacturer: syz [ 171.369016][ T5875] usb 1-1: SerialNumber: syz [ 171.386923][ T7100] input: syz0 as /devices/virtual/input/input17 [ 171.747799][ T1207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.768225][ T1207] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 171.777712][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.786032][ T1207] usb 3-1: Product: syz [ 172.400865][ T1207] usb 3-1: Manufacturer: syz [ 172.421449][ T1207] usb 3-1: SerialNumber: syz [ 172.675917][ T5912] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.709751][ T1207] usb 3-1: config 0 descriptor?? [ 172.746166][ T5875] usbtest 1-1:15.0: couldn't get endpoints, -22 [ 172.752536][ T5875] usbtest 1-1:15.0: probe with driver usbtest failed with error -22 [ 172.768818][ T1207] usb 3-1: can't set config #0, error -71 [ 172.828398][ T1207] usb 3-1: USB disconnect, device number 7 [ 172.867082][ T5875] usb 1-1: USB disconnect, device number 10 [ 172.946120][ T5874] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.981538][ T5912] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 173.070621][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 173.156910][ T5874] usb 2-1: device descriptor read/64, error -71 [ 173.185150][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 173.286755][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.966378][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.020212][ T5874] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 174.035758][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.071374][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.091421][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.111229][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.132423][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.151172][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.160370][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.171453][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.181465][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.190601][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.201991][ T5874] usb 2-1: device descriptor read/64, error -71 [ 174.208635][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.220015][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.230537][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.265899][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.279934][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.292994][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.305617][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.320096][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 174.330424][ T5874] usb usb2-port1: attempt power cycle [ 174.345741][ T1207] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.444676][ T5912] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 174.472057][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.479632][ T5912] usb 4-1: string descriptor 0 read error: -71 [ 174.488637][ T5912] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 174.557667][ T5912] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 174.595800][ T5912] usb 4-1: config 0 descriptor?? [ 174.603361][ T5912] usb 4-1: can't set config #0, error -71 [ 174.694274][ T1207] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.712664][ T5912] usb 4-1: USB disconnect, device number 7 [ 174.720200][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.775962][ T1207] usb 5-1: Product: syz [ 174.813807][ T7131] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 174.849029][ T1207] usb 5-1: Manufacturer: syz [ 174.853886][ T1207] usb 5-1: SerialNumber: syz [ 175.001037][ T7131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.361'. [ 175.027657][ T1207] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.262838][ T5912] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.479248][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.969225][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.978574][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.987761][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.001613][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.047478][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.124383][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.129759][ T7143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.365'. [ 176.164151][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.337798][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.418559][ T1207] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.653026][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.026588][ T1207] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 177.038963][ T5912] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 177.386398][ T5912] ath9k_htc: Failed to initialize the device [ 177.395788][ T1207] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 177.405233][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.449287][ T5912] usb 5-1: ath9k_htc: USB layer deinitialized [ 177.471805][ T1207] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 177.495289][ T124] usb 5-1: USB disconnect, device number 9 [ 178.168959][ T7163] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.2) [ 178.192707][ T7163] process 'syz.0.364' launched '/dev/fd/6' with NULL argv: empty string added [ 178.619867][ T1207] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 178.942978][ T7172] netlink: 'syz.1.375': attribute type 38 has an invalid length. [ 178.986966][ T7172] netlink: 96 bytes leftover after parsing attributes in process `syz.1.375'. [ 179.398649][ T1207] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 179.407736][ T1207] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 179.973660][ T1207] usb 1-1: USB disconnect, device number 11 [ 180.084535][ T5874] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.233536][ T7195] ======================================================= [ 180.233536][ T7195] WARNING: The mand mount option has been deprecated and [ 180.233536][ T7195] and is ignored by this kernel. Remove the mand [ 180.233536][ T7195] option from the mount to silence this warning. [ 180.233536][ T7195] ======================================================= [ 180.268445][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.496886][ T5874] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 180.505314][ T5874] usb 4-1: config 160 has no interface number 0 [ 180.556454][ T5874] usb 4-1: config 160 interface 200 has no altsetting 0 [ 180.567717][ T5874] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 180.579970][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.580724][ T7203] Option ''MO' to dns_resolver key: bad/missing value [ 180.596463][ T5874] usb 4-1: Product: syz [ 180.601935][ T5874] usb 4-1: Manufacturer: syz [ 180.607220][ T5874] usb 4-1: SerialNumber: syz [ 180.755666][ T1207] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 181.415664][ T1207] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 181.456192][ T1207] usb 5-1: config 0 has no interface number 0 [ 181.462411][ T1207] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 181.481437][ T1207] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 181.494871][ T1207] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 181.531650][ T7183] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 181.544306][ T1207] usb 5-1: config 0 interface 205 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.555582][ T7183] netlink: 'syz.3.377': attribute type 4 has an invalid length. [ 181.565764][ T7183] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.377'. [ 181.597071][ T1207] usb 5-1: config 0 interface 205 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 181.710226][ T1207] usb 5-1: config 0 interface 205 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 181.731970][ T1207] usb 5-1: config 0 interface 205 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 181.735726][ T30] audit: type=1326 audit(1743023856.491:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7205 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78538d169 code=0x7fc00000 [ 181.745370][ T1207] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 181.868241][ T7213] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 181.876570][ T7213] netlink: 224 bytes leftover after parsing attributes in process `syz.1.386'. [ 181.889920][ T1207] usb 5-1: New USB device found, idVendor=04f2, idProduct=b5eb, bcdDevice=af.8f [ 181.899727][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.436546][ T1207] usb 5-1: Product: syz [ 182.447089][ T1207] usb 5-1: Manufacturer: syz [ 182.451804][ T1207] usb 5-1: SerialNumber: syz [ 182.463045][ T30] audit: type=1326 audit(1743023857.221:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7205 comm="syz.2.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe78538d169 code=0x7fc00000 [ 182.468995][ T1207] usb 5-1: config 0 descriptor?? [ 182.557564][ T5874] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.564773][ T5874] usb 4-1: MIDIStreaming interface descriptor not found [ 182.588947][ T7195] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 182.605932][ T7195] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 182.644627][ T1207] usb 5-1: Found UVC 0.00 device syz (04f2:b5eb) [ 182.667105][ T1207] usb 5-1: No valid video chain found. [ 182.693254][ T5874] usb 4-1: USB disconnect, device number 8 [ 182.909206][ T1207] usb 5-1: USB disconnect, device number 10 [ 183.925861][ T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.203220][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.309486][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 184.341332][ T47] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 184.378819][ T47] usb 3-1: config 0 has no interface number 0 [ 184.403327][ T47] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 184.414677][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.458851][ T47] usb 3-1: Product: syz [ 184.463369][ T47] usb 3-1: Manufacturer: syz [ 184.511313][ T47] usb 3-1: SerialNumber: syz [ 184.612220][ T47] usb 3-1: config 0 descriptor?? [ 184.653033][ T47] smsc95xx v2.0.0 [ 184.689343][ T7240] netlink: 'syz.3.394': attribute type 11 has an invalid length. [ 185.266643][ T47] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 185.290706][ T47] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 185.581241][ T47] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 185.669611][ T47] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 185.826579][ T5877] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 186.017836][ T5877] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 186.029500][ T5877] usb 2-1: config 0 has no interface number 0 [ 186.043511][ T5877] usb 2-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 186.081162][ T5877] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 186.099011][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.132768][ T5877] usb 2-1: Product: syz [ 186.137373][ T5877] usb 2-1: Manufacturer: syz [ 186.142491][ T5877] usb 2-1: SerialNumber: syz [ 186.150802][ T5877] usb 2-1: config 0 descriptor?? [ 186.157218][ T7246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 186.166198][ T5877] kvaser_usb 2-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 186.550268][ T7254] loop2: detected capacity change from 0 to 7 [ 186.560554][ T7254] Dev loop2: unable to read RDB block 7 [ 186.574731][ T7254] loop2: unable to read partition table [ 186.588085][ T7254] loop2: partition table beyond EOD, truncated [ 186.594661][ T7254] loop_reread_partitions: partition scan of loop2 (被x V) failed (rc=-5) [ 186.672481][ T5877] usb 2-1: USB disconnect, device number 11 [ 188.125438][ T7270] netlink: 332 bytes leftover after parsing attributes in process `syz.0.406'. [ 188.145980][ T7270] netlink: 104 bytes leftover after parsing attributes in process `syz.0.406'. [ 188.164422][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'. [ 188.325942][ T5874] usb 3-1: USB disconnect, device number 8 [ 189.985842][ T1207] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.196375][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 190.309912][ T1207] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 190.377482][ T1207] usb 3-1: config 0 has no interface number 0 [ 190.409177][ T1207] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 190.432377][ T1207] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 190.442904][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 190.452368][ T1207] usb 3-1: config 0 interface 41 has no altsetting 0 [ 190.467668][ T1207] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 190.477342][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.485407][ T1207] usb 3-1: Product: syz [ 190.529757][ T1207] usb 3-1: Manufacturer: syz [ 190.534436][ T1207] usb 3-1: SerialNumber: syz [ 190.554064][ T1207] usb 3-1: config 0 descriptor?? [ 190.566292][ T7298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.573977][ T7298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.186927][ T7297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.301700][ T7297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.943398][ T1207] Error reading MAC address [ 191.953850][ T1207] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 191.979799][ T1207] usb 3-1: USB disconnect, device number 9 [ 192.004845][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 192.513981][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 192.574253][ T7327] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 192.751978][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'. [ 193.768424][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 194.992880][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.005719][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.275952][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 197.282105][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 197.288288][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 197.294342][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 199.008189][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 199.951333][ T7391] tmpfs: Bad value for 'mpol' [ 201.269050][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 202.077783][ T7418] batadv1: entered allmulticast mode [ 202.345818][ T5877] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.742420][ T7408] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 202.866687][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 202.880644][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.911428][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 202.965645][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 202.986756][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 203.000590][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 203.022465][ T5877] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 203.035798][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.204355][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.213517][ T5877] usb 3-1: Product: syz [ 203.218018][ T5877] usb 3-1: Manufacturer: syz [ 203.222690][ T5877] usb 3-1: SerialNumber: syz [ 203.254663][ T5877] usb 3-1: config 0 descriptor?? [ 204.176220][ T24] usb 5-1: device descriptor read/64, error -71 [ 204.184022][ T7402] syz.4.446: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.208515][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.4.446 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 204.208539][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.208549][ T7402] Call Trace: [ 204.208555][ T7402] [ 204.208561][ T7402] dump_stack_lvl+0x241/0x360 [ 204.208593][ T7402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.208615][ T7402] ? __wake_up_klogd+0xcc/0x110 [ 204.208637][ T7402] warn_alloc+0x27c/0x410 [ 204.208658][ T7402] ? __pfx_warn_alloc+0x10/0x10 [ 204.208679][ T7402] ? vb2_vmalloc_alloc+0xf2/0x340 [ 204.208698][ T7402] ? __get_vm_area_node+0x1c8/0x2d0 [ 204.208714][ T7402] ? __get_vm_area_node+0x25c/0x2d0 [ 204.208733][ T7402] __vmalloc_node_range_noprof+0x634/0x1390 [ 204.208766][ T7402] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.208786][ T7402] ? __kasan_kmalloc+0x9d/0xb0 [ 204.208810][ T7402] vmalloc_user_noprof+0x74/0x80 [ 204.208828][ T7402] ? vb2_vmalloc_alloc+0xf2/0x340 [ 204.208844][ T7402] vb2_vmalloc_alloc+0xf2/0x340 [ 204.208864][ T7402] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 204.208880][ T7402] __vb2_queue_alloc+0xa16/0x16f0 [ 204.208908][ T7402] vb2_core_reqbufs+0xd3b/0x17d0 [ 204.208932][ T7402] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 204.208958][ T7402] v4l2_m2m_ioctl_reqbufs+0x14b/0x230 [ 204.208977][ T7402] __video_do_ioctl+0xc0b/0xdd0 [ 204.208996][ T7402] ? __pfx___video_do_ioctl+0x10/0x10 [ 204.209017][ T7402] video_usercopy+0x986/0x1390 [ 204.209053][ T7402] ? __pfx___video_do_ioctl+0x10/0x10 [ 204.209067][ T7402] ? __pfx_video_usercopy+0x10/0x10 [ 204.209090][ T7402] ? smack_file_ioctl+0x306/0x3b0 [ 204.209115][ T7402] ? __fget_files+0x2a/0x420 [ 204.209133][ T7402] ? __fget_files+0x2a/0x420 [ 204.209150][ T7402] v4l2_ioctl+0x189/0x1e0 [ 204.209172][ T7402] ? __pfx_v4l2_ioctl+0x10/0x10 [ 204.209196][ T7402] __se_sys_ioctl+0xf1/0x160 [ 204.209218][ T7402] do_syscall_64+0xf3/0x230 [ 204.209240][ T7402] ? clear_bhb_loop+0x45/0xa0 [ 204.209258][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.209273][ T7402] RIP: 0033:0x7f756af8d169 [ 204.209292][ T7402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.209304][ T7402] RSP: 002b:00007f756be1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.209320][ T7402] RAX: ffffffffffffffda RBX: 00007f756b1a5fa0 RCX: 00007f756af8d169 [ 204.209332][ T7402] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 204.209342][ T7402] RBP: 00007f756b00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 204.209351][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.209360][ T7402] R13: 0000000000000000 R14: 00007f756b1a5fa0 R15: 00007ffd8d971a08 [ 204.209378][ T7402] [ 204.209384][ T7402] Mem-Info: [ 204.485733][ T7402] active_anon:313 inactive_anon:10243 isolated_anon:0 [ 204.485733][ T7402] active_file:4401 inactive_file:35717 isolated_file:0 [ 204.485733][ T7402] unevictable:768 dirty:119 writeback:0 [ 204.485733][ T7402] slab_reclaimable:9904 slab_unreclaimable:99640 [ 204.485733][ T7402] mapped:36646 shmem:6343 pagetables:1018 [ 204.485733][ T7402] sec_pagetables:0 bounce:0 [ 204.485733][ T7402] kernel_misc_reclaimable:0 [ 204.485733][ T7402] free:1319593 free_pcp:1013 free_cma:0 [ 204.579240][ T7402] Node 0 active_anon:1252kB inactive_anon:40972kB active_file:17528kB inactive_file:142868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146584kB dirty:472kB writeback:0kB shmem:23836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11300kB pagetables:4072kB sec_pagetables:0kB all_unreclaimable? no [ 204.615602][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 204.631697][ T7402] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 204.746785][ T7402] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.776045][ T7402] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 204.788909][ T7402] Node 0 DMA32 free:1359792kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:1248kB inactive_anon:43240kB active_file:16992kB inactive_file:142928kB unevictable:1536kB writepending:472kB present:3129332kB managed:2551256kB mlocked:0kB bounce:0kB free_pcp:3072kB local_pcp:2280kB free_cma:0kB [ 204.867489][ T7402] lowmem_reserve[]: 0 0 0 0 0 [ 204.872540][ T7402] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:536kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.956960][ T7402] lowmem_reserve[]: 0 0 0 0 0 [ 204.961858][ T7402] Node 1 Normal free:3901616kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.032430][ T7402] lowmem_reserve[]: 0 0 0 0 0 [ 205.049933][ T10] usb 3-1: USB disconnect, device number 10 [ 205.089885][ T7402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.149340][ T7402] Node 0 DMA32: 37*4kB (UM) 46*8kB (UME) 177*16kB (UME) 203*32kB (UME) 88*64kB (UME) 46*128kB (UME) 22*256kB (UM) 6*512kB (M) 9*1024kB (UME) 4*2048kB (UM) 326*4096kB (M) = 1382772kB [ 205.278421][ T7402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.316570][ T7402] Node 1 Normal: 228*4kB (UM) 64*8kB (UME) 62*16kB (UME) 222*32kB (UME) 100*64kB (UME) 33*128kB (UME) 12*256kB (UM) 11*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 943*4096kB (UM) = 3901616kB [ 205.340463][ T7402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.352120][ T7402] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.368141][ T7402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.378989][ T7402] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.390001][ T7402] 44376 total pagecache pages [ 205.394970][ T7402] 0 pages in swap cache [ 205.401151][ T7402] Free swap = 124704kB [ 205.413369][ T7402] Total swap = 124996kB [ 205.432234][ T7445] netlink: 'syz.2.455': attribute type 3 has an invalid length. [ 205.437427][ T7402] 2097051 pages RAM [ 205.440932][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 205.444051][ T7402] 0 pages HighMem/MovableOnly [ 205.458060][ T7402] 427449 pages reserved [ 205.462372][ T7402] 0 pages cma reserved [ 205.655618][ T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.095627][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 206.111738][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.124970][ T47] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 206.135425][ T47] usb 3-1: config 0 has no interface number 0 [ 206.143784][ T47] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 206.160051][ T47] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 206.173230][ T47] usb 3-1: config 0 interface 88 has no altsetting 0 [ 206.361743][ T5841] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 206.371522][ T47] usb 3-1: string descriptor 0 read error: -22 [ 206.535389][ T47] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 206.589123][ T47] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 206.684162][ T47] usb 3-1: config 0 descriptor?? [ 206.822461][ T47] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input19 [ 207.018240][ T47] usb 3-1: USB disconnect, device number 11 [ 208.645550][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 209.548043][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 209.988288][ T5841] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 209.998395][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: kworker/u9:9 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 209.998424][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.998438][ T5841] Workqueue: hci0 hci_rx_work [ 209.998477][ T5841] Call Trace: [ 209.998484][ T5841] [ 209.998494][ T5841] dump_stack_lvl+0x241/0x360 [ 209.998525][ T5841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.998551][ T5841] ? __pfx__printk+0x10/0x10 [ 209.998577][ T5841] ? __kmalloc_cache_noprof+0x236/0x370 [ 209.998597][ T5841] ? sysfs_create_dir_ns+0x2b9/0x3f0 [ 209.998622][ T5841] sysfs_create_dir_ns+0x2fd/0x3f0 [ 209.998646][ T5841] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 209.998673][ T5841] kobject_add_internal+0x435/0x8d0 [ 209.998711][ T5841] kobject_add+0x15b/0x230 [ 209.998741][ T5841] ? do_raw_spin_unlock+0x13c/0x8b0 [ 209.998764][ T5841] ? device_add+0x3e7/0xbf0 [ 209.998794][ T5841] ? __pfx_kobject_add+0x10/0x10 [ 209.998823][ T5841] ? _raw_spin_unlock+0x28/0x50 [ 209.998849][ T5841] ? get_device_parent+0x165/0x410 [ 209.998881][ T5841] device_add+0x4e5/0xbf0 [ 209.998914][ T5841] hci_conn_add_sysfs+0xe8/0x200 [ 209.998949][ T5841] le_conn_complete_evt+0xc6e/0x12a0 [ 209.998985][ T5841] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 209.999011][ T5841] ? __mutex_unlock_slowpath+0x229/0x800 [ 209.999045][ T5841] ? skb_pull_data+0x112/0x230 [ 209.999073][ T5841] hci_le_conn_complete_evt+0x18c/0x420 [ 209.999103][ T5841] hci_event_packet+0xa5c/0x1550 [ 209.999128][ T5841] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 209.999158][ T5841] ? __pfx_hci_event_packet+0x10/0x10 [ 209.999182][ T5841] ? kcov_remote_start+0x3c0/0x7d0 [ 209.999207][ T5841] ? lockdep_hardirqs_on+0x9d/0x150 [ 209.999236][ T5841] ? hci_send_to_monitor+0xdc/0x530 [ 209.999266][ T5841] hci_rx_work+0x3f3/0xdb0 [ 209.999293][ T5841] ? process_scheduled_works+0x9cb/0x18e0 [ 209.999323][ T5841] process_scheduled_works+0xac3/0x18e0 [ 209.999375][ T5841] ? __pfx_process_scheduled_works+0x10/0x10 [ 209.999413][ T5841] ? assign_work+0x367/0x3d0 [ 209.999461][ T5841] worker_thread+0x870/0xd30 [ 209.999506][ T5841] ? __kthread_parkme+0x169/0x1d0 [ 209.999529][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 209.999562][ T5841] kthread+0x7a9/0x920 [ 209.999587][ T5841] ? __pfx_worker_thread+0x10/0x10 [ 209.999621][ T5841] ? __pfx_kthread+0x10/0x10 [ 209.999642][ T5841] ? __pfx_kthread+0x10/0x10 [ 209.999664][ T5841] ? __pfx_kthread+0x10/0x10 [ 209.999687][ T5841] ? __pfx_kthread+0x10/0x10 [ 209.999709][ T5841] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.999732][ T5841] ? lockdep_hardirqs_on+0x9d/0x150 [ 209.999758][ T5841] ? __pfx_kthread+0x10/0x10 [ 209.999781][ T5841] ret_from_fork+0x4b/0x80 [ 209.999810][ T5841] ? __pfx_kthread+0x10/0x10 [ 209.999833][ T5841] ret_from_fork_asm+0x1a/0x30 [ 209.999870][ T5841] [ 209.999895][ T5841] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 210.291779][ T5841] Bluetooth: hci0: failed to register connection device [ 210.410276][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 210.965684][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 210.998346][ T10] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 211.032596][ T10] usb 1-1: config 4 has no interface number 0 [ 211.045830][ T10] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 211.067310][ T10] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.136504][ T10] usb 1-1: config 4 interface 51 has no altsetting 0 [ 211.163254][ T10] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 211.195575][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.203639][ T10] usb 1-1: Product: syz [ 211.235881][ T10] usb 1-1: Manufacturer: syz [ 211.240557][ T10] usb 1-1: SerialNumber: syz [ 211.251157][ T7506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.275755][ T7506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.550101][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 212.775903][ T10] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -71 [ 212.951280][ T10] usb 1-1: USB disconnect, device number 12 [ 213.924363][ T7551] tipc: Invalid UDP bearer configuration [ 213.924411][ T7551] tipc: Enabling of bearer rejected, failed to enable media [ 214.126328][ T7558] bridge0: port 3(vlan2) entered blocking state [ 214.126495][ T7558] bridge0: port 3(vlan2) entered disabled state [ 214.126627][ T7558] vlan2: entered allmulticast mode [ 214.126647][ T7558] syz_tun: entered allmulticast mode [ 214.146833][ T7558] vlan2: entered promiscuous mode [ 214.146888][ T7558] syz_tun: entered promiscuous mode [ 214.147426][ T7558] bridge0: port 3(vlan2) entered blocking state [ 214.147510][ T7558] bridge0: port 3(vlan2) entered forwarding state [ 216.121347][ T7576] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 216.121393][ T7576] netlink: 224 bytes leftover after parsing attributes in process `syz.2.499'. [ 216.193653][ T7578] macsec1: entered promiscuous mode [ 216.193682][ T7578] vlan0: entered promiscuous mode [ 216.193921][ T7578] macsec1: entered allmulticast mode [ 216.193937][ T7578] vlan0: entered allmulticast mode [ 216.193951][ T7578] veth0_vlan: entered allmulticast mode [ 216.364739][ T7583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.056639][ T5877] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.882201][ T7610] mkiss: ax0: crc mode is auto. [ 218.952130][ T5877] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 218.973835][ T5877] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 218.993572][ T5877] usb 5-1: config 220 has no interface number 2 [ 219.004082][ T5877] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 219.034389][ T5877] usb 5-1: config 220 interface 0 has no altsetting 0 [ 219.053967][ T5877] usb 5-1: config 220 interface 76 has no altsetting 0 [ 219.091886][ T5877] usb 5-1: config 220 interface 1 has no altsetting 0 [ 219.119587][ T5877] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 219.134267][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.147851][ T5877] usb 5-1: Product: syz [ 219.185357][ T5877] usb 5-1: Manufacturer: syz [ 219.221436][ T5877] usb 5-1: SerialNumber: syz [ 219.388248][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.401932][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.411945][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.422935][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.431129][ T5823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.438848][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.496553][ T5877] usb 5-1: selecting invalid altsetting 0 [ 219.596376][ T5877] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 219.602834][ T5877] usb 5-1: No valid video chain found. [ 219.621240][ T7624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.513'. [ 219.661308][ T5877] usb 5-1: selecting invalid altsetting 0 [ 219.683513][ T1074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.709012][ T5877] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 219.736080][ T5877] usb 5-1: USB disconnect, device number 13 [ 219.749445][ T7631] 8021q: VLANs not supported on nlmon0 [ 219.848148][ T1074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.905641][ T124] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.087213][ T124] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 220.109584][ T124] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.122966][ T1074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.152357][ T124] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.179093][ T124] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.206359][ T124] usb 1-1: Product: syz [ 220.210727][ T124] usb 1-1: Manufacturer: syz [ 220.215365][ T124] usb 1-1: SerialNumber: syz [ 220.381381][ T124] usb 1-1: config 0 descriptor?? [ 221.075138][ T124] usb 1-1: selecting invalid altsetting 0 [ 221.231370][ T1074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.669420][ T5841] Bluetooth: hci3: command tx timeout [ 223.274880][ T7625] chnl_net:caif_netlink_parms(): no params data found [ 223.483522][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 224.273672][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.304360][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.315744][ T5841] Bluetooth: hci3: command tx timeout [ 224.342440][ T7625] bridge_slave_0: entered allmulticast mode [ 224.357796][ T7625] bridge_slave_0: entered promiscuous mode [ 224.375079][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.382947][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.390778][ T7625] bridge_slave_1: entered allmulticast mode [ 224.405083][ T7625] bridge_slave_1: entered promiscuous mode [ 224.427248][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 224.497455][ T5877] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 224.559453][ T1074] bridge_slave_1: left allmulticast mode [ 224.591509][ T1074] bridge_slave_1: left promiscuous mode [ 224.599475][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.635442][ T1074] bridge_slave_0: left allmulticast mode [ 224.651480][ T1074] bridge_slave_0: left promiscuous mode [ 224.662099][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.680782][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.715986][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.746471][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.796766][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.835610][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.855177][ T5877] usb 3-1: config 0 descriptor?? [ 224.964914][ T7687] fuse: Unknown parameter 'iroupWid' [ 225.217719][ T24] usb 1-1: USB disconnect, device number 13 [ 225.447435][ T7625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.487389][ T7625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.606362][ T7625] team0: Port device team_slave_0 added [ 225.616495][ T7625] team0: Port device team_slave_1 added [ 226.302968][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.395934][ T5841] Bluetooth: hci3: command tx timeout [ 226.421631][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.564111][ T7625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.589799][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.606200][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.661361][ T7625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.725193][ T7699] input: syz0 as /devices/virtual/input/input20 [ 226.824856][ T7695] veth2: entered allmulticast mode [ 227.268854][ T7625] hsr_slave_0: entered promiscuous mode [ 227.324109][ T7625] hsr_slave_1: entered promiscuous mode [ 227.436035][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 227.442037][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 227.690818][ T7625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.691474][ T5877] usb 3-1: USB disconnect, device number 12 [ 227.762800][ T7625] Cannot create hsr debugfs directory [ 228.165072][ T1074] hsr_slave_0: left promiscuous mode [ 228.191550][ T1074] hsr_slave_1: left promiscuous mode [ 228.207235][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.227641][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.234954][ T7716] fuse: Unknown parameter 'iroupWid' [ 228.248252][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.265802][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.320502][ T1074] veth1_macvtap: left promiscuous mode [ 228.335232][ T1074] veth0_macvtap: left promiscuous mode [ 228.350532][ T1074] veth1_vlan: left promiscuous mode [ 228.360569][ T1074] veth0_vlan: left promiscuous mode [ 228.375761][ T5877] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 228.475789][ T5841] Bluetooth: hci3: command tx timeout [ 228.537737][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.559583][ T5877] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 228.592309][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.617559][ T5877] usb 5-1: config 0 descriptor?? [ 228.715250][ T7729] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 228.740516][ T7729] netlink: 224 bytes leftover after parsing attributes in process `syz.1.549'. [ 228.864764][ T7732] loop6: detected capacity change from 0 to 524287999 [ 228.882798][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.892171][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.907206][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.916473][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.928389][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.937693][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.946239][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.955472][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.970870][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.980139][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.988787][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 228.998031][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.006595][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.015826][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.058148][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.067460][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.075365][ T7732] ldm_validate_partition_table(): Disk read failed. [ 229.092286][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.101587][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.130098][ T5877] razer 0003:1532:010D.0004: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.4-1/input0 [ 229.148697][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.157973][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.184837][ T7732] Dev loop6: unable to read RDB block 0 [ 229.209394][ T7732] loop6: unable to read partition table [ 229.232996][ T7732] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 229.568369][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 229.917704][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 230.691935][ T7755] xt_CT: No such helper "pptp" [ 230.805908][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.968931][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.992333][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.065765][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 231.074906][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.103232][ T24] usb 3-1: config 0 descriptor?? [ 231.359156][ T7766] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.559' resets device [ 231.432084][ T7714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.530890][ T47] usb 5-1: USB disconnect, device number 14 [ 231.561663][ T24] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 231.620529][ T24] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 231.657857][ T7769] fuse: Unknown parameter 'iroupWid' [ 231.663387][ T24] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 231.683877][ T24] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 231.706595][ T24] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 231.718382][ T7771] bridge0: port 3(vlan2) entered blocking state [ 231.739683][ T24] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 231.745802][ T7771] bridge0: port 3(vlan2) entered disabled state [ 231.764095][ T7771] vlan2: entered allmulticast mode [ 231.769788][ T7771] batadv0: entered allmulticast mode [ 231.782995][ T7771] vlan2: entered promiscuous mode [ 231.789381][ T7771] batadv0: entered promiscuous mode [ 231.801445][ T7771] bridge0: port 3(vlan2) entered blocking state [ 231.807925][ T7771] bridge0: port 3(vlan2) entered forwarding state [ 232.015901][ T7625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.025783][ T47] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 232.084563][ T7755] netlink: 96 bytes leftover after parsing attributes in process `syz.2.556'. [ 232.109895][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.151795][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.166746][ T7625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.184761][ T7625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.194397][ T24] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 32: -71 [ 232.204442][ T47] usb 5-1: Invalid ep0 maxpacket: 32 [ 232.209951][ T7625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.230076][ T24] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense firmware info: -71 [ 232.249902][ T24] playstation 0003:054C:0DF2.0005: Failed to get firmware info from DualSense [ 232.269870][ T24] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 232.376002][ T47] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 232.413312][ T24] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 232.461662][ T24] usb 3-1: USB disconnect, device number 13 [ 232.585745][ T47] usb 5-1: Invalid ep0 maxpacket: 32 [ 232.603080][ T47] usb usb5-port1: attempt power cycle [ 232.656863][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.986276][ T7625] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.996265][ T47] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 233.068565][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.075729][ T7641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.083412][ T47] usb 5-1: Invalid ep0 maxpacket: 32 [ 233.110087][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.117334][ T7641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.205360][ T7801] bridge0: port 4(vlan3) entered blocking state [ 233.213458][ T7801] bridge0: port 4(vlan3) entered disabled state [ 233.227754][ T7801] vlan3: entered allmulticast mode [ 233.233426][ T7801] bond0: entered allmulticast mode [ 233.239014][ T47] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 233.251284][ T7801] bond_slave_0: entered allmulticast mode [ 233.257656][ T7801] bond_slave_1: entered allmulticast mode [ 233.265400][ T7801] vlan3: entered promiscuous mode [ 233.296055][ T47] usb 5-1: Invalid ep0 maxpacket: 32 [ 233.304430][ T7801] bond0: entered promiscuous mode [ 233.305952][ T47] usb usb5-port1: unable to enumerate USB device [ 233.310838][ T7801] bond_slave_0: entered promiscuous mode [ 233.346314][ T7801] bond_slave_1: entered promiscuous mode [ 233.438896][ T7801] bridge0: port 4(vlan3) entered blocking state [ 233.445342][ T7801] bridge0: port 4(vlan3) entered forwarding state [ 234.105472][ T7818] netlink: 140 bytes leftover after parsing attributes in process `syz.0.571'. [ 234.877673][ T7833] fuse: Unknown parameter 'iroupWid' [ 234.944222][ T7625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.847410][ T7847] netlink: 'syz.2.577': attribute type 11 has an invalid length. [ 236.909005][ T7869] tipc: Invalid UDP bearer configuration [ 236.909050][ T7869] tipc: Enabling of bearer rejected, failed to enable media [ 237.022650][ T7871] team_slave_0: entered promiscuous mode [ 237.028680][ T7871] team_slave_1: entered promiscuous mode [ 237.065077][ T7871] vlan4: entered promiscuous mode [ 237.079471][ T7871] team0: entered promiscuous mode [ 237.100204][ T7871] team0: left promiscuous mode [ 237.106642][ T7871] team_slave_0: left promiscuous mode [ 237.112128][ T7871] team_slave_1: left promiscuous mode [ 237.716455][ T7625] veth0_vlan: entered promiscuous mode [ 237.759544][ T7625] veth1_vlan: entered promiscuous mode [ 237.900468][ T7625] veth0_macvtap: entered promiscuous mode [ 238.037995][ T7625] veth1_macvtap: entered promiscuous mode [ 238.068879][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.080805][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.802498][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.858136][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.928629][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.998196][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.009507][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.020206][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.192495][ T7903] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 239.235903][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.280901][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.437803][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.649079][ T7908] netlink: 116 bytes leftover after parsing attributes in process `syz.0.592'. [ 239.677963][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.695554][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.715660][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.794878][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.835596][ T7625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.987977][ T7625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.091798][ T7625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.101200][ T7902] could not allocate digest TFM handle blake2s-160-generic [ 240.743712][ T7625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.852232][ T7928] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 240.856012][ T7625] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.895829][ T7625] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.904990][ T7625] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.289113][ T7641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.323427][ T7641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.491740][ T7759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.504437][ T7759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.945671][ T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 242.545757][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 242.564916][ T47] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 242.615461][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.652958][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.694869][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 242.860124][ T47] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 242.870198][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.896347][ T47] usb 3-1: config 0 descriptor?? [ 244.288986][ T7985] tipc: Invalid UDP bearer configuration [ 244.289445][ T7985] tipc: Enabling of bearer rejected, failed to enable media [ 245.065394][ T47] usbhid 3-1:0.0: can't add hid device: -32 [ 245.092639][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 246.106755][ T5873] usb 3-1: USB disconnect, device number 14 [ 246.343397][ T8031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.865887][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 251.665736][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 251.675862][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.675903][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.675928][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.675969][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.675993][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.690865][ T10] usb 3-1: config 0 descriptor?? [ 252.025933][ T47] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 252.197407][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.220785][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.250823][ T47] usb 2-1: config 0 has no interface number 0 [ 252.264917][ T47] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.282625][ T8156] wg2: entered promiscuous mode [ 252.287687][ T8156] wg2: entered allmulticast mode [ 252.292894][ T47] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 252.299240][ T10] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 252.317824][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.336657][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 252.338314][ T47] usb 2-1: config 0 descriptor?? [ 252.363722][ T10] HID 045e:07da: Invalid code 768 type 1 [ 252.381772][ T47] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 252.385237][ T10] HID 045e:07da: Invalid code 769 type 1 [ 252.420992][ T10] HID 045e:07da: Invalid code 770 type 1 [ 252.440342][ T10] HID 045e:07da: Invalid code 771 type 1 [ 252.459444][ T10] HID 045e:07da: Invalid code 772 type 1 [ 252.478529][ T10] HID 045e:07da: Invalid code 773 type 1 [ 252.501000][ T10] HID 045e:07da: Invalid code 774 type 1 [ 252.520370][ T10] HID 045e:07da: Invalid code 775 type 1 [ 252.541068][ T10] HID 045e:07da: Invalid code 776 type 1 [ 252.620600][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input21 [ 252.735547][ T10] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 252.768784][ T10] usb 3-1: USB disconnect, device number 15 [ 252.789511][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.647'. [ 253.307082][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.332971][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.517926][ T1207] usb 2-1: USB disconnect, device number 12 [ 255.838698][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.845159][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.978400][ T8221] 9p: Unknown access argument : -22 [ 261.658483][ T8300] tipc: Started in network mode [ 261.695057][ T8300] tipc: Node identity 36c61a324633, cluster identity 4711 [ 261.781256][ T8300] tipc: Enabled bearer , priority 0 [ 261.943205][ T8310] evm: overlay not supported [ 262.682098][ T8309] syzkaller0: entered promiscuous mode [ 262.696134][ T8309] syzkaller0: entered allmulticast mode [ 262.722725][ T8309] tipc: Resetting bearer [ 262.816033][ T8298] tipc: Resetting bearer [ 262.967593][ T10] tipc: Node number set to 1895111218 [ 264.195701][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 264.966617][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.976608][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 265.015617][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 447 [ 265.080961][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.107748][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.487706][ T10] usb 5-1: Product: syz [ 265.517081][ T10] usb 5-1: Manufacturer: syz [ 265.521756][ T10] usb 5-1: SerialNumber: syz [ 265.746591][ T10] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 265.753897][ T10] cdc_ncm 5-1:1.0: bind() failure [ 265.797861][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 265.804912][ T10] cdc_ncm 5-1:1.1: bind() failure [ 265.837961][ T10] usb 5-1: USB disconnect, device number 19 [ 267.454147][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'. [ 267.545725][ T8377] hub 6-0:1.0: USB hub found [ 267.707828][ T8377] hub 6-0:1.0: 1 port detected [ 270.115760][ T47] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 270.436051][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 270.445269][ T47] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 270.454933][ T47] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 270.652439][ T47] usb 3-1: config 135 has no interface number 0 [ 270.668094][ T47] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 270.688863][ T47] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 270.703839][ T47] usb 3-1: config 135 interface 230 has no altsetting 0 [ 270.721206][ T47] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 270.731812][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.740433][ T47] usb 3-1: Product: syz [ 270.745307][ T47] usb 3-1: Manufacturer: syz [ 270.751053][ T47] usb 3-1: SerialNumber: syz [ 271.880591][ T8298] tipc: Disabling bearer [ 272.552187][ T5874] usb 3-1: USB disconnect, device number 16 [ 273.181571][ T8412] input: syz0 as /devices/virtual/input/input22 [ 275.934353][ T8480] ------------[ cut here ]------------ [ 275.940322][ T8480] Please remove unsupported % in format string [ 275.947863][ T8480] WARNING: CPU: 0 PID: 8480 at lib/vsprintf.c:2700 format_decode+0x8a9/0xcb0 [ 275.956742][ T8480] Modules linked in: [ 275.960681][ T8480] CPU: 0 UID: 0 PID: 8480 Comm: syz.2.716 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 275.972369][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.982541][ T8480] RIP: 0010:format_decode+0x8a9/0xcb0 [ 275.988017][ T8480] Code: 57 17 04 01 90 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 f0 03 00 00 41 0f b6 37 48 c7 c7 a0 48 54 8d e8 c8 bd 73 f5 90 <0f> 0b 90 90 e9 9c fc ff ff e8 a9 a5 b4 f5 4d 89 ee 4c 8b 6c 24 08 [ 276.007746][ T8480] RSP: 0018:ffffc9000f007640 EFLAGS: 00010246 [ 276.013885][ T8480] RAX: 4742f2c9daa05b00 RBX: ffffffff8d5443a1 RCX: 0000000000080000 [ 276.021963][ T8480] RDX: ffffc9000d1ea000 RSI: 0000000000003595 RDI: 0000000000003596 [ 276.030036][ T8480] RBP: ffffffff8d5443a0 R08: ffffffff81826ce2 R09: fffffbfff1d3a71c [ 276.038083][ T8480] R10: dffffc0000000000 R11: fffffbfff1d3a71c R12: dffffc0000000000 [ 276.046146][ T8480] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000f0078ec [ 276.054179][ T8480] FS: 00007fe7861576c0(0000) GS:ffff88812525a000(0000) knlGS:0000000000000000 [ 276.063251][ T8480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.069942][ T8480] CR2: 00007f10b24713cc CR3: 00000000284ac000 CR4: 00000000003526f0 [ 276.078234][ T8480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.086359][ T8480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.094391][ T8480] Call Trace: [ 276.097756][ T8480] [ 276.100734][ T8480] ? __warn+0x165/0x4d0 [ 276.104942][ T8480] ? format_decode+0x8a9/0xcb0 [ 276.109807][ T8480] ? report_bug+0x2b3/0x500 [ 276.114366][ T8480] ? format_decode+0x8a9/0xcb0 [ 276.119225][ T8480] ? format_decode+0x8a9/0xcb0 [ 276.124041][ T8480] ? format_decode+0x8ab/0xcb0 [ 276.128902][ T8480] ? handle_bug+0x89/0x170 [ 276.133388][ T8480] ? exc_invalid_op+0x1a/0x50 [ 276.138173][ T8480] ? asm_exc_invalid_op+0x1a/0x20 [ 276.143273][ T8480] ? __warn_printk+0x2a2/0x360 [ 276.148163][ T8480] ? format_decode+0x8a9/0xcb0 [ 276.153010][ T8480] bstr_printf+0x167/0xef0 [ 276.157543][ T8480] ? __pfx_bstr_printf+0x10/0x10 [ 276.162639][ T8480] ? bpf_trace_printk+0x117/0x230 [ 276.167771][ T8480] bpf_trace_printk+0x1a3/0x230 [ 276.172772][ T8480] ? ktime_get+0x102/0x200 [ 276.177283][ T8480] ? __pfx_bpf_trace_printk+0x10/0x10 [ 276.182716][ T8480] ? ktime_get+0x102/0x200 [ 276.187244][ T8480] ? bpf_test_run+0x36f/0xa90 [ 276.191980][ T8480] ? read_tsc+0x9/0x20 [ 276.196159][ T8480] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 276.201665][ T8480] bpf_test_run+0x4ea/0xa90 [ 276.206347][ T8480] ? bpf_test_run+0x36f/0xa90 [ 276.211084][ T8480] ? __pfx_bpf_test_run+0x10/0x10 [ 276.216213][ T8480] ? __pfx_eth_type_trans+0x10/0x10 [ 276.221467][ T8480] ? convert___skb_to_skb+0x41/0x630 [ 276.226846][ T8480] bpf_prog_test_run_skb+0xcc3/0x1850 [ 276.232301][ T8480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 276.238217][ T8480] ? __fget_files+0x2a/0x420 [ 276.242864][ T8480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 276.248788][ T8480] bpf_prog_test_run+0x2e4/0x360 [ 276.253784][ T8480] __sys_bpf+0x49f/0x850 [ 276.258113][ T8480] ? __pfx___sys_bpf+0x10/0x10 [ 276.262966][ T8480] __x64_sys_bpf+0x7c/0x90 [ 276.267474][ T8480] do_syscall_64+0xf3/0x230 [ 276.272027][ T8480] ? clear_bhb_loop+0x45/0xa0 [ 276.276790][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.282734][ T8480] RIP: 0033:0x7fe78538d169 [ 276.287246][ T8480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.306972][ T8480] RSP: 002b:00007fe786157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.315458][ T8480] RAX: ffffffffffffffda RBX: 00007fe7855a5fa0 RCX: 00007fe78538d169 [ 276.323526][ T8480] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 276.331593][ T8480] RBP: 00007fe78540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.339651][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.347710][ T8480] R13: 0000000000000000 R14: 00007fe7855a5fa0 R15: 00007ffc3db69168 [ 276.355768][ T8480] [ 276.358862][ T8480] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.366220][ T8480] CPU: 0 UID: 0 PID: 8480 Comm: syz.2.716 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 276.378410][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.388492][ T8480] Call Trace: [ 276.391790][ T8480] [ 276.394732][ T8480] dump_stack_lvl+0x241/0x360 [ 276.399439][ T8480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.404662][ T8480] ? __pfx__printk+0x10/0x10 [ 276.409270][ T8480] ? vscnprintf+0x5d/0x90 [ 276.413615][ T8480] panic+0x349/0x880 [ 276.417525][ T8480] ? __warn+0x174/0x4d0 [ 276.421695][ T8480] ? __pfx_panic+0x10/0x10 [ 276.426136][ T8480] __warn+0x344/0x4d0 [ 276.430135][ T8480] ? format_decode+0x8a9/0xcb0 [ 276.434950][ T8480] report_bug+0x2b3/0x500 [ 276.439312][ T8480] ? format_decode+0x8a9/0xcb0 [ 276.444100][ T8480] ? format_decode+0x8a9/0xcb0 [ 276.448882][ T8480] ? format_decode+0x8ab/0xcb0 [ 276.453669][ T8480] handle_bug+0x89/0x170 [ 276.458027][ T8480] exc_invalid_op+0x1a/0x50 [ 276.462553][ T8480] asm_exc_invalid_op+0x1a/0x20 [ 276.467415][ T8480] RIP: 0010:format_decode+0x8a9/0xcb0 [ 276.472801][ T8480] Code: 57 17 04 01 90 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 f0 03 00 00 41 0f b6 37 48 c7 c7 a0 48 54 8d e8 c8 bd 73 f5 90 <0f> 0b 90 90 e9 9c fc ff ff e8 a9 a5 b4 f5 4d 89 ee 4c 8b 6c 24 08 [ 276.492450][ T8480] RSP: 0018:ffffc9000f007640 EFLAGS: 00010246 [ 276.498537][ T8480] RAX: 4742f2c9daa05b00 RBX: ffffffff8d5443a1 RCX: 0000000000080000 [ 276.506521][ T8480] RDX: ffffc9000d1ea000 RSI: 0000000000003595 RDI: 0000000000003596 [ 276.514588][ T8480] RBP: ffffffff8d5443a0 R08: ffffffff81826ce2 R09: fffffbfff1d3a71c [ 276.522577][ T8480] R10: dffffc0000000000 R11: fffffbfff1d3a71c R12: dffffc0000000000 [ 276.530561][ T8480] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc9000f0078ec [ 276.538578][ T8480] ? __warn_printk+0x2a2/0x360 [ 276.543368][ T8480] bstr_printf+0x167/0xef0 [ 276.547810][ T8480] ? __pfx_bstr_printf+0x10/0x10 [ 276.552759][ T8480] ? bpf_trace_printk+0x117/0x230 [ 276.557808][ T8480] bpf_trace_printk+0x1a3/0x230 [ 276.562679][ T8480] ? ktime_get+0x102/0x200 [ 276.567109][ T8480] ? __pfx_bpf_trace_printk+0x10/0x10 [ 276.572508][ T8480] ? ktime_get+0x102/0x200 [ 276.576936][ T8480] ? bpf_test_run+0x36f/0xa90 [ 276.581629][ T8480] ? read_tsc+0x9/0x20 [ 276.585729][ T8480] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 276.591216][ T8480] bpf_test_run+0x4ea/0xa90 [ 276.595739][ T8480] ? bpf_test_run+0x36f/0xa90 [ 276.600435][ T8480] ? __pfx_bpf_test_run+0x10/0x10 [ 276.605507][ T8480] ? __pfx_eth_type_trans+0x10/0x10 [ 276.610755][ T8480] ? convert___skb_to_skb+0x41/0x630 [ 276.616066][ T8480] bpf_prog_test_run_skb+0xcc3/0x1850 [ 276.621481][ T8480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 276.627320][ T8480] ? __fget_files+0x2a/0x420 [ 276.631927][ T8480] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 276.637759][ T8480] bpf_prog_test_run+0x2e4/0x360 [ 276.642719][ T8480] __sys_bpf+0x49f/0x850 [ 276.646992][ T8480] ? __pfx___sys_bpf+0x10/0x10 [ 276.651789][ T8480] __x64_sys_bpf+0x7c/0x90 [ 276.656222][ T8480] do_syscall_64+0xf3/0x230 [ 276.660754][ T8480] ? clear_bhb_loop+0x45/0xa0 [ 276.665441][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.671373][ T8480] RIP: 0033:0x7fe78538d169 [ 276.675800][ T8480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.695421][ T8480] RSP: 002b:00007fe786157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.703854][ T8480] RAX: ffffffffffffffda RBX: 00007fe7855a5fa0 RCX: 00007fe78538d169 [ 276.711839][ T8480] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 276.719825][ T8480] RBP: 00007fe78540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.727822][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.735818][ T8480] R13: 0000000000000000 R14: 00007fe7855a5fa0 R15: 00007ffc3db69168 [ 276.743851][ T8480] [ 276.747272][ T8480] Kernel Offset: disabled [ 276.751635][ T8480] Rebooting in 86400 seconds..