last executing test programs: 1m1.50890518s ago: executing program 0 (id=385): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4000804) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x4000010) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 58.505597975s ago: executing program 0 (id=395): timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/11, 0xb}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x2}, {0xffffffff}, {}, 0x0, 0x3f0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) 57.160148235s ago: executing program 0 (id=400): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x400, 0x4) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000", @ANYRES8], 0x0) 54.19844459s ago: executing program 0 (id=411): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x0) 53.849579224s ago: executing program 0 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) mq_timedreceive(0xffffffffffffffff, &(0x7f00000004c0)=""/196, 0xfffffffffffffefd, 0xffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, r6, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 52.771075251s ago: executing program 0 (id=416): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="64a1000001"]) 39.532113109s ago: executing program 3 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000004c0)='\"', &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 39.524215719s ago: executing program 3 (id=483): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) socket$caif_seqpacket(0x25, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = syz_open_dev$admmidi(0x0, 0x20, 0x0) read$midi(r6, 0x0, 0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x24}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfda0}, 0x94) 38.369590606s ago: executing program 32 (id=416): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="64a1000001"]) 38.250075368s ago: executing program 3 (id=489): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$igmp6(0xa, 0x3, 0x2) 38.072929411s ago: executing program 3 (id=491): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x905e, 0x2, 0x2, 0x4000020}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 37.623916268s ago: executing program 3 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x4c5, 0x0, 0x2, 0x4, 0x80000001, 0xf, 0x0, 0xbe, 0xe39, 0x0, 0x532, 0x3, 0xb, 0xa, 0x26, {0x2001, 0x3}, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = mq_open(&(0x7f0000000400)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x96, &(0x7f0000000440)={0x7, 0x76c, 0x54, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f00000004c0)=""/196, 0xfffffffffffffefd, 0xffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, r10, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 15.42160306s ago: executing program 4 (id=578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x2}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x0, 0x1}, {{@in=@broadcast, 0x40000, 0x3c}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0x12c) 15.099778264s ago: executing program 4 (id=582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037"], 0x44}}, 0x814) 14.283928457s ago: executing program 4 (id=585): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00l\x00'], 0x38}, 0x1, 0x300}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x40) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000540)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) syz_open_procfs(0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.884407962s ago: executing program 4 (id=594): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8923, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 9.223724963s ago: executing program 2 (id=604): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) 8.192899438s ago: executing program 3 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8, 0x4c5, 0x0, 0x2, 0x4, 0x80000001, 0xf, 0x0, 0xbe, 0xe39, 0x0, 0x532, 0x3, 0xb, 0xa, 0x26, {0x2001, 0x3}, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = mq_open(&(0x7f0000000400)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x96, &(0x7f0000000440)={0x7, 0x76c, 0x54, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f00000004c0)=""/196, 0xfffffffffffffefd, 0xffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, r10, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 5.556229817s ago: executing program 2 (id=607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304, 0x36}, "1088ef81a50442ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "7b010481", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, 0xffffffffffffffff, 0x0) 5.34005376s ago: executing program 2 (id=608): timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/11, 0xb}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x2}, {0xffffffff}, {}, 0x0, 0x3f0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) 4.309106336s ago: executing program 1 (id=612): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x40) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000540)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) syz_open_procfs(0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.264553197s ago: executing program 5 (id=613): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffc117, &(0x7f0000000140), 0x14) ppoll(0x0, 0x0, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) 4.224139977s ago: executing program 2 (id=614): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0900000000000ab9a6b60a00000008000300", @ANYRES32=r2, @ANYBLOB="2c005080050009000200000005000200000000000b0004000bba342f4fbba400"], 0x48}}, 0x40) 3.964508701s ago: executing program 2 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x10, @empty}, 0x1c) keyctl$clear(0x3, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, 0x0, r1, &(0x7f0000000200)='.\x02\x00', 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x2) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb01", 0x24}], 0x1) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) shutdown(r0, 0x1) 3.285147661s ago: executing program 1 (id=616): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r3 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) 2.918226957s ago: executing program 1 (id=617): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x803e000000000000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.808463043s ago: executing program 1 (id=618): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x202400, 0x0) fgetxattr(r0, &(0x7f0000004940)=ANY=[@ANYBLOB="53e9"], 0x0, 0x0) 1.718739785s ago: executing program 5 (id=619): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) 1.564014087s ago: executing program 1 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000500000002000000"], 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500000070", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='fsi_master_rw_result\x00'}, 0x18) pipe2$9p(0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4048010) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x6, 0x1, 0x2, 0x340}}) socket$inet6(0xa, 0x3, 0xff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x5, 0x1, 0x0, 'queue1\x00', 0x200000}) 1.512838488s ago: executing program 4 (id=621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r2, 0x301, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) 1.309825891s ago: executing program 5 (id=622): setrlimit(0x7, &(0x7f0000000640)) fanotify_init(0x10, 0x0) 1.208132702s ago: executing program 4 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182", 0x6, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 553.757282ms ago: executing program 2 (id=624): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 552.886102ms ago: executing program 1 (id=625): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) 472.740994ms ago: executing program 5 (id=626): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x1b0, 0xd0, 0xd0, 0x3e0, 0x310, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) 172.279478ms ago: executing program 5 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=628): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, &(0x7f0000000140)={0x921, [[0x1, 0x81, 0x3, 0x42, 0x800, 0x3ff, 0x2, 0xffff], [0x6, 0x7, 0x8, 0x9, 0x8, 0x856c, 0x0, 0x5], [0x4, 0x1, 0x40, 0x7d, 0xbf, 0x3, 0x1, 0x800]], '\x00', [{0x4, 0x2, 0x1, 0x1}, {0x5, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1, 0x1}, {0xfffffffd, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x40, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x4, 0x0, 0x1}, {0x7, 0x35, 0x0, 0x0, 0x1}, {0x3, 0x40, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xd, 0x2, 0x1, 0x1, 0x1}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0x1}], '\x00', 0xfffffff7}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) openat$dir(0xffffff9c, &(0x7f0000000400)='./file0\x00', 0x80000, 0x42) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000038c0), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xad, 0x6c, 0x86, 0x20, 0x72f, 0x2200, 0x3fbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xb4, 0xaf, 0xd7, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000004c0)={0x80000000, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f0000000500)=0x18) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 79.658738][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.666867][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.681841][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.697897][ T4262] device veth0_vlan entered promiscuous mode [ 79.717058][ T4258] device veth0_macvtap entered promiscuous mode [ 79.730085][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.739760][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.754964][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.763707][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.774673][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.786768][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.797631][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.829870][ T4258] device veth1_macvtap entered promiscuous mode [ 79.876755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.887651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.899438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.908436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.916221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.933297][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.942069][ T4262] device veth1_vlan entered promiscuous mode [ 79.957849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.968020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.981476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.996380][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.013120][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.022781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.031761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.041849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.053204][ T4258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.063327][ T4258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.072529][ T4258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.081364][ T4258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.098158][ T4252] device veth0_vlan entered promiscuous mode [ 80.116509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.125935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.156443][ T4252] device veth1_vlan entered promiscuous mode [ 80.174811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.182716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.198551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.250815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.270528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.287564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.297616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.322681][ T4252] device veth0_macvtap entered promiscuous mode [ 80.340039][ T4252] device veth1_macvtap entered promiscuous mode [ 80.349319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.358067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.367248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.376897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.385810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.393189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.400864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.412756][ T4262] device veth0_macvtap entered promiscuous mode [ 80.423566][ T4262] device veth1_macvtap entered promiscuous mode [ 80.439211][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.481026][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.498507][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.511660][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.546750][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.559072][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.568222][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.577724][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.586611][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.596295][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.604783][ T4254] device veth0_vlan entered promiscuous mode [ 80.612941][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.625005][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.635396][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.645864][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.657331][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.681584][ T4254] device veth1_vlan entered promiscuous mode [ 80.689587][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.697012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.706359][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.708800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.725291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.738224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.749573][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.765350][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.780915][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.798019][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.810636][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.827329][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.838214][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.850296][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.874038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.882217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.892175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.901380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.911540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.922810][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.933689][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.950683][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.960070][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.989055][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.003347][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.013173][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.015083][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 81.027890][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.036771][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 81.036807][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 81.048883][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 81.070084][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.080437][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.090071][ T4254] device veth0_macvtap entered promiscuous mode [ 81.096797][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 81.128324][ T4254] device veth1_macvtap entered promiscuous mode [ 81.164873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.172968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.186954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.196397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.212184][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.220516][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.258053][ T4253] device veth0_vlan entered promiscuous mode [ 81.271662][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.279841][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.288800][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.297438][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.305661][ T1015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.329510][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.347232][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.357312][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.367987][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.378067][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.388737][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.401294][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.428234][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.439695][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.464378][ T4253] device veth1_vlan entered promiscuous mode [ 81.474839][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.487308][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.491786][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.502782][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.511962][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.523683][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.533674][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.544419][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.556254][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.585026][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.593018][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.612622][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.622304][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.638004][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.647876][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.699928][ T4254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.709248][ T4254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.721712][ T4254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.735415][ T4254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.755483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.765766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.779602][ T4253] device veth0_macvtap entered promiscuous mode [ 81.813235][ T4253] device veth1_macvtap entered promiscuous mode [ 81.822777][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.836849][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.840713][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.853246][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.864460][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.873053][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.884502][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.897534][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.907710][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.918352][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.928598][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.939335][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.951799][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.964326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.972464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.988246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.997316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.005779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.013987][ T4298] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.019097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.041949][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.058335][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.069481][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.080468][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.091144][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.101723][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.112689][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.123433][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.136582][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.166839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.187070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.199594][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.208070][ T4298] usb 3-1: config index 0 descriptor too short (expected 65535, got 202) [ 82.208836][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.223673][ T4298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.227149][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.240646][ T4298] usb 3-1: config 0 has no interfaces? [ 82.253824][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.266009][ T4298] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.304577][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.312708][ T4298] usb 3-1: Product: syz [ 82.328490][ T4298] usb 3-1: Manufacturer: syz [ 82.333135][ T4298] usb 3-1: SerialNumber: syz [ 82.369191][ T4298] usb 3-1: config 0 descriptor?? [ 82.435191][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.466342][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.517493][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.548249][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.578758][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.596779][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.598516][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.601430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.602172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.628660][ T4326] usb 3-1: USB disconnect, device number 2 [ 82.663327][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.663375][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.668669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.882903][ T4354] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.096995][ T4261] Bluetooth: hci2: command 0x0419 tx timeout [ 83.097049][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 83.107647][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 83.110021][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 83.175883][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 83.223991][ T4301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.264003][ T4299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.419026][ T4301] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 83.433194][ T4301] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 83.453122][ T4301] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 83.464062][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 83.475070][ T4299] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 83.492071][ T4301] usb 4-1: config 0 has no interface number 0 [ 83.502941][ T4301] usb 4-1: config 0 has no interface number 1 [ 83.516995][ T4299] usb 2-1: config 0 has an invalid interface number: 49 but max is 2 [ 83.532348][ T4301] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 83.549097][ T4299] usb 2-1: config 0 has no interface number 1 [ 83.555973][ T4301] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 83.572177][ T4299] usb 2-1: config 0 has no interface number 2 [ 83.579057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.589849][ T4299] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 83.600400][ T4301] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 83.622354][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.631748][ T4301] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 83.641942][ T26] audit: type=1326 audit(1750861048.319:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 83.678724][ T4301] usb 4-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0x12, skipping [ 83.709250][ T4299] usb 2-1: config 0 descriptor?? [ 83.722291][ T26] audit: type=1326 audit(1750861048.359:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 83.744180][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.760074][ T4301] usb 4-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0xE6, skipping [ 83.780590][ T4299] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 83.801755][ T4301] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 83.843627][ T4301] usb 4-1: config 0 interface 66 has no altsetting 0 [ 83.877813][ T4301] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 83.907295][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.922859][ T4301] usb 4-1: Product: syz [ 83.933600][ T4301] usb 4-1: Manufacturer: syz [ 83.955817][ T4301] usb 4-1: SerialNumber: syz [ 83.982726][ T4301] usb 4-1: config 0 descriptor?? [ 84.013493][ T4378] device xfrm0 entered promiscuous mode [ 84.063570][ T26] audit: type=1326 audit(1750861048.749:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 84.137337][ T26] audit: type=1326 audit(1750861048.789:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 84.227407][ T4301] usb 4-1: USB disconnect, device number 2 [ 84.305530][ T26] audit: type=1326 audit(1750861048.989:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 84.523277][ T26] audit: type=1326 audit(1750861049.209:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 84.605869][ T26] audit: type=1326 audit(1750861049.239:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 84.627680][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.426146][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 85.529168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.529396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.298291][ T124] usb 2-1: USB disconnect, device number 2 [ 87.213175][ T4405] misc userio: Invalid payload size [ 87.218310][ T4405] misc userio: No port type given on /dev/userio [ 87.358230][ T4421] device team_slave_0 entered promiscuous mode [ 87.364649][ T4421] device team_slave_1 entered promiscuous mode [ 87.374611][ T4421] device macsec1 entered promiscuous mode [ 87.380381][ T4421] device team0 entered promiscuous mode [ 87.423457][ T4421] device team0 left promiscuous mode [ 87.461746][ T4421] device team_slave_0 left promiscuous mode [ 87.467833][ T4421] device team_slave_1 left promiscuous mode [ 87.514171][ T4297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.703917][ T4297] usb 2-1: Using ep0 maxpacket: 32 [ 87.711920][ T4297] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 87.786042][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.881196][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 88.431374][ T4297] usb 2-1: config 0 descriptor?? [ 88.446087][ T4297] gspca_main: sunplus-2.14.0 probing 041e:400b [ 88.863907][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.955765][ T4429] loop0: detected capacity change from 0 to 65536 [ 89.000410][ T4429] XFS (loop0): Mounting V5 Filesystem [ 89.014142][ T4299] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.036965][ T4429] XFS (loop0): Ending clean mount [ 89.057488][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.069961][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 89.083098][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 89.129589][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 89.151243][ T27] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 89.163350][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.178597][ T27] usb 5-1: Product: syz [ 89.183183][ T27] usb 5-1: Manufacturer: syz [ 89.189745][ T27] usb 5-1: SerialNumber: syz [ 89.203860][ T4299] usb 4-1: Using ep0 maxpacket: 32 [ 89.214300][ T4299] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.223226][ T4299] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30 [ 89.225266][ T27] usb 5-1: config 0 descriptor?? [ 89.273835][ T4299] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 89.314028][ T4299] usb 4-1: config 0 interface 0 has no altsetting 1 [ 89.335578][ T4299] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 89.345265][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.354839][ T4299] usb 4-1: SerialNumber: syz [ 89.369746][ T4299] usb 4-1: config 0 descriptor?? [ 89.387833][ T4299] usb-storage 4-1:0.0: USB Mass Storage device detected [ 89.416360][ T4299] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 89.458486][ T27] usb 5-1: ucan: probing device on interface #0 [ 89.466642][ T27] usb 5-1: ucan: invalid EP count (1) [ 89.484010][ T27] usb 5-1: ucan: probe failed; try to update the device firmware [ 89.505404][ T27] usb 5-1: USB disconnect, device number 2 [ 89.513059][ T4446] orangefs_mount: mount request failed with -4 [ 89.581497][ T4299] usb 4-1: USB disconnect, device number 3 [ 89.737563][ T22] cfg80211: failed to load regulatory.db [ 89.964282][ T4297] gspca_sunplus: reg_w_riv err -110 [ 89.970064][ T4297] sunplus: probe of 2-1:0.0 failed with error -110 [ 91.109874][ T124] usb 2-1: USB disconnect, device number 3 [ 91.192735][ T4252] XFS (loop0): Unmounting Filesystem [ 91.236650][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.423899][ T4299] usb 5-1: Using ep0 maxpacket: 32 [ 91.425610][ T4299] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 91.425637][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.427405][ T4299] usb 5-1: config 0 descriptor?? [ 91.433353][ T4299] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 93.818597][ T4508] orangefs_mount: mount request failed with -4 [ 94.410709][ T26] audit: type=1326 audit(1750861059.099:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.477457][ T26] audit: type=1326 audit(1750861059.129:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.525438][ T26] audit: type=1326 audit(1750861059.139:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.589882][ T26] audit: type=1326 audit(1750861059.139:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.650366][ T4299] gspca_vc032x: reg_r err -71 [ 94.660857][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.671981][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.677086][ T26] audit: type=1326 audit(1750861059.139:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.688662][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.718992][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.729021][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.748837][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.760969][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.764275][ T26] audit: type=1326 audit(1750861059.139:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.773862][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817622][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817642][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817651][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817659][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817668][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817676][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817684][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817693][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817701][ T4299] gspca_vc032x: I2c Bus Busy Wait 00 [ 94.817709][ T4299] gspca_vc032x: Unknown sensor... [ 94.817754][ T4299] vc032x: probe of 5-1:0.0 failed with error -22 [ 94.850285][ T26] audit: type=1326 audit(1750861059.139:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.850324][ T26] audit: type=1326 audit(1750861059.139:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.850351][ T26] audit: type=1326 audit(1750861059.139:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.850401][ T26] audit: type=1326 audit(1750861059.139:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4527 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc374d8e929 code=0x7ffc0000 [ 94.860998][ T4299] usb 5-1: USB disconnect, device number 3 [ 97.017859][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 97.270071][ T4566] loop1: detected capacity change from 0 to 4096 [ 97.281222][ T4566] ======================================================= [ 97.281222][ T4566] WARNING: The mand mount option has been deprecated and [ 97.281222][ T4566] and is ignored by this kernel. Remove the mand [ 97.281222][ T4566] option from the mount to silence this warning. [ 97.281222][ T4566] ======================================================= [ 97.316217][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.509218][ T4567] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.433895][ T4298] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.573905][ T4301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.645622][ T4298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.675805][ T4298] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 102.692200][ T4298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 102.726769][ T4298] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 102.736668][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.745673][ T4298] usb 2-1: Product: syz [ 102.750495][ T4298] usb 2-1: Manufacturer: syz [ 102.755289][ T4298] usb 2-1: SerialNumber: syz [ 102.774116][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 102.816340][ T4301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.832819][ T4298] usb 2-1: config 0 descriptor?? [ 102.847116][ T4301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.858913][ T4301] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 102.868132][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.924599][ T4301] usb 3-1: config 0 descriptor?? [ 103.209862][ T4298] usb 2-1: ucan: probing device on interface #0 [ 103.216471][ T4298] usb 2-1: ucan: invalid EP count (1) [ 103.222784][ T4298] usb 2-1: ucan: probe failed; try to update the device firmware [ 103.275034][ T4298] usb 2-1: USB disconnect, device number 4 [ 103.610450][ T4301] sony 0003:054C:05C4.0001: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 103.622859][ T4301] sony 0003:054C:05C4.0001: failed to claim input [ 104.141224][ T4625] loop0: detected capacity change from 0 to 4096 [ 105.338916][ T4626] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.364593][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 105.364665][ T26] audit: type=1800 audit(1750861070.059:35): pid=4625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.79" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 105.980091][ T4300] usb 3-1: USB disconnect, device number 3 [ 106.010947][ T4620] fido_id[4620]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0001/report_descriptor': No such device [ 108.550421][ T4647] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.589653][ T4647] vxfs: unable to read disk superblock at 1 [ 108.624624][ T4647] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.689935][ T4647] vxfs: unable to read disk superblock at 8 [ 108.739919][ T4647] vxfs: can't find superblock. [ 109.183955][ T22] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 109.485576][ T22] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 109.629770][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.720401][ T22] usb 5-1: Product: syz [ 109.734835][ T4678] loop1: detected capacity change from 0 to 1024 [ 109.740935][ T22] usb 5-1: Manufacturer: syz [ 109.770981][ T22] usb 5-1: SerialNumber: syz [ 109.775982][ T4678] EXT4-fs: Ignoring removed bh option [ 109.862035][ T22] usb 5-1: config 0 descriptor?? [ 109.892918][ T4678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.064253][ T4254] EXT4-fs (loop1): unmounting filesystem. [ 110.227714][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 110.310204][ T22] airspy 5-1:0.0: Board ID: 00 [ 110.315523][ T22] airspy 5-1:0.0: Firmware version: [ 111.116488][ T22] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f [ 111.178457][ T4696] loop0: detected capacity change from 0 to 4096 [ 112.782444][ T22] airspy 5-1:0.0: Registered as swradio24 [ 112.875574][ T22] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 112.977726][ T22] usb 5-1: USB disconnect, device number 4 [ 113.265810][ T4708] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.287989][ T26] audit: type=1800 audit(1750861077.979:36): pid=4695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.98" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 113.461345][ T4714] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.472296][ T4714] vxfs: unable to read disk superblock at 1 [ 113.480974][ T4714] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.491110][ T4714] vxfs: unable to read disk superblock at 8 [ 113.497407][ T4714] vxfs: can't find superblock. [ 115.282668][ T4740] loop0: detected capacity change from 0 to 2048 [ 115.362786][ T4740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.982228][ T4757] loop4: detected capacity change from 0 to 4096 [ 116.095574][ T4758] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.121743][ T26] audit: type=1800 audit(1750861080.809:37): pid=4757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.115" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 116.894003][ T4630] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.127968][ T4630] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.208937][ T4630] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.380034][ T4630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.510755][ T4766] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.527735][ T4766] vxfs: unable to read disk superblock at 1 [ 117.917046][ T4766] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.918493][ T4630] usb 1-1: config 0 descriptor?? [ 117.953259][ T4766] vxfs: unable to read disk superblock at 8 [ 117.970389][ T4766] vxfs: can't find superblock. [ 118.357443][ T4630] pwc: Askey VC010 type 2 USB webcam detected. [ 118.982632][ T4630] pwc: recv_control_msg error -71 req 02 val 2700 [ 118.999490][ T4630] pwc: recv_control_msg error -71 req 02 val 2c00 [ 119.052212][ T4630] pwc: recv_control_msg error -71 req 04 val 1000 [ 119.093349][ T4630] pwc: recv_control_msg error -71 req 04 val 1300 [ 119.123029][ T4630] pwc: recv_control_msg error -71 req 04 val 1400 [ 119.123740][ T4630] pwc: recv_control_msg error -71 req 02 val 2000 [ 119.130629][ T4630] pwc: recv_control_msg error -71 req 02 val 2100 [ 119.131079][ T4630] pwc: recv_control_msg error -71 req 04 val 1500 [ 119.131411][ T4630] pwc: recv_control_msg error -71 req 02 val 2500 [ 119.131747][ T4630] pwc: recv_control_msg error -71 req 02 val 2400 [ 119.132047][ T4630] pwc: recv_control_msg error -71 req 02 val 2600 [ 119.132396][ T4630] pwc: recv_control_msg error -71 req 02 val 2900 [ 119.132787][ T4630] pwc: recv_control_msg error -71 req 02 val 2800 [ 119.133537][ T4630] pwc: recv_control_msg error -71 req 04 val 1100 [ 119.134676][ T4630] pwc: recv_control_msg error -71 req 04 val 1200 [ 119.155118][ T4630] pwc: Registered as video103. [ 119.173575][ T4630] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 119.189352][ T4778] binder: 4775:4778 ioctl c0306201 0 returned -14 [ 119.288049][ T4780] binder: 4775:4780 ioctl c04064a0 0 returned -22 [ 119.386910][ T4630] usb 1-1: USB disconnect, device number 2 [ 120.076794][ T4790] loop0: detected capacity change from 0 to 4096 [ 120.135202][ T4791] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.159328][ T26] audit: type=1800 audit(1750861084.849:38): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 121.545125][ T4800] loop4: detected capacity change from 0 to 2048 [ 121.558960][ T4800] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.799369][ T4805] device ip6gretap0 entered promiscuous mode [ 121.805499][ T4805] device macsec1 entered promiscuous mode [ 121.836932][ T4805] device ip6gretap0 left promiscuous mode [ 122.217252][ T4818] loop3: detected capacity change from 0 to 4096 [ 123.841833][ T4820] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.939308][ T26] audit: type=1800 audit(1750861088.629:39): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.132" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 125.620120][ T4850] loop0: detected capacity change from 0 to 4096 [ 126.878621][ T4851] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.907591][ T26] audit: type=1800 audit(1750861091.599:40): pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.140" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 127.454022][ T4298] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.490252][ T4856] loop3: detected capacity change from 0 to 2048 [ 127.507894][ T4858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.142'. [ 127.535184][ T4856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.560257][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.693930][ T4298] usb 3-1: config 0 has no interfaces? [ 127.700927][ T4298] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.745171][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.762156][ T4298] usb 3-1: config 0 descriptor?? [ 127.807003][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.814512][ T4858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.997400][ T4854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.017406][ T4854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.074026][ T124] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 128.176001][ T4299] usb 3-1: USB disconnect, device number 4 [ 128.899490][ T124] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.909974][ T124] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 128.920995][ T124] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.951605][ T124] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 128.995686][ T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.133996][ T124] usb 2-1: Product: syz [ 129.138218][ T124] usb 2-1: Manufacturer: syz [ 129.153038][ T124] usb 2-1: SerialNumber: syz [ 129.168254][ T124] usb 2-1: config 0 descriptor?? [ 129.176565][ T4862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.322614][ T4885] tipc: Started in network mode [ 129.340249][ T4885] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 129.348356][ T4885] tipc: Enabled bearer , priority 10 [ 129.373881][ T4299] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.404531][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.417097][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.420138][ T4301] usb 2-1: USB disconnect, device number 5 [ 129.459500][ T4885] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 129.470021][ T4885] tipc: Enabled bearer , priority 10 [ 129.489169][ T4893] netlink: 'syz.0.153': attribute type 16 has an invalid length. [ 129.518794][ T4893] netlink: 'syz.0.153': attribute type 17 has an invalid length. [ 129.567636][ T4299] usb 3-1: Using ep0 maxpacket: 16 [ 129.576322][ T4299] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.656652][ T4299] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.687210][ T4299] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 129.701769][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.716198][ T4299] usb 3-1: Product: syz [ 129.720560][ T4299] usb 3-1: Manufacturer: syz [ 129.725503][ T4299] usb 3-1: SerialNumber: syz [ 129.964030][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078b3dc00: rx timeout, send abort [ 130.183063][ T4299] usb 3-1: 0:2 : does not exist [ 130.465476][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054fd4800: rx timeout, send abort [ 130.474707][ T124] tipc: Node number set to 10922666 [ 130.486227][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078b3dc00: abort rx timeout. Force session deactivation [ 130.533888][ T4298] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 130.751052][ T4299] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 130.973810][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054fd4800: abort rx timeout. Force session deactivation [ 131.232669][ T4299] usb 3-1: USB disconnect, device number 5 [ 131.389751][ T4459] udevd[4459]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.562872][ T4298] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 132.574336][ T4298] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.585552][ T4298] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 132.615275][ T4298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.624784][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 132.632802][ T4298] usb 2-1: SerialNumber: syz [ 132.870784][ T4298] rndis_wlan 2-1:253.0: RNDIS init failed, -71 [ 132.899154][ T4298] rndis_wlan: probe of 2-1:253.0 failed with error -71 [ 132.929365][ T4298] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 132.965224][ T4298] rndis_host: probe of 2-1:253.0 failed with error -71 [ 133.003361][ T4298] usb 2-1: USB disconnect, device number 6 [ 133.174040][ T124] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.191840][ T4937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.170'. [ 133.494755][ T4298] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 133.536221][ T124] usb 4-1: Using ep0 maxpacket: 32 [ 133.547244][ T124] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 133.566593][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.580822][ T124] usb 4-1: Product: syz [ 133.585090][ T124] usb 4-1: Manufacturer: syz [ 133.610676][ T124] usb 4-1: SerialNumber: syz [ 133.625961][ T124] usb 4-1: config 0 descriptor?? [ 133.637399][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 133.707808][ T4298] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 133.722637][ T4298] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.728359][ T4946] loop4: detected capacity change from 0 to 256 [ 133.754567][ T4298] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 133.782405][ T4298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.803209][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.820888][ T4298] usb 2-1: SerialNumber: syz [ 134.290432][ T124] gspca_stk1135: reg_w 0x3 err -71 [ 134.296804][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.320763][ T124] gspca_stk1135: Sensor write failed [ 134.326470][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.333822][ T124] gspca_stk1135: Sensor write failed [ 134.339824][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.352624][ T124] gspca_stk1135: Sensor read failed [ 134.363489][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.376010][ T124] gspca_stk1135: Sensor read failed [ 134.384855][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 134.391551][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.398342][ T124] gspca_stk1135: Sensor read failed [ 134.403890][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.410337][ T124] gspca_stk1135: Sensor read failed [ 134.432689][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.446456][ T124] gspca_stk1135: Sensor write failed [ 134.458250][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 134.526272][ T124] gspca_stk1135: Sensor write failed [ 134.531721][ T124] stk1135: probe of 4-1:0.0 failed with error -71 [ 134.552068][ T124] usb 4-1: USB disconnect, device number 4 [ 135.165928][ T4298] rndis_wlan 2-1:253.0: RNDIS init failed, -110 [ 135.188324][ T4298] rndis_wlan: probe of 2-1:253.0 failed with error -110 [ 135.334509][ T4298] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 135.448120][ T4298] rndis_host: probe of 2-1:253.0 failed with error -71 [ 135.671839][ T4961] loop3: detected capacity change from 0 to 4096 [ 135.690827][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.699028][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.732583][ T4298] usb 2-1: USB disconnect, device number 7 [ 135.757807][ T4962] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.786820][ T26] audit: type=1800 audit(1750861100.624:41): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.177" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 136.346556][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 137.828194][ T4990] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 139.032807][ T5000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 139.133384][ T5004] loop0: detected capacity change from 0 to 1024 [ 139.197707][ T5004] EXT4-fs: Ignoring removed bh option [ 139.263435][ T5004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.458505][ T5011] loop4: detected capacity change from 0 to 4096 [ 141.109399][ T5015] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.131945][ T26] audit: type=1800 audit(1750861106.364:42): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.192" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 141.255169][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 143.002379][ T5045] loop4: detected capacity change from 0 to 256 [ 143.097314][ T4936] Set syz1 is full, maxelem 65536 reached [ 143.347783][ T5052] loop2: detected capacity change from 0 to 1024 [ 143.349499][ T950] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.382397][ T5052] EXT4-fs: Ignoring removed bh option [ 143.535133][ T5052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.619775][ T950] usb 1-1: Using ep0 maxpacket: 16 [ 144.152412][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 144.499629][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 144.919933][ T5078] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 144.929626][ T5078] vxfs: unable to read disk superblock at 1 [ 144.936715][ T5078] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 144.946009][ T5078] vxfs: unable to read disk superblock at 8 [ 144.951905][ T5078] vxfs: can't find superblock. [ 146.026232][ T5086] netlink: 64 bytes leftover after parsing attributes in process `syz.1.213'. [ 148.429136][ T950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.443824][ T950] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 148.505984][ T950] usb 1-1: chopping to 0 config(s) [ 148.545842][ T950] usb 1-1: can't read configurations, error -32 [ 148.719359][ T5112] loop3: detected capacity change from 0 to 4096 [ 150.026598][ T5113] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.047630][ T26] audit: type=1800 audit(1750861115.926:43): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.220" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 150.097424][ T950] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.479540][ T950] usb 1-1: device descriptor read/64, error -32 [ 150.513666][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 150.591853][ T950] usb usb1-port1: attempt power cycle [ 150.902081][ T5128] loop4: detected capacity change from 0 to 4096 [ 150.973449][ T950] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.124962][ T5129] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.148866][ T26] audit: type=1800 audit(1750861118.179:44): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.224" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 152.198464][ T950] usb 1-1: device descriptor read/8, error -32 [ 154.452765][ T5151] Zero length message leads to an empty skb [ 156.446815][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 156.553766][ T5177] loop4: detected capacity change from 0 to 4096 [ 159.103545][ T5178] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.127203][ T26] audit: type=1800 audit(1750861125.657:45): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.237" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 160.996251][ T124] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.192688][ T124] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 161.262724][ T124] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.277743][ T124] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.296621][ T124] usb 4-1: config 1 has no interface number 1 [ 161.336451][ T124] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.363621][ T124] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.588494][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.599383][ T124] usb 4-1: Product: syz [ 161.603585][ T124] usb 4-1: Manufacturer: syz [ 161.610647][ T124] usb 4-1: SerialNumber: syz [ 161.970986][ T124] usb 4-1: MIDIStreaming interface descriptor not found [ 162.551154][ T124] usb 4-1: USB disconnect, device number 5 [ 163.080035][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.123262][ T5225] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 163.133549][ T5225] vxfs: unable to read disk superblock at 1 [ 163.139606][ T5225] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 163.148831][ T5225] vxfs: unable to read disk superblock at 8 [ 163.154702][ T5225] vxfs: can't find superblock. [ 163.304685][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 163.317855][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.335089][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 163.350732][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.360987][ T14] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 163.377584][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.402776][ T14] usb 2-1: config 0 descriptor?? [ 164.416035][ T14] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 164.507281][ T14] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 164.548303][ T14] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 164.626982][ T14] usb 2-1: USB disconnect, device number 8 [ 165.696561][ T5254] loop4: detected capacity change from 0 to 4096 [ 165.850026][ T5255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.872784][ T26] audit: type=1800 audit(1750861132.899:46): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.259" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 167.817571][ T5266] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 167.827015][ T5266] vxfs: unable to read disk superblock at 1 [ 167.833221][ T5266] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 167.842599][ T5266] vxfs: unable to read disk superblock at 8 [ 167.848529][ T5266] vxfs: can't find superblock. [ 168.617444][ T4297] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.794346][ T4297] usb 2-1: Using ep0 maxpacket: 32 [ 168.807695][ T4297] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 168.838777][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.881996][ T4297] usb 2-1: config 0 descriptor?? [ 168.892161][ T4297] gspca_main: sunplus-2.14.0 probing 041e:400b [ 169.032050][ T5296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 170.093453][ T4297] gspca_sunplus: reg_w_riv err -71 [ 170.098842][ T4297] sunplus: probe of 2-1:0.0 failed with error -71 [ 170.107706][ T4297] usb 2-1: USB disconnect, device number 9 [ 170.168899][ T5327] loop4: detected capacity change from 0 to 256 [ 170.532057][ T5325] loop3: detected capacity change from 0 to 4096 [ 171.340393][ T5333] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.351307][ T26] audit: type=1800 audit(1750861138.770:47): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.279" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 173.638638][ T5377] netlink: 'syz.1.293': attribute type 16 has an invalid length. [ 173.638706][ T5377] netlink: 'syz.1.293': attribute type 17 has an invalid length. [ 173.663100][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.663241][ T5377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.823867][ T5395] loop3: detected capacity change from 0 to 256 [ 174.858064][ T5397] netlink: 104 bytes leftover after parsing attributes in process `syz.0.298'. [ 176.242109][ T4297] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 176.459350][ T4297] usb 5-1: config 0 has no interfaces? [ 176.469129][ T4297] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 176.524034][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.721885][ T4297] usb 5-1: Product: syz [ 176.726689][ T4297] usb 5-1: Manufacturer: syz [ 176.731300][ T4297] usb 5-1: SerialNumber: syz [ 176.778583][ T4297] usb 5-1: config 0 descriptor?? [ 178.731162][ T5446] tipc: Started in network mode [ 178.749440][ T5446] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 178.794200][ T5446] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 178.822035][ T5446] tipc: Enabled bearer , priority 10 [ 178.851582][ T4297] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.066062][ T4297] usb 1-1: Using ep0 maxpacket: 8 [ 179.072953][ T4297] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 179.101506][ T4297] usb 1-1: config 0 has no interface number 1 [ 179.146033][ T4297] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 179.176253][ T4297] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 179.204560][ T4297] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 179.263069][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.299278][ T4297] usb 1-1: Product: syz [ 179.342539][ T4297] usb 1-1: Manufacturer: syz [ 179.363545][ T4297] usb 1-1: SerialNumber: syz [ 179.386225][ T5222] usb 5-1: USB disconnect, device number 5 [ 179.397189][ T4297] usb 1-1: config 0 descriptor?? [ 179.436259][ T4297] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 180.045519][ T3640] tipc: Node number set to 1 [ 180.165307][ T2309] pvrusb2: Invalid read control endpoint [ 180.187544][ T4297] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 180.223157][ T2309] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 180.265910][ T4297] usb 1-1: USB disconnect, device number 7 [ 180.271095][ T2309] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 180.331670][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 180.436718][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 181.604099][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 183.409026][ T4296] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.313595][ T5529] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 184.321440][ T5530] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 184.476577][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 184.536672][ T4301] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.684011][ T5532] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 184.693287][ T5532] vxfs: unable to read disk superblock at 1 [ 184.699364][ T5532] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 184.708645][ T5532] vxfs: unable to read disk superblock at 8 [ 184.714710][ T5532] vxfs: can't find superblock. [ 184.740615][ T4296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.741908][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 184.757893][ T4301] usb 3-1: config 0 has no interfaces? [ 184.766473][ T4301] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 184.795572][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.813979][ T4301] usb 3-1: Product: syz [ 184.907752][ T4301] usb 3-1: Manufacturer: syz [ 184.912856][ T4301] usb 3-1: SerialNumber: syz [ 184.920774][ T4301] usb 3-1: config 0 descriptor?? [ 184.934992][ T4296] usb 4-1: config 1 has no interface number 0 [ 184.972242][ T4296] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.814422][ T5509] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.332'. [ 185.936200][ T4296] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 186.140466][ T4296] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 186.200904][ T4296] usb 4-1: string descriptor 0 read error: -71 [ 186.210368][ T4296] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.251645][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.295862][ T4296] usb 4-1: can't set config #1, error -71 [ 186.312718][ T4296] usb 4-1: USB disconnect, device number 6 [ 188.799659][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.823730][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.035150][ T3640] usb 3-1: USB disconnect, device number 6 [ 189.160340][ T5577] netlink: 'syz.1.351': attribute type 16 has an invalid length. [ 189.173727][ T5577] netlink: 'syz.1.351': attribute type 17 has an invalid length. [ 189.726663][ T5589] loop1: detected capacity change from 0 to 4096 [ 189.795980][ T5593] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.809008][ T26] audit: type=1800 audit(1750861158.582:48): pid=5587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.356" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 190.037486][ T48] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 190.046306][ T48] Bluetooth: hci3: Injecting HCI hardware error event [ 190.055228][ T4261] Bluetooth: hci3: hardware error 0x00 [ 190.317853][ T5600] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 190.324837][ T5600] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 190.345457][ T5600] vhci_hcd vhci_hcd.0: Device attached [ 191.037951][ T5605] orangefs_mount: mount request failed with -4 [ 191.129673][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 191.142685][ T5604] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 191.415738][ T5222] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 191.789987][ T5603] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 191.821588][ T4627] vhci_hcd: stop threads [ 191.843590][ T4627] vhci_hcd: release socket [ 191.854793][ T4627] vhci_hcd: disconnect device [ 191.984493][ T4261] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 192.382598][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.410665][ T5604] team0: Port device bond0 added [ 193.046431][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.053194][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.547862][ T5626] netlink: 'syz.1.366': attribute type 16 has an invalid length. [ 193.547885][ T5626] netlink: 'syz.1.366': attribute type 17 has an invalid length. [ 194.957503][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 194.963630][ T4261] Bluetooth: hci1: command 0x0406 tx timeout [ 194.963680][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 194.969719][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 197.017527][ T5222] vhci_hcd: vhci_device speed not set [ 197.309920][ T26] audit: type=1326 audit(1750861166.629:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 197.445145][ T26] audit: type=1326 audit(1750861166.629:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 197.477670][ T26] audit: type=1326 audit(1750861166.661:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.591092][ T26] audit: type=1326 audit(1750861166.693:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.632024][ T26] audit: type=1326 audit(1750861166.693:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.667401][ T26] audit: type=1326 audit(1750861166.693:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.702027][ T26] audit: type=1326 audit(1750861166.693:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.725888][ T26] audit: type=1326 audit(1750861166.693:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.748488][ T26] audit: type=1326 audit(1750861166.693:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.848389][ T26] audit: type=1326 audit(1750861166.693:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadaeb8e929 code=0x7ffc0000 [ 198.955973][ T950] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.132925][ T950] usb 2-1: Using ep0 maxpacket: 8 [ 199.139996][ T950] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 199.168294][ T950] usb 2-1: config 0 has no interface number 1 [ 199.188011][ T950] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 199.222455][ T950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 199.246706][ T950] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 199.266492][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.299834][ T950] usb 2-1: Product: syz [ 199.326785][ T950] usb 2-1: Manufacturer: syz [ 199.345641][ T950] usb 2-1: SerialNumber: syz [ 199.370720][ T950] usb 2-1: config 0 descriptor?? [ 199.428573][ T950] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 199.833870][ T950] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 199.858130][ T950] usb 2-1: USB disconnect, device number 10 [ 199.875036][ T950] pvrusb2: Device being rendered inoperable [ 199.889721][ T950] pvrusb2: Device being rendered inoperable [ 201.531338][ T5741] device dummy0 entered promiscuous mode [ 201.566070][ T5741] device macsec1 entered promiscuous mode [ 201.597201][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 201.614761][ T5741] device dummy0 left promiscuous mode [ 201.956010][ T5749] loop4: detected capacity change from 0 to 2048 [ 202.558918][ T5749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.482261][ T4264] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 203.525750][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.691807][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.528539][ T5770] netlink: 'syz.2.406': attribute type 16 has an invalid length. [ 204.543771][ T5770] netlink: 'syz.2.406': attribute type 17 has an invalid length. [ 206.071552][ T5790] loop1: detected capacity change from 0 to 4096 [ 206.344135][ T5803] loop4: detected capacity change from 0 to 2048 [ 206.430262][ T5803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.141916][ T5806] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.164836][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 207.164851][ T26] audit: type=1800 audit(1750861177.197:61): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.413" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 207.835458][ T5811] device veth1_to_batadv entered promiscuous mode [ 208.427949][ T4298] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.623798][ T4298] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.649606][ T4298] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 208.683242][ T4298] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.695576][ T4298] usb 5-1: config 220 has no interface number 2 [ 208.703597][ T4298] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.718325][ T4298] usb 5-1: config 220 interface 0 has no altsetting 0 [ 208.725661][ T4298] usb 5-1: config 220 interface 76 has no altsetting 0 [ 208.732892][ T4298] usb 5-1: config 220 interface 1 has no altsetting 0 [ 208.745953][ T4298] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 208.759118][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 208.771544][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.785717][ T4298] usb 5-1: Product: syz [ 208.789448][ T5824] netlink: 'syz.2.424': attribute type 16 has an invalid length. [ 208.790500][ T4298] usb 5-1: Manufacturer: syz [ 208.807674][ T4298] usb 5-1: SerialNumber: syz [ 208.821557][ T5824] netlink: 'syz.2.424': attribute type 17 has an invalid length. [ 209.017483][ T4298] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 209.031378][ T4298] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 209.045780][ T4298] usb 5-1: No valid video chain found. [ 209.060001][ T4298] usb 5-1: selecting invalid altsetting 0 [ 209.104229][ T4298] usb 5-1: selecting invalid altsetting 0 [ 209.112359][ T4298] usbtest: probe of 5-1:220.1 failed with error -22 [ 209.156217][ T4298] usb 5-1: USB disconnect, device number 6 [ 211.137071][ T5848] xt_CT: No such helper "pptp" [ 211.327477][ T5859] netlink: 'syz.1.436': attribute type 16 has an invalid length. [ 211.343505][ T5859] netlink: 'syz.1.436': attribute type 17 has an invalid length. [ 211.739705][ T5865] loop4: detected capacity change from 0 to 32768 [ 211.776051][ T5865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.438 (5865) [ 212.132978][ T5865] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.143609][ T5865] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 212.152483][ T5865] BTRFS info (device loop4): setting nodatacow, compression disabled [ 212.160943][ T5865] BTRFS info (device loop4): max_inline at 0 [ 212.167171][ T5865] BTRFS info (device loop4): enabling disk space caching [ 212.174338][ T5865] BTRFS info (device loop4): setting datasum, datacow enabled [ 212.181877][ T5865] BTRFS info (device loop4): turning off barriers [ 212.188297][ T5865] BTRFS info (device loop4): turning on flush-on-commit [ 212.195274][ T5865] BTRFS info (device loop4): doing ref verification [ 212.201909][ T5865] BTRFS info (device loop4): force clearing of disk cache [ 212.209086][ T5865] BTRFS info (device loop4): enabling ssd optimizations [ 212.216115][ T5865] BTRFS info (device loop4): max_inline at 4096 [ 212.222404][ T5865] BTRFS info (device loop4): disk space caching is enabled [ 212.661791][ T5865] BTRFS info (device loop4): rebuilding free space tree [ 212.712438][ T5865] BTRFS info (device loop4): disabling free space tree [ 212.720340][ T5865] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.730842][ T5865] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.793535][ T26] audit: type=1800 audit(1750861183.237:62): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.438" name="bus" dev="loop4" ino=264 res=0 errno=0 [ 213.110306][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 213.149372][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 213.159473][ T4253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.443050][ T5911] loop1: detected capacity change from 0 to 1024 [ 213.546315][ T5911] hfsplus: unable to parse mount options [ 213.834018][ T5927] loop1: detected capacity change from 0 to 256 [ 213.885472][ T5926] netlink: 'syz.2.450': attribute type 16 has an invalid length. [ 213.912991][ T5926] netlink: 'syz.2.450': attribute type 17 has an invalid length. [ 214.566867][ T4270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop4 scanned by udevd (4270) [ 214.666601][ T4264] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 214.676756][ T4264] CPU: 0 PID: 4264 Comm: kworker/u5:5 Not tainted 6.1.141-syzkaller #0 [ 214.685027][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.695102][ T4264] Workqueue: hci1 hci_rx_work [ 214.699852][ T4264] Call Trace: [ 214.703156][ T4264] [ 214.706108][ T4264] dump_stack_lvl+0x168/0x22e [ 214.710836][ T4264] ? show_regs_print_info+0x12/0x12 [ 214.716063][ T4264] ? load_image+0x3b0/0x3b0 [ 214.720601][ T4264] sysfs_create_dir_ns+0x252/0x280 [ 214.725745][ T4264] ? hci_rx_work+0x3eb/0xd40 [ 214.730360][ T4264] ? sysfs_warn_dup+0xa0/0xa0 [ 214.735070][ T4264] ? do_raw_spin_unlock+0x11d/0x230 [ 214.740300][ T4264] kobject_add_internal+0x6b8/0xc80 [ 214.745525][ T4264] kobject_add+0x152/0x210 [ 214.749972][ T4264] ? kobject_init+0x1d0/0x1d0 [ 214.754667][ T4264] ? klist_children_get+0x50/0x50 [ 214.759714][ T4264] ? get_device_parent+0x121/0x3f0 [ 214.764830][ T4264] device_add+0x483/0xfb0 [ 214.769152][ T4264] ? kmem_cache_free+0xf7/0x290 [ 214.774009][ T4264] hci_conn_add_sysfs+0xd1/0x1e0 [ 214.778959][ T4264] le_conn_complete_evt+0xd1d/0x1320 [ 214.784253][ T4264] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 214.790493][ T4264] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 214.796133][ T4264] ? skb_pull_data+0xf7/0x200 [ 214.800802][ T4264] hci_le_conn_complete_evt+0x183/0x440 [ 214.806347][ T4264] ? hci_remote_host_features_evt+0x270/0x270 [ 214.812412][ T4264] hci_event_packet+0x791/0x1210 [ 214.817353][ T4264] ? bis_list+0x280/0x280 [ 214.821678][ T4264] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 214.827575][ T4264] ? kcov_remote_start+0x4c7/0x7e0 [ 214.832681][ T4264] ? lec_tx_timeout+0xc0/0x1c0 [ 214.837444][ T4264] ? hci_send_to_monitor+0x9c/0x4a0 [ 214.842642][ T4264] hci_rx_work+0x3eb/0xd40 [ 214.847050][ T4264] ? _raw_spin_unlock+0x40/0x40 [ 214.851902][ T4264] ? process_one_work+0x7a1/0x1160 [ 214.857009][ T4264] process_one_work+0x898/0x1160 [ 214.861946][ T4264] ? worker_detach_from_pool+0x240/0x240 [ 214.867575][ T4264] ? _raw_spin_lock_irq+0xab/0xe0 [ 214.872594][ T4264] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 214.877961][ T4264] ? kthread_data+0x4b/0xc0 [ 214.882465][ T4264] worker_thread+0xaa2/0x1250 [ 214.887156][ T4264] kthread+0x29d/0x330 [ 214.891223][ T4264] ? worker_clr_flags+0x1a0/0x1a0 [ 214.896240][ T4264] ? kthread_blkcg+0xd0/0xd0 [ 214.900830][ T4264] ret_from_fork+0x1f/0x30 [ 214.905249][ T4264] [ 214.908344][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.916650][ T4264] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 214.931185][ T4264] Bluetooth: hci1: failed to register connection device [ 214.960025][ T5934] Bluetooth: MGMT ver 1.22 [ 215.749460][ T5950] ptrace attach of "./syz-executor exec"[4254] was attempted by "./syz-executor exec"[5950] [ 216.005574][ T5959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.990619][ T4261] Bluetooth: hci0: command 0x0401 tx timeout [ 216.997904][ T4264] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 217.333769][ T5974] loop1: detected capacity change from 0 to 32768 [ 217.345940][ T5974] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 217.448233][ T5222] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.624746][ T5222] usb 4-1: Using ep0 maxpacket: 16 [ 217.630069][ T5222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.630193][ T5222] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 217.630246][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.657902][ T5222] usb 4-1: config 0 descriptor?? [ 217.678657][ T5980] syz.2.469 (5980) used greatest stack depth: 20488 bytes left [ 218.077726][ T5222] hid (null): report_id 0 is invalid [ 218.305846][ T5222] usb 4-1: USB disconnect, device number 7 [ 218.341276][ T4270] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 218.552623][ T5997] loop1: detected capacity change from 0 to 8 [ 218.616577][ T4270] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.728021][ T6003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.475'. [ 219.153102][ T5222] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.014752][ T5222] usb 2-1: config 0 has no interfaces? [ 220.033737][ T5222] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.074504][ T5222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.263489][ T5222] usb 2-1: config 0 descriptor?? [ 220.461052][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.508006][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.528055][ T5222] usb 2-1: USB disconnect, device number 11 [ 220.819561][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.829024][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.837393][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.847724][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.858173][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.858203][ T6047] mmap: syz.4.493 (6047) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 220.879757][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.065217][ T5222] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.177009][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.250733][ T5222] usb 2-1: Using ep0 maxpacket: 16 [ 221.264626][ T5222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.300147][ T5222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.321423][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.333884][ T5222] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 221.346999][ T5222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.356770][ T5222] usb 2-1: Product: syz [ 221.368899][ T6044] chnl_net:caif_netlink_parms(): no params data found [ 221.378059][ T5222] usb 2-1: Manufacturer: syz [ 221.394527][ T5222] usb 2-1: SerialNumber: syz [ 221.482869][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.578635][ T4264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.588850][ T4264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.599097][ T4264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.612019][ T4264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.621684][ T4264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.640075][ T4264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.656190][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.709832][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.738398][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.751153][ T6044] device bridge_slave_0 entered promiscuous mode [ 221.776092][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.893625][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.901868][ T5222] usb 2-1: 0:2 : does not exist [ 221.921074][ T6044] device bridge_slave_1 entered promiscuous mode [ 222.009394][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.022521][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.160721][ T6044] team0: Port device team_slave_0 added [ 224.055924][ T4263] Bluetooth: hci4: command 0x0409 tx timeout [ 224.055948][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 224.081132][ T5222] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 224.084876][ T6044] team0: Port device team_slave_1 added [ 224.125010][ T5222] usb 2-1: USB disconnect, device number 12 [ 224.232013][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 224.267809][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.286570][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.312501][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.349786][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.396959][ T6044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.485925][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.492917][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.607708][ T6044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.024817][ T6044] device hsr_slave_0 entered promiscuous mode [ 225.172757][ T6044] device hsr_slave_1 entered promiscuous mode [ 225.242980][ T6044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.302165][ T6044] Cannot create hsr debugfs directory [ 225.559182][ T6103] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 226.224451][ T6117] orangefs_mount: mount request failed with -4 [ 226.266997][ T4263] Bluetooth: hci5: command 0x041b tx timeout [ 226.273367][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 226.424593][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 226.504045][ T6123] loop1: detected capacity change from 0 to 2048 [ 226.542174][ T6123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.595835][ T6121] syz.2.510 (6121) used greatest stack depth: 18176 bytes left [ 227.311893][ T6057] chnl_net:caif_netlink_parms(): no params data found [ 227.634422][ T5916] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 228.240604][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 228.246672][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 228.343719][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 228.354513][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 228.379350][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 228.392260][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 228.403449][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 228.413404][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.423337][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.441710][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.449178][ T5916] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 228.458391][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.465874][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.469166][ T6057] device bridge_slave_0 entered promiscuous mode [ 228.474779][ T5916] usb 5-1: Product: syz [ 228.474886][ T5916] usb 5-1: Manufacturer: syz [ 228.474910][ T5916] usb 5-1: SerialNumber: syz [ 228.498099][ T5916] usb 5-1: config 0 descriptor?? [ 228.503877][ T6129] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.525371][ T5916] pn533_usb 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 228.605444][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.612559][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.653642][ T6057] device bridge_slave_1 entered promiscuous mode [ 228.766311][ T6159] netlink: 352 bytes leftover after parsing attributes in process `syz.1.518'. [ 228.980421][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 229.142925][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.194088][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.216707][ T5222] usb 5-1: USB disconnect, device number 7 [ 229.367057][ T6044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.411662][ T6044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.453280][ T6044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.476104][ T6044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.511451][ T6057] team0: Port device team_slave_0 added [ 229.536031][ T46] device hsr_slave_0 left promiscuous mode [ 229.562504][ T46] device hsr_slave_1 left promiscuous mode [ 229.595069][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.610926][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.626403][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.644596][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.684110][ T46] device bridge_slave_1 left promiscuous mode [ 229.711115][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.739015][ T46] device bridge_slave_0 left promiscuous mode [ 229.753422][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.152541][ T4263] Bluetooth: hci5: command 0x0419 tx timeout [ 230.153367][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 230.226259][ T46] device veth1_macvtap left promiscuous mode [ 230.233830][ T46] device veth0_macvtap left promiscuous mode [ 230.240625][ T46] device veth1_vlan left promiscuous mode [ 230.246984][ T46] device veth0_vlan left promiscuous mode [ 230.332485][ T6196] capability: warning: `syz.1.527' uses deprecated v2 capabilities in a way that may be insecure [ 230.621415][ T6201] loop1: detected capacity change from 0 to 2048 [ 230.663599][ T6202] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 230.708141][ T6201] loop1: p1 < > p4 [ 230.742337][ T6201] loop1: p4 size 8388608 extends beyond EOD, truncated [ 231.100400][ T46] team0 (unregistering): Port device team_slave_1 removed [ 231.148681][ T46] team0 (unregistering): Port device team_slave_0 removed [ 231.214442][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.262664][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.530804][ T6205] loop4: detected capacity change from 0 to 32768 [ 231.574688][ T6205] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.584941][ T6205] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 231.593730][ T6205] BTRFS info (device loop4): setting nodatacow, compression disabled [ 231.601889][ T6205] BTRFS info (device loop4): max_inline at 0 [ 231.607999][ T6205] BTRFS info (device loop4): enabling disk space caching [ 231.615089][ T6205] BTRFS info (device loop4): setting datasum, datacow enabled [ 231.622576][ T6205] BTRFS info (device loop4): turning off barriers [ 231.629450][ T6205] BTRFS info (device loop4): turning on flush-on-commit [ 231.636607][ T6205] BTRFS info (device loop4): doing ref verification [ 231.643267][ T6205] BTRFS info (device loop4): force clearing of disk cache [ 231.650436][ T6205] BTRFS info (device loop4): enabling ssd optimizations [ 231.657943][ T6205] BTRFS info (device loop4): max_inline at 4096 [ 231.664240][ T6205] BTRFS info (device loop4): disk space caching is enabled [ 231.753829][ T6205] BTRFS info (device loop4): rebuilding free space tree [ 231.764252][ T6205] BTRFS info (device loop4): disabling free space tree [ 231.771157][ T6205] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.781046][ T6205] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.821737][ T26] audit: type=1800 audit(1750861203.657:63): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.529" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 232.129182][ T46] bond0 (unregistering): Released all slaves [ 232.137604][ T4253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.372717][ T6057] team0: Port device team_slave_1 added [ 232.401649][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 232.486263][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.501179][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.536279][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.602754][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.622755][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.867191][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.051248][ T6238] tipc: Enabled bearer , priority 0 [ 233.494384][ T6243] device syzkaller0 entered promiscuous mode [ 233.743886][ T6057] device hsr_slave_0 entered promiscuous mode [ 233.770540][ T6057] device hsr_slave_1 entered promiscuous mode [ 233.784520][ T6057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.814926][ T6057] Cannot create hsr debugfs directory [ 233.939069][ T6261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.966950][ T6257] netlink: 'syz.2.537': attribute type 16 has an invalid length. [ 233.975836][ T6257] netlink: 'syz.2.537': attribute type 17 has an invalid length. [ 234.080200][ T6261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.117911][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.228560][ T6261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.267832][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.283851][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.311503][ T6044] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.361585][ T6261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.382635][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.399173][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.437502][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.444716][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.491128][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.527046][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.566065][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.592469][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.599700][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.733886][ T6261] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.744358][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.753792][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.785693][ T6261] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.818447][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.847471][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.895262][ T6261] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.919844][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.944119][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.956110][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.000887][ T6261] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.086097][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.145128][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.297293][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.409883][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.871522][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.284765][ T26] audit: type=1326 audit(1750861208.453:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.328716][ T26] audit: type=1326 audit(1750861208.485:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.352279][ T26] audit: type=1326 audit(1750861208.485:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.383791][ T26] audit: type=1326 audit(1750861208.485:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.523877][ T26] audit: type=1326 audit(1750861208.539:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.583581][ T26] audit: type=1326 audit(1750861208.539:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.705585][ T26] audit: type=1326 audit(1750861208.603:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.811860][ T26] audit: type=1326 audit(1750861208.603:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.839329][ T5219] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 236.883683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.903981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.924346][ T26] audit: type=1326 audit(1750861208.603:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 236.925336][ T6044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.035586][ T26] audit: type=1326 audit(1750861208.603:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 237.061156][ T5219] usb 5-1: Using ep0 maxpacket: 8 [ 237.077991][ T5219] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 237.109666][ T5219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.117699][ T6057] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.129193][ T5219] usb 5-1: Product: syz [ 237.134353][ T26] audit: type=1326 audit(1750861208.603:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 237.159961][ T5219] usb 5-1: Manufacturer: syz [ 237.165821][ T5219] usb 5-1: SerialNumber: syz [ 237.177050][ T5219] usb 5-1: config 0 descriptor?? [ 237.177831][ T6057] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.218564][ T26] audit: type=1326 audit(1750861208.603:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 237.263431][ T6057] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.297851][ T6057] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.393003][ T5219] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.378444][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.380987][ T5219] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 238.402695][ T6351] loop1: detected capacity change from 0 to 256 [ 238.432305][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.454083][ T5219] usb 5-1: USB disconnect, device number 8 [ 238.528773][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.613382][ T6057] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.624392][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.643689][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.713971][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.721371][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.365171][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.374903][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.435571][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.445159][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.453654][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.539525][ T6366] loop4: detected capacity change from 0 to 4096 [ 239.565919][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.605995][ T6369] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.620435][ T26] audit: type=1800 audit(1750861212.028:76): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.562" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 239.634292][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.672848][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.692389][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.708770][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.720297][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.731082][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.766818][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.803854][ T6057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.834898][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.842724][ T26] audit: type=1326 audit(1750861212.264:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6368 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 239.882496][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.902674][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.931991][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.986015][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.028124][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.077180][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.103191][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.146711][ T6044] device veth0_vlan entered promiscuous mode [ 240.173203][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.195099][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.246874][ T6044] device veth1_vlan entered promiscuous mode [ 240.318412][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.388192][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.439226][ T6044] device veth0_macvtap entered promiscuous mode [ 240.472674][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.493154][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.510411][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.555946][ T6044] device veth1_macvtap entered promiscuous mode [ 240.669422][ T2309] pvrusb2: request_firmware fatal error with code=-110 [ 240.685904][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.712155][ T2309] pvrusb2: Failure uploading firmware1 [ 240.717664][ T2309] pvrusb2: Device initialization was not successful. [ 240.754651][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 240.764751][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.764771][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.764786][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.764797][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.764809][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.764818][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.764829][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.766449][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.800735][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 240.864955][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.875732][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.888160][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.915446][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.934304][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.935175][ T2309] pvrusb2: Failed to submit write-control URB status=-19 [ 240.959083][ T2309] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 240.970816][ T2309] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 241.062594][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.084365][ T4297] pvrusb2: Device being rendered inoperable [ 241.093862][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.104547][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.116487][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.134058][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.145654][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.163211][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.243034][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.308478][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.786088][ T6044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.800642][ T6044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.814872][ T6044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.824037][ T6044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.597748][ T6426] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 243.063358][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.083788][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.102003][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.125305][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.133037][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.179670][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.185841][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.227943][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.256481][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.342779][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.386423][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.436505][ T6438] loop1: detected capacity change from 0 to 2048 [ 243.501673][ T6057] device veth0_vlan entered promiscuous mode [ 243.518894][ T6438] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.555475][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.605213][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.703888][ T6446] syz.2.581 uses obsolete (PF_INET,SOCK_PACKET) [ 243.833172][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 244.070841][ T6444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.582'. [ 244.235503][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.244000][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.320093][ T6451] loop1: detected capacity change from 0 to 2048 [ 244.347136][ T6451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.521631][ T6057] device veth1_vlan entered promiscuous mode [ 245.555093][ T6057] device veth0_macvtap entered promiscuous mode [ 245.565793][ T6057] device veth1_macvtap entered promiscuous mode [ 245.591884][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.601257][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.611582][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.619995][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.681951][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.705832][ T6460] loop4: detected capacity change from 0 to 2048 [ 245.712423][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.790920][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.807792][ T6460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.844389][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.947190][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.080959][ T6471] netlink: 'syz.5.587': attribute type 1 has an invalid length. [ 246.249544][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.270020][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.282807][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.298951][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.310732][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.330396][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.339221][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.380395][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.398952][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.492360][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.578494][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.589063][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.599375][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.610947][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.620991][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.661334][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.684810][ T6057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.701292][ T6057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.717258][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.737539][ T6482] netlink: 'syz.2.591': attribute type 39 has an invalid length. [ 246.837166][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.853382][ T6492] xt_hashlimit: size too large, truncated to 1048576 [ 246.883742][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.905276][ T6493] xt_hashlimit: size too large, truncated to 1048576 [ 246.924023][ T6057] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.985034][ T6057] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.049208][ T6057] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.074561][ T6057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.478308][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.513268][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.551287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.588208][ T4518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.601589][ T6513] loop5: detected capacity change from 0 to 2048 [ 248.606305][ T4518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.638409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.680477][ T6513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.062533][ T26] kauditd_printk_skb: 615 callbacks suppressed [ 250.062550][ T26] audit: type=1326 audit(1750861223.208:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 250.214213][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.295571][ T26] audit: type=1326 audit(1750861223.240:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 250.317879][ T26] audit: type=1326 audit(1750861223.240:695): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 250.341096][ T26] audit: type=1326 audit(1750861223.240:696): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 250.364118][ T26] audit: type=1326 audit(1750861223.272:697): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 250.387683][ T26] audit: type=1326 audit(1750861223.272:698): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 252.637963][ T26] audit: type=1326 audit(1750861223.283:699): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fc3f8e929 code=0x7ffc0000 [ 252.913686][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.081611][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.257472][ T6545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 253.264566][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.269923][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.291567][ T6545] vhci_hcd vhci_hcd.0: Device attached [ 253.357331][ T6549] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 253.363990][ T6549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 253.387840][ T6545] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 253.394475][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 253.404937][ T6557] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 253.430225][ T6549] vhci_hcd vhci_hcd.0: Device attached [ 253.444743][ T6545] vhci_hcd vhci_hcd.0: Device attached [ 253.482853][ T6560] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 253.489504][ T6560] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.509191][ T6560] vhci_hcd vhci_hcd.0: Device attached [ 253.529092][ T6545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(17) [ 253.535749][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 253.536807][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.555309][ T5915] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 253.597332][ T6549] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(25) [ 253.603984][ T6549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.644892][ T6545] vhci_hcd vhci_hcd.0: Device attached [ 253.659062][ T6549] vhci_hcd vhci_hcd.0: Device attached [ 253.668487][ T6552] vhci_hcd: connection closed [ 253.668709][ T6551] vhci_hcd: connection closed [ 253.671872][ T6547] vhci_hcd: connection reset by peer [ 253.672728][ T1015] vhci_hcd: stop threads [ 253.672761][ T1015] vhci_hcd: release socket [ 253.672790][ T1015] vhci_hcd: disconnect device [ 253.672872][ T1015] vhci_hcd: stop threads [ 253.672879][ T1015] vhci_hcd: release socket [ 253.672899][ T1015] vhci_hcd: disconnect device [ 253.673007][ T1015] vhci_hcd: stop threads [ 253.673015][ T1015] vhci_hcd: release socket [ 253.673035][ T1015] vhci_hcd: disconnect device [ 253.719242][ T6561] vhci_hcd: connection closed [ 253.720925][ T1015] vhci_hcd: stop threads [ 253.720945][ T1015] vhci_hcd: release socket [ 253.720973][ T1015] vhci_hcd: disconnect device [ 253.752468][ T6573] loop5: detected capacity change from 0 to 64 [ 253.804322][ T6564] vhci_hcd: connection closed [ 253.804602][ T1015] vhci_hcd: stop threads [ 253.804617][ T1015] vhci_hcd: release socket [ 253.804645][ T1015] vhci_hcd: disconnect device [ 253.811747][ T6567] vhci_hcd: connection closed [ 253.816836][ T1015] vhci_hcd: stop threads [ 253.816849][ T1015] vhci_hcd: release socket [ 253.816876][ T1015] vhci_hcd: disconnect device [ 253.896925][ T6573] process 'syz.5.610' launched './bus' with NULL argv: empty string added [ 254.227266][ T4264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.229889][ T4264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.230697][ T4264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.231417][ T4264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.231863][ T4264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.232120][ T4264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.476081][ T6582] loop1: detected capacity change from 0 to 2048 [ 254.549364][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 254.573955][ T6582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.680776][ T26] audit: type=1326 audit(1750861228.186:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af878e929 code=0x7ffc0000 [ 254.999827][ T4630] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 255.295067][ T26] audit: type=1326 audit(1750861228.208:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af878e929 code=0x7ffc0000 [ 255.410158][ T4630] usb 3-1: Using ep0 maxpacket: 32 [ 255.426803][ T4630] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 255.438010][ T26] audit: type=1326 audit(1750861228.208:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9af872ab19 code=0x7ffc0000 [ 255.460283][ T26] audit: type=1326 audit(1750861228.208:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9af872ab19 code=0x7ffc0000 [ 255.484774][ T26] audit: type=1326 audit(1750861228.208:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af878e929 code=0x7ffc0000 [ 255.512392][ T26] audit: type=1326 audit(1750861228.208:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af878e929 code=0x7ffc0000 [ 255.534793][ T4630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.539523][ T26] audit: type=1326 audit(1750861228.208:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af878e929 code=0x7ffc0000 [ 255.568345][ T26] audit: type=1326 audit(1750861228.208:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9af872ab19 code=0x7ffc0000 [ 255.632125][ T4630] usb 3-1: config 0 descriptor?? [ 255.679667][ T4630] gspca_main: sunplus-2.14.0 probing 041e:400b [ 255.715669][ T26] audit: type=1326 audit(1750861228.208:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af878e929 code=0x7ffc0000 [ 255.861745][ T26] audit: type=1326 audit(1750861228.208:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9af872ab19 code=0x7ffc0000 [ 256.184068][ T4261] Bluetooth: hci5: command 0x0409 tx timeout [ 256.668192][ T26] audit: type=1326 audit(1750861228.208:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6584 comm="syz.5.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af878e929 code=0x7ffc0000 [ 256.690389][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.936116][ T6578] chnl_net:caif_netlink_parms(): no params data found [ 257.069174][ T4630] gspca_sunplus: reg_w_riv err -110 [ 257.074551][ T4630] sunplus: probe of 3-1:0.0 failed with error -110 [ 257.121969][ T4630] usb 3-1: USB disconnect, device number 7 [ 258.115992][ T4261] Bluetooth: hci5: command 0x041b tx timeout [ 258.514352][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.527043][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.577698][ T6578] device bridge_slave_0 entered promiscuous mode [ 258.613692][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.640405][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.686651][ T6578] device bridge_slave_1 entered promiscuous mode [ 258.769500][ T41] device hsr_slave_0 left promiscuous mode [ 258.785953][ T41] device hsr_slave_1 left promiscuous mode [ 258.805079][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.052044][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 261.549917][ T3623] udevd[3623]: worker [4459] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 261.990881][ T4261] Bluetooth: hci5: command 0x0419 tx timeout [ 356.706064][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 356.713095][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4627/1:b..l [ 356.721810][ C0] (detected by 0, t=10502 jiffies, g=26693, q=37 ncpus=2) [ 356.729022][ C0] task:kworker/u4:15 state:R running task stack:23104 pid:4627 ppid:2 flags:0x00004000 [ 356.741445][ C0] Workqueue: bat_events batadv_nc_worker [ 356.747117][ C0] Call Trace: [ 356.750402][ C0] [ 356.753349][ C0] __schedule+0x10e9/0x40d0 [ 356.757886][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 356.763810][ C0] ? lock_chain_count+0x20/0x20 [ 356.768678][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 356.773977][ C0] preempt_schedule_irq+0xb1/0x150 [ 356.779102][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 356.784848][ C0] ? rcu_is_watching+0x11/0xa0 [ 356.789654][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 356.795492][ C0] irqentry_exit+0x63/0x70 [ 356.799931][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 356.805939][ C0] RIP: 0010:batadv_nc_worker+0x183/0x600 [ 356.811585][ C0] Code: 19 03 00 00 48 c7 c2 20 1c 8d 8b e8 c7 06 8a f7 48 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 ef e8 61 bc f8 f7 48 8b 6d 00 <48> 85 ed 0f 94 c0 48 81 c5 38 fe ff ff 0f 94 c1 08 c1 74 07 e8 84 [ 356.831294][ C0] RSP: 0018:ffffc90004d4fbe0 EFLAGS: 00000246 [ 356.837376][ C0] RAX: 1ffff1100ecdc1c8 RBX: 0000000000000001 RCX: ffff88807cb41dc0 [ 356.845352][ C0] RDX: 0000000000000000 RSI: ffffffff8abf1340 RDI: ffffffff8abf1300 [ 356.853333][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff2117049 [ 356.861315][ C0] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: dffffc0000000000 [ 356.869289][ C0] R13: ffffffff89d9921e R14: ffff88807bc38c80 R15: 00000000000001c8 [ 356.877366][ C0] ? batadv_nc_worker+0xce/0x600 [ 356.882344][ C0] ? process_one_work+0x7a1/0x1160 [ 356.887476][ C0] process_one_work+0x898/0x1160 [ 356.892433][ C0] ? worker_detach_from_pool+0x240/0x240 [ 356.898092][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 356.903122][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 356.908501][ C0] ? kthread_data+0x4b/0xc0 [ 356.913020][ C0] worker_thread+0xaa2/0x1250 [ 356.917724][ C0] kthread+0x29d/0x330 [ 356.921799][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 356.926828][ C0] ? kthread_blkcg+0xd0/0xd0 [ 356.931434][ C0] ret_from_fork+0x1f/0x30 [ 356.935871][ C0] [ 356.938888][ C0] rcu: rcu_preempt kthread starved for 9853 jiffies! g26693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 356.949998][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 356.959967][ C0] rcu: RCU grace-period kthread stack dump: [ 356.965856][ C0] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 356.976664][ C0] Call Trace: [ 356.979948][ C0] [ 356.982885][ C0] __schedule+0x10e9/0x40d0 [ 356.987415][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 356.993322][ C0] schedule+0xb9/0x180 [ 356.997397][ C0] schedule_timeout+0x15c/0x280 [ 357.002255][ C0] ? console_conditional_schedule+0x40/0x40 [ 357.008158][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 357.014062][ C0] ? update_process_times+0x1b0/0x1b0 [ 357.019449][ C0] ? prepare_to_swait_event+0x335/0x350 [ 357.025016][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 357.029875][ C0] ? rcu_gp_kthread+0x380/0x380 [ 357.034730][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 357.040887][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 357.046103][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 357.050871][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 357.056789][ C0] ? finish_swait+0xc3/0x1d0 [ 357.061393][ C0] rcu_gp_kthread+0x95/0x380 [ 357.065987][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 357.071101][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 357.077007][ C0] ? __kthread_parkme+0x162/0x1c0 [ 357.082044][ C0] kthread+0x29d/0x330 [ 357.086117][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 357.091233][ C0] ? kthread_blkcg+0xd0/0xd0 [ 357.095828][ C0] ret_from_fork+0x1f/0x30 [ 357.100264][ C0] [ 357.103287][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 357.109609][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.141-syzkaller #0 [ 357.117327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.127382][ C0] RIP: 0010:default_idle+0xb/0x10 [ 357.132422][ C0] Code: 48 89 df e8 47 d4 b8 f7 e9 4c ff ff ff e8 bd 15 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 17 24 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 357.152037][ C0] RSP: 0000:ffffffff8c607d88 EFLAGS: 000002c6 [ 357.158111][ C0] RAX: 97c97881f8aefb00 RBX: ffffffff8a197f77 RCX: 97c97881f8aefb00 [ 357.166090][ C0] RDX: 0000000000000001 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf1360 [ 357.174063][ C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6af6 [ 357.182038][ C0] R10: ffffed10171c6af6 R11: 1ffff110171c6af5 R12: 0000000000000000 [ 357.190012][ C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfd0f6 [ 357.197988][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 357.206917][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.213510][ C0] CR2: 00007fe7d666f963 CR3: 0000000076244000 CR4: 00000000003526f0 [ 357.221486][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.229466][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.237446][ C0] Call Trace: [ 357.240725][ C0] [ 357.243659][ C0] default_idle_call+0x84/0xc0 [ 357.248436][ C0] do_idle+0x1fc/0x570 [ 357.252527][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 357.257733][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 357.263897][ C0] ? schedule_idle+0x57/0x90 [ 357.268499][ C0] cpu_startup_entry+0x3f/0x60 [ 357.273271][ C0] rest_init+0x2dc/0x300 [ 357.277530][ C0] ? time_init+0x33/0x33 [ 357.281785][ C0] arch_call_rest_init+0xa/0xa [ 357.286562][ C0] start_kernel+0x490/0x539 [ 357.291076][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 357.296989][ C0]