last executing test programs: 9.390908824s ago: executing program 4 (id=17807): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 5.269009149s ago: executing program 4 (id=17907): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, 0x0) 5.080137659s ago: executing program 4 (id=17913): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000124000/0x3000)=nil, &(0x7f0000ed2000/0x3000)=nil, 0x3000}) 4.626182455s ago: executing program 2 (id=17927): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect$uac1(0x3, 0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201da22000000086b1d0101400001020301090289000301f580040904000000010120000a240107000e020102072408020500090c2402020002220106007f330904010000010200000904010101010200000905010908"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.608064747s ago: executing program 2 (id=17951): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) 3.425409799s ago: executing program 2 (id=17956): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 3.244777664s ago: executing program 2 (id=17958): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.413394608s ago: executing program 4 (id=17968): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 1.330615805s ago: executing program 1 (id=17971): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0a6493", 0x3}], 0x1}}], 0x2, 0x8008800) sendto$inet6(r3, &(0x7f0000001d40)='W', 0x1, 0x0, 0x0, 0x0) 1.294682315s ago: executing program 2 (id=17972): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.15899438s ago: executing program 1 (id=17975): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000080)) 1.037275897s ago: executing program 1 (id=17978): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r4, 0x0) 973.364429ms ago: executing program 4 (id=17981): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x2, 0x0) 782.030196ms ago: executing program 2 (id=17985): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 582.132693ms ago: executing program 3 (id=17990): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, &(0x7f00000000c0)) 555.338558ms ago: executing program 0 (id=17991): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) 554.230814ms ago: executing program 4 (id=17992): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 540.924015ms ago: executing program 1 (id=17993): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) 412.230612ms ago: executing program 3 (id=17994): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) alarm(0x1) 412.027529ms ago: executing program 0 (id=17995): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 398.665509ms ago: executing program 1 (id=17996): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) 360.814814ms ago: executing program 0 (id=17997): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0) 264.255322ms ago: executing program 0 (id=17998): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 264.091672ms ago: executing program 3 (id=17999): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x300) 185.941914ms ago: executing program 0 (id=18000): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unlink(0x0) 184.650613ms ago: executing program 3 (id=18001): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='u']) 131.094211ms ago: executing program 1 (id=18002): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setns(r3, 0x68000080) 48.086227ms ago: executing program 3 (id=18003): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000980)='.\x00', &(0x7f00000009c0)='ecryptfs\x00', 0x8080, 0x0) 47.886796ms ago: executing program 0 (id=18004): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080005"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 0s ago: executing program 3 (id=18005): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_emit_ethernet(0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="e055000000000065b6e685d888f13e02"], 0x0) kernel console output (not intermixed with test programs): ied as PCTV tripleStick (292e) (card=94) [ 541.219720][T10880] em28xx 5-1:0.0: dvb set to bulk mode. [ 541.220656][T10827] em28xx 5-1:0.0: Binding DVB extension [ 541.279051][T10880] usb 5-1: USB disconnect, device number 23 [ 541.281638][T10880] em28xx 5-1:0.0: Disconnecting em28xx [ 541.404427][T10827] em28xx 5-1:0.0: Registering input extension [ 541.407271][T10880] em28xx 5-1:0.0: Closing input extension [ 541.491034][T10880] em28xx 5-1:0.0: Freeing device [ 543.552751][T19397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6145'. [ 544.153150][T19430] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6161'. [ 544.511361][T19451] binder: 19450:19451 ioctl 5000940a 0 returned -22 [ 544.847604][T19464] netlink: 'syz.2.6178': attribute type 1 has an invalid length. [ 544.847629][T19464] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6178'. [ 546.601607][T19540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6212'. [ 546.781878][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6216'. [ 548.064631][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6248'. [ 549.207470][T19670] netlink: 300 bytes leftover after parsing attributes in process `syz.4.6275'. [ 549.464336][T19683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6284'. [ 549.464372][T19683] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6284'. [ 549.464394][T19683] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6284'. [ 550.968179][T10867] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 551.177100][T10867] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.177135][T10867] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.177181][T10867] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.177206][T10867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.475583][T10867] usb 2-1: usb_control_msg returned -32 [ 551.475639][T10867] usbtmc 2-1:16.0: can't read capabilities [ 551.798241][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6319'. [ 552.581853][T19795] netlink: 'syz.4.6338': attribute type 1 has an invalid length. [ 552.581879][T19795] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6338'. [ 552.901364][T19814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6346'. [ 553.152244][ T37] audit: type=1326 audit(2000000034.118:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19822 comm="syz.2.6352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 553.156425][ T37] audit: type=1326 audit(2000000034.127:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19822 comm="syz.2.6352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 553.156489][ T37] audit: type=1326 audit(2000000034.127:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19822 comm="syz.2.6352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 553.156539][ T37] audit: type=1326 audit(2000000034.127:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19822 comm="syz.2.6352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 553.604472][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6362'. [ 553.887502][T10823] usb 2-1: USB disconnect, device number 21 [ 554.316451][T19868] bridge2: entered allmulticast mode [ 555.576676][T19918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6397'. [ 556.368729][T19955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6415'. [ 556.897356][T19984] 9pnet_fd: Insufficient options for proto=fd [ 557.089101][T19997] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 557.305076][T20010] tc_dump_action: action bad kind [ 557.883042][T20037] binder: 20036:20037 ioctl 400c620e 0 returned -14 [ 558.429780][T20070] fuseblk: Bad value for 'user_id' [ 558.429802][T20070] fuseblk: Bad value for 'user_id' [ 560.685984][T20142] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.700649][T20142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.700849][T20142] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 560.818747][T20142] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.818969][T20142] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 560.991666][T20142] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 561.091074][T20142] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 561.091171][T20142] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 561.515774][T10867] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 561.746923][T20205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6536'. [ 561.942666][T10867] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 561.942695][T10867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.942716][T10867] usb 5-1: config 0 has no interfaces? [ 561.942747][T10867] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 561.942772][T10867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.999417][T10867] usb 5-1: config 0 descriptor?? [ 562.832884][T20237] tmpfs: Bad value for 'mpol' [ 562.848001][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 563.024304][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 563.280684][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 564.531410][T10823] usb 5-1: USB disconnect, device number 24 [ 565.063826][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 565.226551][T20327] netlink: 'syz.1.6597': attribute type 1 has an invalid length. [ 565.226573][T20327] netlink: 'syz.1.6597': attribute type 2 has an invalid length. [ 565.234247][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 565.489995][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 566.030997][T20365] Invalid ELF header type: 2 != 1 [ 567.334936][T20410] netlink: 'syz.2.6636': attribute type 7 has an invalid length. [ 567.450517][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 570.388311][T20543] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6699'. [ 570.388341][T20543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6699'. [ 571.893822][T20629] netlink: 324 bytes leftover after parsing attributes in process `syz.4.6742'. [ 571.893924][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6742'. [ 572.111805][T20638] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6745'. [ 572.651100][T20666] bridge: RTM_NEWNEIGH with invalid ether address [ 572.752221][T20673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6762'. [ 573.168384][ T37] audit: type=1326 audit(2000000052.908:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.168450][ T37] audit: type=1326 audit(2000000052.908:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.188133][ T37] audit: type=1326 audit(2000000052.927:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.191547][ T37] audit: type=1326 audit(2000000052.927:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.195836][ T37] audit: type=1326 audit(2000000052.937:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.197031][ T37] audit: type=1326 audit(2000000052.937:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.198815][ T37] audit: type=1326 audit(2000000052.937:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.199525][ T37] audit: type=1326 audit(2000000052.937:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.200088][ T37] audit: type=1326 audit(2000000052.937:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.201169][ T37] audit: type=1326 audit(2000000052.937:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20693 comm="syz.2.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 573.537200][T20709] overlayfs: failed to resolve './file0': -2 [ 575.295398][T20797] netlink: 'syz.2.6821': attribute type 4 has an invalid length. [ 575.295425][T20797] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.6821'. [ 575.600674][T10827] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 575.785635][T10827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 575.785703][T10827] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 575.785728][T10827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.810913][T10827] usb 5-1: config 0 descriptor?? [ 576.332071][T10827] logitech 0003:046D:C626.0018: unbalanced delimiter at end of report description [ 576.332936][T10827] logitech 0003:046D:C626.0018: parse failed [ 576.333050][T10827] logitech 0003:046D:C626.0018: probe with driver logitech failed with error -22 [ 576.533934][T20853] netlink: 'syz.2.6850': attribute type 1 has an invalid length. [ 576.564865][T10880] usb 5-1: USB disconnect, device number 25 [ 576.784759][T20864] veth1_to_bond: entered allmulticast mode [ 576.793418][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6855'. [ 577.073196][T20864] bond0: (slave bond_slave_1): Releasing backup interface [ 577.354568][T20864] veth1_to_bond (unregistering): left allmulticast mode [ 577.551455][T20899] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6871'. [ 578.527822][T20950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6897'. [ 578.870510][T20970] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6908'. [ 578.870542][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6908'. [ 578.870559][T20970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6908'. [ 581.264090][T21045] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6944'. [ 581.692478][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.692554][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.017352][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 583.017373][ T37] audit: type=1326 audit(2000000062.163:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21127 comm="syz.1.6981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x0 [ 583.360023][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6990'. [ 584.402755][T21207] netlink: 596 bytes leftover after parsing attributes in process `syz.1.7019'. [ 584.664281][T21218] IPv6: sit2: Disabled Multicast RS [ 584.665591][T21218] sit2: entered allmulticast mode [ 585.701823][ T37] audit: type=1800 audit(2000000064.660:398): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.7052" name=20 dev="tmpfs" ino=6701 res=0 errno=0 [ 585.707605][ T37] audit: type=1804 audit(2000000064.679:399): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.7052" name=20 dev="tmpfs" ino=6701 res=1 errno=0 [ 586.672566][T21326] hpfs: Bad magic ... probably not HPFS [ 587.314095][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7097'. [ 587.656987][T21384] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7105'. [ 589.503547][T21482] loop5: detected capacity change from 0 to 7 [ 589.543322][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.543483][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.578045][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.578094][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.623065][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.623105][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.624051][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.624086][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.628962][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.629000][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.687478][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.687521][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.692235][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.692274][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.692374][T21482] ldm_validate_partition_table(): Disk read failed. [ 589.692545][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.692576][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.692839][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.692869][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.693111][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.693137][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 589.693850][T21482] Dev loop5: unable to read RDB block 0 [ 589.795080][T21482] loop5: unable to read partition table [ 589.795422][T21482] loop5: partition table beyond EOD, truncated [ 589.795444][T21482] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 589.838015][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7157'. [ 590.202265][T21508] tipc: Trying to set illegal importance in message [ 591.212393][T21566] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 591.972983][T21607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7213'. [ 591.993114][T21606] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7212'. [ 592.907534][T21650] trusted_key: encrypted_key: master key parameter '' is invalid [ 594.348605][T21730] binder: Bad value for 'max' [ 594.747202][T21749] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7284'. [ 595.056278][T21765] netlink: 'syz.1.7293': attribute type 4 has an invalid length. [ 595.056307][T21765] netlink: 'syz.1.7293': attribute type 5 has an invalid length. [ 595.056323][T21765] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7293'. [ 595.328155][T21778] overlayfs: overlapping lowerdir path [ 595.610318][T21793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7306'. [ 595.610359][T21793] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7306'. [ 595.610376][T21793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7306'. [ 597.438434][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7351'. [ 597.730524][T21890] team0: Port device team_slave_1 removed [ 601.089787][T22023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7417'. [ 601.879764][T22054] ceph: No mds server is up or the cluster is laggy [ 601.979641][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.266988][T22112] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 603.619631][T22132] cgroup2: Unknown parameter '18446744073709551615' [ 604.742221][T22182] 9pnet_fd: p9_fd_create_unix (22182): problem connecting socket: ./bus: -2 [ 606.234570][T22246] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7524'. [ 608.697140][T22343] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7568'. [ 609.328042][T22363] tmpfs: Bad value for 'mpol' [ 611.271676][T22454] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7622'. [ 611.271743][T22454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7622'. [ 613.913204][T22573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.967052][T22623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.378771][T22749] tipc: Started in network mode [ 617.378796][T22749] tipc: Node identity 4, cluster identity 4711 [ 617.378812][T22749] tipc: Node number set to 4 [ 617.636508][T22760] tipc: MTU too low for tipc bearer [ 618.500341][T22806] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7793'. [ 618.715397][T22818] cgroup: Unknown subsys name 'cpuset' [ 620.652366][T22925] binder: Unknown parameter 'context' [ 622.365991][T23019] netlink: zone id is out of range [ 623.337115][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7917'. [ 623.337141][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7917'. [ 625.580809][T23132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7950'. [ 625.580836][T23132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7950'. [ 625.799491][ T37] audit: type=1326 audit(2000000102.307:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23143 comm="syz.4.7957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x0 [ 626.578633][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7964'. [ 626.678921][T23170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7967'. [ 627.538727][T23194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7979'. [ 629.725532][T23289] netlink: 'syz.2.8027': attribute type 27 has an invalid length. [ 630.129292][T23307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8035'. [ 630.129363][T23307] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8035'. [ 630.129379][T23307] tipc: Invalid UDP bearer configuration [ 630.129422][T23307] tipc: Enabling of bearer rejected, failed to enable media [ 630.417317][T23325] netlink: 'syz.2.8044': attribute type 4 has an invalid length. [ 630.477137][T23327] netlink: 'syz.2.8044': attribute type 4 has an invalid length. [ 631.021802][ T37] audit: type=1326 audit(2000000004.721:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23357 comm="syz.4.8060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43c7e6f6c9 code=0x0 [ 633.103299][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8084'. [ 633.103326][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8084'. [ 634.413263][T23484] tipc: Enabling of bearer rejected, failed to enable media [ 635.477975][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8147'. [ 635.478012][T23543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8147'. [ 635.671997][T23553] fuse: Bad value for 'user_id' [ 635.672019][T23553] fuse: Bad value for 'user_id' [ 635.750753][T23558] binder: 23555:23558 ioctl c0306201 200000000080 returned -14 [ 637.366621][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8201'. [ 637.520587][T23656] IPv6: NLM_F_CREATE should be specified when creating new route [ 637.850357][T23674] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8214'. [ 640.221433][T23797] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 640.221467][T23797] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 640.277171][T23797] vhci_hcd vhci_hcd.0: Device attached [ 640.278880][T23800] vhci_hcd: connection closed [ 640.303319][ T6973] vhci_hcd: stop threads [ 640.308682][ T6973] vhci_hcd: release socket [ 640.308821][ T6973] vhci_hcd: disconnect device [ 641.092339][T23836] netlink: 'syz.4.8292': attribute type 1 has an invalid length. [ 641.208278][T23836] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 641.259750][T23836] bond2: (slave vcan1): Error -95 calling set_mac_address [ 641.409187][T23845] bond2: entered allmulticast mode [ 641.632982][ T37] audit: type=1326 audit(2000000015.680:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23854 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 641.633877][ T37] audit: type=1326 audit(2000000015.680:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23854 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 641.633933][ T37] audit: type=1326 audit(2000000015.680:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23854 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 641.644259][ T37] audit: type=1326 audit(2000000015.680:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23854 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 641.764433][ T37] audit: type=1326 audit(2000000015.811:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23862 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bae851f85 code=0x7ffc0000 [ 641.924737][ T37] audit: type=1326 audit(2000000015.962:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23862 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 641.966852][ T37] audit: type=1326 audit(2000000015.962:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23854 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 641.966925][ T37] audit: type=1326 audit(2000000015.990:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23854 comm="syz.1.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 642.696991][T23897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8321'. [ 643.556624][T23932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8337'. [ 643.556717][T23932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8337'. [ 644.893871][T23967] binder_alloc: 23965: binder_alloc_buf size 16384 failed, no address space [ 644.894029][T23967] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 645.681269][T23991] netlink: 'syz.1.8367': attribute type 11 has an invalid length. [ 645.681289][T23991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8367'. [ 647.026486][T24050] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8392'. [ 647.098365][T24055] netlink: 'syz.4.8397': attribute type 1 has an invalid length. [ 647.162152][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 647.162260][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.205115][T24059] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8399'. [ 649.896805][T24207] netlink: 536 bytes leftover after parsing attributes in process `syz.4.8470'. [ 649.974435][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8471'. [ 650.245374][T24225] evm: overlay not supported [ 650.599539][ T37] audit: type=1326 audit(2000000024.099:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24246 comm="syz.4.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 650.605878][ T37] audit: type=1326 audit(2000000024.099:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24246 comm="syz.4.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 650.605944][ T37] audit: type=1326 audit(2000000024.099:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24246 comm="syz.4.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 650.605994][ T37] audit: type=1326 audit(2000000024.099:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24246 comm="syz.4.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 650.606043][ T37] audit: type=1326 audit(2000000024.099:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24246 comm="syz.4.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 652.066679][T10867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 652.237588][T10867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.237618][T10867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.239750][T10867] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 652.239784][T10867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 652.239806][T10867] usb 3-1: SerialNumber: syz [ 652.487604][T10867] usb 3-1: 0:2 : does not exist [ 652.622183][T10867] usb 3-1: USB disconnect, device number 10 [ 654.926479][T24467] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8599'. [ 655.691702][T24493] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8611'. [ 656.114474][T24511] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8618'. [ 658.597352][ T37] audit: type=1326 audit(2000000031.608:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.2.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 658.597398][ T37] audit: type=1326 audit(2000000031.608:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.2.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 658.609522][ T37] audit: type=1326 audit(2000000031.617:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.2.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 658.609589][ T37] audit: type=1326 audit(2000000031.617:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.2.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 658.609644][ T37] audit: type=1326 audit(2000000031.617:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.2.8654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 661.548194][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8704'. [ 661.548252][T24694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8704'. [ 661.582640][T24694] geneve3: entered promiscuous mode [ 661.582671][T24694] geneve3: entered allmulticast mode [ 661.987842][T24707] 9pnet: Unknown protocol version 9 [ 662.784281][T24750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8728'. [ 662.944733][T24750] bridge_slave_1: left allmulticast mode [ 662.944787][T24750] bridge_slave_1: left promiscuous mode [ 662.945093][T24750] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.047028][T24750] bridge_slave_0: left allmulticast mode [ 663.047062][T24750] bridge_slave_0: left promiscuous mode [ 663.047362][T24750] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.452421][T24800] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8754'. [ 665.155645][ T37] audit: type=1326 audit(2000000037.756:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 665.155708][ T37] audit: type=1326 audit(2000000037.756:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 665.156932][ T37] audit: type=1326 audit(2000000037.756:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 665.156990][ T37] audit: type=1326 audit(2000000037.756:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 665.157039][ T37] audit: type=1326 audit(2000000037.756:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24832 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 665.557185][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8776'. [ 667.132701][T24922] virtio-fs: tag not found [ 667.200452][T24926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8816'. [ 667.200523][T24926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8816'. [ 667.325004][T24926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8816'. [ 667.325078][T24926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8816'. [ 667.574097][T24926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8816'. [ 667.574199][T24926] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8816'. [ 667.848171][T24955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8830'. [ 668.128354][T24966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8834'. [ 669.195991][T25021] overlayfs: regular lower layers cannot follow data lower layers [ 670.513041][T25092] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8895'. [ 670.894084][T25098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.206565][T25124] netlink: 'syz.1.8911': attribute type 2 has an invalid length. [ 673.382951][T25241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8968'. [ 673.983205][T10867] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 674.129691][ T37] audit: type=1326 audit(2000000302.183:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25280 comm="syz.1.8988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x0 [ 674.144524][T10867] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 674.147198][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.147276][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.147313][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.149063][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.149131][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.149167][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.152416][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.152487][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.152521][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.169816][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.169890][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.169924][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.171650][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.171724][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.171759][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.180705][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.180779][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.180815][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.194848][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.194921][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.195024][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.201333][T10867] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 674.201406][T10867] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 674.201438][T10867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.222978][T10867] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 674.223018][T10867] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 674.223046][T10867] usb 5-1: Product: syz [ 674.223066][T10867] usb 5-1: Manufacturer: syz [ 674.223085][T10867] usb 5-1: SerialNumber: syz [ 674.250374][T10867] usb 5-1: config 0 descriptor?? [ 674.314658][T10867] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 674.548462][T10880] usb 5-1: USB disconnect, device number 26 [ 674.572034][T10880] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 675.803338][T25327] tmpfs: Bad value for 'huge' [ 677.947586][T25435] netlink: 700 bytes leftover after parsing attributes in process `syz.1.9057'. [ 678.112867][T25440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9064'. [ 678.410886][ T37] audit: type=1326 audit(2000000306.198:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.410948][ T37] audit: type=1326 audit(2000000306.198:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.411817][ T37] audit: type=1326 audit(2000000306.198:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.411871][ T37] audit: type=1326 audit(2000000306.198:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.412352][ T37] audit: type=1326 audit(2000000306.198:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.415726][T25457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 678.417034][ T37] audit: type=1326 audit(2000000306.198:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.417093][ T37] audit: type=1326 audit(2000000306.198:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.459344][ T37] audit: type=1326 audit(2000000306.235:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25453 comm="syz.4.9069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 678.614533][T25458] kvm: pic: level sensitive irq not supported [ 678.614607][T25458] kvm: pic: non byte read [ 679.714671][T25511] bpf: Bad value for 'uid' [ 680.731542][T10867] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 680.890730][T10867] usb 3-1: Using ep0 maxpacket: 16 [ 680.894910][T10867] usb 3-1: config 1 has an invalid interface number: 64 but max is 0 [ 680.894941][T10867] usb 3-1: config 1 has no interface number 0 [ 680.894991][T10867] usb 3-1: config 1 interface 64 altsetting 0 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 680.898486][T10867] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffbf, bcdDevice=68.78 [ 680.898516][T10867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.898538][T10867] usb 3-1: Product: syz [ 680.898554][T10867] usb 3-1: Manufacturer: syz [ 680.898569][T10867] usb 3-1: SerialNumber: syz [ 681.213360][T10867] option 3-1:1.64: GSM modem (1-port) converter detected [ 681.241390][T10867] usb 3-1: USB disconnect, device number 11 [ 681.252843][T10867] option 3-1:1.64: device disconnected [ 682.001491][T25599] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9134'. [ 682.375411][T25618] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9147'. [ 683.535283][T25636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 683.535325][T25636] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 683.551686][T25636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 683.551718][T25636] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 683.554681][T25636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 683.554709][T25636] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 683.562570][T25636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 683.562600][T25636] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 684.013835][T25703] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9189'. [ 684.156321][ T37] audit: type=1326 audit(2000000311.592:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25710 comm="syz.4.9194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43c7e6f6c9 code=0x0 [ 684.288463][T25721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9198'. [ 684.370007][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9199'. [ 685.362310][T25763] tmpfs: Bad value for 'size' [ 686.750590][ T37] audit: type=1804 audit(2000000314.022:435): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.9237" name="/newroot/1530/file0" dev="tmpfs" ino=8757 res=1 errno=0 [ 687.136480][T25821] netlink: 'syz.1.9248': attribute type 2 has an invalid length. [ 688.203656][T25873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9272'. [ 688.310008][T10867] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 688.476858][T10867] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 688.476892][T10867] usb 3-1: config 1 has no interface number 0 [ 688.476946][T10867] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 688.476973][T10867] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 688.476997][T10867] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 688.477023][T10867] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 36, changing to 9 [ 688.480221][T10867] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 688.480253][T10867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.480275][T10867] usb 3-1: Product: syz [ 688.480291][T10867] usb 3-1: Manufacturer: syz [ 688.480307][T10867] usb 3-1: SerialNumber: syz [ 688.581846][T25864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 688.601067][T10867] usb 3-1: Error in usbnet_get_endpoints (-22) [ 688.816283][T10867] usb 3-1: USB disconnect, device number 12 [ 689.093421][ T37] audit: type=1326 audit(2000000316.217:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25904 comm="syz.1.9286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x0 [ 691.676080][T26007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9337'. [ 695.310311][T26145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9400'. [ 698.190841][T26257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9456'. [ 698.449781][T26266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.887806][T26292] netlink: 'syz.2.9474': attribute type 1 has an invalid length. [ 698.887834][T26292] netlink: 'syz.2.9474': attribute type 2 has an invalid length. [ 699.275000][T26311] tipc: Enabling of bearer rejected, media not registered [ 699.362308][T26317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9487'. [ 702.741997][T26491] pimreg: entered allmulticast mode [ 702.751469][ T37] audit: type=1107 audit(2000000329.031:437): pid=26494 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 702.787324][T26491] pimreg: left allmulticast mode [ 703.255428][T26518] tmpfs: Unknown parameter 'n' [ 704.179768][T26564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9605'. [ 705.650416][T26613] 9pnet_fd: Insufficient options for proto=fd [ 706.115950][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9635'. [ 706.844993][T26659] binder: 26658:26659 ioctl c018620b 0 returned -14 [ 707.015977][T26664] kvm: pic: non byte read [ 707.016066][T26664] kvm: pic: non byte read [ 707.016142][T26664] kvm: pic: non byte read [ 707.016213][T26664] kvm: pic: non byte read [ 707.016285][T26664] kvm: pic: non byte read [ 707.016356][T26664] kvm: pic: non byte read [ 707.016429][T26664] kvm: pic: non byte read [ 707.016505][T26664] kvm: pic: non byte read [ 707.016576][T26664] kvm: pic: non byte read [ 707.016646][T26664] kvm: pic: non byte read [ 711.994173][T26846] netlink: 'syz.1.9736': attribute type 3 has an invalid length. [ 712.415376][T26862] pimreg: entered allmulticast mode [ 712.508260][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 712.639883][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 712.639965][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.699640][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 712.704924][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.704983][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 712.705011][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.733961][ T9] usb 2-1: config 0 descriptor?? [ 712.963464][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 712.963610][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 713.043550][ T9] usb 2-1: USB disconnect, device number 22 [ 715.217748][T26941] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 715.568706][T26957] binder: 26956:26957 unknown command 0 [ 715.568730][T26957] binder: 26956:26957 ioctl c0306201 200000000080 returned -22 [ 716.397207][T27001] netlink: 'syz.2.9812': attribute type 1 has an invalid length. [ 716.458272][T27001] 8021q: adding VLAN 0 to HW filter on device bond6 [ 716.561731][T27001] bond6: (slave gretap1): making interface the new active one [ 716.565204][T27001] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 716.621029][T27008] vlan0: entered allmulticast mode [ 716.621053][T27008] bond6: entered allmulticast mode [ 716.621067][T27008] gretap1: entered allmulticast mode [ 716.655116][T27008] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 717.133304][T27032] binder: BINDER_SET_CONTEXT_MGR already set [ 717.133322][T27032] binder: 27031:27032 ioctl 4018620d 200000000140 returned -16 [ 717.703940][T27063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9842'. [ 719.468954][ T37] audit: type=1326 audit(2000000344.716:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.469480][ T37] audit: type=1326 audit(2000000344.716:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.469934][ T37] audit: type=1326 audit(2000000344.716:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.474226][ T37] audit: type=1326 audit(2000000344.716:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.474500][ T37] audit: type=1326 audit(2000000344.716:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.474833][ T37] audit: type=1326 audit(2000000344.716:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.482602][ T37] audit: type=1326 audit(2000000344.726:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.482672][ T37] audit: type=1326 audit(2000000344.726:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.482728][ T37] audit: type=1326 audit(2000000344.726:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 719.482781][ T37] audit: type=1326 audit(2000000344.726:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27134 comm="syz.2.9876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 721.940833][T27182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9898'. [ 721.940879][T27182] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 722.117763][T27189] 9pnet_fd: Insufficient options for proto=fd [ 725.118981][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 725.119002][ T37] audit: type=1326 audit(2000000350.017:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27343 comm="syz.2.9977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 725.120569][ T37] audit: type=1326 audit(2000000350.017:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27343 comm="syz.2.9977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 725.120628][ T37] audit: type=1326 audit(2000000350.017:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27343 comm="syz.2.9977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 727.429939][T27459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10033'. [ 727.430449][T27459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.701258][T27751] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10174'. [ 734.737092][T27805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 735.252684][T27828] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10214'. [ 735.252715][T27828] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 736.581572][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10228'. [ 737.330910][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10239'. [ 740.506175][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10304'. [ 740.506219][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10304'. [ 740.904003][T28038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.264207][T28094] netlink: 'syz.1.10340': attribute type 1 has an invalid length. [ 744.135436][T10880] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 744.295177][T10880] usb 2-1: Using ep0 maxpacket: 32 [ 744.299649][T10880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.299679][T10880] usb 2-1: config 0 has no interface number 0 [ 744.333688][T10880] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8 [ 744.333720][T10880] usb 2-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 744.333743][T10880] usb 2-1: Product: syz [ 744.333758][T10880] usb 2-1: Manufacturer: syz [ 744.333773][T10880] usb 2-1: SerialNumber: syz [ 744.342473][T10880] usb 2-1: config 0 descriptor?? [ 744.358503][T10880] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 744.358541][T10880] usb 2-1: selecting invalid altsetting 1 [ 744.358561][T10880] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 744.392232][T10880] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 744.393597][T10880] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 744.393665][T10880] usb 2-1: media controller created [ 744.506424][T10880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 744.671686][T10880] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 744.671765][T10880] zl10353_read_register: readreg error (reg=127, ret==-71) [ 744.673306][T10880] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 744.817305][T10880] usb 2-1: USB disconnect, device number 23 [ 745.537360][T28254] tipc: Enabling of bearer rejected, failed to enable media [ 746.054083][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 747.646196][T28313] overlayfs: conflicting lowerdir path [ 750.658800][ T5116] Bluetooth: hci5: command 0x1003 tx timeout [ 750.659257][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 751.013721][T28463] netlink: 348 bytes leftover after parsing attributes in process `syz.1.10517'. [ 751.013754][T28463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10517'. [ 751.463209][T28483] block nbd1: NBD_DISCONNECT [ 751.525318][T28483] block nbd1: Disconnected due to user request. [ 751.529727][T28483] block nbd1: shutting down sockets [ 752.417553][ T5791] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 752.577436][ T5791] usb 3-1: Using ep0 maxpacket: 8 [ 752.586910][ T5791] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 752.586941][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.586963][ T5791] usb 3-1: Product: syz [ 752.586978][ T5791] usb 3-1: Manufacturer: syz [ 752.586993][ T5791] usb 3-1: SerialNumber: syz [ 752.601152][ T5791] usb 3-1: config 0 descriptor?? [ 752.822121][ T5791] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 753.177369][T28574] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (aio_iiro_16) [ 753.937436][ T5791] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 753.960673][ T5791] usb 3-1: USB disconnect, device number 13 [ 754.769733][T28648] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10605'. [ 756.872276][T28759] sctp: [Deprecated]: syz.4.10659 (pid 28759) Use of int in maxseg socket option. [ 756.872276][T28759] Use struct sctp_assoc_value instead [ 757.095113][T28773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10666'. [ 757.095144][T28773] IPv6: NLM_F_CREATE should be specified when creating new route [ 757.423111][T28788] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10673'. [ 757.992359][ T5791] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 758.153399][ T5791] usb 5-1: Using ep0 maxpacket: 16 [ 758.156298][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 758.159493][ T5791] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 758.159523][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.159545][ T5791] usb 5-1: Product: syz [ 758.159559][ T5791] usb 5-1: Manufacturer: syz [ 758.159574][ T5791] usb 5-1: SerialNumber: syz [ 758.167480][ T5791] usb 5-1: config 0 descriptor?? [ 758.208450][ T5791] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 758.208495][ T5791] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 758.829388][ T5791] em28xx 5-1:0.0: chip ID is em2765 [ 759.497398][ T5791] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 759.497432][ T5791] em28xx 5-1:0.0: board has no eeprom [ 759.507161][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 759.508148][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 759.571928][ T5791] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 759.571961][ T5791] em28xx 5-1:0.0: dvb set to bulk mode. [ 759.595517][T10880] em28xx 5-1:0.0: Binding DVB extension [ 759.610216][ T5791] usb 5-1: USB disconnect, device number 27 [ 759.623482][ T5791] em28xx 5-1:0.0: Disconnecting em28xx [ 759.839866][T10880] em28xx 5-1:0.0: Registering input extension [ 759.843782][ T5791] em28xx 5-1:0.0: Closing input extension [ 759.949896][ T5791] em28xx 5-1:0.0: Freeing device [ 760.395975][T28920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10736'. [ 760.555572][T28927] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10740'. [ 760.555608][T28927] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10740'. [ 760.988153][T28949] overlayfs: failed to resolve './file1': -2 [ 761.130632][T28956] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10755'. [ 761.397913][T28971] loop4: detected capacity change from 0 to 7 [ 761.431052][T28971] Dev loop4: unable to read RDB block 7 [ 761.431122][T28971] loop4: unable to read partition table [ 761.431379][T28971] loop4: partition table beyond EOD, truncated [ 761.431401][T28971] loop_reread_partitions: partition scan of loop4 (x鼦熝鄸 ) failed (rc=-5) [ 762.207503][T29006] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 762.207532][T29006] Error validating options; rc = [-22] [ 763.705753][T10827] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 763.872060][T10827] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 763.872155][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 763.872185][T10827] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 763.872212][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 763.872239][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 763.877769][T10827] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 763.877833][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 763.877863][T10827] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 763.877890][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 763.877919][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 763.879107][T10827] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 763.879162][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 763.879191][T10827] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 763.879218][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 763.879243][T10827] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 763.882712][T10827] usb 5-1: string descriptor 0 read error: -22 [ 763.882874][T10827] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 763.882900][T10827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.096342][T10827] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 765.512463][T29143] Unsupported ieee802154 address type: 0 [ 766.163414][T29176] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (aio_iiro_16) [ 766.735145][ T5791] usb 5-1: USB disconnect, device number 28 [ 767.308491][ T5791] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 767.468353][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 767.473887][ T5791] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 767.473919][ T5791] usb 2-1: config 1 has no interface number 1 [ 767.473974][ T5791] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 767.473996][ T5791] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 767.474043][ T5791] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.477307][ T5791] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 767.477337][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.477359][ T5791] usb 2-1: Product: syz [ 767.477373][ T5791] usb 2-1: Manufacturer: syz [ 767.477389][ T5791] usb 2-1: SerialNumber: syz [ 767.813652][ T5791] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 767.861016][ T5791] usb 2-1: USB disconnect, device number 24 [ 769.960374][T29331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 770.492050][T29356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 772.998723][T29493] overlayfs: maximum fs stacking depth exceeded [ 773.215764][T29501] netlink: 'syz.2.11011': attribute type 4 has an invalid length. [ 775.246625][T29597] 9pnet: Could not find request transport: 0xffffffffffffffff [ 777.849418][T29710] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 777.970743][T29710] cramfs: wrong magic [ 778.661554][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 778.661631][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 780.253799][ T37] audit: type=1326 audit(2000000401.736:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.254104][ T37] audit: type=1326 audit(2000000401.736:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.255170][ T37] audit: type=1326 audit(2000000401.736:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.328139][ T37] audit: type=1326 audit(2000000401.736:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.328194][ T37] audit: type=1326 audit(2000000401.811:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.328249][ T37] audit: type=1326 audit(2000000401.811:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.328292][ T37] audit: type=1326 audit(2000000401.811:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.329454][ T37] audit: type=1326 audit(2000000401.811:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.329519][ T37] audit: type=1326 audit(2000000401.811:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 780.329944][ T37] audit: type=1326 audit(2000000401.811:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29796 comm="syz.2.11155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 781.705210][T29865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11189'. [ 781.705242][T29865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11189'. [ 781.705259][T29865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11189'. [ 782.868082][T29924] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11218'. [ 784.344433][T29994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11251'. [ 785.064338][T30033] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 785.566800][T30060] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11285'. [ 786.719299][T30110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11310'. [ 788.070625][T30172] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11340'. [ 788.978827][T30219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11362'. [ 789.402905][T30245] 9pnet_fd: Insufficient options for proto=fd [ 796.528834][T30477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11487'. [ 796.700701][T30481] tmpfs: Bad value for 'mpol' [ 800.822824][T30631] binder: 30630:30631 ioctl 4018620d 0 returned -22 [ 800.839616][T30631] binder: 30630:30631 ioctl c0306201 0 returned -14 [ 801.225753][T30638] netlink: 'syz.1.11565': attribute type 4 has an invalid length. [ 801.554103][T30644] netlink: 'syz.1.11568': attribute type 8 has an invalid length. [ 802.238956][T30675] tmpfs: Bad value for 'huge' [ 806.286042][T30835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11653'. [ 806.322738][T30835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11653'. [ 806.386140][ T6948] tipc: Subscription rejected, illegal request [ 807.628971][T30897] netlink: 'syz.2.11685': attribute type 2 has an invalid length. [ 807.628997][T30897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11685'. [ 808.761466][T30951] netlink: 756 bytes leftover after parsing attributes in process `syz.1.11709'. [ 809.967296][T30985] batadv_slave_1: entered allmulticast mode [ 809.987441][T30984] batadv_slave_1: left allmulticast mode [ 810.936195][ T37] audit: type=1326 audit(2000000430.519:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31032 comm="syz.4.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 810.959545][ T37] audit: type=1326 audit(2000000430.547:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31032 comm="syz.4.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 810.959618][ T37] audit: type=1326 audit(2000000430.547:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31032 comm="syz.4.11750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 812.216960][T31103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11784'. [ 813.136558][T31153] netlink: 'syz.4.11805': attribute type 1 has an invalid length. [ 816.642340][T31266] tmpfs: Bad value for 'nr_blocks' [ 816.646440][T31267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11856'. [ 817.372278][T31299] macsec0: entered promiscuous mode [ 817.372567][T31299] macsec0: entered allmulticast mode [ 817.372584][T31299] veth1_macvtap: entered allmulticast mode [ 819.883373][T31349] trusted_key: encrypted_key: insufficient parameters specified [ 820.647124][T10867] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 820.811627][T10867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.811693][T10867] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 820.811719][T10867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.829342][T10867] usb 5-1: config 0 descriptor?? [ 821.066625][T10867] usbhid 5-1:0.0: can't add hid device: -71 [ 821.066773][T10867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 821.094912][T10867] usb 5-1: USB disconnect, device number 29 [ 823.848044][T31567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11984'. [ 823.853060][T31567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11984'. [ 823.860329][T31567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11984'. [ 825.199968][T31633] netlink: 'syz.2.12015': attribute type 4 has an invalid length. [ 825.199995][T31633] netlink: 'syz.2.12015': attribute type 5 has an invalid length. [ 825.200010][T31633] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.12015'. [ 827.522546][T31702] fuse: Bad value for 'user_id' [ 827.522568][T31702] fuse: Bad value for 'user_id' [ 828.397907][ T37] audit: type=1326 audit(2000000446.908:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31769 comm="syz.2.12082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x0 [ 828.869742][T31793] overlayfs: overlapping lowerdir path [ 828.892444][T31796] netlink: 'syz.4.12094': attribute type 4 has an invalid length. [ 828.892468][T31796] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12094'. [ 829.596124][T31837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12115'. [ 834.958263][T32029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12208'. [ 835.810131][T32063] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12228'. [ 836.154975][T32077] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 836.894868][T32029] bond0 (unregistering): (slave team0): Releasing backup interface [ 836.982287][T32029] bond0 (unregistering): Released all slaves [ 837.376558][T32135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12262'. [ 837.685214][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12266'. [ 839.258466][T10867] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 839.352764][T32225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12305'. [ 839.530130][T10867] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 839.530163][T10867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.530192][T10867] usb 2-1: config 0 has no interface number 0 [ 839.530245][T10867] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 839.530273][T10867] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 839.530295][T10867] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.530322][T10867] usb 2-1: config 0 interface 52 has no altsetting 0 [ 839.531963][T10867] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 839.531993][T10867] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 839.532015][T10867] usb 2-1: Manufacturer: syz [ 839.632527][T10867] usb 2-1: config 0 descriptor?? [ 839.673928][T10867] hub 2-1:0.52: bad descriptor, ignoring hub [ 839.673973][T10867] hub 2-1:0.52: probe with driver hub failed with error -5 [ 839.725030][T32231] IPv6: A: Disabled Multicast RS [ 839.869662][T10867] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 839.869947][T10867] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 840.187897][T10867] usb 2-1: USB disconnect, device number 25 [ 840.819985][T32276] netlink: 'syz.1.12329': attribute type 15 has an invalid length. [ 840.820014][T32276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12329'. [ 841.108644][T32290] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12337'. [ 841.755297][T32323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12352'. [ 841.882897][T32326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12355'. [ 842.963441][T32383] overlayfs: missing 'lowerdir' [ 843.612850][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 843.612926][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.811516][T10827] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 844.975228][T10827] usb 2-1: Using ep0 maxpacket: 8 [ 844.984254][T10827] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 844.984292][T10827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 844.984324][T10827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 844.984353][T10827] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.984409][T10827] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 844.984438][T10827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.212552][T10827] usb 2-1: GET_CAPABILITIES returned 0 [ 845.212603][T10827] usbtmc 2-1:16.0: can't read capabilities [ 845.430306][T10827] usb 2-1: USB disconnect, device number 26 [ 847.976147][T32649] netlink: 388 bytes leftover after parsing attributes in process `syz.4.12510'. [ 848.244414][ T5791] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 848.339375][T32672] cgroup: Invalid name [ 848.403696][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 848.406330][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.406365][ T5791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 848.406410][ T5791] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 848.406435][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.426983][ T5791] usb 3-1: config 0 descriptor?? [ 848.710580][T32687] netlink: 'syz.1.12530': attribute type 3 has an invalid length. [ 849.746551][ T37] audit: type=1326 audit(2000000466.929:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.746817][ T37] audit: type=1326 audit(2000000466.929:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.748951][ T37] audit: type=1326 audit(2000000466.938:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.749023][ T37] audit: type=1326 audit(2000000466.938:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.750807][ T37] audit: type=1326 audit(2000000466.938:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.750862][ T37] audit: type=1326 audit(2000000466.938:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.751182][ T37] audit: type=1326 audit(2000000466.938:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.752950][ T37] audit: type=1326 audit(2000000466.938:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.753005][ T37] audit: type=1326 audit(2000000466.938:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 849.756674][ T37] audit: type=1326 audit(2000000466.938:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32716 comm="syz.1.12544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 851.314013][T32754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12562'. [ 851.345843][ T5791] usbhid 3-1:0.0: can't add hid device: -71 [ 851.345972][ T5791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 851.349949][ T5791] usb 3-1: USB disconnect, device number 14 [ 851.581205][T32762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12564'. [ 851.581301][T32762] syz_tun: left allmulticast mode [ 851.581343][T32762] syz_tun: left promiscuous mode [ 851.581627][T32762] bridge0: port 4(syz_tun) entered disabled state [ 851.699068][T32762] ip6gretap0: left allmulticast mode [ 851.699096][T32762] ip6gretap0: left promiscuous mode [ 851.699372][T32762] bridge0: port 3(ip6gretap0) entered disabled state [ 851.795114][T32762] bridge_slave_1: left allmulticast mode [ 851.795144][T32762] bridge_slave_1: left promiscuous mode [ 851.795398][T32762] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.890769][T32762] bridge_slave_0: left allmulticast mode [ 851.890799][T32762] bridge_slave_0: left promiscuous mode [ 851.891056][T32762] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.632317][ T306] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.795765][ T306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 853.006559][ T338] /dev/loop0: Can't lookup blockdev [ 854.031793][ T390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12615'. [ 854.032018][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12615'. [ 854.730856][ T420] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12626'. [ 854.816099][ T401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.816152][ T401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.416036][ T401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.416078][ T401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.795222][ T401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.795265][ T401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.235708][ T401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.235750][ T401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.891414][T31522] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.891449][T31522] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.939244][T31522] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.939281][T31522] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.042754][T31483] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.042792][T31483] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.181821][T31522] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.181860][T31522] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.570581][T24769] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 857.741252][T24769] usb 2-1: Using ep0 maxpacket: 16 [ 857.787093][T24769] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 857.787125][T24769] usb 2-1: config 0 has no interface number 0 [ 857.790952][T24769] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1001, bcdDevice=b9.d6 [ 857.790983][T24769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.791004][T24769] usb 2-1: Product: syz [ 857.791019][T24769] usb 2-1: Manufacturer: syz [ 857.791034][T24769] usb 2-1: SerialNumber: syz [ 857.850753][T24769] usb 2-1: config 0 descriptor?? [ 858.144411][T24769] usb 2-1: reset high-speed USB device number 27 using dummy_hcd [ 858.892959][ T582] tipc: Enabling of bearer rejected, failed to enable media [ 859.174554][T24769] usb 2-1: USB disconnect, device number 27 [ 859.542885][ T602] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12717'. [ 859.582885][ T606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12718'. [ 859.962192][ T625] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12728'. [ 860.543606][ T651] cgroup: Unknown subsys name 'cpuset' [ 860.897322][ T669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12750'. [ 861.058510][ T675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12751'. [ 861.586862][ T703] netlink: 268 bytes leftover after parsing attributes in process `syz.4.12767'. [ 862.479133][ T748] can: request_module (can-proto-0) failed. [ 868.291435][ T942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12875'. [ 868.758107][ T965] trusted_key: encrypted_key: master key parameter '' is invalid [ 868.886347][ T5791] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 870.159095][ T5791] usb 5-1: Using ep0 maxpacket: 16 [ 870.161425][ T5791] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 870.161457][ T5791] usb 5-1: config 0 has no interface number 0 [ 870.164254][ T5791] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1001, bcdDevice=b9.d6 [ 870.164284][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.164304][ T5791] usb 5-1: Product: syz [ 870.164317][ T5791] usb 5-1: Manufacturer: syz [ 870.164331][ T5791] usb 5-1: SerialNumber: syz [ 870.186376][ T5791] usb 5-1: config 0 descriptor?? [ 870.240453][ T989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12892'. [ 870.383078][ T5791] usb 5-1: reset high-speed USB device number 30 using dummy_hcd [ 871.299314][ T5791] usb 5-1: USB disconnect, device number 30 [ 873.145886][ T1155] tmpfs: Unknown parameter 'n' [ 873.541145][ T1175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12975'. [ 873.546644][ T1175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12975'. [ 873.586618][ T1180] fuse: Invalid rootmode [ 873.884223][ T1199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12983'. [ 875.512062][ T1291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13025'. [ 875.691980][ T1291] bond0: (slave dummy0): Releasing backup interface [ 876.101960][ T1326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13041'. [ 876.101989][ T1326] netlink: 59 bytes leftover after parsing attributes in process `syz.2.13041'. [ 876.102005][ T1326] netlink: 59 bytes leftover after parsing attributes in process `syz.2.13041'. [ 876.373705][ T1341] netlink: 116 bytes leftover after parsing attributes in process `syz.1.13050'. [ 876.373735][ T1341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13050'. [ 876.537758][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13053'. [ 876.660189][ T1358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13059'. [ 877.091315][ T1378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 879.050714][ T1445] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13099'. [ 879.289164][ T1456] binder: 1455:1456 ioctl c0306201 200000000940 returned -22 [ 879.590595][ T37] kauditd_printk_skb: 2850 callbacks suppressed [ 879.590615][ T37] audit: type=1326 audit(2000000494.933:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1470 comm="syz.4.13113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 879.591230][ T37] audit: type=1326 audit(2000000494.933:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1470 comm="syz.4.13113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 879.591533][ T37] audit: type=1326 audit(2000000494.933:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1470 comm="syz.4.13113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 879.664576][ T37] audit: type=1326 audit(2000000494.933:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1470 comm="syz.4.13113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 879.664972][ T37] audit: type=1326 audit(2000000494.998:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1470 comm="syz.4.13113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 879.698995][ T37] audit: type=1326 audit(2000000494.998:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1470 comm="syz.4.13113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 879.699062][ T37] audit: type=1326 audit(2000000495.026:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1470 comm="syz.4.13113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 880.454650][ T1508] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13129'. [ 880.454954][ T1508] 0{X功: renamed from gretap0 (while UP) [ 880.502196][ T1508] 0{X功: entered allmulticast mode [ 880.502604][ T1508] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 881.077222][ T1545] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 881.332262][ T1559] bpf: Bad value for 'uid' [ 882.288461][ T1612] netlink: 'syz.2.13179': attribute type 7 has an invalid length. [ 882.597116][ T1626] 9pnet_fd: Insufficient options for proto=fd [ 883.033465][ T1653] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13199'. [ 883.033494][ T1653] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13199'. [ 883.466213][ T1678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13211'. [ 883.466343][ T1678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13211'. [ 883.466362][ T1678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13211'. [ 885.926649][ T1757] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13249'. [ 886.360067][ T1775] overlayfs: overlapping lowerdir path [ 887.123400][ T1816] netlink: 'syz.4.13279': attribute type 6 has an invalid length. [ 887.320988][ T1823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13282'. [ 887.895795][ T1860] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13300'. [ 888.708751][T24769] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 888.868661][T24769] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 888.868693][T24769] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 888.868743][T24769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.868769][T24769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.868790][T24769] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 888.868832][T24769] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 888.868855][T24769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.875488][T24769] usb 2-1: config 0 descriptor?? [ 889.442679][T24769] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0019/input/input37 [ 889.582126][T24769] uclogic 0003:28BD:0909.0019: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 889.877635][ T1925] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13330'. [ 890.417118][ T9] usb 2-1: USB disconnect, device number 28 [ 890.781842][ T37] audit: type=1326 audit(2000000505.431:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1974 comm="syz.2.13355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x0 [ 891.165081][ T1987] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 894.593659][ T2140] futex_wake_op: syz.4.13430 tries to shift op by 32; fix this program [ 894.670957][ T2145] netlink: 'syz.1.13432': attribute type 12 has an invalid length. [ 894.821416][ T2157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13436'. [ 894.821451][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13436'. [ 895.369243][ T2187] sock: sock_timestamping_bind_phc: sock not bind to device [ 897.109779][ T2239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13475'. [ 897.586017][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 897.760018][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 897.764486][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.764515][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.772918][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.772951][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.772972][ T9] usb 5-1: Product: syz [ 897.772987][ T9] usb 5-1: Manufacturer: syz [ 897.773002][ T9] usb 5-1: SerialNumber: syz [ 898.036568][ T9] usb 5-1: 0:2 : does not exist [ 898.057126][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 898.127270][ T9] usb 5-1: USB disconnect, device number 31 [ 899.612790][ T2341] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13525'. [ 900.927539][ T2382] netlink: 'syz.1.13543': attribute type 1 has an invalid length. [ 901.043878][ T2386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13543'. [ 901.048567][ T2387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13545'. [ 901.115292][ T2382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 904.989904][ T2540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13609'. [ 906.624661][ T2634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13645'. [ 906.624695][ T2634] tc_dump_action: action bad kind [ 907.121213][ T2668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13656'. [ 908.140762][ T2721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13679'. [ 909.070552][ T2780] netlink: 'syz.2.13700': attribute type 13 has an invalid length. [ 909.109006][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 909.109085][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.358565][ T2780] gretap0: refused to change device tx_queue_len [ 909.359307][ T2780] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 910.203095][ T2835] trusted_key: encrypted_key: insufficient parameters specified [ 910.613224][ T2857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13734'. [ 914.071136][ T3043] netlink: 'syz.2.13816': attribute type 4 has an invalid length. [ 914.318889][ T3053] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13822'. [ 915.912141][ T3131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13858'. [ 917.206771][ T3195] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13892'. [ 917.206795][ T3195] netlink: 59 bytes leftover after parsing attributes in process `syz.2.13892'. [ 917.206810][ T3195] netlink: 59 bytes leftover after parsing attributes in process `syz.2.13892'. [ 917.440691][ T3203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13895'. [ 924.551839][ T3510] bridge_slave_0: invalid flags given to default FDB implementation [ 925.132226][ T37] audit: type=1326 audit(2000000537.656:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3543 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 925.139281][ T37] audit: type=1326 audit(2000000537.656:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3543 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 925.139348][ T37] audit: type=1326 audit(2000000537.656:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3543 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 925.139393][ T37] audit: type=1326 audit(2000000537.656:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3543 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 925.144733][ T37] audit: type=1326 audit(2000000537.666:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3543 comm="syz.2.14057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 926.232289][ T3569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.232350][ T3569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.778299][ T3608] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.14088'. [ 926.877056][ T3569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.877096][ T3569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.488400][ T3569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.488443][ T3569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.933042][ T3569] bond0: (slave netdevsim0): Releasing backup interface [ 928.013235][ T3569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.013276][ T3569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.481682][T31484] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.481722][T31484] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.659264][ T6978] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.659302][ T6978] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.659356][ T6978] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.659383][ T6978] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.758710][ T6978] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.758749][ T6978] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.758640][ T3738] netlink: 'syz.1.14151': attribute type 1 has an invalid length. [ 929.891675][ T3745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 929.891695][ T3745] IPv6: NLM_F_CREATE should be set when creating new route [ 929.891735][ T3745] IPv6: NLM_F_CREATE should be set when creating new route [ 929.892083][ T3738] bond5: entered promiscuous mode [ 929.892147][ T3745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 929.892590][ T3738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 930.740594][ T3742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 930.741136][ T3742] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 930.741177][ T3742] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 930.856102][ T3742] bond5: (slave wireguard0): making interface the new active one [ 930.856129][ T3742] wireguard0: entered promiscuous mode [ 930.858170][ T3742] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 930.889328][ T3745] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 933.288987][ T3905] netlink: 'syz.1.14226': attribute type 4 has an invalid length. [ 935.235161][ T3973] overlayfs: failed to clone upperpath [ 935.745722][ T3995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14271'. [ 935.858117][ T4003] overlayfs: missing 'workdir' [ 936.357640][ T4015] 9pnet: Could not find request transport: 0xffffffffffffffff [ 938.104092][ T4062] netlink: 268 bytes leftover after parsing attributes in process `syz.2.14303'. [ 938.780041][ T4098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14320'. [ 939.169554][ T37] audit: type=1326 audit(2000000550.819:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4071 comm="syz.2.14308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7fc00000 [ 941.102079][ T4231] bridge0: port 1(erspan0) entered blocking state [ 941.102284][ T4231] bridge0: port 1(erspan0) entered disabled state [ 941.102531][ T4231] erspan0: entered allmulticast mode [ 941.105684][ T4231] erspan0: entered promiscuous mode [ 941.137365][ T4231] bridge0: port 1(erspan0) entered blocking state [ 941.137525][ T4231] bridge0: port 1(erspan0) entered forwarding state [ 941.392317][ T37] audit: type=1326 audit(2000000552.911:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.416947][ T37] audit: type=1326 audit(2000000552.911:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.431011][ T37] audit: type=1326 audit(2000000552.948:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.437218][ T37] audit: type=1326 audit(2000000552.948:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.437288][ T37] audit: type=1326 audit(2000000552.948:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.437337][ T37] audit: type=1326 audit(2000000552.948:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.437384][ T37] audit: type=1326 audit(2000000552.948:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.437431][ T37] audit: type=1326 audit(2000000552.948:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 941.451157][ T37] audit: type=1326 audit(2000000552.967:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4242 comm="syz.4.14394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 942.236431][ T4285] 9p: Unknown Cache mode or invalid value f [ 942.693031][ T4300] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.693073][ T4300] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.817667][ T4300] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.817710][ T4300] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.924648][ T4313] fuse: Bad value for 'fd' [ 942.944241][ T4300] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.944284][ T4300] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.093486][ T4300] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.093528][ T4300] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.378739][ T6978] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.378776][ T6978] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.378870][ T6978] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.378898][ T6978] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.378956][ T6978] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.378983][ T6978] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.397582][T31496] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.397619][T31496] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.765759][ T4343] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14438'. [ 944.367032][ T4377] vxcan3: entered allmulticast mode [ 945.300442][ T4431] netlink: 'syz.4.14482': attribute type 4 has an invalid length. [ 945.973431][ T4466] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 948.094745][ T4577] netlink: 'syz.2.14554': attribute type 10 has an invalid length. [ 948.094771][ T4577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14554'. [ 948.714921][ T4608] netlink: 'syz.1.14569': attribute type 12 has an invalid length. [ 952.118855][ T4741] netlink: 100 bytes leftover after parsing attributes in process `syz.4.14628'. [ 954.894384][ T4838] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14676'. [ 958.270079][ T4973] netlink: 'syz.1.14740': attribute type 13 has an invalid length. [ 963.846559][ T5120] IPVS: length: 37 != 8 [ 963.891980][ T5122] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14811'. [ 964.423714][ T5147] tmpfs: Bad value for 'huge' [ 965.992408][ T5225] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14858'. [ 966.042732][ T5225] 0{X功: entered promiscuous mode [ 966.042764][ T5225] 0{X功: left allmulticast mode [ 966.047374][ T5233] netlink: 5 bytes leftover after parsing attributes in process `syz.4.14858'. [ 966.078290][ T5233] 1{X功: renamed from 30{X功 [ 966.130753][ T5233] 1{X功: left promiscuous mode [ 966.130783][ T5233] 1{X功: entered allmulticast mode [ 966.148084][ T5233] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 967.096125][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 967.266950][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.266980][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 967.267019][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 967.267043][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.272740][ T9] usb 2-1: config 0 descriptor?? [ 967.503336][ T9] usb 2-1: USB disconnect, device number 29 [ 967.565173][ T5299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14893'. [ 968.724739][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 968.724761][ T37] audit: type=1326 audit(2000000578.550:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5355 comm="syz.1.14921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x0 [ 968.833338][ T5359] netlink: 'syz.4.14922': attribute type 11 has an invalid length. [ 970.500633][ T5430] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14956'. [ 973.682887][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15026'. [ 974.605004][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 974.605082][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 977.035970][ T37] audit: type=1800 audit(2000000586.347:3371): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.15114" name="nullb0" dev="tmpfs" ino=13799 res=0 errno=0 [ 977.543022][ T5810] fuse: Bad value for 'group_id' [ 977.543046][ T5810] fuse: Bad value for 'group_id' [ 977.646575][T10827] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 977.806712][T10827] usb 2-1: Using ep0 maxpacket: 16 [ 977.810911][T10827] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 977.810941][T10827] usb 2-1: config 0 has no interface number 0 [ 977.810976][T10827] usb 2-1: config 0 interface 231 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 977.811001][T10827] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 977.814828][T10827] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1001, bcdDevice=b9.d6 [ 977.814860][T10827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.814881][T10827] usb 2-1: Product: syz [ 977.814904][T10827] usb 2-1: Manufacturer: syz [ 977.814919][T10827] usb 2-1: SerialNumber: syz [ 977.897082][T10827] usb 2-1: config 0 descriptor?? [ 978.051718][T10827] usb 2-1: reset high-speed USB device number 30 using dummy_hcd [ 978.763937][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15158'. [ 978.987546][T10827] usb 2-1: USB disconnect, device number 30 [ 979.077672][ T5927] bpf: Bad value for 'uid' [ 980.754344][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15175'. [ 982.870462][ T6046] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15220'. [ 983.136067][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15230'. [ 984.416517][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15238'. [ 985.928876][ T6157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 989.781065][ T6355] netlink: 'syz.4.15368': attribute type 4 has an invalid length. [ 989.781092][ T6355] netlink: 'syz.4.15368': attribute type 5 has an invalid length. [ 989.781107][ T6355] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.15368'. [ 990.242048][ T6376] lo: Caught tx_queue_len zero misconfig [ 990.458096][ T6377] vlan0: entered allmulticast mode [ 990.458137][ T6377] bridge_slave_0: entered allmulticast mode [ 990.518967][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15382'. [ 991.270638][ T6407] overlayfs: failed to clone lowerpath [ 992.782217][ T6387] team0 (unregistering): Port device team_slave_0 removed [ 994.051413][ T6505] netlink: 140 bytes leftover after parsing attributes in process `syz.1.15439'. [ 997.258026][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15490'. [ 1000.421855][ T6779] overlay: Unknown parameter '/' [ 1001.938680][ T6866] Device name cannot be null; rc = [-22] [ 1002.420402][ T6892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1006.892305][ T7090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15714'. [ 1007.408736][ T37] audit: type=1326 audit(2016778059.849:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.408799][ T37] audit: type=1326 audit(2016778059.849:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.408847][ T37] audit: type=1326 audit(2016778059.849:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.424586][ T37] audit: type=1326 audit(2016778059.868:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.424657][ T37] audit: type=1326 audit(2016778059.868:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.443245][ T37] audit: type=1326 audit(2016778059.877:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.443321][ T37] audit: type=1326 audit(2016778059.887:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.450433][ T37] audit: type=1326 audit(2016778059.887:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.450501][ T37] audit: type=1326 audit(2016778059.887:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1007.452867][ T37] audit: type=1326 audit(2016778059.887:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.4.15724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43c7e6f6c9 code=0x7ffc0000 [ 1014.843427][ T7359] trusted_key: encrypted_key: insufficient parameters specified [ 1017.042299][ T7411] overlayfs: failed to clone lowerpath [ 1017.103903][ T7418] 9p: Unknown Cache mode or invalid value m [ 1017.484719][ T7436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15876'. [ 1019.294457][ T7530] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1019.532280][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15924'. [ 1028.361857][ T7893] netlink: 100 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1029.848605][ T7932] tipc: Enabled bearer , priority 10 [ 1030.018500][ T7939] netlink: 'syz.1.16115': attribute type 16 has an invalid length. [ 1030.018519][ T7939] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.16115'. [ 1032.409492][ T8051] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.16167'. [ 1035.928802][ T8221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16251'. [ 1037.617086][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16294'. [ 1039.570189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.239487][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1040.239569][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1040.396272][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1040.396294][ T37] audit: type=1107 audit(2016778090.194:3388): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1040.493636][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.860511][ T37] audit: type=1326 audit(2016778091.245:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886422][ T37] audit: type=1326 audit(2016778091.245:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886488][ T37] audit: type=1326 audit(2016778091.245:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886535][ T37] audit: type=1326 audit(2016778091.245:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886583][ T37] audit: type=1326 audit(2016778091.245:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886631][ T37] audit: type=1326 audit(2016778091.245:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886681][ T37] audit: type=1326 audit(2016778091.245:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886730][ T37] audit: type=1326 audit(2016778091.245:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1040.886778][ T37] audit: type=1326 audit(2016778091.245:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.1.16344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x50000 [ 1041.293197][ T8433] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16353'. [ 1042.373312][ T8491] /dev/nullb0: Can't lookup blockdev [ 1043.550154][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.862930][ T8587] netlink: 92 bytes leftover after parsing attributes in process `syz.1.16427'. [ 1046.757254][ T8700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16484'. [ 1046.757284][ T8700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16484'. [ 1046.922102][ T8710] fuse: Bad value for 'user_id' [ 1046.922123][ T8710] fuse: Bad value for 'user_id' [ 1047.330917][ T8725] netlink: 256 bytes leftover after parsing attributes in process `syz.2.16496'. [ 1047.385060][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16495'. [ 1048.044729][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 1048.044751][ T37] audit: type=1326 audit(2016778097.985:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.048161][ T37] audit: type=1326 audit(2016778097.994:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.048468][ T37] audit: type=1326 audit(2016778097.994:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.049000][ T37] audit: type=1326 audit(2016778097.994:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.049329][ T37] audit: type=1326 audit(2016778097.994:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.049871][ T37] audit: type=1326 audit(2016778097.994:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.050191][ T37] audit: type=1326 audit(2016778097.994:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.052128][ T37] audit: type=1326 audit(2016778097.994:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.053085][ T37] audit: type=1326 audit(2016778097.994:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1048.054030][ T37] audit: type=1326 audit(2016778097.994:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.1.16521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1049.374271][ T8841] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1049.374320][ T8841] overlayfs: overlapping lowerdir path [ 1050.828758][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16596'. [ 1051.597802][ T8971] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16616'. [ 1052.213026][ T9004] overlayfs: overlapping lowerdir path [ 1054.046725][ T9059] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1055.097963][T10827] kernel write not supported for file [eventfd] (pid: 10827 comm: kworker/1:12) [ 1055.457923][ T9136] misc userio: Invalid payload size [ 1058.591853][ T9247] overlayfs: failed to resolve './bus': -2 [ 1058.787065][ T9262] netlink: 536 bytes leftover after parsing attributes in process `syz.1.16757'. [ 1058.787098][ T9262] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16757'. [ 1063.337329][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 1063.337348][ T37] audit: type=1326 audit(2016778112.345:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.344005][ T37] audit: type=1326 audit(2016778112.345:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.344070][ T37] audit: type=1326 audit(2016778112.345:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.344924][ T37] audit: type=1326 audit(2016778112.345:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.344973][ T37] audit: type=1326 audit(2016778112.345:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.345021][ T37] audit: type=1326 audit(2016778112.345:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.345065][ T37] audit: type=1326 audit(2016778112.345:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.345111][ T37] audit: type=1326 audit(2016778112.345:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.345157][ T37] audit: type=1326 audit(2016778112.345:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1063.345205][ T37] audit: type=1326 audit(2016778112.345:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9454 comm="syz.1.16850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bae81f6c9 code=0x7ffc0000 [ 1067.136305][ T9615] 9pnet_fd: Insufficient options for proto=fd [ 1068.822750][ T9695] netlink: 'syz.2.16968': attribute type 19 has an invalid length. [ 1078.703012][T10056] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17139'. [ 1078.703049][T10056] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17139'. [ 1081.292769][T10161] IPVS: Scheduler module ip_vs_sip not found [ 1082.731908][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17218'. [ 1084.845067][T10340] netem: change failed [ 1088.616909][T10405] can: request_module (can-proto-0) failed. [ 1093.009003][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17398'. [ 1093.867020][T10644] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1093.867441][T10644] qnx6: wrong signature (magic) in superblock #1. [ 1093.867453][T10644] qnx6: unable to read the first superblock [ 1094.565275][T10681] tmpfs: Bad value for 'mpol' [ 1095.195116][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17439'. [ 1095.195152][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17439'. [ 1095.195171][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17439'. [ 1095.195213][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17439'. [ 1096.616776][T10780] overlayfs: failed to clone upperpath [ 1097.120398][T10802] netlink: 'syz.2.17492': attribute type 1 has an invalid length. [ 1097.426664][T10813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17495'. [ 1097.426696][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17495'. [ 1099.479737][T10912] netlink: 140 bytes leftover after parsing attributes in process `syz.1.17543'. [ 1100.019909][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17558'. [ 1105.523943][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1105.524017][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1107.308349][ T6978] tipc: Subscription rejected, illegal request [ 1107.919154][T11320] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1107.919181][T11320] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1108.042919][ T37] kauditd_printk_skb: 364 callbacks suppressed [ 1108.042940][ T37] audit: type=1326 audit(2016778154.310:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11329 comm="syz.2.17751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 1108.043491][ T37] audit: type=1326 audit(2016778154.310:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11329 comm="syz.2.17751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 1108.044691][ T37] audit: type=1326 audit(2016778154.310:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11329 comm="syz.2.17751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 1108.045385][ T37] audit: type=1326 audit(2016778154.310:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11329 comm="syz.2.17751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 1108.045664][ T37] audit: type=1326 audit(2016778154.310:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11329 comm="syz.2.17751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 1108.046377][ T37] audit: type=1326 audit(2016778154.310:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11329 comm="syz.2.17751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4abf3f6c9 code=0x7ffc0000 [ 1110.202587][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17780'. [ 1113.940081][T11593] netlink: 'syz.2.17866': attribute type 17 has an invalid length. [ 1114.887075][T11649] tipc: Bearer : already 2 bearers with priority 10 [ 1114.887100][T11649] tipc: Bearer : trying with adjusted priority [ 1114.888221][T11649] tipc: New replicast peer: 255.255.255.255 [ 1114.924964][T11649] tipc: Enabled bearer , priority 9 [ 1115.342365][T11675] netlink: 37 bytes leftover after parsing attributes in process `syz.1.17908'. [ 1119.439038][T11806] tipc: New replicast peer: 0.0.0.0 [ 1119.439503][T11806] tipc: Enabled bearer , priority 10 [ 1120.462087][T31515] [ 1120.462099][T31515] ============================================ [ 1120.462108][T31515] WARNING: possible recursive locking detected [ 1120.462123][T31515] syzkaller #0 Not tainted [ 1120.462133][T31515] -------------------------------------------- [ 1120.462141][T31515] kworker/u8:34/31515 is trying to acquire lock: [ 1120.462154][T31515] ffff88801db15318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 1120.462224][T31515] [ 1120.462224][T31515] but task is already holding lock: [ 1120.462231][T31515] ffff888050c0a398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70 [ 1120.462289][T31515] [ 1120.462289][T31515] other info that might help us debug this: [ 1120.462297][T31515] Possible unsafe locking scenario: [ 1120.462297][T31515] [ 1120.462303][T31515] CPU0 [ 1120.462309][T31515] ---- [ 1120.462314][T31515] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 1120.462335][T31515] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 1120.462355][T31515] [ 1120.462355][T31515] *** DEADLOCK *** [ 1120.462355][T31515] [ 1120.462362][T31515] May be due to missing lock nesting notation [ 1120.462362][T31515] [ 1120.462370][T31515] 14 locks held by kworker/u8:34/31515: [ 1120.462382][T31515] #0: ffff888030b54938 ((wq_completion)bond6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1120.462438][T31515] #1: ffffc9000f39fba0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1120.462493][T31515] #2: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf2/0x1840 [ 1120.462541][T31515] #3: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1120.462594][T31515] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1120.462646][T31515] #5: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 1120.462699][T31515] #6: ffff888050c0a398 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x1370/0x3b70 [ 1120.462759][T31515] #7: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 1120.462918][T31515] #8: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1120.462972][T31515] #9: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 1120.463028][T31515] #10: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1120.463080][T31515] #11: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1120.463134][T31515] #12: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1120.463185][T31515] #13: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 1120.463239][T31515] [ 1120.463239][T31515] stack backtrace: [ 1120.463261][T31515] CPU: 1 UID: 0 PID: 31515 Comm: kworker/u8:34 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1120.463285][T31515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.463298][T31515] Workqueue: bond6 bond_alb_monitor [ 1120.463320][T31515] Call Trace: [ 1120.463331][T31515] [ 1120.463340][T31515] dump_stack_lvl+0x189/0x250 [ 1120.463374][T31515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1120.463405][T31515] ? __pfx__printk+0x10/0x10 [ 1120.463430][T31515] ? print_lock_name+0xde/0x100 [ 1120.463455][T31515] print_deadlock_bug+0x28b/0x2a0 [ 1120.463477][T31515] validate_chain+0x1a3f/0x2140 [ 1120.463499][T31515] ? unwind_next_frame+0xa5/0x2390 [ 1120.463529][T31515] ? __lock_acquire+0xab9/0xd20 [ 1120.463559][T31515] __lock_acquire+0xab9/0xd20 [ 1120.463588][T31515] ? __dev_queue_xmit+0xd58/0x3b70 [ 1120.463612][T31515] lock_acquire+0x120/0x360 [ 1120.463638][T31515] ? __dev_queue_xmit+0xd58/0x3b70 [ 1120.463666][T31515] ? __lock_acquire+0xab9/0xd20 [ 1120.463697][T31515] rt_spin_lock+0x88/0x3e0 [ 1120.463718][T31515] ? __dev_queue_xmit+0xd58/0x3b70 [ 1120.463746][T31515] ? __pfx_rt_spin_lock+0x10/0x10 [ 1120.463774][T31515] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1120.463841][T31515] __dev_queue_xmit+0xd58/0x3b70 [ 1120.463867][T31515] ? __neigh_event_send+0xf68/0x1580 [ 1120.463901][T31515] ? __dev_queue_xmit+0x26f/0x3b70 [ 1120.463928][T31515] ? ret_from_fork_asm+0x1a/0x30 [ 1120.463956][T31515] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1120.463990][T31515] ? __lock_acquire+0xab9/0xd20 [ 1120.464026][T31515] ? NF_HOOK+0x9e/0x3a0 [ 1120.464056][T31515] NF_HOOK+0x310/0x3a0 [ 1120.464085][T31515] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1120.464114][T31515] ? NF_HOOK+0x9e/0x3a0 [ 1120.464141][T31515] ? __pfx_NF_HOOK+0x10/0x10 [ 1120.464170][T31515] ? arp_xmit+0x23/0x270 [ 1120.464204][T31515] arp_xmit+0x16c/0x270 [ 1120.464230][T31515] ? arp_xmit+0x23/0x270 [ 1120.464259][T31515] arp_solicit+0xc6a/0xeb0 [ 1120.464291][T31515] ? arp_solicit+0x115/0xeb0 [ 1120.464322][T31515] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1120.464345][T31515] ? __pfx_arp_solicit+0x10/0x10 [ 1120.464375][T31515] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1120.464405][T31515] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1120.464434][T31515] ? rt_write_unlock+0x191/0x230 [ 1120.464459][T31515] ? __pfx_arp_solicit+0x10/0x10 [ 1120.464488][T31515] __neigh_event_send+0xf68/0x1580 [ 1120.464521][T31515] ? __neigh_event_send+0x38/0x1580 [ 1120.464553][T31515] neigh_resolve_output+0x19f/0x780 [ 1120.464585][T31515] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1120.464618][T31515] ip_finish_output2+0xd97/0x11d0 [ 1120.464646][T31515] ? ip_finish_output2+0x452/0x11d0 [ 1120.464677][T31515] ? __pfx_ip_finish_output2+0x10/0x10 [ 1120.464705][T31515] ? ip_skb_dst_mtu+0x18d/0xb70 [ 1120.464730][T31515] ? ip_skb_dst_mtu+0x917/0xb70 [ 1120.464757][T31515] ? ip_finish_output+0x33a/0x3f0 [ 1120.464790][T31515] ip_output+0x29f/0x450 [ 1120.464815][T31515] ? ip_output+0x5b/0x450 [ 1120.464841][T31515] iptunnel_xmit+0x5f8/0xa90 [ 1120.464870][T31515] ip_tunnel_xmit+0x1c44/0x2390 [ 1120.464914][T31515] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1120.464942][T31515] ? gre_build_header+0x31c/0xa40 [ 1120.464974][T31515] ? __pfx_gre_build_header+0x10/0x10 [ 1120.465001][T31515] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1120.465028][T31515] gre_tap_xmit+0x590/0x7a0 [ 1120.465057][T31515] ? __pfx_gre_tap_xmit+0x10/0x10 [ 1120.465088][T31515] dev_hard_start_xmit+0x2f0/0x870 [ 1120.465122][T31515] sch_direct_xmit+0x241/0x4b0 [ 1120.465156][T31515] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1120.465186][T31515] ? rcu_needs_cpu+0xa0/0xb0 [ 1120.465206][T31515] ? rt_spin_trylock+0x13b/0x2b0 [ 1120.465231][T31515] __dev_queue_xmit+0x1826/0x3b70 [ 1120.465263][T31515] ? __dev_queue_xmit+0x26f/0x3b70 [ 1120.465297][T31515] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1120.465323][T31515] ? rcu_is_watching+0x15/0xb0 [ 1120.465340][T31515] ? kmalloc_reserve+0xbd/0x290 [ 1120.465361][T31515] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1120.465385][T31515] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 1120.465411][T31515] ? kmalloc_reserve+0xbd/0x290 [ 1120.465430][T31515] ? __alloc_skb+0x112/0x2d0 [ 1120.465454][T31515] ? __build_skb_around+0x262/0x3f0 [ 1120.465482][T31515] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 1120.465506][T31515] ? alb_send_lp_vid+0x139/0x510 [ 1120.465529][T31515] alb_send_lp_vid+0x324/0x510 [ 1120.465552][T31515] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1120.465575][T31515] ? __lock_acquire+0xab9/0xd20 [ 1120.465606][T31515] alb_send_learning_packets+0x10d/0x2c0 [ 1120.465628][T31515] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1120.465654][T31515] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1120.465676][T31515] bond_alb_monitor+0x3dc/0x1840 [ 1120.465697][T31515] ? bond_alb_monitor+0xf2/0x1840 [ 1120.465716][T31515] ? process_scheduled_works+0x9ef/0x17b0 [ 1120.465742][T31515] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1120.465762][T31515] ? _raw_spin_unlock_irq+0x23/0x50 [ 1120.465799][T31515] ? process_scheduled_works+0x9ef/0x17b0 [ 1120.465823][T31515] ? process_scheduled_works+0x9ef/0x17b0 [ 1120.465848][T31515] process_scheduled_works+0xae1/0x17b0 [ 1120.465887][T31515] ? __pfx_process_scheduled_works+0x10/0x10 [ 1120.465921][T31515] worker_thread+0x8a0/0xda0 [ 1120.465959][T31515] kthread+0x711/0x8a0 [ 1120.465990][T31515] ? __pfx_worker_thread+0x10/0x10 [ 1120.466015][T31515] ? __pfx_kthread+0x10/0x10 [ 1120.466042][T31515] ? rt_spin_unlock+0x150/0x200 [ 1120.466068][T31515] ? rt_spin_unlock+0x161/0x200 [ 1120.466090][T31515] ? __pfx_kthread+0x10/0x10 [ 1120.466120][T31515] ret_from_fork+0x4bc/0x870 [ 1120.466145][T31515] ? __pfx_ret_from_fork+0x10/0x10 [ 1120.466172][T31515] ? __switch_to_asm+0x39/0x70 [ 1120.466191][T31515] ? __switch_to_asm+0x33/0x70 [ 1120.466210][T31515] ? __pfx_kthread+0x10/0x10 [ 1120.466240][T31515] ret_from_fork_asm+0x1a/0x30 [ 1120.466269][T31515]