last executing test programs: 8m22.702995184s ago: executing program 3 (id=2569): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PROPBIT(r0, 0x4008556c, 0x1) 8m22.347620329s ago: executing program 3 (id=2570): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@mcast1, 0x1, r1}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @rand_addr=0x64010102, r1}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x2f8}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000b1a800", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x14, 0x20, 0x0, 0xff, 0x0, 0xc8, 0x8}}, 0x1c}}, 0x4000800) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x1000000, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000740)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r10, 0x200000000114, 0x2715, 0x0, &(0x7f0000000100)) 8m21.181316335s ago: executing program 3 (id=2573): fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a017ece76eb78e6d562620100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000"], 0xdc}, 0x1, 0x0, 0x0, 0x24004880}, 0x40890) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 8m19.343908816s ago: executing program 3 (id=2576): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x800) 8m19.163229254s ago: executing program 3 (id=2577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=@newtfilter={0x54, 0x2c, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) 8m18.835422426s ago: executing program 3 (id=2579): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f00000005c0)="55d8f515dbfd604af16bbe69d5fdd4409e1d99d6ecf9a1bc35d582061c7db2a2785585813848bc49c7f7896e0ac0c33be1353cdc94fbd450ec9ced262b78e559f4b607c0f027d8c7b151ed1c3ce9f5d5346ea65123fc712465292821acc4ee909e638e", 0x63, r4) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m3.704286651s ago: executing program 32 (id=2579): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000500)={'syz', 0x3}, &(0x7f00000005c0)="55d8f515dbfd604af16bbe69d5fdd4409e1d99d6ecf9a1bc35d582061c7db2a2785585813848bc49c7f7896e0ac0c33be1353cdc94fbd450ec9ced262b78e559f4b607c0f027d8c7b151ed1c3ce9f5d5346ea65123fc712465292821acc4ee909e638e", 0x63, r4) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13.539832795s ago: executing program 1 (id=3799): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) gettid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40010140, 0x0) 9.838868429s ago: executing program 1 (id=3806): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) close(r3) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x6, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000000)='smaps_rollup\x00') syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 9.083914144s ago: executing program 1 (id=3807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 8.698369542s ago: executing program 2 (id=3809): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000033666a"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8.654658346s ago: executing program 1 (id=3810): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@alu={0x7, 0x0, 0x6, 0x7, 0xa, 0x30, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4}, @alu={0x7, 0x0, 0x4, 0x9, 0x9, 0xfffffffffffffffc, 0x8}, @map_fd={0x18, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x10b, 0xc, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x9, 0x7, 0x2) r6 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) msgsnd(r6, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r6, 0x0) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000180)=""/65) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f00000004c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a00000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$TIOCGSOFTCAR(r8, 0x5414, 0x0) 8.100347331s ago: executing program 4 (id=3811): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000082c0), 0x200, 0x0) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000008300)) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x100000001, 0x2) clock_gettime(0x0, &(0x7f0000010000)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000100c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_overlay={0x4, 0x1, 0x4, 0x10000, 0x8, {r3, r4/1000+60000}, {0x0, 0x1, 0xd2, 0x4, 0x0, 0xf, "f9371030"}, 0xa, 0x3, {&(0x7f0000010040)=[{0x10, 0x7, {0x7}, 0x2}, {0x5, 0x4, {0x7}, 0x1}]}, 0x35e, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom(r7, 0x0, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000010740)={0x14, &(0x7f0000010580)={0x20, 0x4, 0xb7, {0xb7, 0xf, "4dee4b35296ada0e37e66dee32f06c01e31f98ea632142920e0d7617683ca50693cc52e5f0c1b11b736aec16a3b3adfc5320ca238bd1b938a6066e10ffe4dd38106283e52e60f0074dc06b4cd59b792fdaa60fc1cb104aa7ea0348077a35a276ec8037b37ccd21d1f5200192f3b790fafa4257a60a826c81076c41fde818d2f785b0c58c670c38e189a8ae9d00262b77d66b0be684a9b15b960334750cbf6d9b0c54de31dad066a98f9b4e59bc63ec5b4a4ac57c96"}}, &(0x7f0000010640)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "886269827ce9051d975741f959ecd353c58a372ac0ac8b44366a66e50df0d8a55133174cdce69228327b858a106eb4f31857c4adb0750e22e8fc3a90056e4edf6ed71a6434f803e5fa664ba22e0e669863227a946dc59a86262a5773e45663fe0592790d34f2c51d14d3965ffdb713867a48b809b799f5e54e7cd54a231672b813a18141841f9b44d38dd406fc7e975efc81db7f2f65db419330e2970313bfe140b2933722590a164a8794d8beaff83ec00f46828ff91ec0ae559aeffec6d0cbaa51dec796"}}}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000000)=0x8) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) recvfrom$l2tp6(r9, &(0x7f00000002c0)=""/42, 0x2a, 0x10040, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) shmdt(0x0) 7.006356199s ago: executing program 2 (id=3813): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x1c, 'syz0\x00', "523ca936f8f61adc3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0xa000, {0x1, 0x10}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x3, 0x56c}}, {0x8, 0x401, {0x0, 0x2e}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x5}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0x791, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3d}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x7, 0xfffe, {0x2, 0x7f}}, {0x3, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x2}}, {0x9, 0x7, {0x3, 0x3ff}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x9, {0x3, 0xfffffffc}}, {0x9, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xdc, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xc, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0x7}}, {0x8000, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0x6}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x2, 0x6}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x3, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x70, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) 6.862405413s ago: executing program 2 (id=3815): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x80000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 6.769047292s ago: executing program 1 (id=3816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) close_range(r1, r2, 0x0) 6.256592383s ago: executing program 1 (id=3817): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sg(0x0, 0x100000001, 0x400) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000640)=ANY=[@ANYBLOB]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x0, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xe8, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r10, &(0x7f0000000040), &(0x7f0000000400)=""/72}, 0x20) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x20, 0x4, 0xfe, 0x10000}]}, 0x10) 3.291900956s ago: executing program 4 (id=3818): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c"], 0xc4}}, 0x4008800) 2.994794095s ago: executing program 4 (id=3820): syz_emit_ethernet(0x482, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7, 0x5, 0x31363553, 0x0, 0x5, [{0x8c65, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x3ffffffe, 0x4}, {0x9, 0xd1}, {0x2, 0x800}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x1}}) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000061000010c4000000000000000130000008ef27ac820c18776cd1df52bd1b940041c1a29dc3c9b4d9093a33af9f739fb4c47063daa6fb09e9ca47818f0e658675ab0c13d4bc092b0dd972a57589de42d61291a915a2d0d3881f93c663011a51da375496d500b8a", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700000000000000000000000000000000001400350077673100"/56], 0x50}}, 0x0) r2 = gettid() tkill(r2, 0x7) sched_setaffinity(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) rename(0x0, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3) 2.935012361s ago: executing program 0 (id=3821): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="2a3641e891c90afad1", 0x9}], 0x1}}], 0x2, 0x8000) 2.423981641s ago: executing program 0 (id=3822): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xa08410, 0x0) 2.23721356s ago: executing program 2 (id=3823): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000150001030000000000000000010000"], 0x14}}, 0x0) vmsplice(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) 1.575678725s ago: executing program 0 (id=3824): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x1c, 'syz0\x00', "523ca936f8f61adc3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0xa000, {0x1, 0x10}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x3, 0x56c}}, {0x8, 0x401, {0x0, 0x2e}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x5}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0x791, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3d}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x7, 0xfffe, {0x2, 0x7f}}, {0x3, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x2}}, {0x9, 0x7, {0x3, 0x3ff}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x9, {0x3, 0xfffffffc}}, {0x9, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xdc, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xc, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0x7}}, {0x8000, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0x6}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x2, 0x6}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x3, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x70, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) 1.42548522s ago: executing program 0 (id=3825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff000000000a00000085000000bc000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.228842679s ago: executing program 2 (id=3826): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x0, 0x2}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 1.21542312s ago: executing program 4 (id=3827): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x2, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 1.145813727s ago: executing program 0 (id=3828): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee00, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.035965818s ago: executing program 4 (id=3829): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c00070020000000020000000800080001000000"], 0xc4}}, 0x4008800) 104.50741ms ago: executing program 2 (id=3830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x9) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000100)={0x200, 0x1, 0x3, 0x7b3, r8}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r9, &(0x7f0000007ac0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/140, 0x8c}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x5}, 0x7}, {{&(0x7f0000002440)=@nfc_llcp, 0x80, &(0x7f0000002800)=[{0x0}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/124, 0x7c}, {&(0x7f0000002700)=""/85, 0x55}, {&(0x7f0000002780)=""/105, 0x69}], 0x5, &(0x7f0000002880)=""/37, 0x25}, 0x5c}, {{&(0x7f00000028c0), 0x80, &(0x7f00000029c0)=[{&(0x7f0000002940)=""/78, 0x4e}], 0x1, &(0x7f0000002a00)=""/16, 0x10}, 0x2}, {{0x0, 0x0, &(0x7f0000007d80)=[{&(0x7f0000002a40)=""/98, 0x62}, {&(0x7f0000002ac0)=""/242, 0xf2}, {&(0x7f0000002bc0)=""/85, 0x55}, {0x0}, {&(0x7f0000003c40)=""/147, 0x93}, {&(0x7f0000007d00)=""/93, 0x5d}], 0x6, &(0x7f0000003d80)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004d80)=@l2tp6, 0x80, &(0x7f0000006140)=[{&(0x7f0000004e00)=""/119, 0x77}, {&(0x7f0000004e80)=""/63, 0x3f}, {&(0x7f0000004ec0)=""/18, 0x12}, {&(0x7f0000004f00)=""/236, 0xec}, {&(0x7f0000005000)=""/147, 0x93}, {&(0x7f0000005140)=""/4096, 0x1000}], 0x6}, 0x1}, {{&(0x7f00000061c0)=@x25, 0x80, &(0x7f0000006380)=[{&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f00000062c0)=""/136, 0x88}], 0x2, &(0x7f00000063c0)=""/154, 0x9a}}, {{&(0x7f0000006480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006500)=""/224, 0xe0}, {&(0x7f0000006600)=""/147, 0x93}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000007700), 0x0, &(0x7f0000007740)=""/247, 0xf7}, 0x8}, {{&(0x7f0000007840)=@x25, 0x80, &(0x7f0000007980)=[{&(0x7f00000078c0)=""/126, 0x7e}, {&(0x7f0000007940)=""/17, 0x11}], 0x2, &(0x7f00000079c0)=""/209, 0xd1}, 0x3ff}], 0x9, 0x0, 0x0) 89.364891ms ago: executing program 4 (id=3831): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6992, &(0x7f0000000480)={0x0, 0x200000, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) fcntl$dupfd(r6, 0x406, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000580)={0xa0002008}) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r8) r9 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 0s ago: executing program 0 (id=3832): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) kernel console output (not intermixed with test programs): 56.202920][T12089] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1057.458198][T15015] loop3: detected capacity change from 0 to 7 [ 1057.526740][T15015] Dev loop3: unable to read RDB block 7 [ 1057.553001][T15015] loop3: AHDI p1 [ 1057.562879][T15015] loop3: partition table partially beyond EOD, truncated [ 1060.778869][T15039] 9pnet_virtio: no channels available for device syz [ 1061.245647][T15038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2564'. [ 1061.581334][T15051] input: syz0 as /devices/virtual/input/input9 [ 1062.032325][T13860] Bluetooth: hci4: command 0x0406 tx timeout [ 1063.866900][T15069] netlink: 'syz.1.2574': attribute type 2 has an invalid length. [ 1063.884783][T15069] netlink: 'syz.1.2574': attribute type 1 has an invalid length. [ 1063.940730][T15069] netlink: 'syz.1.2574': attribute type 1 has an invalid length. [ 1064.383087][T12088] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1064.923123][ T786] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1064.965580][T15076] wireguard: wg1: Could not create IPv4 socket [ 1065.137789][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.171813][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1065.203996][ T786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1065.231386][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.261239][ T786] usb 1-1: Product: syz [ 1065.273246][ T786] usb 1-1: Manufacturer: syz [ 1065.290450][ T786] usb 1-1: SerialNumber: syz [ 1065.632036][ T786] usb 1-1: skipping empty audio interface (v1) [ 1065.755055][ T786] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1065.797274][ T786] usb 1-1: USB disconnect, device number 6 [ 1065.899430][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.519708][T15095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.564553][T15095] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1067.950769][T15107] wireguard: wg1: Could not create IPv4 socket [ 1073.129910][T15157] wireguard: wg1: Could not create IPv4 socket [ 1074.018467][T15173] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2599'. [ 1077.114636][T15197] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1077.642593][T15203] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 1077.676590][T15203] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 1077.711277][T15203] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 1079.889911][T15230] lo speed is unknown, defaulting to 1000 [ 1080.834180][T15239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1082.576691][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1082.657927][T15254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1082.760338][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1082.760355][ T28] audit: type=1326 audit(1760486301.294:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1082.841477][ T28] audit: type=1326 audit(1760486301.294:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1082.959787][ T28] audit: type=1326 audit(1760486301.324:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.002911][T14854] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1083.089120][ T28] audit: type=1326 audit(1760486301.324:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.155719][ T28] audit: type=1326 audit(1760486301.334:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.217870][ T28] audit: type=1326 audit(1760486301.334:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.357919][ T28] audit: type=1326 audit(1760486301.334:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.494692][T14854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1083.506876][T14854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1083.518180][ T28] audit: type=1326 audit(1760486301.334:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.547173][T14854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1083.562256][T14854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1083.588497][ T28] audit: type=1326 audit(1760486301.344:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.613856][ T28] audit: type=1326 audit(1760486301.344:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.1.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fac2198eec9 code=0x7ffc0000 [ 1083.645162][T14854] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1083.660006][T14854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.668468][T14854] usb 3-1: Product: syz [ 1083.673005][T14854] usb 3-1: Manufacturer: syz [ 1083.677629][T14854] usb 3-1: SerialNumber: syz [ 1083.702862][T14854] usb 3-1: config 0 descriptor?? [ 1083.970866][T14854] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1084.160071][ T786] usb 3-1: USB disconnect, device number 6 [ 1084.383392][T15258] adutux: No device or device unplugged -19 [ 1085.588353][T15284] bridge_slave_0: left allmulticast mode [ 1085.606726][T15284] bridge_slave_0: left promiscuous mode [ 1085.653190][T15284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.756431][T15284] bridge_slave_1: left allmulticast mode [ 1085.762382][T15284] bridge_slave_1: left promiscuous mode [ 1085.773714][T15284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.879947][T15284] bond0: (slave bond_slave_0): Releasing backup interface [ 1085.924866][T15284] bond0: (slave bond_slave_1): Releasing backup interface [ 1086.113108][T15284] team0: Port device team_slave_0 removed [ 1086.193478][T15284] team0: Port device team_slave_1 removed [ 1086.201459][T15284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.210857][T15284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.223953][T15284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.242290][T15284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.695871][T13860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1086.723030][T13860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1086.731795][T13860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1086.747073][T13860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1086.757924][T13860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1086.773586][T13860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1086.803046][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1086.867452][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1086.876093][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1086.885003][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1086.908220][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1086.925730][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1087.291105][T15269] lo speed is unknown, defaulting to 1000 [ 1087.722100][T15307] wireguard: wg1: Could not create IPv4 socket [ 1088.201495][T15314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1088.599273][T15269] chnl_net:caif_netlink_parms(): no params data found [ 1088.972931][T13860] Bluetooth: hci2: command tx timeout [ 1089.171237][T15269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.195866][T15269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.215684][T15269] bridge_slave_0: entered allmulticast mode [ 1089.250816][T15269] bridge_slave_0: entered promiscuous mode [ 1089.533530][T15336] bond0: (slave bond_slave_0): Releasing backup interface [ 1089.885204][T15345] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.2634'. [ 1090.587600][T15336] bond0: (slave bond_slave_1): Releasing backup interface [ 1090.835089][T15336] team0: Port device team_slave_0 removed [ 1090.913190][T15336] team0: Port device team_slave_1 removed [ 1090.919822][T15336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.953479][T15336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.972427][T15336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.981757][T15336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.042117][T15269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.053849][T13860] Bluetooth: hci2: command tx timeout [ 1091.067834][T15269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.104469][T15269] bridge_slave_1: entered allmulticast mode [ 1091.112129][T15269] bridge_slave_1: entered promiscuous mode [ 1091.200598][T15344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2634'. [ 1091.518205][T15269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.590550][T15269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.937789][T15269] team0: Port device team_slave_0 added [ 1092.004638][T15269] team0: Port device team_slave_1 added [ 1092.344337][T15366] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1092.655925][T15269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.696119][T15269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.132849][T13860] Bluetooth: hci2: command tx timeout [ 1093.162858][T15269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.228621][T15269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.266213][T15269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.372938][T15269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.478827][T15269] hsr_slave_0: entered promiscuous mode [ 1093.565484][T15269] hsr_slave_1: entered promiscuous mode [ 1093.689497][T15269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.712859][T15269] Cannot create hsr debugfs directory [ 1093.933237][T14854] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1094.194797][T14854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.225584][T14854] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.276082][T14854] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1094.302847][T14854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.361190][T14854] usb 3-1: Product: syz [ 1094.382950][T14854] usb 3-1: Manufacturer: syz [ 1094.402843][T14854] usb 3-1: SerialNumber: syz [ 1094.611203][T15269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1094.727554][T14854] usb 3-1: skipping empty audio interface (v1) [ 1094.744750][T15269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1094.790022][T15269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1094.827929][T14854] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1094.858308][T15269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1094.881067][T14854] usb 3-1: USB disconnect, device number 7 [ 1094.950140][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.218164][T13860] Bluetooth: hci2: command tx timeout [ 1095.722540][T15415] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2642'. [ 1096.304344][T15414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2642'. [ 1096.514372][T15269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.597446][T15269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.660815][T11087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.668069][T11087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.285405][T14402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.292608][T14402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.558541][T15269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1098.542271][T15269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.495821][T15269] veth0_vlan: entered promiscuous mode [ 1099.522418][T15269] veth1_vlan: entered promiscuous mode [ 1099.653708][T15269] veth0_macvtap: entered promiscuous mode [ 1099.693947][T15269] veth1_macvtap: entered promiscuous mode [ 1099.750944][T15269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1099.948764][T15269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.015210][T15269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.065367][T15269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.132852][T15269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.182368][T15269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.269236][T15269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.308628][T15269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.317517][T15269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.326376][T15269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.451890][T11087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.470340][T11087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.536764][T15470] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1100.561700][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.699932][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.047061][T15474] lo speed is unknown, defaulting to 1000 [ 1103.154623][T15484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1103.197682][T15485] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1106.784782][T15531] wireguard: wg1: Could not create IPv4 socket [ 1108.184246][ T5777] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1108.509787][ T5777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.531227][ T5777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.558344][T15555] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1108.667207][ T5777] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1108.902795][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.956435][ T5777] usb 1-1: Product: syz [ 1108.968561][ T5777] usb 1-1: Manufacturer: syz [ 1108.997988][ T5777] usb 1-1: SerialNumber: syz [ 1109.106415][T15564] 9pnet_virtio: no channels available for device syz [ 1109.315740][ T5777] usb 1-1: skipping empty audio interface (v1) [ 1109.670832][ T5777] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1109.745590][T15570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2670'. [ 1109.769233][T15570] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.2670'. [ 1110.214336][T14644] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1110.418580][ T5777] usb 1-1: USB disconnect, device number 7 [ 1110.464833][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2674'. [ 1110.474996][T14644] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.528921][T14644] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1110.538599][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.566143][T14644] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1110.604223][T14644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.629417][T14644] usb 5-1: config 0 descriptor?? [ 1110.663016][T14644] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1110.680531][T14644] dvb-usb: bulk message failed: -22 (3/0) [ 1110.713398][T14644] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1110.739159][T14644] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1110.912820][T14644] usb 5-1: media controller created [ 1110.925951][T14644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.958244][T14644] dvb-usb: bulk message failed: -22 (6/0) [ 1110.964865][T14644] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1111.065991][T14644] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 1111.097093][T14644] dvb-usb: schedule remote query interval to 150 msecs. [ 1111.105188][T14644] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1111.123166][T15587] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1111.265747][T11826] dvb-usb: bulk message failed: -22 (1/0) [ 1111.291139][T11826] dvb-usb: error while querying for an remote control event. [ 1111.473069][T11826] dvb-usb: bulk message failed: -22 (1/0) [ 1111.479210][T11826] dvb-usb: error while querying for an remote control event. [ 1111.644640][T14644] dvb-usb: bulk message failed: -22 (1/0) [ 1111.671712][T14644] dvb-usb: error while querying for an remote control event. [ 1111.740888][T15596] 9pnet_virtio: no channels available for device syz [ 1111.842884][T11826] dvb-usb: bulk message failed: -22 (1/0) [ 1112.688142][T11826] dvb-usb: error while querying for an remote control event. [ 1112.732315][T14644] usb 5-1: USB disconnect, device number 2 [ 1112.922341][T14644] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1113.197872][T15608] syz_tun: entered allmulticast mode [ 1113.536915][T15607] syz_tun: left allmulticast mode [ 1113.686712][T15616] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1114.624269][T15632] syz.0.2692: attempt to access beyond end of device [ 1114.624269][T15632] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1114.642792][T15632] hfsplus: unable to find HFS+ superblock [ 1116.260780][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.267288][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.972856][ T5861] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1117.020956][T15658] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1117.219460][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.240223][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.261032][ T5861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.280811][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.312357][ T5861] usb 5-1: Product: syz [ 1117.323037][ T5861] usb 5-1: Manufacturer: syz [ 1117.339230][ T5861] usb 5-1: SerialNumber: syz [ 1117.408838][T15665] netlink: 'syz.1.2701': attribute type 4 has an invalid length. [ 1117.559574][T15666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2702'. [ 1117.621690][T15672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1117.724528][ T5861] usb 5-1: skipping empty audio interface (v1) [ 1117.787346][ T5861] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1117.862801][T14644] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1117.885010][ T5861] usb 5-1: USB disconnect, device number 3 [ 1117.955590][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.072858][T14644] usb 3-1: Using ep0 maxpacket: 32 [ 1118.103196][T14644] usb 3-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1118.187755][T14644] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1118.281033][T14644] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1118.323853][T14644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.333131][T14644] usb 3-1: Product: syz [ 1118.337377][T14644] usb 3-1: Manufacturer: syz [ 1118.341999][T14644] usb 3-1: SerialNumber: syz [ 1118.349187][T14644] usb 3-1: config 0 descriptor?? [ 1119.281172][T15684] random: crng reseeded on system resumption [ 1121.376917][ C1] Illegal XDP return value 16128 on prog (id 391) dev team0, expect packet loss! [ 1122.450823][T14854] usb 3-1: USB disconnect, device number 8 [ 1122.773882][T15697] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1124.737518][T15720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2718'. [ 1126.190247][T15735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2719'. [ 1126.289717][T15734] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1126.493963][ T5861] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1126.979449][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 1127.029677][ T5861] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1127.443026][ T5861] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1128.506397][ T5861] usb 2-1: string descriptor 0 read error: -71 [ 1128.529911][T11826] kernel write not supported for file /sg0 (pid: 11826 comm: kworker/1:0) [ 1128.544000][ T5861] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1128.584758][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.631788][ T5861] usb 2-1: config 0 descriptor?? [ 1128.647982][ T5861] usb 2-1: can't set config #0, error -71 [ 1128.671823][ T5861] usb 2-1: USB disconnect, device number 6 [ 1129.120985][T15756] hub 9-0:1.0: USB hub found [ 1129.127272][T15756] hub 9-0:1.0: 1 port detected [ 1129.970025][T15758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2728'. [ 1130.429497][T15767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'. [ 1130.456206][T15767] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2731'. [ 1132.755743][T15782] wireguard: wg1: Could not create IPv4 socket [ 1133.129212][T15787] lo speed is unknown, defaulting to 1000 [ 1133.855201][T15800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2743'. [ 1134.234675][T15807] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.2742'. [ 1135.186256][T15814] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2744'. [ 1138.095258][T15833] lo speed is unknown, defaulting to 1000 [ 1138.424841][T15842] wireguard: wg1: Could not create IPv4 socket [ 1139.695668][T15861] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.2757'. [ 1140.419016][T15853] lo speed is unknown, defaulting to 1000 [ 1140.877314][ T28] audit: type=1326 audit(1760486359.414:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.1.2755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x0 [ 1142.584525][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1148.156065][T15920] lo speed is unknown, defaulting to 1000 [ 1148.457287][T15927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.585324][T15931] netlink: 'syz.0.2773': attribute type 3 has an invalid length. [ 1148.610642][T15931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1148.709667][ T28] audit: type=1326 audit(1760486367.244:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15914 comm="syz.1.2770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x0 [ 1148.712958][T15927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.760099][T15947] wireguard: wg1: Could not create IPv4 socket [ 1150.678941][T15952] ptrace attach of "./syz-executor exec"[15955] was attempted by "./syz-executor exec"[15952] [ 1151.508147][T15966] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.2784'. [ 1152.338962][T15967] input: syz1 as /devices/virtual/input/input11 [ 1152.378007][T15967] input: failed to attach handler leds to device input11, error: -6 [ 1152.790454][T15970] fuse: Unknown parameter 'u00000000000000000000' [ 1155.685434][T15995] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 1155.739079][T15995] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 1161.164597][ T28] audit: type=1326 audit(1760486379.704:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.190765][ T28] audit: type=1326 audit(1760486379.724:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.222982][ T28] audit: type=1326 audit(1760486379.724:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0d4d990d5c code=0x7ffc0000 [ 1161.318647][ T28] audit: type=1326 audit(1760486379.724:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.477075][ T28] audit: type=1326 audit(1760486379.724:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.552905][ T28] audit: type=1326 audit(1760486379.724:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.575673][ T28] audit: type=1326 audit(1760486379.754:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.642495][ T28] audit: type=1326 audit(1760486379.754:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.808838][ T28] audit: type=1326 audit(1760486379.754:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1161.831850][ T28] audit: type=1326 audit(1760486379.754:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.2.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x7ffc0000 [ 1163.029375][T16048] netlink: 'syz.0.2807': attribute type 2 has an invalid length. [ 1163.070074][T16048] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 1165.391816][T11826] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1165.592964][T11826] usb 3-1: Using ep0 maxpacket: 8 [ 1165.605198][T11826] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1165.628060][T11826] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1165.651607][T11826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1165.690382][T11826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1165.731608][T11826] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.782618][T11826] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1165.829472][T11826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.081092][T11826] usb 3-1: GET_CAPABILITIES returned 0 [ 1166.093364][T11826] usbtmc 3-1:16.0: can't read capabilities [ 1166.182295][T16087] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.2820'. [ 1166.907872][T11826] usb 3-1: USB disconnect, device number 9 [ 1167.493450][T12088] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1167.685698][T12088] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.712971][T12088] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1167.725315][T12088] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1167.735994][T12088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.748342][T12088] usb 1-1: Product: syz [ 1167.752580][T12088] usb 1-1: Manufacturer: syz [ 1167.758893][T12088] usb 1-1: SerialNumber: syz [ 1168.197057][T12088] usb 1-1: skipping empty audio interface (v1) [ 1168.431718][T12088] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1168.492179][T12088] usb 1-1: USB disconnect, device number 8 [ 1168.577546][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.416130][T16128] lo speed is unknown, defaulting to 1000 [ 1171.785574][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 1171.785592][ T28] audit: type=1326 audit(1760486390.324:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16121 comm="syz.0.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1171.959466][ T28] audit: type=1326 audit(1760486390.324:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16121 comm="syz.0.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1172.092978][ T28] audit: type=1326 audit(1760486390.324:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16121 comm="syz.0.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1172.134142][ T28] audit: type=1326 audit(1760486390.324:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16121 comm="syz.0.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1172.162853][ T28] audit: type=1326 audit(1760486390.324:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16121 comm="syz.0.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1175.753209][T12088] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1175.945583][T12088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.961589][T12088] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1175.990113][T12088] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1176.005770][T12088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.014369][T12088] usb 2-1: Product: syz [ 1176.018585][T12088] usb 2-1: Manufacturer: syz [ 1176.032758][T12088] usb 2-1: SerialNumber: syz [ 1177.223056][T12088] usb 2-1: skipping empty audio interface (v1) [ 1177.322625][T12088] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1177.355267][T12088] usb 2-1: USB disconnect, device number 7 [ 1177.426656][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.226789][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.243006][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.432814][ T5861] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1181.632974][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 1181.679399][ T5861] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1181.724805][ T5861] usb 5-1: config 0 has no interface number 0 [ 1181.770116][ T5861] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1181.852439][ T5861] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1181.905826][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.949290][ T5861] usb 5-1: Product: syz [ 1181.979677][ T5861] usb 5-1: Manufacturer: syz [ 1182.469478][ T5861] usb 5-1: SerialNumber: syz [ 1182.523951][ T5861] usb 5-1: config 0 descriptor?? [ 1182.802987][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2851'. [ 1182.864713][T16210] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2851'. [ 1182.973509][ T5777] usb 5-1: USB disconnect, device number 4 [ 1183.470533][T16226] netlink: 'syz.2.2866': attribute type 8 has an invalid length. [ 1186.868722][T16255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'. [ 1189.453302][T14644] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1189.713260][T14644] usb 1-1: Using ep0 maxpacket: 8 [ 1189.905281][T14644] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1190.012999][T14644] usb 1-1: config 0 has no interface number 0 [ 1190.019182][T14644] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1190.077173][T14644] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1190.159598][T14644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.180277][T14644] usb 1-1: Product: syz [ 1190.197519][T14644] usb 1-1: Manufacturer: syz [ 1190.202204][T14644] usb 1-1: SerialNumber: syz [ 1190.266598][T14644] usb 1-1: config 0 descriptor?? [ 1191.606815][T16289] hugetlbfs: syz.2.2886 (16289): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1191.993660][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1192.075578][T16269] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1192.308590][T14644] usb 1-1: USB disconnect, device number 9 [ 1192.878645][T16303] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2891'. [ 1198.212764][ T5861] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1198.452770][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 1198.612073][ T5861] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1198.644938][ T5861] usb 5-1: config 0 has no interface number 0 [ 1198.699675][ T5861] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1199.456731][ T5861] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1199.570257][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.691022][ T5861] usb 5-1: Product: syz [ 1199.758223][ T5861] usb 5-1: Manufacturer: syz [ 1199.812510][ T5861] usb 5-1: SerialNumber: syz [ 1199.842354][ T5861] usb 5-1: config 0 descriptor?? [ 1201.243216][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 1201.313654][T16342] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2901'. [ 1201.498619][ T786] usb 5-1: USB disconnect, device number 5 [ 1202.202756][T16393] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.2916'. [ 1204.085998][T16404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1206.922820][ T5777] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1208.432717][ T5777] usb 5-1: Using ep0 maxpacket: 8 [ 1208.677173][ T5777] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1208.775368][ T5777] usb 5-1: config 0 has no interface number 0 [ 1208.781540][ T5777] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1208.792523][ T5777] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1208.811216][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.820213][ T5777] usb 5-1: Product: syz [ 1208.824763][ T5777] usb 5-1: Manufacturer: syz [ 1208.829394][ T5777] usb 5-1: SerialNumber: syz [ 1208.845773][ T5777] usb 5-1: config 0 descriptor?? [ 1209.763582][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1209.960491][T16428] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1210.118988][T16457] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.2935'. [ 1210.644107][T13860] Bluetooth: hci2: command 0x0406 tx timeout [ 1210.778554][ T8] usb 5-1: USB disconnect, device number 6 [ 1211.508047][T16470] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.854265][T16481] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1213.920621][ T28] audit: type=1800 audit(1760486432.454:1017): pid=16481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2940" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1218.966379][T16525] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.2955'. [ 1222.271439][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1223.334970][T16559] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 1223.375248][T16559] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 1223.592921][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1223.822744][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1223.841266][ T8] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1223.933974][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1223.999200][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1224.035335][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.054692][ T8] usb 1-1: Product: syz [ 1224.059939][ T8] usb 1-1: Manufacturer: syz [ 1224.103649][ T8] usb 1-1: SerialNumber: syz [ 1224.136719][ T8] usb 1-1: config 0 descriptor?? [ 1225.032335][T16598] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1228.869558][ T786] usb 1-1: USB disconnect, device number 10 [ 1229.226682][T16638] wireguard: wg1: Could not create IPv4 socket [ 1231.636979][ T786] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1231.842843][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 1231.958699][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1231.991905][ T786] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1232.797524][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.850572][ T786] usb 1-1: config 0 descriptor?? [ 1233.996353][ T786] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1234.346624][ T786] usb 1-1: USB disconnect, device number 11 [ 1235.997237][T11826] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1236.292780][T11826] usb 3-1: Using ep0 maxpacket: 8 [ 1236.354820][T11826] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1236.404866][T11826] usb 3-1: config 0 has no interface number 0 [ 1236.444842][T11826] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1236.633672][T11826] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1236.749524][T11826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.943763][T11826] usb 3-1: Product: syz [ 1237.061806][T11826] usb 3-1: Manufacturer: syz [ 1237.168947][T11826] usb 3-1: SerialNumber: syz [ 1237.205373][T11826] usb 3-1: config 0 descriptor?? [ 1237.533078][ T28] audit: type=1326 audit(1760486456.044:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1237.572276][ T28] audit: type=1326 audit(1760486456.044:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1237.652753][ T28] audit: type=1326 audit(1760486456.054:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.173621][ T28] audit: type=1326 audit(1760486456.074:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.204335][ T28] audit: type=1326 audit(1760486456.074:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.227145][ T28] audit: type=1326 audit(1760486456.074:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.249574][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.259515][ T28] audit: type=1326 audit(1760486456.074:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.282020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.292567][ T28] audit: type=1326 audit(1760486456.074:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.315090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.327655][ T28] audit: type=1326 audit(1760486456.074:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.344457][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 1238.350054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.378516][ T28] audit: type=1326 audit(1760486456.074:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x7ffc0000 [ 1238.401017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.444938][T16724] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3005'. [ 1238.693258][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 1238.702254][T16749] netlink: 'syz.4.3009': attribute type 1 has an invalid length. [ 1238.754150][T16749] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.763740][T16749] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.772548][T16749] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.781434][T16749] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1238.906957][T16755] netlink: 'syz.0.3011': attribute type 23 has an invalid length. [ 1238.954267][T11826] usb 3-1: USB disconnect, device number 10 [ 1239.154340][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.165083][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.179800][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 1241.392817][ T5777] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1242.865750][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 1242.875145][ T5777] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1242.883990][ T5777] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1242.896547][ T5777] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1242.906747][ T5777] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1242.917446][ T5777] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.930838][ T5777] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1242.940930][T16797] wireguard: wg1: Could not create IPv4 socket [ 1242.947836][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.223456][T16772] netlink: 'syz.2.3017': attribute type 3 has an invalid length. [ 1243.232475][T16772] netlink: 'syz.2.3017': attribute type 3 has an invalid length. [ 1243.248143][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1243.340290][ T5777] usb 3-1: usb_control_msg returned -32 [ 1244.047805][ T5777] usbtmc 3-1:16.0: can't read capabilities [ 1246.364376][T11826] usb 3-1: USB disconnect, device number 11 [ 1248.159649][T16845] wireguard: wg1: Could not create IPv4 socket [ 1248.247485][T16837] lo speed is unknown, defaulting to 1000 [ 1248.682847][ T5777] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1249.103022][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 1249.113614][ T5777] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1249.141702][ T5777] usb 3-1: config 0 has no interface number 0 [ 1249.154499][ T5777] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1249.198781][ T5777] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1249.240494][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.272398][ T5777] usb 3-1: Product: syz [ 1249.314800][ T5777] usb 3-1: Manufacturer: syz [ 1249.400684][ T5777] usb 3-1: SerialNumber: syz [ 1249.463029][ T5777] usb 3-1: config 0 descriptor?? [ 1249.829312][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 1249.858542][T16850] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3037'. [ 1249.956009][T11826] usb 3-1: USB disconnect, device number 12 [ 1253.488521][T16887] wireguard: wg1: Could not create IPv4 socket [ 1253.628390][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3049'. [ 1255.050988][T16897] lo speed is unknown, defaulting to 1000 [ 1256.795512][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 1256.795525][ T28] audit: type=1326 audit(1760486475.334:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16892 comm="syz.2.3050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x0 [ 1257.329763][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.337661][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.632758][ T5861] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1257.832767][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 1257.849438][ T5861] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1257.870879][ T5861] usb 3-1: config 0 has no interface number 0 [ 1257.888703][ T5861] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1257.904435][ T5861] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1257.922803][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.951512][ T5861] usb 3-1: Product: syz [ 1257.956204][ T5861] usb 3-1: Manufacturer: syz [ 1257.960848][ T5861] usb 3-1: SerialNumber: syz [ 1257.978828][ T5861] usb 3-1: config 0 descriptor?? [ 1258.062219][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.106044][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.369998][T16905] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.379195][T16905] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.389589][T16905] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.399044][T16905] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.475849][T16913] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1258.524697][T16905] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.534512][T16905] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.543853][T16905] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.553265][T16905] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1258.675133][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3055'. [ 1259.031391][T12088] usb 3-1: USB disconnect, device number 13 [ 1260.950033][T16972] lo speed is unknown, defaulting to 1000 [ 1261.115842][ T28] audit: type=1326 audit(1760486479.634:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.2.3064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x0 [ 1262.778772][T16981] loop2: detected capacity change from 0 to 7 [ 1262.817328][T14382] Dev loop2: unable to read RDB block 7 [ 1262.833184][T14382] loop2: unable to read partition table [ 1262.839164][T14382] loop2: partition table beyond EOD, truncated [ 1262.919695][T16981] Dev loop2: unable to read RDB block 7 [ 1262.934733][T16981] loop2: unable to read partition table [ 1262.940830][T16981] loop2: partition table beyond EOD, truncated [ 1262.951363][T16981] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1263.030988][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 1263.039998][T16987] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3067'. [ 1263.054269][T16987] batadv1: entered promiscuous mode [ 1263.059516][T16987] batadv1: entered allmulticast mode [ 1265.810231][ T5159] Dev loop2: unable to read RDB block 7 [ 1265.822564][ T5159] loop2: unable to read partition table [ 1265.856728][ T5159] loop2: partition table beyond EOD, truncated [ 1265.985097][T16940] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1266.023674][ T5777] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1266.182768][T16940] usb 1-1: Using ep0 maxpacket: 16 [ 1266.200359][T16940] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1266.210566][T16940] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1266.222901][ T5777] usb 5-1: Using ep0 maxpacket: 8 [ 1266.231176][T16940] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.246850][ T5777] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1266.258569][ T5777] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1266.265080][T16940] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1266.277466][ T5777] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1266.297145][ T5777] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1266.309373][ T5777] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1266.329223][ T5777] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1266.333492][T16940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1266.348109][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.356410][ T5878] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1266.372165][T16940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.380906][T16940] usb 1-1: Product: syz [ 1266.386129][T16940] usb 1-1: Manufacturer: syz [ 1266.390934][T16940] usb 1-1: SerialNumber: syz [ 1266.562888][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 1266.578143][ T5878] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1266.592695][ T5878] usb 3-1: config 0 has no interface number 0 [ 1266.606606][ T5777] usb 5-1: GET_CAPABILITIES returned 0 [ 1266.612923][ T5878] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1266.628973][ T5777] usbtmc 5-1:16.0: can't read capabilities [ 1266.644905][ T5878] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1266.661937][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.670711][ T5878] usb 3-1: Product: syz [ 1266.675193][ T5878] usb 3-1: Manufacturer: syz [ 1266.679980][ T5878] usb 3-1: SerialNumber: syz [ 1266.690643][ T5878] usb 3-1: config 0 descriptor?? [ 1266.812672][ T5878] usb 5-1: USB disconnect, device number 7 [ 1267.025904][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 1267.214098][T17000] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3070'. [ 1267.907241][ T5878] usb 3-1: USB disconnect, device number 14 [ 1269.391380][T16940] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1271.189139][T16940] usb 1-1: USB disconnect, device number 12 [ 1272.071519][T16940] usblp0: removed [ 1272.097270][T17020] lo speed is unknown, defaulting to 1000 [ 1274.853270][T16940] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1275.112972][T16940] usb 5-1: Using ep0 maxpacket: 8 [ 1275.214779][T16940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1275.451594][T16940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1275.471972][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1275.502906][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1275.542698][T16940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.576441][T16940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1275.612900][T16940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.906171][T16940] usb 5-1: usb_control_msg returned -71 [ 1275.939430][T16940] usbtmc 5-1:16.0: can't read capabilities [ 1275.955502][T16940] usb 5-1: USB disconnect, device number 8 [ 1276.032753][ T5777] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1276.126929][T17063] lo speed is unknown, defaulting to 1000 [ 1276.518734][ T5777] usb 1-1: Using ep0 maxpacket: 8 [ 1276.574542][ T5777] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1276.583154][ T5777] usb 1-1: config 0 has no interface number 0 [ 1276.589423][ T5777] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1276.616687][ T5777] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1276.643277][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.662420][ T28] audit: type=1326 audit(1760486495.194:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17060 comm="syz.2.3088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x0 [ 1276.684936][ T5777] usb 1-1: Product: syz [ 1276.689239][ T5777] usb 1-1: Manufacturer: syz [ 1276.712887][ T5777] usb 1-1: SerialNumber: syz [ 1276.954055][ T5777] usb 1-1: config 0 descriptor?? [ 1277.322340][T17075] bridge_slave_0: left allmulticast mode [ 1277.329109][T17075] bridge_slave_0: left promiscuous mode [ 1277.335239][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.044974][T17075] bridge_slave_1: left allmulticast mode [ 1278.060969][T17075] bridge_slave_1: left promiscuous mode [ 1278.067407][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.124877][T17075] bond0: (slave bond_slave_0): Releasing backup interface [ 1278.223629][T17075] bond0: (slave bond_slave_1): Releasing backup interface [ 1278.271003][T17075] team0: Port device team_slave_0 removed [ 1278.307538][T17085] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1278.313077][T17075] team0: Port device team_slave_1 removed [ 1278.339950][T17075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.370629][T17075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.388647][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1278.564273][T16940] usb 1-1: USB disconnect, device number 13 [ 1281.648855][T17107] lo speed is unknown, defaulting to 1000 [ 1283.024087][T17124] bridge_slave_0: left allmulticast mode [ 1283.029783][T17124] bridge_slave_0: left promiscuous mode [ 1283.113070][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.437199][T17124] bridge_slave_1: left allmulticast mode [ 1283.529348][T17124] bridge_slave_1: left promiscuous mode [ 1283.709181][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.821550][T17124] bond0: (slave bond_slave_0): Releasing backup interface [ 1284.027693][T17124] bond0: (slave bond_slave_1): Releasing backup interface [ 1284.238757][T17124] team0: Port device team_slave_0 removed [ 1284.446469][T17124] team0: Port device team_slave_1 removed [ 1284.453631][T17124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.461231][T17124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.481679][T17150] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.3106'. [ 1285.269981][T17130] wireguard: wg1: Could not create IPv4 socket [ 1285.470141][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3106'. [ 1287.860318][T17170] lo speed is unknown, defaulting to 1000 [ 1288.023140][T17178] binder: 17172:17178 ioctl 81e8943c 200000000880 returned -22 [ 1288.184980][T17180] (null): rxe_set_mtu: Set mtu to 4096 [ 1288.194870][T17180] rdma_rxe: rxe_newlink: failed to add lo [ 1292.184561][ T5878] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1292.453391][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 1292.516099][ T5878] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1292.583833][ T5878] usb 3-1: config 0 has no interface number 0 [ 1292.646684][ T5878] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1292.708696][ T5878] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1292.912751][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.931087][ T5878] usb 3-1: Product: syz [ 1292.946153][ T5878] usb 3-1: Manufacturer: syz [ 1292.956285][ T5878] usb 3-1: SerialNumber: syz [ 1293.762769][ T5878] usb 3-1: config 0 descriptor?? [ 1293.781440][T17224] siw: device registration error -23 [ 1294.209657][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1294.324491][T17211] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1294.390733][T17239] lo speed is unknown, defaulting to 1000 [ 1294.586728][ T28] audit: type=1326 audit(2000000000.250:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17231 comm="syz.4.3132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x0 [ 1294.805215][ T5878] usb 3-1: USB disconnect, device number 15 [ 1294.812213][T17241] wireguard: wg1: Could not create IPv4 socket [ 1300.576617][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.583490][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.323167][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3138'. [ 1301.881949][T17283] lo speed is unknown, defaulting to 1000 [ 1302.324701][ T28] audit: type=1400 audit(2000000008.100:1098): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=17293 comm="syz.2.3148" [ 1303.235406][ T28] audit: type=1326 audit(2000000009.010:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.1.3145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x0 [ 1303.483770][T16942] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1304.365372][T16942] usb 1-1: Using ep0 maxpacket: 8 [ 1305.642337][T16942] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1305.654416][T16942] usb 1-1: config 0 has no interface number 0 [ 1305.660584][T16942] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1305.979739][T16942] usb 1-1: string descriptor 0 read error: -71 [ 1306.003415][T16942] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1306.012561][T16942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.059138][T16942] usb 1-1: config 0 descriptor?? [ 1306.086864][T16942] usb 1-1: can't set config #0, error -71 [ 1306.116108][T16942] usb 1-1: USB disconnect, device number 14 [ 1307.821680][T17320] syz.4.3152 (17320): drop_caches: 2 [ 1310.594385][T17342] lo speed is unknown, defaulting to 1000 [ 1310.712785][ T28] audit: type=1326 audit(2000000016.470:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17336 comm="syz.2.3161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x0 [ 1310.830245][T17345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3162'. [ 1310.870552][T17345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3162'. [ 1311.583783][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1312.313713][T17350] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.3163'. [ 1312.762831][T12088] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1312.988197][T12088] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.014553][T12088] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1313.076507][T12088] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1313.093035][T12088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.101260][T12088] usb 5-1: Product: syz [ 1313.106256][T12088] usb 5-1: Manufacturer: syz [ 1313.110928][T12088] usb 5-1: SerialNumber: syz [ 1313.390346][T12088] usb 5-1: skipping empty audio interface (v1) [ 1313.471960][T12088] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1313.487995][T12088] usb 5-1: USB disconnect, device number 9 [ 1313.570450][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.303567][T17392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1314.416749][T17389] lo speed is unknown, defaulting to 1000 [ 1315.302934][T16944] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1317.443804][ T28] audit: type=1326 audit(2000000023.210:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.1.3174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x0 [ 1317.643096][T16944] usb 1-1: Using ep0 maxpacket: 8 [ 1317.675082][T16944] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1317.689891][T16944] usb 1-1: config 0 has no interface number 0 [ 1317.702656][T16944] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1317.749082][T16944] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1317.771068][T16944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.792676][T16944] usb 1-1: Product: syz [ 1317.797250][T16944] usb 1-1: Manufacturer: syz [ 1317.802074][T16944] usb 1-1: SerialNumber: syz [ 1317.838451][T16944] usb 1-1: config 0 descriptor?? [ 1317.984173][T16944] usb 1-1: USB disconnect, device number 15 [ 1318.207508][T17427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3186'. [ 1318.234425][T17427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3186'. [ 1319.195875][T17435] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.3187'. [ 1319.622711][ T5878] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1319.835445][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.865789][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1319.883016][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1319.898766][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.907263][ T5878] usb 5-1: Product: syz [ 1319.921960][ T5878] usb 5-1: Manufacturer: syz [ 1319.928148][ T5878] usb 5-1: SerialNumber: syz [ 1320.219477][T17448] sp0: Synchronizing with TNC [ 1320.279946][ T5878] usb 5-1: skipping empty audio interface (v1) [ 1320.330897][ T5878] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1320.353570][ T5878] usb 5-1: USB disconnect, device number 10 [ 1320.394499][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.932859][ T5878] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1321.159948][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 1321.194245][ T5878] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1321.242668][ T5878] usb 3-1: config 0 has no interface number 0 [ 1321.259030][ T5878] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1321.285564][ T5878] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1321.312846][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.345961][T17460] lo speed is unknown, defaulting to 1000 [ 1321.383184][ T5878] usb 3-1: Product: syz [ 1321.402975][ T5878] usb 3-1: Manufacturer: syz [ 1321.412771][ T5878] usb 3-1: SerialNumber: syz [ 1321.475314][ T5878] usb 3-1: config 0 descriptor?? [ 1321.766666][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3193'. [ 1321.833121][T17458] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3193'. [ 1321.882152][ T28] audit: type=1326 audit(2000000027.650:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.4.3194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x0 [ 1321.982217][T16942] usb 3-1: USB disconnect, device number 16 [ 1324.042734][T16942] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1324.424379][T16942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.435109][T16942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1324.458178][T16942] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1324.477560][T16942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.496885][T17508] lo speed is unknown, defaulting to 1000 [ 1324.519300][T16942] usb 3-1: Product: syz [ 1324.539456][T16942] usb 3-1: Manufacturer: syz [ 1324.551331][T16942] usb 3-1: SerialNumber: syz [ 1324.862384][T16942] usb 3-1: skipping empty audio interface (v1) [ 1324.998125][T16942] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1325.047354][T16942] usb 3-1: USB disconnect, device number 17 [ 1325.172154][ T28] audit: type=1326 audit(2000000030.940:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17502 comm="syz.1.3207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x0 [ 1325.222001][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1327.732543][T17550] wireguard: wg1: Could not create IPv4 socket [ 1328.871620][T17573] lo speed is unknown, defaulting to 1000 [ 1328.932698][ T28] audit: type=1326 audit(2000000034.690:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17555 comm="syz.0.3220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x0 [ 1329.836880][T17586] netlink: 'syz.2.3223': attribute type 2 has an invalid length. [ 1329.863261][T17586] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 1329.873030][T17586] netlink: 'syz.2.3223': attribute type 1 has an invalid length. [ 1330.383962][ T5878] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1330.458016][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'. [ 1335.193205][T12088] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1335.382712][T12088] usb 1-1: device descriptor read/64, error -71 [ 1335.672892][T12088] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1335.842722][T12088] usb 1-1: device descriptor read/64, error -71 [ 1336.007429][T12088] usb usb1-port1: attempt power cycle [ 1336.067656][T17623] lo speed is unknown, defaulting to 1000 [ 1336.318783][T17627] fuse: Bad value for 'fd' [ 1336.452778][T12088] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1336.493741][T12088] usb 1-1: device descriptor read/8, error -71 [ 1336.526241][ T28] audit: type=1326 audit(2000000042.300:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17620 comm="syz.2.3232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x0 [ 1336.782744][T12088] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1336.811476][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1338.978168][T12088] usb 1-1: device descriptor read/8, error -71 [ 1339.113714][T12088] usb usb1-port1: unable to enumerate USB device [ 1339.452811][ T5777] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1339.510900][T17653] 9pnet_virtio: no channels available for device syz [ 1339.686467][ T5777] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.686489][ T5777] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1339.696505][ T5777] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1339.719275][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.719301][ T5777] usb 5-1: Product: syz [ 1339.719323][ T5777] usb 5-1: Manufacturer: syz [ 1339.719339][ T5777] usb 5-1: SerialNumber: syz [ 1340.097060][ T5777] usb 5-1: skipping empty audio interface (v1) [ 1340.129050][ T5777] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1340.131544][ T5777] usb 5-1: USB disconnect, device number 11 [ 1340.212867][T14382] udevd[14382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.075582][ T28] audit: type=1326 audit(2000000046.850:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17657 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1341.126562][ T28] audit: type=1326 audit(2000000046.850:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17657 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1341.185723][ T28] audit: type=1326 audit(2000000046.850:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17657 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1341.248935][ T28] audit: type=1326 audit(2000000046.850:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17657 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1341.291872][ T28] audit: type=1326 audit(2000000046.850:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17657 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1341.436941][ T28] audit: type=1326 audit(2000000046.850:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17657 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1341.758584][T17671] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.3242'. [ 1344.652325][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 1348.051591][T17683] lo speed is unknown, defaulting to 1000 [ 1348.175791][T17692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3249'. [ 1348.202852][T16940] IPVS: starting estimator thread 0... [ 1348.305764][T17693] IPVS: using max 17 ests per chain, 40800 per kthread [ 1348.537316][ T28] audit: type=1326 audit(2000000054.310:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.1.3247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x0 [ 1349.272740][ T28] audit: type=1800 audit(2000000055.010:1113): pid=17699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3250" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1349.611704][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'. [ 1354.739536][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1357.136097][T17746] lo speed is unknown, defaulting to 1000 [ 1358.333450][T17761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3269'. [ 1358.491137][ T28] audit: type=1326 audit(2000000064.260:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.2.3270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4d98eec9 code=0x0 [ 1358.809098][T17777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3275'. [ 1358.831180][T17777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3275'. [ 1359.760233][T17790] lo speed is unknown, defaulting to 1000 [ 1359.897097][ T28] audit: type=1326 audit(2000000065.670:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17782 comm="syz.4.3277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3cb18eec9 code=0x0 [ 1359.924710][T17793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1359.947777][T12088] IPVS: starting estimator thread 0... [ 1360.053627][T17794] IPVS: using max 26 ests per chain, 62400 per kthread [ 1360.789226][T17808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1360.801290][T17808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1361.644084][T17818] wireguard: wg1: Could not create IPv4 socket [ 1361.866703][T17821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3289'. [ 1361.942988][T16940] IPVS: starting estimator thread 0... [ 1362.025941][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.032345][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.062790][T17824] IPVS: using max 17 ests per chain, 40800 per kthread [ 1363.146268][T17840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3296'. [ 1363.157323][T17840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3296'. [ 1363.309100][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'. [ 1365.611190][T17856] wireguard: wg1: Could not create IPv4 socket [ 1366.075585][T17863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1366.773794][T17872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1366.962047][T17872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3306'. [ 1367.204627][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1371.034143][T17906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1371.045422][T17906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1371.299711][T17911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3318'. [ 1371.412924][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 1372.542933][T16942] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1372.731881][T16942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.742523][T16942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1372.762372][T16942] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1372.775822][T16942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.784522][T16942] usb 3-1: Product: syz [ 1372.788917][T16942] usb 3-1: Manufacturer: syz [ 1372.794233][T16942] usb 3-1: SerialNumber: syz [ 1373.052888][T16942] usb 3-1: skipping empty audio interface (v1) [ 1373.088686][T16942] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1373.108497][T16942] usb 3-1: USB disconnect, device number 19 [ 1373.139959][T17931] udevd[17931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1373.296402][T17932] wireguard: wg1: Could not create IPv4 socket [ 1373.432798][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 1375.572878][T16942] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1375.596629][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 1375.791246][T16942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.801755][T16942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1375.815055][T16942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1375.824532][T16942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.834308][T16942] usb 1-1: Product: syz [ 1375.838797][T16942] usb 1-1: Manufacturer: syz [ 1375.843682][T16942] usb 1-1: SerialNumber: syz [ 1376.083397][T16942] usb 1-1: skipping empty audio interface (v1) [ 1376.111659][T16942] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1376.125520][T16942] usb 1-1: USB disconnect, device number 20 [ 1376.147939][T17931] udevd[17931]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1378.086334][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 1379.367863][T18016] wireguard: wg1: Could not create IPv4 socket [ 1380.424948][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1380.562837][ T5777] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1380.732781][T16942] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1380.754734][ T5777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.765103][ T5777] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1380.777279][ T5777] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1380.786808][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.796144][ T5777] usb 3-1: Product: syz [ 1380.800483][ T5777] usb 3-1: Manufacturer: syz [ 1380.807050][ T5777] usb 3-1: SerialNumber: syz [ 1380.913794][T16942] usb 1-1: Using ep0 maxpacket: 8 [ 1380.923944][T16942] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1380.932426][T16942] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1380.943083][T16942] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1380.953258][T16942] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1380.963687][T16942] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.977075][T16942] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1380.986546][T16942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.048207][ T5777] usb 3-1: skipping empty audio interface (v1) [ 1381.096668][ T5777] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1381.108362][ T5777] usb 3-1: USB disconnect, device number 20 [ 1381.145184][T17931] udevd[17931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1381.203705][T18039] netlink: 'syz.0.3362': attribute type 3 has an invalid length. [ 1381.211824][T18039] netlink: 'syz.0.3362': attribute type 3 has an invalid length. [ 1381.223210][T16942] usb 1-1: usb_control_msg returned -32 [ 1381.228947][T16942] usbtmc 1-1:16.0: can't read capabilities [ 1383.644258][ T5777] usb 1-1: USB disconnect, device number 21 [ 1385.336746][T18072] syzkaller0: entered promiscuous mode [ 1385.342443][T18072] syzkaller0: entered allmulticast mode [ 1387.506795][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 1388.922955][T12088] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1389.263671][T12088] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.636713][T12088] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.826945][T12088] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1389.836610][T12088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.844925][T12088] usb 1-1: Product: syz [ 1389.849388][T12088] usb 1-1: Manufacturer: syz [ 1389.854112][T12088] usb 1-1: SerialNumber: syz [ 1390.126895][T12088] usb 1-1: skipping empty audio interface (v1) [ 1390.226573][T12088] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1390.236449][T12088] usb 1-1: USB disconnect, device number 22 [ 1390.293370][T17931] udevd[17931]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.426504][T18107] input: syz0 as /devices/virtual/input/input12 [ 1394.685026][T18120] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3387'. [ 1394.722967][T18120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3387'. [ 1397.839809][T18168] netlink: 'syz.0.3401': attribute type 4 has an invalid length. [ 1397.851804][T18168] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3401'. [ 1399.377307][ T28] audit: type=1800 audit(2000000105.150:1116): pid=18186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3405" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1399.700699][T18211] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3411'. [ 1401.233140][T18240] siw: device registration error -23 [ 1401.447192][T18247] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1402.415957][T18253] syz.4.3422: attempt to access beyond end of device [ 1402.415957][T18253] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1402.431154][T18253] syz.4.3422: attempt to access beyond end of device [ 1402.431154][T18253] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1402.445979][T18253] Mount JFS Failure: -5 [ 1403.070021][T18263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3424'. [ 1404.167425][T18270] ip6erspan0: entered allmulticast mode [ 1405.636376][ T28] audit: type=1400 audit(2000000003.460:1117): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=18283 comm="syz.0.3431" [ 1407.001213][T18296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1408.289802][ T28] audit: type=1400 audit(2000000006.110:1118): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=18316 comm="syz.2.3446" [ 1408.970075][T18330] binder: 18325:18330 ioctl 81e8943c 200000000880 returned -22 [ 1409.138593][T18334] (null): rxe_set_mtu: Set mtu to 4096 [ 1409.145153][T18334] rdma_rxe: rxe_newlink: failed to add lo [ 1410.351980][T18349] wireguard: wg1: Could not create IPv4 socket [ 1411.617503][T18366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3458'. [ 1411.634646][T18366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3458'. [ 1412.790477][T18378] wireguard: wg1: Could not create IPv4 socket [ 1415.808719][T18408] syzkaller0: entered promiscuous mode [ 1415.816372][T18408] syzkaller0: entered allmulticast mode [ 1415.836688][T18410] wireguard: wg1: Could not create IPv4 socket [ 1418.743680][ T28] audit: type=1400 audit(2000000016.570:1119): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=18425 comm="syz.2.3480" [ 1422.306633][T18440] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3485'. [ 1422.431786][T18445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1422.614553][T18445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1422.716718][T18452] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1423.741103][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.753892][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.051630][T18468] netlink: 'syz.2.3492': attribute type 1 has an invalid length. [ 1425.435152][T18468] bond2: entered promiscuous mode [ 1425.440834][T18468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1425.497425][T18470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1425.511732][T18470] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1425.528240][T18470] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1425.547902][T18470] bond2: (slave ip6gre1): making interface the new active one [ 1425.558883][T18470] ip6gre1: entered promiscuous mode [ 1425.599772][T18470] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 1429.606664][T18522] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 1430.362436][T18522] bond1: entered promiscuous mode [ 1430.368935][T18522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1430.685154][T18524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1430.721766][T18524] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1430.869039][T18528] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1430.898891][T18524] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1430.922116][T18524] bond1: (slave ip6gre1): making interface the new active one [ 1430.930123][T18524] ip6gre1: entered promiscuous mode [ 1430.940138][T18524] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1431.350117][ T28] audit: type=1400 audit(2000000029.170:1120): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=18540 comm="syz.0.3510" [ 1431.739619][T18544] wireguard: wg1: Could not create IPv4 socket [ 1437.579531][T18587] 9pnet_virtio: no channels available for device syz [ 1437.741403][T18590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1437.874257][T18594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3526'. [ 1438.042099][T18597] 8021q: VLANs not supported on lo [ 1438.247352][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1438.256725][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1438.549165][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1441.116022][T18613] overlayfs: failed to clone lowerpath [ 1441.213989][T18614] (null): rxe_set_mtu: Set mtu to 1024 [ 1441.225895][T18614] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1443.805302][T18632] lo speed is unknown, defaulting to 1000 [ 1444.340206][T18631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1444.638021][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3537'. [ 1444.654017][T18640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3537'. [ 1445.510776][T18636] lo speed is unknown, defaulting to 1000 [ 1445.602107][T18636] lo speed is unknown, defaulting to 1000 [ 1445.635823][T18636] lo speed is unknown, defaulting to 1000 [ 1445.759382][T18636] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1445.898287][T18649] syzkaller0: entered promiscuous mode [ 1445.912022][T18649] syzkaller0: entered allmulticast mode [ 1446.168251][T18636] lo speed is unknown, defaulting to 1000 [ 1446.338269][T18636] lo speed is unknown, defaulting to 1000 [ 1446.591814][T18636] lo speed is unknown, defaulting to 1000 [ 1446.755811][T18636] lo speed is unknown, defaulting to 1000 [ 1446.834529][T18636] lo speed is unknown, defaulting to 1000 [ 1446.871643][T18636] lo speed is unknown, defaulting to 1000 [ 1446.903892][T18636] lo speed is unknown, defaulting to 1000 [ 1446.916772][T18636] lo speed is unknown, defaulting to 1000 [ 1446.955264][T18636] lo speed is unknown, defaulting to 1000 [ 1446.976645][T18636] lo speed is unknown, defaulting to 1000 [ 1450.798674][T18696] Context (ID=0x1) not attached to queue pair (handle=0x1:0x81) [ 1450.915982][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1451.027494][T18690] netlink: 'syz.1.3548': attribute type 21 has an invalid length. [ 1451.044317][T18690] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1451.550815][T18693] delete_channel: no stack [ 1455.574073][T16944] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1455.762853][T16944] usb 3-1: Using ep0 maxpacket: 8 [ 1455.884448][T16944] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1455.896440][T16944] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1455.906594][T16944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1455.920468][T16944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1455.930699][T16944] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1455.944176][T16944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1455.974333][T16944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.840773][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1456.857035][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1456.930314][T18738] netlink: 'syz.2.3566': attribute type 3 has an invalid length. [ 1456.938715][T18738] netlink: 'syz.2.3566': attribute type 3 has an invalid length. [ 1456.958368][T16944] usb 3-1: usb_control_msg returned -32 [ 1456.976195][T16944] usbtmc 3-1:16.0: can't read capabilities [ 1456.982939][T18760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1457.083042][T16940] IPVS: starting estimator thread 0... [ 1457.183184][T18763] IPVS: using max 16 ests per chain, 38400 per kthread [ 1458.085529][T12088] usb 3-1: USB disconnect, device number 21 [ 1459.748745][T18792] 9pnet_virtio: no channels available for device syz [ 1459.939975][T18797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1459.971393][T18797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3584'. [ 1461.250530][T18805] syzkaller0: entered promiscuous mode [ 1461.266741][T18805] syzkaller0: entered allmulticast mode [ 1462.628134][T18812] lo speed is unknown, defaulting to 1000 [ 1462.635089][T18812] lo speed is unknown, defaulting to 1000 [ 1463.667331][ T5777] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1463.873508][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 1463.886907][ T5777] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1463.898103][ T5777] usb 3-1: config 0 has no interface number 0 [ 1463.910995][ T5777] usb 3-1: config 0 interface 110 has no altsetting 0 [ 1463.927933][ T5777] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1463.942742][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.962825][ T5777] usb 3-1: Product: syz [ 1463.973446][ T5777] usb 3-1: Manufacturer: syz [ 1463.982657][ T5777] usb 3-1: SerialNumber: syz [ 1463.995737][ T5777] usb 3-1: config 0 descriptor?? [ 1464.415420][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1464.435044][T18821] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1464.476435][T16944] usb 3-1: USB disconnect, device number 22 [ 1468.407831][ T28] audit: type=1400 audit(2000000066.010:1121): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=18846 comm="syz.2.3598" [ 1468.785108][T18858] 9pnet_virtio: no channels available for device syz [ 1469.060449][T18867] netlink: 'syz.1.3603': attribute type 3 has an invalid length. [ 1469.080963][T18867] netlink: 'syz.1.3603': attribute type 3 has an invalid length. [ 1469.240821][T18856] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1469.876423][T18871] netlink: 'syz.1.3605': attribute type 3 has an invalid length. [ 1469.884871][T18871] netlink: 'syz.1.3605': attribute type 3 has an invalid length. [ 1470.932652][T12088] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1471.147639][T12088] usb 1-1: Using ep0 maxpacket: 8 [ 1473.150035][ T28] audit: type=1400 audit(2000000068.870:1122): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=18885 comm="syz.4.3609" [ 1473.430500][T12088] usb 1-1: device descriptor read/all, error -71 [ 1473.604297][T18896] 9pnet_virtio: no channels available for device syz [ 1474.436845][T18901] netlink: 'syz.1.3614': attribute type 3 has an invalid length. [ 1474.444959][T18901] netlink: 'syz.1.3614': attribute type 3 has an invalid length. [ 1474.962862][T18909] netlink: 368 bytes leftover after parsing attributes in process `syz.2.3616'. [ 1475.153039][T18899] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1475.419443][T18915] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.3617'. [ 1476.159577][ T28] audit: type=1400 audit(2000000073.960:1123): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=18919 comm="syz.4.3620" [ 1479.073370][T18959] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.3629'. [ 1480.912658][T16940] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1481.092894][T12088] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1481.112632][T16940] usb 5-1: Using ep0 maxpacket: 8 [ 1481.135384][T16940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1481.152854][T16940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1481.182161][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1481.229998][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1481.262595][T16940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1481.292733][T12088] usb 1-1: Using ep0 maxpacket: 8 [ 1481.302644][T16940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1481.303002][T12088] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1481.311821][T16940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.349861][T12088] usb 1-1: config 0 has no interface number 0 [ 1481.363814][T12088] usb 1-1: config 0 interface 110 has no altsetting 0 [ 1481.382960][T12088] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1481.418134][T12088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.427011][T12088] usb 1-1: Product: syz [ 1481.431387][T12088] usb 1-1: Manufacturer: syz [ 1481.441829][T12088] usb 1-1: SerialNumber: syz [ 1481.465206][T12088] usb 1-1: config 0 descriptor?? [ 1481.562354][T18970] netlink: 'syz.4.3635': attribute type 3 has an invalid length. [ 1481.570704][T18970] netlink: 'syz.4.3635': attribute type 3 has an invalid length. [ 1481.592958][T16940] usb 5-1: usb_control_msg returned -32 [ 1481.598620][T16940] usbtmc 5-1:16.0: can't read capabilities [ 1481.821632][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1482.111826][T18978] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1482.679049][T12088] usb 1-1: USB disconnect, device number 25 [ 1483.732050][T19000] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.3641'. [ 1484.361316][T16940] usb 5-1: USB disconnect, device number 12 [ 1484.896718][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.903436][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.702747][T16944] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1486.865209][ T28] audit: type=1326 audit(2000000084.690:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1486.887941][T16944] usb 3-1: Using ep0 maxpacket: 8 [ 1486.901438][T16944] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1486.942021][T16944] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1486.942721][ T28] audit: type=1326 audit(2000000084.690:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1486.959795][T16944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1486.992651][T16944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1487.026409][T16944] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1487.060584][T16944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1487.090748][ T28] audit: type=1326 audit(2000000084.720:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1487.101378][T16944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.113217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.193276][ T28] audit: type=1326 audit(2000000084.720:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1487.262237][ T28] audit: type=1326 audit(2000000084.720:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1487.562312][T19026] netlink: 'syz.2.3652': attribute type 3 has an invalid length. [ 1487.570390][T19026] netlink: 'syz.2.3652': attribute type 3 has an invalid length. [ 1490.089452][ T28] audit: type=1326 audit(2000000084.720:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1490.112808][ T28] audit: type=1326 audit(2000000084.740:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1490.135486][ T28] audit: type=1326 audit(2000000084.740:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1490.158342][ T28] audit: type=1326 audit(2000000084.740:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1490.182212][ T28] audit: type=1326 audit(2000000084.740:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f0d8eec9 code=0x7ffc0000 [ 1490.228984][T16944] usb 3-1: usb_control_msg returned -71 [ 1490.234716][T16944] usbtmc 3-1:16.0: can't read capabilities [ 1490.255649][T16944] usb 3-1: USB disconnect, device number 23 [ 1493.020391][T19083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1493.377388][T19096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1498.801607][T19121] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3682'. [ 1499.013064][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1501.932782][T19147] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1503.955430][T19155] lo speed is unknown, defaulting to 1000 [ 1503.962252][T19155] lo speed is unknown, defaulting to 1000 [ 1504.108698][T19153] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1505.425600][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'. [ 1506.637998][T19175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1509.614081][T19206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3706'. [ 1509.705811][T19206] team0: Mode changed to "random" [ 1509.745861][T19209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1509.779692][T19206] vlan0: entered promiscuous mode [ 1509.819096][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1509.819112][ T28] audit: type=1400 audit(2000000107.640:1137): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=19212 comm="syz.4.3709" [ 1510.651370][T19206] team0: Port device vlan0 added [ 1510.691540][T19210] tipc: Started in network mode [ 1510.705248][T19210] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1510.762661][T19210] tipc: Enabled bearer , priority 0 [ 1511.292652][T16940] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1512.752703][T16940] usb 5-1: Using ep0 maxpacket: 8 [ 1513.679264][T12088] tipc: Node number set to 11578026 [ 1513.724999][T16940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1513.744418][T16940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1513.765186][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1513.787123][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1513.799201][T16940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1513.819596][T16940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1513.829684][T16940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.178609][T16940] usb 5-1: usb_control_msg returned -71 [ 1514.221195][T16940] usbtmc 5-1:16.0: can't read capabilities [ 1514.264396][T16940] usb 5-1: USB disconnect, device number 13 [ 1515.611248][T19243] netlink: 'syz.1.3717': attribute type 1 has an invalid length. [ 1515.891846][T19243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1516.035171][ T28] audit: type=1400 audit(2000000113.860:1138): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=19250 comm="syz.4.3720" [ 1518.619167][T19243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1518.634975][T19243] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1518.693486][T19243] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1518.822700][T16940] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1518.973455][T19270] netlink: 'syz.1.3724': attribute type 3 has an invalid length. [ 1518.981430][T19270] netlink: 'syz.1.3724': attribute type 3 has an invalid length. [ 1519.022794][T16940] usb 5-1: Using ep0 maxpacket: 8 [ 1519.031188][T16940] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1519.039621][T16940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1519.049734][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1519.059569][T16940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1519.069781][T16940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1519.084870][T16940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1519.094090][T16940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.462200][T19261] netlink: 'syz.4.3722': attribute type 3 has an invalid length. [ 1519.471055][T19261] netlink: 'syz.4.3722': attribute type 3 has an invalid length. [ 1519.814659][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1519.869285][T19287] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1521.588435][T16944] usb 5-1: USB disconnect, device number 14 [ 1521.752819][T16940] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1521.928924][T19311] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1521.942945][T16940] usb 1-1: Using ep0 maxpacket: 8 [ 1521.958774][T16940] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1521.983078][T16940] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1522.001149][T16940] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1522.031522][T16940] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1522.042769][T16940] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.057149][T16940] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1522.066831][T16940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.305898][T19305] netlink: 'syz.0.3735': attribute type 3 has an invalid length. [ 1522.314197][T19305] netlink: 'syz.0.3735': attribute type 3 has an invalid length. [ 1522.335833][T16940] usb 1-1: usb_control_msg returned -32 [ 1522.351246][T16940] usbtmc 1-1:16.0: can't read capabilities [ 1523.913033][T19332] (null): rxe_set_mtu: Set mtu to 1024 [ 1523.918783][T19332] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1527.279121][ T28] audit: type=1400 audit(2000000122.990:1139): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=19329 comm="syz.4.3741" [ 1527.557065][ T5777] usb 1-1: USB disconnect, device number 26 [ 1529.000599][T16944] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1529.182643][T16944] usb 5-1: Using ep0 maxpacket: 8 [ 1529.197368][T16944] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1529.221993][T16944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1529.252817][T16944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1529.263072][T16944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1529.273412][T16944] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1529.286983][T16944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1529.303423][T16944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.535875][T19351] netlink: 'syz.4.3746': attribute type 3 has an invalid length. [ 1529.544069][T19351] netlink: 'syz.4.3746': attribute type 3 has an invalid length. [ 1530.113095][T16944] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1532.190420][ T28] audit: type=1400 audit(2000000128.020:1140): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=19376 comm="syz.0.3754" [ 1532.272324][ T5777] usb 5-1: USB disconnect, device number 15 [ 1532.331311][T16944] usb 3-1: Using ep0 maxpacket: 8 [ 1532.339258][T16944] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1532.370105][T16944] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1532.402638][T16944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1532.422788][T16944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1532.582610][T16944] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1532.596228][T16944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1532.612586][T16944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.931992][T16944] usb 3-1: usb_control_msg returned -71 [ 1532.957411][T16944] usbtmc 3-1:16.0: can't read capabilities [ 1533.003462][T16944] usb 3-1: USB disconnect, device number 24 [ 1534.916835][ T28] audit: type=1326 audit(2000000132.740:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1534.969016][ T28] audit: type=1326 audit(2000000132.740:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.043793][ T28] audit: type=1326 audit(2000000132.740:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.142426][ T28] audit: type=1326 audit(2000000132.740:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.170878][ T28] audit: type=1326 audit(2000000132.740:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.193817][T16944] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1535.208250][ T28] audit: type=1326 audit(2000000132.740:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.235968][ T28] audit: type=1326 audit(2000000132.740:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.280866][ T28] audit: type=1326 audit(2000000132.740:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.335249][ T28] audit: type=1326 audit(2000000132.740:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.399205][ T28] audit: type=1326 audit(2000000132.740:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19402 comm="syz.1.3761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2198eec9 code=0x7fc00000 [ 1535.402983][T16944] usb 1-1: Using ep0 maxpacket: 8 [ 1537.782743][T16944] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1537.791152][T16944] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1537.829485][T16944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1537.860058][T16944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1537.885258][T16944] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1537.915303][T16944] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1537.924566][T16944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.958896][T16944] usb 1-1: can't set config #16, error -71 [ 1537.974677][T16944] usb 1-1: USB disconnect, device number 27 [ 1538.642770][T16944] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1538.922864][T16944] usb 1-1: Using ep0 maxpacket: 8 [ 1539.181943][T16944] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1539.199408][T16944] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1539.226483][T16944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1539.226645][T16944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1539.226815][T16944] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1539.227208][T16944] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1539.227375][T16944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.449097][T19424] netlink: 'syz.0.3766': attribute type 3 has an invalid length. [ 1539.450466][T19424] netlink: 'syz.0.3766': attribute type 3 has an invalid length. [ 1539.453084][T16944] usb 1-1: usb_control_msg returned -32 [ 1539.453117][T16944] usbtmc 1-1:16.0: can't read capabilities [ 1540.806392][T19454] netlink: 'syz.1.3775': attribute type 3 has an invalid length. [ 1540.814533][T19454] netlink: 'syz.1.3775': attribute type 3 has an invalid length. [ 1541.310009][T16944] usb 1-1: USB disconnect, device number 28 [ 1544.232803][T16944] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1544.413615][T16944] usb 5-1: Using ep0 maxpacket: 8 [ 1544.432305][T16944] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 1544.442740][T16944] usb 5-1: config 0 has no interface number 0 [ 1544.449089][T16944] usb 5-1: config 0 interface 110 has no altsetting 0 [ 1544.499665][T16944] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 1544.509346][T16944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.529481][T16944] usb 5-1: Product: syz [ 1544.544473][T16944] usb 5-1: Manufacturer: syz [ 1544.549148][T16944] usb 5-1: SerialNumber: syz [ 1544.575606][T16944] usb 5-1: config 0 descriptor?? [ 1544.850842][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1544.904177][T19483] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1544.987553][T11826] usb 5-1: USB disconnect, device number 16 [ 1545.402715][ T5777] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1545.594713][ T5777] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.602843][T11826] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1545.617633][ T5777] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.638352][ T5777] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1545.664138][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.672233][ T5777] usb 3-1: Product: syz [ 1545.692710][ T5777] usb 3-1: Manufacturer: syz [ 1545.700773][ T5777] usb 3-1: SerialNumber: syz [ 1545.818405][T11826] usb 1-1: Using ep0 maxpacket: 8 [ 1545.848460][T11826] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1545.878975][T11826] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1545.918781][T11826] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1545.933034][T11826] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1545.943423][T11826] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1545.956972][T11826] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1545.967235][T16944] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1545.975223][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.020963][ T5777] usb 3-1: skipping empty audio interface (v1) [ 1546.071818][ T5777] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1546.087740][ T5777] usb 3-1: USB disconnect, device number 25 [ 1546.133583][T19343] udevd[19343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1546.163170][T16944] usb 5-1: Using ep0 maxpacket: 8 [ 1546.175356][T16944] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1546.184549][T16944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1546.199455][T16944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1546.211346][T19495] netlink: 'syz.0.3786': attribute type 3 has an invalid length. [ 1546.221033][T19495] netlink: 'syz.0.3786': attribute type 3 has an invalid length. [ 1546.230311][T16944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1546.241085][T16944] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1546.255307][T16944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1546.265057][T16944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.274392][T11826] usb 1-1: usb_control_msg returned -32 [ 1546.280033][T11826] usbtmc 1-1:16.0: can't read capabilities [ 1546.336840][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.343593][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.503919][T19501] netlink: 'syz.4.3788': attribute type 3 has an invalid length. [ 1546.512044][T19501] netlink: 'syz.4.3788': attribute type 3 has an invalid length. [ 1546.523470][T16944] usb 5-1: usb_control_msg returned -32 [ 1546.529133][T16944] usbtmc 5-1:16.0: can't read capabilities [ 1548.280503][ T5777] usb 1-1: USB disconnect, device number 29 [ 1548.734560][T16944] usb 5-1: USB disconnect, device number 17 [ 1550.252722][ T5777] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1550.465639][ T5777] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.500268][ T5777] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1550.562919][ T5777] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1550.591042][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.612118][ T5777] usb 5-1: Product: syz [ 1550.617307][ T5777] usb 5-1: Manufacturer: syz [ 1550.642821][ T5777] usb 5-1: SerialNumber: syz [ 1550.923429][ T5777] usb 5-1: skipping empty audio interface (v1) [ 1550.992078][ T5777] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1551.025097][ T5777] usb 5-1: USB disconnect, device number 18 [ 1551.076655][T19343] udevd[19343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1553.792786][T11826] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1553.972787][T11826] usb 5-1: Using ep0 maxpacket: 8 [ 1553.974715][T11826] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1553.974754][T11826] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1553.974770][T11826] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1553.974787][T11826] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1553.974804][T11826] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1553.974835][T11826] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1553.974852][T11826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.197536][T19554] netlink: 'syz.4.3802': attribute type 3 has an invalid length. [ 1554.197714][T19554] netlink: 'syz.4.3802': attribute type 3 has an invalid length. [ 1554.224747][T11826] usb 5-1: usb_control_msg returned -32 [ 1554.224794][T11826] usbtmc 5-1:16.0: can't read capabilities [ 1554.445808][T19564] netlink: 'syz.1.3806': attribute type 3 has an invalid length. [ 1554.445992][T19564] netlink: 'syz.1.3806': attribute type 3 has an invalid length. [ 1555.363603][T19573] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1555.980610][ T5777] usb 5-1: USB disconnect, device number 19 [ 1557.172692][ T5777] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1557.377609][ T5777] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.411685][ T5777] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1557.434663][ T5777] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1557.446927][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.475183][ T5777] usb 5-1: Product: syz [ 1557.489323][ T5777] usb 5-1: Manufacturer: syz [ 1557.505283][ T5777] usb 5-1: SerialNumber: syz [ 1557.579665][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1557.579712][ T28] audit: type=1400 audit(2000000155.400:1172): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=19592 comm="syz.0.3814" [ 1560.765162][ T5777] usb 5-1: skipping empty audio interface (v1) [ 1560.799852][ T5777] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1560.821419][ T5777] usb 5-1: USB disconnect, device number 20 [ 1560.876543][T19343] udevd[19343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1560.980039][T19600] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1563.217393][T19637] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3829'. [ 1720.412534][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 152s! [ 1720.422305][ C0] Showing busy workqueues and worker pools: [ 1720.428351][ C0] workqueue events: flags=0x0 [ 1720.433198][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=13/256 refcnt=14 [ 1720.433242][ C0] pending: psi_avgs_work, vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor, 6*ovs_dp_masks_rebalance, rt6_probe_deferred, 2*nsim_dev_hwstats_traffic_work [ 1720.433397][ C0] workqueue events_highpri: flags=0x10 [ 1720.462667][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 1720.462710][ C0] in-flight: 17030:snd_vmidi_output_work snd_vmidi_output_work [ 1720.462766][ C0] workqueue events_long: flags=0x0 [ 1720.483711][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=13/256 refcnt=14 [ 1720.483757][ C0] pending: 5*br_fdb_cleanup, 4*defense_work_handler, 4*br_fdb_cleanup [ 1720.483818][ C0] workqueue events_unbound: flags=0x2 [ 1720.505624][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=5 [ 1720.505664][ C0] pending: flush_memcg_stats_dwork, macvlan_process_broadcast, 2*idle_cull_fn [ 1720.505743][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=11/512 refcnt=12 [ 1720.505772][ C0] in-flight: 11073:macvlan_process_broadcast, 14404:toggle_allocation_gate [ 1720.505824][ C0] pending: crng_reseed, idle_cull_fn, 5*nsim_dev_trap_report_work, macvlan_process_broadcast, idle_cull_fn [ 1720.505920][ C0] workqueue events_freezable: flags=0x4 [ 1720.556131][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1720.556179][ C0] pending: update_balloon_stats_func [ 1720.556221][ C0] workqueue events_power_efficient: flags=0x80 [ 1720.575771][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1720.575812][ C0] in-flight: 11826:gc_worker [ 1720.575852][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 1720.575886][ C0] in-flight: 5777:wg_ratelimiter_gc_entries [ 1720.575917][ C0] pending: hash_ipmark4_gc, hash_ip4_gc, hash_ipmark4_gc, check_lifetime [ 1720.575995][ C0] workqueue rcu_gp: flags=0x8 [ 1720.616137][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1720.616185][ C0] pending: srcu_invoke_callbacks [ 1720.616222][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1720.634458][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1720.634501][ C0] pending: vmstat_update [ 1720.634546][ C0] workqueue writeback: flags=0x4a [ 1720.651969][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1720.652008][ C0] pending: wb_workfn [ 1720.652051][ C0] workqueue kblockd: flags=0x18 [ 1720.668468][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 1720.668509][ C0] pending: blk_mq_timeout_work [ 1720.668834][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1720.687268][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1720.687321][ C0] pending: work_fn [ 1720.687362][ C0] workqueue ipv6_addrconf: flags=0xe000a [ 1720.704820][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=13 [ 1720.704863][ C0] pending: addrconf_verify_work [ 1720.704902][ C0] inactive: 9*addrconf_verify_work [ 1720.704935][ C0] workqueue krxrpcd: flags=0xa001a [ 1720.727948][ C0] pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=13 [ 1720.727992][ C0] pending: rxrpc_peer_keepalive_worker [ 1720.728020][ C0] inactive: 9*rxrpc_peer_keepalive_worker [ 1720.728053][ C0] workqueue bat_events: flags=0xe000a [ 1720.753361][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=33 [ 1720.753402][ C0] pending: batadv_nc_worker [ 1720.753443][ C0] inactive: 3*batadv_nc_worker, batadv_bla_periodic_work, 3*batadv_dat_purge, 2*batadv_bla_periodic_work, 5*batadv_mcast_mla_update, 5*batadv_purge_orig, batadv_nc_worker, 5*batadv_tt_purge, batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge [ 1720.753648][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1720.795401][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1720.795444][ C0] pending: 2*wg_packet_handshake_send_worker [ 1720.795501][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1720.814350][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1720.814392][ C0] pending: 2*wg_packet_handshake_send_worker [ 1720.814435][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1720.833163][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1720.833206][ C0] pending: wg_packet_handshake_send_worker [ 1720.833243][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1720.833274][ C0] pending: wg_packet_handshake_send_worker [ 1720.833310][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1720.865286][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1720.865333][ C0] pending: 2*wg_packet_handshake_send_worker [ 1720.865376][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1720.884053][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1720.884095][ C0] pending: 2*wg_packet_handshake_send_worker [ 1720.884136][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1720.902857][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1720.902902][ C0] pending: wg_packet_handshake_send_worker [ 1720.902942][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1720.902972][ C0] pending: wg_packet_handshake_send_worker [ 1720.903002][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1720.935200][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1720.935242][ C0] pending: 2*wg_packet_handshake_send_worker [ 1720.935288][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1720.953966][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1720.954009][ C0] pending: wg_packet_handshake_send_worker [ 1720.954047][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1720.954077][ C0] pending: wg_packet_handshake_send_worker [ 1720.954106][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1720.986050][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1720.986093][ C0] pending: 2*wg_packet_handshake_send_worker [ 1720.986136][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1721.004835][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.004877][ C0] pending: wg_packet_handshake_send_worker [ 1721.004915][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.004945][ C0] pending: wg_packet_handshake_send_worker [ 1721.004974][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1721.036892][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.036933][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.036986][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.037016][ C0] pending: wg_packet_handshake_send_worker [ 1721.037046][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1721.072215][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.072260][ C0] pending: wg_packet_handshake_send_worker [ 1721.072294][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.072325][ C0] pending: wg_packet_handshake_send_worker [ 1721.072358][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1721.104412][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.104457][ C0] pending: wg_packet_handshake_send_worker [ 1721.104753][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.104787][ C0] pending: wg_packet_handshake_send_worker [ 1721.104819][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1721.136782][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.136823][ C0] pending: 2*wg_packet_handshake_send_worker [ 1721.136866][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1721.155629][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.155672][ C0] pending: 2*wg_packet_handshake_send_worker [ 1721.155715][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1721.174387][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.174429][ C0] pending: wg_packet_handshake_send_worker [ 1721.174468][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.174498][ C0] pending: wg_packet_handshake_send_worker [ 1721.174528][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1721.206431][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.206470][ C0] pending: 2*wg_packet_handshake_send_worker [ 1721.206514][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1721.225184][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.225227][ C0] pending: wg_packet_handshake_send_worker [ 1721.225263][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.225294][ C0] pending: wg_packet_handshake_send_worker [ 1721.225325][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1721.257243][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.257288][ C0] pending: wg_queued_expired_zero_key_material [ 1721.257323][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=4 [ 1721.257353][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.257401][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1721.293166][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.293211][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.293264][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.293294][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.293341][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1721.331990][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.332036][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.332091][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=3 [ 1721.332121][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.332168][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1721.370558][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.370606][ C0] pending: wg_queued_expired_zero_key_material [ 1721.370641][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=4 [ 1721.370671][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.370721][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1721.406451][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.406498][ C0] pending: wg_queued_expired_zero_key_material [ 1721.406540][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=4 [ 1721.406571][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.406620][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1721.442271][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=4 [ 1721.442315][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1721.442372][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 1721.442407][ C0] pending: wg_queued_expired_zero_key_material [ 1721.472989][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=59s workers=5 idle: 12088 8 5878 16925 [ 1721.473060][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=4 idle: 16944 16940 16942 [ 1721.473113][ C0] pool 3: cpus=1 node=0 flags=0x0 nice=-20 hung=0s workers=4 idle: 24 17216 14108 [ 1721.473166][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=59s workers=10 idle: 11087 58 14405 8902 14402 1086 8899 1066 [ 1721.473247][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 1727.452633][ T29] INFO: task syz.4.3831:19640 blocked for more than 143 seconds. [ 1727.460414][ T29] Not tainted syzkaller #0