last executing test programs: 3m43.872516434s ago: executing program 4 (id=4503): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 3m43.601359874s ago: executing program 4 (id=4505): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10}, 0x94) 3m43.303228362s ago: executing program 4 (id=4506): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004810) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0083a60000000000000000070000000d"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m42.977654026s ago: executing program 4 (id=4511): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000b40)=""/4085, 0xff5}, {&(0x7f0000001b40)=""/4122, 0x101a}, {&(0x7f0000002b80)=""/225, 0xe1}, {&(0x7f0000002c80)=""/236, 0xec}], 0x4}, 0x2122) 3m41.873035265s ago: executing program 4 (id=4516): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b703000000000000850000009e000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3m41.514402157s ago: executing program 4 (id=4517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a4000000001050001000700"], 0x4c}}, 0x800) 3m26.829207635s ago: executing program 1 (id=4541): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r1, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3m25.920524064s ago: executing program 32 (id=4517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000090601020000000000000000020008000900020073797a3000000042240007800c00018008000140e00000020c00028008000140ffffffff08000a4000000001050001000700"], 0x4c}}, 0x800) 3m24.912934299s ago: executing program 1 (id=4545): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffffff, 0x0, 0x18f042, 0x124) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000008c0), 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x1ff) 3m21.958002269s ago: executing program 1 (id=4552): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004000000080000001200000000280200", @ANYBLOB="00000000000000040000", @ANYBLOB='\x00\x00'], 0x50) r3 = io_uring_setup(0x29e6, &(0x7f0000000680)={0x0, 0x18e4, 0x1000, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000039c0)='gfs2meta\x00', 0x1) getresgid(&(0x7f0000003a80), &(0x7f0000003ac0), &(0x7f0000003b00)) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000003bc0), 0xc0001, 0x0) 3m19.320546304s ago: executing program 0 (id=4556): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x20000) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000040)) 3m17.591265161s ago: executing program 0 (id=4557): r0 = io_uring_setup(0x5d38, &(0x7f00000000c0)={0x0, 0xcf32, 0x2, 0x3, 0x109}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000001c0)=0xfffe, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000240)=0x55b6, 0x4) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) close_range(r0, r0, 0x0) 3m15.500978156s ago: executing program 0 (id=4559): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x40040) 3m14.220872742s ago: executing program 0 (id=4560): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a000000010000000400"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000a40)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 3m11.513544534s ago: executing program 1 (id=4565): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={0x2, 0x8, 0xd8c, 0x4}, &(0x7f0000000280)=0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000300)={0xe, {0x9, 0x0, 0x8b, 0x41, "113ae3640ec7b6257cce72361734b929c5a9bc338c71baa7383fe19473bceff96750905d7863cccbcbdd3cfc897e0dd7121c9fe17705907ae428f2436d9d7edf95"}}, 0x4d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m11.38652819s ago: executing program 0 (id=4566): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x12b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) 3m7.890219597s ago: executing program 0 (id=4567): socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 3m0.804010236s ago: executing program 1 (id=4573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 2m58.286378901s ago: executing program 1 (id=4577): sigaltstack(0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x104, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x104}}, 0x0) 2m52.518687762s ago: executing program 33 (id=4567): socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 2m43.15064661s ago: executing program 34 (id=4577): sigaltstack(0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x104, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x0, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xcf1713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x104}}, 0x0) 20.863115088s ago: executing program 3 (id=4705): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 16.90696364s ago: executing program 2 (id=4708): fsopen(&(0x7f0000000340)='ubifs\x00', 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x64, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {0xffff, 0xfff1}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x11e}}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x21}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x850) fcntl$setstatus(r0, 0x4, 0x2200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14f000001e0001030279f320000000000500000028bb232622e9dcabea420cd3d52dfc9fff83991a6f6698749c0adb5a21b0dfbf5083f0bd2ca34c0cdc0e9090ced41a44826f"], 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500"], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000004b40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004b00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000540)={0x1, &(0x7f00000004c0)=[{}]}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x40000000}, 0x0, 0xf4240, 0x0) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x47}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc040000000000000000000000000000ff020000000000000000000000000001242088a800000003000008000000000000000000080022eb"], 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 14.861179514s ago: executing program 3 (id=4709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000e0000002000000000000000000000000000107144e230005020000003a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000093010080000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff00000000fcffffffff0f00002abd700000000000020001005700000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x4008c81}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in=@loopback, 0x3, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee01}, {0x0, 0x2, 0x6, 0x8000002, 0xfffffffffffffffd, 0x0, 0x400000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffd}, 0x3, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0x80000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 13.179862286s ago: executing program 2 (id=4710): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000020c0)={0x84, &(0x7f0000001c00)={0x20, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.659169964s ago: executing program 3 (id=4711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) 11.55396286s ago: executing program 3 (id=4712): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x2107, 0x0, &(0x7f00000004c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 11.552173689s ago: executing program 5 (id=4713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x8, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r1, r0}, 0xc) 11.335212676s ago: executing program 5 (id=4714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000000080008400000000108000640000001010900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) 9.998033812s ago: executing program 3 (id=4715): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000013c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000001400), 0x2, 0x141102) writev(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0xb43}], 0x1, 0x2100, 0x0) 8.265124271s ago: executing program 2 (id=4716): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a000000010000000400000006"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000480), &(0x7f00000004c0)='%-010d \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xd, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000a40)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 8.259731788s ago: executing program 5 (id=4717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000200081dc000000000300000b0200000000000003004c00000800"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 7.408198778s ago: executing program 2 (id=4718): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.060248524s ago: executing program 5 (id=4719): fsopen(&(0x7f0000000340)='ubifs\x00', 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x64, 0x28, 0x2, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {0xffff, 0xfff1}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x11e}}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x21}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x850) fcntl$setstatus(r0, 0x4, 0x2200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14f000001e0001030279f320000000000500000028bb232622e9dcabea420cd3d52dfc9fff83991a6f6698749c0adb5a21b0dfbf5083f0bd2ca34c0cdc0e9090ced41a44826f"], 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500"], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000004b40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004b00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000540)={0x1, &(0x7f00000004c0)=[{}]}) listns(&(0x7f0000000040)={0x20, 0x0, 0x5, 0x40000000}, 0x0, 0xf4240, 0x0) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x47}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc040000000000000000000000000000ff020000000000000000000000000001242088a800000003000008000000000000000000080022eb"], 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 5.933677531s ago: executing program 5 (id=4720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000e0000002000000000000000000000000000107144e230005020000003a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000093010080000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff00000000fcffffffff0f00002abd700000000000020001005700000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x4008c81}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in=@loopback, 0x3, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee01}, {0x0, 0x2, 0x6, 0x8000002, 0xfffffffffffffffd, 0x0, 0x400000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffd}, 0x3, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0x80000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2.522602637s ago: executing program 2 (id=4721): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2, r0}, 0xc) 2.522142652s ago: executing program 3 (id=4722): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r2, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f0000000700)={0x0, 0xda80, 0x40, 0x1, 0x0, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) clock_settime(0x0, &(0x7f00000009c0)={0x77359400}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f00000007c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000900)='1', 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)='\x00', 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e1e, 0xbe7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000c0}, 0x1c) 1.342208594s ago: executing program 5 (id=4723): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getresuid(&(0x7f0000000380), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000ffff263d7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100180a04001c00128009000100766c616e000000000c0002800600010004000000080005", @ANYRES32=r2, @ANYBLOB="0500110001e90000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 0s ago: executing program 2 (id=4724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000001340)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c00"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001380), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000013c0)={{0x7, 0x3, 0xe, 0x10, '\x00', 0x8001}, 0x1, [0x6, 0x9, 0xf, 0xffffffffffff2d8c, 0x6, 0x5, 0x7, 0x3, 0x56ef, 0x6, 0x100, 0x7fffffffffffffff, 0x0, 0x1, 0xb03, 0x0, 0xffff, 0xffffffffffffffff, 0x5, 0x4, 0x6, 0xfffffffffffffff7, 0x81, 0xea6b, 0xffffffffffffffc3, 0x6, 0x200006, 0x7e, 0x7, 0xfffffffffffffffb, 0x9, 0x6, 0x40, 0x6, 0x7, 0x5, 0x800, 0x3, 0x7, 0x8, 0xcb9, 0x800, 0x3, 0x9, 0x10001, 0x4, 0x0, 0x1, 0x6, 0x9, 0x3, 0x2, 0x1, 0x4, 0x2, 0x1, 0xaabe, 0xc199, 0xfffffffffffffff7, 0x6, 0x10000, 0x8, 0x101, 0xc, 0x80, 0xd09, 0x5e, 0x8489, 0xffffffffffffffff, 0x0, 0xe, 0x6, 0xfff, 0xed5, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0xea, 0x4000000000d, 0x1ff, 0x8, 0x1000, 0xffffffffffffffff, 0x9, 0x5, 0x7, 0x3, 0x2, 0x0, 0x9, 0x6e5, 0x1, 0x81, 0xffffffffffffffff, 0x0, 0xb, 0x8, 0x4, 0x6, 0x2, 0x800000, 0xf6, 0x6, 0x6, 0x3, 0xe, 0x100000001, 0x6, 0xce32, 0xfffffffffffffff9, 0x0, 0x4, 0x2, 0x1, 0x1261, 0x9, 0xfffffffffffffff8, 0xd75, 0xffffffff, 0x5, 0x667c9b49, 0xea6, 0x1, 0x4df21eb6, 0x1, 0x6]}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_secret(0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x20, &(0x7f0000001280)={&(0x7f0000000200)=""/4096, 0x1000, 0x0, &(0x7f0000001200)=""/67, 0x43}}, 0x10) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x8000) kernel console output (not intermixed with test programs): Number=0 [ 593.185857][ T5766] usb 1-1: Product: syz [ 593.185875][ T5766] usb 1-1: Manufacturer: syz [ 593.197526][ T5766] cdc_wdm 1-1:1.0: skipping garbage [ 593.197544][ T5766] cdc_wdm 1-1:1.0: skipping garbage [ 593.199947][ T5766] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 593.199967][ T5766] cdc_wdm 1-1:1.0: Unknown control protocol [ 593.236848][ T5615] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.238040][ T5615] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.238074][ T5615] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 593.238117][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.248052][T17742] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 593.255079][ T5615] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.401945][ T5763] usb 1-1: USB disconnect, device number 54 [ 593.459343][T14697] usb 5-1: USB disconnect, device number 53 [ 593.713317][T17750] syzkaller0: entered promiscuous mode [ 593.713342][T17750] syzkaller0: entered allmulticast mode [ 593.901940][ T5763] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 594.000266][T17760] ip_tables: iptables: counters copy to user failed while replacing table [ 594.053163][ T5763] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 594.054468][ T5763] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 594.054496][ T5763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.054519][ T5763] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 594.054567][ T5763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.056545][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 594.056600][ T5763] usb 1-1: Product: syz [ 594.056619][ T5763] usb 1-1: Manufacturer: syz [ 594.139860][ T5763] cdc_wdm 1-1:1.0: skipping garbage [ 594.139881][ T5763] cdc_wdm 1-1:1.0: skipping garbage [ 594.158900][ T5763] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 594.158920][ T5763] cdc_wdm 1-1:1.0: Unknown control protocol [ 594.255061][ T7548] ÿÿÿÿ: left allmulticast mode [ 594.255087][ T7548] ÿÿÿÿ: left promiscuous mode [ 594.255315][ T7548] bridge0: port 1(ÿÿÿÿ) entered disabled state [ 594.524116][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 4 bytes [ 594.529163][ T5766] usb 1-1: USB disconnect, device number 55 [ 594.555525][T17775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 594.618210][T17772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.016921][T17212] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 595.095928][ T7548] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 595.133867][ T7548] ip6gretap1 (unregistering): left allmulticast mode [ 595.162211][T17212] usb 2-1: Using ep0 maxpacket: 32 [ 595.165006][T17212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 595.165054][T17212] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 595.166243][T17212] usb 2-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 595.166269][T17212] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 595.184057][T17212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.184084][T17212] usb 2-1: Product: syz [ 595.184102][T17212] usb 2-1: Manufacturer: syz [ 595.184120][T17212] usb 2-1: SerialNumber: syz [ 595.473123][T17772] netlink: 'syz.1.4009': attribute type 3 has an invalid length. [ 595.473149][T17772] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4009'. [ 595.581798][T14697] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 595.602474][ T5766] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 595.687692][ T7548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.727317][ T7548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.744909][T14697] usb 1-1: Using ep0 maxpacket: 16 [ 595.746833][T14697] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 595.748028][T14697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.748062][T14697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.748089][T14697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 595.748135][T14697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.766919][ T5766] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.782426][ T7548] bond0 (unregistering): Released all slaves [ 595.783611][ T5766] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 595.783638][ T5766] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.783660][ T5766] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 595.783733][ T5766] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.795544][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.795571][ T5766] usb 5-1: Product: syz [ 595.795589][ T5766] usb 5-1: Manufacturer: syz [ 595.903652][T14697] usb 1-1: config 0 descriptor?? [ 595.930483][ T5766] cdc_wdm 5-1:1.0: skipping garbage [ 595.930502][ T5766] cdc_wdm 5-1:1.0: skipping garbage [ 595.945099][ T7548] bond1 (unregistering): Released all slaves [ 595.981414][ T5766] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 595.981460][ T5766] cdc_wdm 5-1:1.0: Unknown control protocol [ 596.094316][ T7548] bond2 (unregistering): Released all slaves [ 596.166259][ T5766] usb 5-1: USB disconnect, device number 54 [ 596.259371][T17787] loop5: detected capacity change from 0 to 4095 [ 596.354587][ T7548] bond3 (unregistering): Released all slaves [ 596.608803][ T7548] bond4 (unregistering): Released all slaves [ 596.712159][ T7548] bond5 (unregistering): Released all slaves [ 596.807116][ T7548] bond6 (unregistering): Released all slaves [ 596.869925][T17787] Buffer I/O error on dev loop5, logical block 511, async page read [ 596.876813][T10688] Buffer I/O error on dev loop5, logical block 511, async page read [ 596.927129][ T7548] bond7 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 596.941243][ T7548] veth0_to_bond: left allmulticast mode [ 596.945827][ T7548] bond7 (unregistering): Released all slaves [ 597.337058][T17779] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.337633][T17779] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.786989][T17779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.896394][T17779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.242137][T14683] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 598.352444][ T5872] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 598.392826][T14683] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.394500][T14683] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.394534][T14683] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 598.394602][T14683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.455335][T17825] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 598.458352][T17784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.466611][T17784] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.475824][T17784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.518098][T14683] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.538943][T17784] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.539061][T17784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.559901][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.560315][T17784] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.560477][T17784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.586718][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 598.586757][ T5872] usb 5-1: can't read configurations, error -61 [ 598.679211][T17784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.699981][T17784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.723131][ T5872] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 598.786764][T14683] usb 6-1: USB disconnect, device number 55 [ 598.808516][T17784] veth1_vlan: left promiscuous mode [ 598.809816][T17784] veth0_vlan: left promiscuous mode [ 598.834282][T17784] veth0_vlan: entered promiscuous mode [ 598.866658][T17784] veth1_vlan: entered promiscuous mode [ 598.887086][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.901798][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 598.901863][ T5872] usb 5-1: can't read configurations, error -61 [ 598.902129][ T5872] usb usb5-port1: attempt power cycle [ 598.911281][T17784] veth1_macvtap: left promiscuous mode [ 598.935878][T17784] veth0_macvtap: left promiscuous mode [ 598.948173][T17784] veth0_macvtap: entered promiscuous mode [ 598.963135][T17784] veth1_macvtap: entered promiscuous mode [ 599.019017][T17212] usb 2-1: USB disconnect, device number 51 [ 599.032912][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.039607][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.040714][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.079256][T17784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.104825][T17796] syzkaller0: entered promiscuous mode [ 599.104849][T17796] syzkaller0: entered allmulticast mode [ 599.130813][T14697] usbhid 1-1:0.0: can't add hid device: -71 [ 599.130919][T14697] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 599.154862][T14697] usb 1-1: USB disconnect, device number 56 [ 599.241986][ T5872] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 599.276753][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 599.281119][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 599.281157][ T5872] usb 5-1: can't read configurations, error -61 [ 599.431748][ T5872] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 599.438719][T17835] netlink: 'syz.1.4023': attribute type 5 has an invalid length. [ 599.438739][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4023'. [ 599.477178][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 599.478763][ T5872] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 599.478801][ T5872] usb 5-1: can't read configurations, error -61 [ 599.479403][ T5872] usb usb5-port1: unable to enumerate USB device [ 599.775287][T17836] syzkaller0: entered promiscuous mode [ 599.775314][T17836] syzkaller0: entered allmulticast mode [ 599.847557][ T7548] hsr_slave_0: left promiscuous mode [ 599.849826][ T7548] hsr_slave_1: left promiscuous mode [ 599.850710][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.850734][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.885104][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.885128][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.914245][ T7548] veth0_to_team: left promiscuous mode [ 599.914351][ T7548] veth1_macvtap: left promiscuous mode [ 599.914382][ T7548] veth0_macvtap: left promiscuous mode [ 599.941832][T17810] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 600.093377][T17810] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.094685][T17810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.094719][T17810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.094746][T17810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 600.094792][T17810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.145627][T17810] usb 1-1: config 0 descriptor?? [ 600.381795][T17815] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 600.390380][T17810] usbhid 1-1:0.0: can't add hid device: -71 [ 600.390480][T17810] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 600.416461][T17810] usb 1-1: USB disconnect, device number 57 [ 600.534849][T17815] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 600.535838][T17815] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 600.535864][T17815] usb 2-1: config 1 has no interface number 0 [ 600.537976][T17815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.538004][T17815] usb 2-1: Product: syz [ 600.538020][T17815] usb 2-1: Manufacturer: syz [ 600.538033][T17815] usb 2-1: SerialNumber: syz [ 600.593941][ T7548] team0 (unregistering): Port device team_slave_1 removed [ 600.613719][T17815] usb 2-1: 3:0 : does not exist [ 600.613740][T17815] usb 2-1: 3:0 : does not exist [ 600.638563][ T7548] team0 (unregistering): Port device team_slave_0 removed [ 600.902188][T17869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.902797][T17869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.079478][T17871] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 601.079825][T17852] IPVS: stopping backup sync thread 17871 ... [ 601.116979][T17856] tap0: tun_chr_ioctl cmd 1074025675 [ 601.117002][T17856] tap0: persist disabled [ 601.445428][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 601.658400][ T7548] IPVS: stop unused estimator thread 0... [ 601.714304][T17212] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 601.755387][T17889] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.756015][T17889] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.873439][T17212] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 601.875895][T17212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.875922][T17212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.876003][T17212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.876047][T17212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.909527][T17212] hub 1-1:1.0: bad descriptor, ignoring hub [ 601.909555][T17212] hub 1-1:1.0: probe with driver hub failed with error -5 [ 601.913260][T17212] cdc_wdm 1-1:1.0: skipping garbage [ 601.913279][T17212] cdc_wdm 1-1:1.0: skipping garbage [ 601.913295][T17212] cdc_wdm 1-1:1.0: skipping garbage [ 601.913378][T17212] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 601.985139][T17889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.010102][T17889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.297936][T17891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.300413][T17891] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.327154][T17891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.403001][T17891] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.403130][T17891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.412272][T17891] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.412431][T17891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.511292][T17891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.526595][T17891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.575160][T17891] veth1_vlan: left promiscuous mode [ 602.576762][T17891] veth0_vlan: left promiscuous mode [ 602.579794][T17891] veth0_vlan: entered promiscuous mode [ 602.592144][T17901] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4041'. [ 602.617571][T17891] veth1_vlan: entered promiscuous mode [ 602.634684][T17891] veth1_macvtap: left promiscuous mode [ 602.637371][T17891] veth0_macvtap: left promiscuous mode [ 602.640100][T17891] veth0_macvtap: entered promiscuous mode [ 602.664626][T17891] veth1_macvtap: entered promiscuous mode [ 602.693484][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.695110][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.697212][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.700005][T17891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 603.729452][T14682] usb 1-1: USB disconnect, device number 58 [ 603.796201][T17920] syzkaller0: entered promiscuous mode [ 603.796231][T17920] syzkaller0: entered allmulticast mode [ 604.454372][T17943] netlink: 'syz.0.4055': attribute type 1 has an invalid length. [ 604.501174][T17943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.506474][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4055'. [ 604.520358][T17943] bond1: entered promiscuous mode [ 604.520382][T17943] bond1: entered allmulticast mode [ 604.560753][T17948] ip_tables: iptables: counters copy to user failed while replacing table [ 604.611776][T17212] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 604.706041][T17946] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 604.706149][T17946] block device autoloading is deprecated and will be removed. [ 604.762369][T17212] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 604.763939][T17212] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 604.763964][T17212] usb 6-1: config 1 has no interface number 0 [ 604.767959][T17212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.767985][T17212] usb 6-1: Product: syz [ 604.768002][T17212] usb 6-1: Manufacturer: syz [ 604.768018][T17212] usb 6-1: SerialNumber: syz [ 604.840180][T17212] usb 6-1: 3:0 : does not exist [ 604.840200][T17212] usb 6-1: 3:0 : does not exist [ 605.160957][ T5872] usb 6-1: USB disconnect, device number 56 [ 605.512548][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4060'. [ 605.853152][ T5872] usb 2-1: USB disconnect, device number 52 [ 605.949079][T17975] syzkaller0: entered promiscuous mode [ 605.949105][T17975] syzkaller0: entered allmulticast mode [ 606.611818][T18000] ip_tables: iptables: counters copy to user failed while replacing table [ 606.683890][T18002] fuse: Bad value for 'user_id' [ 606.683913][T18002] fuse: Bad value for 'user_id' [ 607.475864][ T5617] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 608.306414][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 608.601154][T18059] binder: BINDER_SET_CONTEXT_MGR already set [ 608.601170][T18059] binder: 18057:18059 ioctl 4018620d 200000000280 returned -16 [ 608.699801][T18059] binder: BINDER_SET_CONTEXT_MGR already set [ 608.699813][T18059] binder: 18057:18059 ioctl 4018620d 200000000400 returned -16 [ 608.955734][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4091'. [ 609.049956][T18070] hsr_slave_0: left promiscuous mode [ 609.065511][T18070] hsr_slave_1: left promiscuous mode [ 609.081713][T17815] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 609.233706][T17815] usb 1-1: Using ep0 maxpacket: 16 [ 609.235225][T17815] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 609.241007][T17815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.241054][T17815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.241084][T17815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.241107][T17815] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 609.241133][T17815] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.293225][T17815] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 609.293254][T17815] usb 1-1: Manufacturer: syz [ 609.299509][T17815] usb 1-1: config 0 descriptor?? [ 609.447105][ T5617] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 609.646873][T17815] rc_core: IR keymap rc-hauppauge not found [ 609.646894][T17815] Registered IR keymap rc-empty [ 609.656114][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.672680][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.694382][T17815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 609.703103][T17815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input56 [ 609.717736][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.731996][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.752251][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.784940][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.820510][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.827294][T18092] tap0: tun_chr_ioctl cmd 1074025675 [ 609.827344][T18092] tap0: persist disabled [ 609.831809][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.859866][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.909885][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.921777][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.941796][T17815] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 609.970054][T17815] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 609.970079][T17815] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 610.023662][T17815] usb 1-1: USB disconnect, device number 59 [ 610.073544][T17212] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 610.225125][T17212] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 610.227169][T17212] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 610.227200][T17212] usb 6-1: config 1 has no interface number 0 [ 610.229945][T17212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.229973][T17212] usb 6-1: Product: syz [ 610.229991][T17212] usb 6-1: Manufacturer: syz [ 610.230008][T17212] usb 6-1: SerialNumber: syz [ 610.299655][T17212] usb 6-1: 3:0 : does not exist [ 610.299682][T17212] usb 6-1: 3:0 : does not exist [ 610.319083][T18099] netlink: 'syz.4.4104': attribute type 1 has an invalid length. [ 610.321605][T18099] netlink: 'syz.4.4104': attribute type 2 has an invalid length. [ 610.493316][T17212] usb 6-1: USB disconnect, device number 57 [ 610.910294][T18113] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.910798][T18113] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.990730][T18113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.994635][T18113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.157388][T18114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.158808][T18114] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.166128][T18114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.200474][T18114] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.200607][T18114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.203804][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.203925][T18114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.222731][T18114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.225944][T18114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.241560][T18114] veth1_vlan: left promiscuous mode [ 611.244332][T18114] veth0_vlan: left promiscuous mode [ 611.246733][T18114] veth0_vlan: entered promiscuous mode [ 611.255534][T18114] veth1_vlan: entered promiscuous mode [ 611.263724][T18114] veth1_macvtap: left promiscuous mode [ 611.265036][T18114] veth0_macvtap: left promiscuous mode [ 611.267416][T18114] veth0_macvtap: entered promiscuous mode [ 611.269803][T18114] veth1_macvtap: entered promiscuous mode [ 611.280474][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.281896][T14677] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 611.285462][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.288457][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.289714][T18114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.464876][T14677] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 611.469713][T14677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.469742][T14677] usb 1-1: Product: syz [ 611.469759][T14677] usb 1-1: Manufacturer: syz [ 611.469778][T14677] usb 1-1: SerialNumber: syz [ 611.481180][T14677] usb 1-1: config 0 descriptor?? [ 611.499922][T14677] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 611.550531][ T5617] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 611.701338][T18124] macsec1: entered allmulticast mode [ 611.701368][T18124] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 611.701411][T18124] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 611.724710][T18124] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 611.726033][T18124] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 611.748666][T17212] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 611.777480][T14677] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 611.777500][T14677] sq905c 1-1:0.0: Get version command failed [ 611.777576][T14677] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 611.789920][T14677] usb 1-1: USB disconnect, device number 60 [ 611.885807][T18136] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4117'. [ 611.966222][T18140] syzkaller0: entered promiscuous mode [ 611.966247][T18140] syzkaller0: entered allmulticast mode [ 612.107256][T18144] binder: BINDER_SET_CONTEXT_MGR already set [ 612.107275][T18144] binder: 18143:18144 ioctl 4018620d 200000000480 returned -16 [ 612.165174][T18146] binder: 18143:18146 ioctl c0306201 0 returned -14 [ 612.255348][T18150] tap0: tun_chr_ioctl cmd 1074025675 [ 612.255370][T18150] tap0: persist disabled [ 612.502081][T14677] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 612.657005][T14677] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 612.661260][T14677] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 612.661288][T14677] usb 6-1: config 1 has no interface number 0 [ 612.696304][T14677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.696333][T14677] usb 6-1: Product: syz [ 612.696352][T14677] usb 6-1: Manufacturer: syz [ 612.696369][T14677] usb 6-1: SerialNumber: syz [ 612.749854][T14677] usb 6-1: 3:0 : does not exist [ 612.749879][T14677] usb 6-1: 3:0 : does not exist [ 612.863018][T18167] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4131'. [ 612.966766][T18173] syzkaller0: entered promiscuous mode [ 612.966793][T18173] syzkaller0: entered allmulticast mode [ 613.164949][T14677] usb 6-1: USB disconnect, device number 58 [ 613.310982][T10687] udevd[10687]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.978801][T18191] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4136'. [ 614.601700][T17810] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 614.752633][T17810] usb 4-1: Using ep0 maxpacket: 8 [ 614.755744][T17810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.755794][T17810] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 614.757445][T17810] usb 4-1: config 4 interface 0 has no altsetting 0 [ 614.794834][T17810] usb 4-1: string descriptor 0 read error: -22 [ 614.794912][T17810] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 614.848780][T17810] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 614.869846][T17810] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 614.870138][T17810] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 614.870186][T17810] usb 4-1: media controller created [ 614.940370][T14695] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 614.963202][T17810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 615.103767][T14695] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 615.105074][T14695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.105107][T14695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.105161][T14695] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 615.105207][T14695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.107665][T14695] usb 6-1: config 0 descriptor?? [ 615.263112][T17810] usb 4-1: USB disconnect, device number 77 [ 615.345051][T18211] netlink: 165 bytes leftover after parsing attributes in process `syz.5.4144'. [ 615.347893][T14695] usbhid 6-1:0.0: can't add hid device: -71 [ 615.347999][T14695] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 615.385378][T14695] usb 6-1: USB disconnect, device number 59 [ 615.432266][T18230] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4147'. [ 615.735281][T18238] fuse: Unknown parameter 'group_i00000000000000000000' [ 615.952919][T18246] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 616.551043][T18263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4160'. [ 616.551071][T18263] openvswitch: netlink: Flow actions attr not present in new flow. [ 616.636294][T18267] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4162'. [ 616.677398][T18270] vlan2: entered allmulticast mode [ 616.677420][T18270] bond0: entered allmulticast mode [ 616.677437][T18270] bond_slave_0: entered allmulticast mode [ 616.677456][T18270] bond_slave_1: entered allmulticast mode [ 616.680042][T18270] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4164'. [ 616.810650][T18270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.829251][T18270] bond_slave_0: left allmulticast mode [ 616.847269][T18270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.865357][T18270] bond_slave_1: left allmulticast mode [ 616.875469][T18270] bond0 (unregistering): Released all slaves [ 617.027784][T18281] binder: BINDER_SET_CONTEXT_MGR already set [ 617.027798][T18281] binder: 18277:18281 ioctl 4018620d 200000000280 returned -16 [ 617.055966][T18281] binder: BINDER_SET_CONTEXT_MGR already set [ 617.055978][T18281] binder: 18277:18281 ioctl 4018620d 200000000400 returned -16 [ 617.242749][T14677] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 617.395679][T14677] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 617.396833][T14677] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 617.396860][T14677] usb 4-1: config 1 has no interface number 0 [ 617.402031][T14677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.402058][T14677] usb 4-1: Product: syz [ 617.402076][T14677] usb 4-1: Manufacturer: syz [ 617.402093][T14677] usb 4-1: SerialNumber: syz [ 617.436213][T14677] usb 4-1: 3:0 : does not exist [ 617.436237][T14677] usb 4-1: 3:0 : does not exist [ 617.510663][T18292] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 617.510684][T18292] CUSE: unknown device info "G2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 617.510701][T18292] CUSE: unknown device info "Ýÿÿÿ" [ 617.510719][T18292] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœD" [ 617.510733][T18292] CUSE: DEVNAME unspecified [ 617.730768][T14677] usb 4-1: USB disconnect, device number 78 [ 617.742427][T14695] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 617.903197][T14695] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.908523][T14695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.908558][T14695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.908585][T14695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.908627][T14695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.913187][T14695] usb 5-1: config 0 descriptor?? [ 618.205532][T18307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4176'. [ 618.205560][T18307] openvswitch: netlink: Flow actions attr not present in new flow. [ 618.236376][T18288] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4171'. [ 618.259840][T14695] usbhid 5-1:0.0: can't add hid device: -71 [ 618.259944][T14695] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 618.274087][T14695] usb 5-1: USB disconnect, device number 59 [ 618.600166][T18318] syzkaller0: entered promiscuous mode [ 618.600192][T18318] syzkaller0: entered allmulticast mode [ 618.664123][T18317] TC_ACT_REPEAT abuse ? [ 618.721508][T18320] syzkaller0: entered promiscuous mode [ 618.721535][T18320] syzkaller0: entered allmulticast mode [ 618.764763][T18330] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4186'. [ 620.112033][T14677] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 620.287126][T14677] usb 2-1: Using ep0 maxpacket: 32 [ 620.295959][T14677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.296011][T14677] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 620.300795][T14677] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 620.300822][T14677] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 620.300846][T14677] usb 2-1: config 14 has no interface number 0 [ 620.300865][T14677] usb 2-1: config 14 has no interface number 1 [ 620.300920][T14677] usb 2-1: config 14 interface 57 altsetting 216 endpoint 0x9 has invalid wMaxPacketSize 0 [ 620.300958][T14677] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 620.300990][T14677] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 620.301017][T14677] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 620.301043][T14677] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.301073][T14677] usb 2-1: config 14 interface 57 has no altsetting 0 [ 620.301096][T14677] usb 2-1: config 14 interface 228 has no altsetting 0 [ 620.316073][T14677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.316100][T14677] usb 2-1: Product: syz [ 620.316118][T14677] usb 2-1: Manufacturer: syz [ 620.316136][T14677] usb 2-1: SerialNumber: syz [ 620.422543][T18375] netlink: 'syz.4.4200': attribute type 21 has an invalid length. [ 620.422571][T18375] IPv6: NLM_F_CREATE should be specified when creating new route [ 620.780854][T14677] legousbtower 2-1:14.57: interrupt endpoints not found [ 620.826778][T14677] legousbtower 2-1:14.228: interrupt endpoints not found [ 620.862038][T14677] usb 2-1: USB disconnect, device number 53 [ 623.569695][ T31] audit: type=1326 audit(1791759556.297:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.569961][ T31] audit: type=1326 audit(1791759556.297:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.573840][ T31] audit: type=1326 audit(1791759556.307:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.573895][ T31] audit: type=1326 audit(1791759556.307:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.573945][ T31] audit: type=1326 audit(1791759556.307:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.574873][ T31] audit: type=1326 audit(1791759556.307:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.576450][ T31] audit: type=1326 audit(1791759556.307:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.576688][ T31] audit: type=1326 audit(1791759556.307:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.578850][ T31] audit: type=1326 audit(1791759556.307:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.578904][ T31] audit: type=1326 audit(1791759556.307:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.0.4213" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907ad9e1d9 code=0x7ffc0000 [ 623.629355][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.974538][T18423] syzkaller0: entered promiscuous mode [ 623.974565][T18423] syzkaller0: entered allmulticast mode [ 624.201842][ T5872] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 624.258883][T18428] syzkaller0: entered promiscuous mode [ 624.258912][T18428] syzkaller0: entered allmulticast mode [ 624.372671][ T5872] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.374153][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.374187][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.374214][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.374296][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.391737][ T5872] usb 2-1: config 0 descriptor?? [ 624.646440][T18435] fuse: Invalid rootmode [ 624.651518][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 624.651760][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 624.663570][ T5872] usb 2-1: USB disconnect, device number 54 [ 624.682525][T17810] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 624.831885][T17810] usb 4-1: Using ep0 maxpacket: 16 [ 624.832744][T17810] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 624.833838][T17810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.833870][T17810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.833896][T17810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 624.833940][T17810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.848210][T17810] usb 4-1: config 0 descriptor?? [ 625.146317][T18431] loop5: detected capacity change from 0 to 4095 [ 625.437841][T18431] Buffer I/O error on dev loop5, logical block 511, async page read [ 625.448750][T10687] Buffer I/O error on dev loop5, logical block 511, async page read [ 627.155400][T17810] usbhid 4-1:0.0: can't add hid device: -71 [ 627.155508][T17810] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 627.182745][T17810] usb 4-1: USB disconnect, device number 79 [ 627.567801][T18492] syzkaller0: entered promiscuous mode [ 627.567828][T18492] syzkaller0: entered allmulticast mode [ 627.823822][T18504] fuse: Bad value for 'fd' [ 628.201865][T14683] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 628.210288][T18513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4238'. [ 628.211009][T18513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4238'. [ 628.211864][T18513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4238'. [ 628.295392][T18515] binder: BINDER_SET_CONTEXT_MGR already set [ 628.295405][T18515] binder: 18514:18515 ioctl 4018620d 200000000480 returned -16 [ 628.352544][T14683] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.353819][T14683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.353852][T14683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.353877][T14683] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.353915][T14683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.357755][T14683] usb 6-1: config 0 descriptor?? [ 628.596744][T14683] usbhid 6-1:0.0: can't add hid device: -71 [ 628.596855][T14683] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 628.614911][T14683] usb 6-1: USB disconnect, device number 60 [ 628.763770][T18522] syzkaller0: entered promiscuous mode [ 628.763799][T18522] syzkaller0: entered allmulticast mode [ 631.622420][T18527] syzkaller0: entered promiscuous mode [ 631.622443][T18527] syzkaller0: entered allmulticast mode [ 631.631395][T18530] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 632.212213][T18584] fuse: Bad value for 'fd' [ 632.510932][T18598] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4260'. [ 632.939312][T18607] syzkaller0: entered promiscuous mode [ 632.939337][T18607] syzkaller0: entered allmulticast mode [ 633.021026][T18611] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 633.028046][T18610] netlink: Setting conntrack mark requires 'commit' flag. [ 633.028078][T18610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.266384][T18612] syzkaller0: entered promiscuous mode [ 633.266411][T18612] syzkaller0: entered allmulticast mode [ 633.471734][ T5872] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 633.603358][ T5872] usb 4-1: device descriptor read/64, error -71 [ 633.851896][ T5872] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 633.981950][ T5872] usb 4-1: device descriptor read/64, error -71 [ 634.092737][ T5872] usb usb4-port1: attempt power cycle [ 634.433164][ T5872] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 634.453657][ T5872] usb 4-1: device descriptor read/8, error -71 [ 634.691945][ T5872] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 634.721340][ T5872] usb 4-1: device descriptor read/8, error -71 [ 634.826180][ T5872] usb usb4-port1: unable to enumerate USB device [ 635.425448][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4273'. [ 635.698125][T18663] tap0: tun_chr_ioctl cmd 1074025675 [ 635.698149][T18663] tap0: persist disabled [ 635.736505][T18665] fuse: Bad value for 'fd' [ 635.890931][T18673] syzkaller0: entered promiscuous mode [ 635.890959][T18673] syzkaller0: entered allmulticast mode [ 635.923999][ T5625] Bluetooth: hci6: command 0x0406 tx timeout [ 635.942289][T18673] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 636.219605][T18682] syzkaller0: entered promiscuous mode [ 636.219632][T18682] syzkaller0: entered allmulticast mode [ 636.321669][T18685] netlink: 'syz.3.4285': attribute type 39 has an invalid length. [ 636.662306][T18691] syzkaller0: entered promiscuous mode [ 636.662334][T18691] syzkaller0: entered allmulticast mode [ 637.322690][T14683] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 637.485148][T14683] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 637.486396][T14683] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 637.486424][T14683] usb 4-1: config 1 has no interface number 0 [ 637.489943][T14683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.489972][T14683] usb 4-1: Product: syz [ 637.489990][T14683] usb 4-1: Manufacturer: syz [ 637.490009][T14683] usb 4-1: SerialNumber: syz [ 637.561676][T14683] usb 4-1: 3:0 : does not exist [ 637.561702][T14683] usb 4-1: 3:0 : does not exist [ 637.911290][T17212] usb 4-1: USB disconnect, device number 84 [ 639.586748][T18704] tap0: tun_chr_ioctl cmd 1074025675 [ 639.586772][T18704] tap0: persist disabled [ 639.708973][T18742] batadv_slave_0: Caught tx_queue_len zero misconfig [ 639.920735][T18774] fuse: Bad value for 'fd' [ 639.979815][T18772] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 640.565102][ T5872] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 640.576344][ T5872] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 641.354358][T18813] syzkaller0: entered promiscuous mode [ 641.354386][T18813] syzkaller0: entered allmulticast mode [ 641.710753][T18820] fuse: Bad value for 'fd' [ 641.734195][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 642.016252][T18833] fuse: Bad value for 'fd' [ 642.431868][T17212] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 642.615436][T17212] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.617240][T17212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.617272][T17212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.617297][T17212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 642.617341][T17212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.677167][T17212] usb 1-1: config 0 descriptor?? [ 642.779965][T18851] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 642.822142][T18851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.879834][T18851] bond0: (slave geneve2): making interface the new active one [ 642.901375][T18851] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 642.921525][T18831] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4324'. [ 642.939959][T17212] usbhid 1-1:0.0: can't add hid device: -71 [ 642.940072][T17212] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 642.977078][T17212] usb 1-1: USB disconnect, device number 61 [ 643.147714][T18857] syzkaller0: entered promiscuous mode [ 643.147741][T18857] syzkaller0: entered allmulticast mode [ 643.391848][T17816] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 643.554596][T17816] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 643.558836][T17816] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 643.558901][T17816] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 643.558929][T17816] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.558974][T17816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.647139][T17816] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.724491][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'. [ 643.803908][T17816] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 643.812924][T10687] udevd[10687]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.850998][T14683] usb 6-1: USB disconnect, device number 61 [ 644.044445][T18884] ip_tables: iptables: counters copy to user failed while replacing table [ 644.101580][ T30] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 644.101974][ T30] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 644.107101][ T30] usb 3-1: USB disconnect, device number 52 [ 644.175304][T18886] fuse: Invalid rootmode [ 644.263106][T18889] netlink: 'syz.4.4347': attribute type 1 has an invalid length. [ 644.325591][T18889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.374660][T18891] bond1: (slave geneve3): making interface the new active one [ 644.380716][T18891] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 645.116844][T18917] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 645.116864][T18917] CUSE: unknown device info "G2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 645.116881][T18917] CUSE: unknown device info "Ýÿÿÿ" [ 645.116893][T18917] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœD" [ 645.116907][T18917] CUSE: DEVNAME unspecified [ 645.461138][T18930] ip_tables: iptables: counters copy to user failed while replacing table [ 645.519841][T18931] hsr_slave_0: left promiscuous mode [ 645.527143][T18931] hsr_slave_1: left promiscuous mode [ 645.820473][T18940] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4362'. [ 645.920045][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4364'. [ 645.957439][T18946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4365'. [ 645.971249][ T30] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 646.061748][T17810] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 646.133556][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 646.135051][ T30] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 646.135101][ T30] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 646.135126][ T30] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 646.135172][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.205984][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.223935][T17810] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.227222][T17810] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.227256][T17810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.227283][T17810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.227339][T17810] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.281204][T18956] fuse: Invalid rootmode [ 646.281699][T17810] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.281733][T17810] usb 3-1: Product: syz [ 646.281752][T17810] usb 3-1: Manufacturer: syz [ 646.319457][T17810] cdc_wdm 3-1:1.0: skipping garbage [ 646.319476][T17810] cdc_wdm 3-1:1.0: skipping garbage [ 646.339180][T17810] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 646.339203][T17810] cdc_wdm 3-1:1.0: Unknown control protocol [ 646.413534][ T30] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 646.415495][ T30] usb 6-1: USB disconnect, device number 62 [ 646.517577][T14677] usb 3-1: USB disconnect, device number 53 [ 646.641896][T17810] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 646.791700][T17810] usb 2-1: Using ep0 maxpacket: 8 [ 646.792610][T17810] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 646.794151][T17810] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 646.794204][T17810] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.794231][T17810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 646.794260][T17810] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 646.794290][T17810] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.794337][T17810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.883836][ T5872] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 646.956269][T14677] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 647.019153][T18972] ip_tables: iptables: counters copy to user failed while replacing table [ 647.107294][T17810] usb 2-1: usb_control_msg returned -32 [ 647.107347][T17810] usbtmc 2-1:16.0: can't read capabilities [ 647.196098][ T5872] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 647.202357][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.202384][ T5872] usb 4-1: Product: syz [ 647.202402][ T5872] usb 4-1: Manufacturer: syz [ 647.202420][ T5872] usb 4-1: SerialNumber: syz [ 647.222993][ T5872] usb 4-1: config 0 descriptor?? [ 647.242423][ T5872] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 647.259156][T14677] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 647.260889][T14677] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 647.260923][T14677] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.260946][T14677] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 647.261049][T14677] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.269341][T14677] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 647.269409][T14677] usb 3-1: Product: syz [ 647.269426][T14677] usb 3-1: Manufacturer: syz [ 647.342744][T14677] cdc_wdm 3-1:1.0: skipping garbage [ 647.342762][T14677] cdc_wdm 3-1:1.0: skipping garbage [ 647.357495][T14677] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 647.357516][T14677] cdc_wdm 3-1:1.0: Unknown control protocol [ 647.593349][T18964] macsec1: entered allmulticast mode [ 647.593381][T18964] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 647.593430][T18964] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 647.594453][T18964] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 647.597682][T18964] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 647.646787][T17810] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 647.711741][T18981] netlink: 'syz.4.4378': attribute type 32 has an invalid length. [ 647.711767][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 647.755562][ T5872] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 647.755582][ T5872] sq905c 4-1:0.0: Get version command failed [ 647.755662][ T5872] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 647.894973][T18985] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 648.040075][ T5872] usb 2-1: USB disconnect, device number 55 [ 648.646853][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4385'. [ 648.673246][T19006] binder: BINDER_SET_CONTEXT_MGR already set [ 648.673257][T19006] binder: 19005:19006 ioctl 4018620d 200000000400 returned -16 [ 648.846518][T19015] fuse: Invalid rootmode [ 648.981685][T14695] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 649.096154][T19018] ip_tables: iptables: counters copy to user failed while replacing table [ 649.133891][T14695] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.134951][T14695] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 649.134998][T14695] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 649.135026][T14695] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.135067][T14695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.147929][T14695] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.148825][T14695] usb 1-1: invalid MIDI out EP 0 [ 649.334775][T14677] usb 3-1: USB disconnect, device number 54 [ 649.429037][T14695] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 649.445963][T14695] usb 1-1: USB disconnect, device number 62 [ 649.659922][T14695] usb 4-1: USB disconnect, device number 85 [ 649.758235][T19027] tap0: tun_chr_ioctl cmd 1074025675 [ 649.758260][T19027] tap0: persist disabled [ 650.111754][T14677] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 650.179373][T19046] ip_tables: iptables: counters copy to user failed while replacing table [ 650.292846][T14677] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 650.294313][T14677] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 650.294338][T14677] usb 6-1: config 1 has no interface number 0 [ 650.296768][T14677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.296795][T14677] usb 6-1: Product: syz [ 650.296813][T14677] usb 6-1: Manufacturer: syz [ 650.296831][T14677] usb 6-1: SerialNumber: syz [ 650.358665][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4406'. [ 650.379578][T14677] usb 6-1: 3:0 : does not exist [ 650.379597][T14677] usb 6-1: 3:0 : does not exist [ 650.668275][ T30] usb 6-1: USB disconnect, device number 63 [ 650.890141][T19068] fuse: Bad value for 'rootmode' [ 650.911753][T17810] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 650.935295][T19070] hsr_slave_0: left promiscuous mode [ 650.937176][T19070] hsr_slave_1: left promiscuous mode [ 651.083695][T17810] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 651.088694][T17810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.088723][T17810] usb 1-1: Product: syz [ 651.088744][T17810] usb 1-1: Manufacturer: syz [ 651.088758][T17810] usb 1-1: SerialNumber: syz [ 651.091505][T17810] usb 1-1: config 0 descriptor?? [ 651.099575][T17810] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 651.122696][ T30] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 651.284066][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 651.293014][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 651.293794][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 651.295186][ T30] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.295218][ T30] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.295274][ T30] usb 6-1: config 0 interface 0 has no altsetting 0 [ 651.295311][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.347459][ T30] usb 6-1: config 0 descriptor?? [ 651.380384][ T30] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input61 [ 651.400739][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4414'. [ 651.469554][T19080] macsec1: entered allmulticast mode [ 651.469588][T19080] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 651.469675][T19080] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 651.474836][T19080] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 651.494040][T19080] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 651.565959][ T4962] bcm5974 6-1:0.0: could not read from device [ 651.570446][T17212] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 651.613346][T17810] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 651.613366][T17810] sq905c 1-1:0.0: Get version command failed [ 651.613443][T17810] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 651.621011][ T4962] bcm5974 6-1:0.0: could not read from device [ 651.636699][ T30] usb 6-1: USB disconnect, device number 64 [ 651.656939][ T4962] bcm5974 6-1:0.0: could not read from device [ 651.663476][ T5872] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 651.687869][ T4962] bcm5974 6-1:0.0: could not read from device [ 651.692602][ T4962] bcm5974 6-1:0.0: could not read from device [ 651.812513][ T5872] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 651.813711][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.813746][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.813795][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.813838][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.885072][ T5872] hub 3-1:1.0: bad descriptor, ignoring hub [ 651.885101][ T5872] hub 3-1:1.0: probe with driver hub failed with error -5 [ 651.885731][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 651.885749][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 651.885765][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 651.885848][ T5872] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 651.986641][T19092] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4420'. [ 652.198021][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4426'. [ 652.383814][T19115] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4429'. [ 652.384505][T19115] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4429'. [ 652.385212][T19115] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4429'. [ 652.481857][ T5872] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 652.796048][T14677] usb 3-1: USB disconnect, device number 55 [ 652.797845][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 652.798668][ T5872] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 652.825175][ T5872] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 652.825203][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.825225][ T5872] usb 5-1: config 0 has no interface number 0 [ 652.825273][ T5872] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 652.825303][ T5872] usb 5-1: config 0 interface 1 has no altsetting 0 [ 652.829398][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.829425][ T5872] usb 5-1: Product: syz [ 652.829443][ T5872] usb 5-1: Manufacturer: syz [ 652.829461][ T5872] usb 5-1: SerialNumber: syz [ 652.879384][T19124] fuse: Bad value for 'rootmode' [ 652.919577][ T5872] usb 5-1: config 0 descriptor?? [ 653.453921][T14677] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 653.602632][T14677] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 653.604583][T14677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.630385][T14677] usb 2-1: config 0 descriptor?? [ 653.729685][ T30] usb 1-1: USB disconnect, device number 63 [ 654.055505][T14677] hackrf 2-1:0.0: Board ID: 00 [ 654.055532][T14677] hackrf 2-1:0.0: Firmware version: ÜjÛnÉ“`¤¶c¦&ÚŸÂo¼è K\ [ 654.061043][T14677] hackrf 2-1:0.0: Registered as swradio24 [ 654.061066][T14677] videodev: could not get a free minor [ 654.061079][T14677] hackrf 2-1:0.0: Failed to register as video device (-23) [ 654.130276][T14677] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 654.224575][T14695] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 654.374520][T14695] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 654.376365][T14695] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.376401][T14695] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 654.376461][T14695] usb 3-1: config 0 interface 0 has no altsetting 0 [ 654.379232][T14695] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 654.379261][T14695] usb 3-1: Product: syz [ 654.379279][T14695] usb 3-1: Manufacturer: syz [ 654.379308][T14695] usb 3-1: SerialNumber: syz [ 654.458696][T14695] usb 3-1: config 0 descriptor?? [ 654.458785][T19146] tap0: tun_chr_ioctl cmd 1074025675 [ 654.458803][T19146] tap0: persist disabled [ 654.475904][T19152] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4442'. [ 654.478157][T19152] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4442'. [ 654.479517][T19152] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4442'. [ 654.505307][T19138] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 654.529903][T14695] usb 3-1: selecting invalid altsetting 0 [ 654.701958][ T30] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 654.756556][T19138] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 654.773041][T19155] binder: BINDER_SET_CONTEXT_MGR already set [ 654.774261][T14695] usb 3-1: USB disconnect, device number 56 [ 654.775894][T19155] binder: 19154:19155 ioctl 4018620d 200000000400 returned -16 [ 654.863704][ T30] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 654.865633][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 654.865661][ T30] usb 1-1: config 1 has no interface number 0 [ 654.871106][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.871134][ T30] usb 1-1: Product: syz [ 654.871152][ T30] usb 1-1: Manufacturer: syz [ 654.871171][ T30] usb 1-1: SerialNumber: syz [ 654.991897][ T30] usb 1-1: 3:0 : does not exist [ 654.991925][ T30] usb 1-1: 3:0 : does not exist [ 655.022969][ T5872] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 655.023003][ T5872] cx231xx 5-1:0.1: Not found matching IAD interface [ 655.030948][ T5872] usb 5-1: USB disconnect, device number 60 [ 655.193482][T17816] usb 2-1: USB disconnect, device number 56 [ 655.368168][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4446'. [ 655.435236][ T30] usb 1-1: USB disconnect, device number 64 [ 655.504248][T10687] udevd[10687]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.507929][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4447'. [ 655.801851][T17816] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 655.861734][T19186] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4455'. [ 655.862569][T19186] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4455'. [ 655.863362][T19186] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4455'. [ 655.902679][ T30] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 656.004018][T17816] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 656.005195][T17816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.005221][T17816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 656.005275][T17816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.005316][T17816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.064482][T17816] hub 6-1:1.0: bad descriptor, ignoring hub [ 656.064509][T17816] hub 6-1:1.0: probe with driver hub failed with error -5 [ 656.065166][T17816] cdc_wdm 6-1:1.0: skipping garbage [ 656.065184][T17816] cdc_wdm 6-1:1.0: skipping garbage [ 656.065199][T17816] cdc_wdm 6-1:1.0: skipping garbage [ 656.065288][T17816] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 656.102418][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 656.116047][ T30] usb 1-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 656.126299][ T30] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.126333][ T30] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.126361][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.126397][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.143864][ T30] usb 1-1: config 0 descriptor?? [ 656.180616][ T30] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input62 [ 656.391718][ T4962] bcm5974 1-1:0.0: could not read from device [ 656.413023][ T4962] bcm5974 1-1:0.0: could not read from device [ 656.431264][ T30] usb 1-1: USB disconnect, device number 65 [ 656.820956][T19199] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.032271][ T5872] usb 6-1: USB disconnect, device number 65 [ 657.066122][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.088969][T19199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.285894][ T7559] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.285949][ T7559] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.285993][ T7559] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.301772][ T7580] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.322461][T17815] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 657.475044][T17815] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 657.476126][T17815] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 657.476160][T17815] usb 4-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 657.476189][T17815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 657.484760][T17815] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 657.484787][T17815] usb 4-1: Product: syz [ 657.484805][T17815] usb 4-1: Manufacturer: syz [ 657.484823][T17815] usb 4-1: SerialNumber: syz [ 657.496892][T17815] usb 4-1: config 0 descriptor?? [ 657.498477][T19206] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 657.542595][T17815] usb 4-1: selecting invalid altsetting 0 [ 657.692832][T14695] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 657.770380][T19206] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 657.823075][T17815] usb 4-1: USB disconnect, device number 86 [ 657.828042][T19222] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4468'. [ 657.828653][T19222] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4468'. [ 657.848378][T14695] usb 1-1: Using ep0 maxpacket: 32 [ 657.864810][T14695] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 657.867397][T14695] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 657.867423][T14695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.867446][T14695] usb 1-1: config 0 has no interface number 0 [ 657.867491][T14695] usb 1-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.867523][T14695] usb 1-1: config 0 interface 1 has no altsetting 0 [ 657.870236][T14695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.870263][T14695] usb 1-1: Product: syz [ 657.870281][T14695] usb 1-1: Manufacturer: syz [ 657.870299][T14695] usb 1-1: SerialNumber: syz [ 657.957718][T14695] usb 1-1: config 0 descriptor?? [ 658.405548][T19238] tap0: tun_chr_ioctl cmd 1074025675 [ 658.405575][T19238] tap0: persist disabled [ 658.641840][ T5872] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 658.793549][ T5872] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 658.795904][ T5872] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 658.795931][ T5872] usb 2-1: config 1 has no interface number 0 [ 658.819631][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.819660][ T5872] usb 2-1: Product: syz [ 658.819678][ T5872] usb 2-1: Manufacturer: syz [ 658.819729][ T5872] usb 2-1: SerialNumber: syz [ 658.875406][ T5872] usb 2-1: 3:0 : does not exist [ 658.875432][ T5872] usb 2-1: 3:0 : does not exist [ 659.184039][ T5872] usb 2-1: USB disconnect, device number 57 [ 659.572045][T14683] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 659.592391][T14683] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 659.592862][ T5872] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 659.822410][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 659.823280][ T5872] usb 2-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 659.824849][ T5872] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.824883][ T5872] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.824938][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 659.824975][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.891013][ T5872] usb 2-1: config 0 descriptor?? [ 659.912025][ T5872] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input63 [ 660.030981][T14695] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 660.031043][T14695] cx231xx 1-1:0.1: Not found matching IAD interface [ 660.097869][T14695] usb 1-1: USB disconnect, device number 66 [ 660.100952][ T4962] bcm5974 2-1:0.0: could not read from device [ 660.135327][ T4962] bcm5974 2-1:0.0: could not read from device [ 660.160011][ T4962] bcm5974 2-1:0.0: could not read from device [ 660.170513][ T5872] usb 2-1: USB disconnect, device number 58 [ 660.187343][ T4962] bcm5974 2-1:0.0: could not read from device [ 661.702931][T14695] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 661.759704][T19314] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 661.759721][T19314] CUSE: unknown device info "G2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 661.759738][T19314] CUSE: unknown device info "Ýÿÿÿ" [ 661.759749][T19314] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœD" [ 661.759763][T19314] CUSE: DEVNAME unspecified [ 661.871806][T14695] usb 6-1: Using ep0 maxpacket: 32 [ 661.871953][ T5872] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 661.872636][T14695] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 661.878458][T14695] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 661.878486][T14695] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.878508][T14695] usb 6-1: config 0 has no interface number 0 [ 661.878551][T14695] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 661.878582][T14695] usb 6-1: config 0 interface 1 has no altsetting 0 [ 661.952566][T14695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.952598][T14695] usb 6-1: Product: syz [ 661.952616][T14695] usb 6-1: Manufacturer: syz [ 661.952635][T14695] usb 6-1: SerialNumber: syz [ 661.995296][T14695] usb 6-1: config 0 descriptor?? [ 662.022404][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 662.023527][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 662.023555][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.023578][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 662.023658][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.084345][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 662.084374][ T5872] usb 4-1: Product: syz [ 662.084392][ T5872] usb 4-1: Manufacturer: syz [ 662.126821][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 662.126839][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 662.153603][ T5872] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 662.153650][ T5872] cdc_wdm 4-1:1.0: Unknown control protocol [ 662.357873][ T5872] usb 4-1: USB disconnect, device number 87 [ 662.476617][T19330] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 662.864657][ T5872] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 663.012504][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 663.014064][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 663.014092][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.014114][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 663.014186][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.021556][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 663.071857][ T5872] usb 4-1: Product: syz [ 663.071879][ T5872] usb 4-1: Manufacturer: syz [ 663.111581][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 663.112594][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 663.117578][ T5872] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 663.117599][ T5872] cdc_wdm 4-1:1.0: Unknown control protocol [ 663.146587][T14677] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 663.301799][T14677] usb 2-1: Using ep0 maxpacket: 16 [ 663.304353][T14677] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 663.305737][T14677] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.305795][T14677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.305856][T14677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.305883][T14677] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 663.305910][T14677] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.308800][T14677] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 663.308857][T14677] usb 2-1: Manufacturer: syz [ 663.410899][T14677] usb 2-1: config 0 descriptor?? [ 664.445625][ T5872] usb 4-1: USB disconnect, device number 88 [ 664.986658][T14695] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 664.986696][T14695] cx231xx 6-1:0.1: Not found matching IAD interface [ 665.016929][T14695] usb 6-1: USB disconnect, device number 66 [ 665.683656][T14695] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 665.846054][T14695] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 665.848437][T14695] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 665.848465][T14695] usb 4-1: config 1 has no interface number 0 [ 665.878096][T14695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.878125][T14695] usb 4-1: Product: syz [ 665.878167][T14695] usb 4-1: Manufacturer: syz [ 665.878185][T14695] usb 4-1: SerialNumber: syz [ 665.946335][T14695] usb 4-1: 3:0 : does not exist [ 665.946362][T14695] usb 4-1: 3:0 : does not exist [ 666.015491][T19375] batadv_slave_1: Caught tx_queue_len zero misconfig [ 666.081688][T14677] rc_core: IR keymap rc-hauppauge not found [ 666.081707][T14677] Registered IR keymap rc-empty [ 666.081865][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.102570][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.123125][T14677] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 666.149375][T14677] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input64 [ 666.381825][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.401776][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.421754][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.445292][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.461735][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.482701][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.777153][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.796804][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 666.816361][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.835365][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.854084][T14677] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 666.883488][T14677] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 666.883511][T14677] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.887150][T14677] usb 2-1: USB disconnect, device number 59 [ 667.120574][T14683] usb 4-1: USB disconnect, device number 89 [ 668.854617][T19394] fuse: Bad value for 'fd' [ 669.630499][ T7548] IPVS: starting estimator thread 0... [ 675.683818][T19395] IPVS: using max 27 ests per chain, 64800 per kthread [ 678.058170][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 679.495754][T19360] Set syz0 is full, maxelem 65536 reached [ 681.554448][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 682.277440][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 682.327712][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.689048][T14695] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 683.715829][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.716493][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.846475][T14695] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 683.847639][T14695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 683.847665][T14695] usb 6-1: config 1 has no interface number 0 [ 683.851550][T14695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.851637][T14695] usb 6-1: Product: syz [ 683.851656][T14695] usb 6-1: Manufacturer: syz [ 683.851673][T14695] usb 6-1: SerialNumber: syz [ 683.860486][T14695] usb 6-1: 3:0 : does not exist [ 683.860508][T14695] usb 6-1: 3:0 : does not exist [ 684.061771][ T5872] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 684.597600][ T5872] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 684.601065][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.604227][ T5872] usb 4-1: config 0 descriptor?? [ 685.399801][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.404463][T14695] usb 6-1: USB disconnect, device number 67 [ 686.368828][ T5872] hackrf 4-1:0.0: Board ID: 00 [ 686.368848][ T5872] hackrf 4-1:0.0: Firmware version: ÜjÛnÉ“`¤¶c¦&ÚŸÂo¼è K\ [ 686.395100][ T5872] hackrf 4-1:0.0: Registered as swradio24 [ 686.395126][ T5872] videodev: could not get a free minor [ 686.395141][ T5872] hackrf 4-1:0.0: Failed to register as video device (-23) [ 686.407999][ T5872] hackrf 4-1:0.0: probe with driver hackrf failed with error -23 [ 686.562335][T19470] udevd[19470]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 687.263454][ T5617] Bluetooth: hci2: command tx timeout [ 688.000659][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 689.533652][ T5617] Bluetooth: hci2: command tx timeout [ 691.538866][ T5872] usb 4-1: USB disconnect, device number 90 [ 692.356648][ T5625] Bluetooth: hci2: command tx timeout [ 694.901077][ T5617] Bluetooth: hci2: command tx timeout [ 694.946876][T19526] __nla_validate_parse: 3 callbacks suppressed [ 694.946895][T19526] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4563'. [ 696.829684][T19446] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.829803][T19446] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.829973][T19446] bridge_slave_0: entered allmulticast mode [ 696.842658][T19446] bridge_slave_0: entered promiscuous mode [ 696.845557][T19446] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.845669][T19446] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.846097][T19446] bridge_slave_1: entered allmulticast mode [ 696.848019][T19446] bridge_slave_1: entered promiscuous mode [ 697.627001][T19446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.630468][T19446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.729368][T19446] team0: Port device team_slave_0 added [ 697.747733][T19446] team0: Port device team_slave_1 added [ 697.858614][T19446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.858634][T19446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.858665][T19446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.862379][T19446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.862396][T19446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.862427][T19446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.965385][T19446] hsr_slave_0: entered promiscuous mode [ 697.982628][T19446] hsr_slave_1: entered promiscuous mode [ 703.000861][T19558] Device name cannot be null; rc = [-22] [ 703.426412][T19550] syzkaller0: entered promiscuous mode [ 703.426442][T19550] syzkaller0: entered allmulticast mode [ 703.972031][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 706.358976][T19566] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4574'. [ 709.726892][T19587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4579'. [ 713.485876][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.487684][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.488339][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.489799][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.490484][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.601713][ T5617] Bluetooth: hci0: command tx timeout [ 717.682349][ T5617] Bluetooth: hci0: command tx timeout [ 719.761703][ T5617] Bluetooth: hci0: command tx timeout [ 722.317696][ T5617] Bluetooth: hci0: command tx timeout [ 722.364895][ T12] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.040572][T19446] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 723.088528][T19446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.089362][T19446] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 723.127626][T19446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.580856][T19446] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 723.740720][T19446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 723.771418][T19446] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 723.777329][T19446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.467312][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 724.536915][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 724.611926][T14695] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 725.159303][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 725.192613][T14695] usb 4-1: device descriptor read/64, error -71 [ 725.202763][T19630] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4589'. [ 725.801139][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 726.370569][T14695] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 726.393015][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 727.064643][T14695] usb 4-1: device descriptor read/64, error -71 [ 727.254357][T14695] usb usb4-port1: attempt power cycle [ 727.802900][ T7561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.298155][T19446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.312224][T19446] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.602905][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.603018][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.845688][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.845805][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.933640][T15981] Bluetooth: hci6: command tx timeout [ 730.936755][T19596] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.936875][T19596] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.937021][T19596] bridge_slave_0: entered allmulticast mode [ 731.753188][T19596] bridge_slave_0: entered promiscuous mode [ 732.850597][T19446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 732.850625][T19446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.873401][T19596] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.873515][T19596] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.873661][T19596] bridge_slave_1: entered allmulticast mode [ 732.875776][T19596] bridge_slave_1: entered promiscuous mode [ 735.133986][T15981] Bluetooth: hci6: command tx timeout [ 736.130824][T19596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.144603][T19596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.377618][T15981] Bluetooth: hci6: command tx timeout [ 739.850212][T15981] Bluetooth: hci6: command tx timeout [ 740.661371][ T7561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.371264][T19596] team0: Port device team_slave_0 added [ 741.374394][T19596] team0: Port device team_slave_1 added [ 741.404686][T19596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.404704][T19596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.404737][T19596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.406733][T19596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.406749][T19596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.406780][T19596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.455326][T19596] hsr_slave_0: entered promiscuous mode [ 741.456365][T19596] hsr_slave_1: entered promiscuous mode [ 741.457106][T19596] debugfs: 'hsr0' already exists in 'hsr' [ 741.457126][T19596] Cannot create hsr debugfs directory [ 744.537355][T15981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 744.736352][T15981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 744.766312][T15981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 745.003313][T15981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 745.101351][T15981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 745.166450][ T7561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.130351][T19596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 746.693231][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.755797][T19687] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4600'. [ 747.418411][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 747.419146][T19596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 747.462267][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 747.463256][T19596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 747.498864][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.100522][T15981] Bluetooth: hci1: command tx timeout [ 748.150945][ T7561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.176035][T19596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 748.179201][T19596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 748.854819][T19708] ima: policy update failed [ 748.885162][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 748.885185][ T31] audit: type=1807 audit(1791759681.587:707): func=FILE_CHECK res=0 [ 748.885228][ T31] audit: type=1802 audit(1791759681.587:708): pid=19709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.4606" res=0 errno=0 [ 748.885274][ T31] audit: type=1802 audit(1791759681.587:709): pid=19708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4606" res=0 errno=0 [ 750.161840][T15981] Bluetooth: hci1: command tx timeout [ 752.139959][T19596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.153158][T19596] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.181332][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.181442][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.183527][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.183637][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.848211][T19741] jffs2: notice: (19741) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 753.848576][T19741] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 754.321643][T15981] Bluetooth: hci1: command tx timeout [ 754.872587][ T7561] bridge_slave_1: left promiscuous mode [ 754.874940][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.437647][T15981] Bluetooth: hci1: command tx timeout [ 758.206403][T17816] Process accounting resumed [ 763.296819][ T7561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.317691][ T7561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.321063][ T7561] bond0 (unregistering): Released all slaves [ 763.375560][ T7561] bond1 (unregistering): Released all slaves [ 764.194081][T19596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 764.194111][T19596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 765.280943][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 767.314733][T19615] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.314861][T19615] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.315038][T19615] bridge_slave_0: entered allmulticast mode [ 767.317026][T19615] bridge_slave_0: entered promiscuous mode [ 767.320317][T19615] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.320428][T19615] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.320573][T19615] bridge_slave_1: entered allmulticast mode [ 767.322588][T19615] bridge_slave_1: entered promiscuous mode [ 767.622439][T19615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.625981][T19615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.688933][ C1] sched: DL replenish lagged too much [ 769.148257][T19615] team0: Port device team_slave_0 added [ 769.151108][T19615] team0: Port device team_slave_1 added [ 770.614902][T19615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.614924][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.614957][T19615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.617089][T19615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.617106][T19615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.617137][T19615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.715442][T19615] hsr_slave_0: entered promiscuous mode [ 770.800507][T19615] hsr_slave_1: entered promiscuous mode [ 770.835873][T19615] debugfs: 'hsr0' already exists in 'hsr' [ 770.835896][T19615] Cannot create hsr debugfs directory [ 771.505361][T19840] FAULT_INJECTION: forcing a failure. [ 771.505361][T19840] name failslab, interval 1, probability 0, space 0, times 0 [ 771.505403][T19840] CPU: 0 UID: 0 PID: 19840 Comm: syz.2.4631 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.505437][T19840] Tainted: [L]=SOFTLOCKUP [ 771.505447][T19840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 771.505464][T19840] Call Trace: [ 771.505474][T19840] [ 771.505486][T19840] dump_stack_lvl+0xe8/0x150 [ 771.505529][T19840] should_fail_ex+0x410/0x560 [ 771.505573][T19840] should_failslab+0xa8/0x100 [ 771.505614][T19840] __kmalloc_noprof+0xfe/0x720 [ 771.505643][T19840] ? do_raw_spin_lock+0x12b/0x2f0 [ 771.505681][T19840] ? lock_acquire+0x115/0x350 [ 771.505709][T19840] ? sk_prot_alloc+0xe7/0x210 [ 771.505734][T19840] ? sk_prot_alloc+0xe7/0x210 [ 771.505761][T19840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.505798][T19840] sk_prot_alloc+0xe7/0x210 [ 771.505822][T19840] ? sk_alloc+0x27/0x390 [ 771.505851][T19840] sk_alloc+0x3a/0x390 [ 771.505875][T19840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.505911][T19840] __netlink_create+0x62/0x260 [ 771.505947][T19840] netlink_create+0x3ca/0x590 [ 771.505984][T19840] ? __pfx_rtnetlink_bind+0x10/0x10 [ 771.506014][T19840] __sock_create+0x4b3/0x9d0 [ 771.506062][T19840] __sys_socket+0xd6/0x1b0 [ 771.506104][T19840] __x64_sys_socket+0x7a/0x90 [ 771.506143][T19840] do_syscall_64+0x166/0x520 [ 771.506173][T19840] ? trace_irq_disable+0x3b/0x140 [ 771.506207][T19840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.506241][T19840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.506268][T19840] RIP: 0033:0x7fda5619e1d9 [ 771.506295][T19840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.506317][T19840] RSP: 002b:00007fda570c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 771.506344][T19840] RAX: ffffffffffffffda RBX: 00007fda56425fa0 RCX: 00007fda5619e1d9 [ 771.506364][T19840] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 771.506380][T19840] RBP: 00007fda56235888 R08: 0000000000000000 R09: 0000000000000000 [ 771.506397][T19840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.506413][T19840] R13: 00007fda56426038 R14: 00007fda56425fa0 R15: 00007ffe13a8e6d8 [ 771.506454][T19840] [ 773.504993][T19834] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 773.505064][T19834] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 776.655965][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.424218][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.453069][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 779.715886][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.528957][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 780.570544][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 781.574486][T19615] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 782.028906][T19615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.079029][ T5617] Bluetooth: hci2: command tx timeout [ 784.092283][T19882] syzkaller0: entered promiscuous mode [ 784.092311][T19882] syzkaller0: entered allmulticast mode [ 784.637199][T15981] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 784.666811][T15981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 784.688914][T15981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 784.722231][T19615] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 784.729678][T19615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.748379][T15981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 784.756334][T15981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 785.317274][ T5617] Bluetooth: hci2: command tx timeout [ 786.744618][T19930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4642'. [ 786.881653][ T5617] Bluetooth: hci0: command tx timeout [ 787.274362][ T7561] hsr_slave_0: left promiscuous mode [ 787.361936][ T5617] Bluetooth: hci2: command tx timeout [ 787.394652][ T7561] hsr_slave_1: left promiscuous mode [ 787.395629][ T7561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.395651][ T7561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.756871][ T7561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.756899][ T7561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.792048][ T7561] veth1_macvtap: left promiscuous mode [ 787.792078][ T7561] veth0_macvtap: left promiscuous mode [ 787.792155][ T7561] veth1_vlan: left promiscuous mode [ 787.792205][ T7561] veth0_vlan: left promiscuous mode [ 790.340550][ T5617] Bluetooth: hci0: command tx timeout [ 790.340607][ T5617] Bluetooth: hci2: command tx timeout [ 792.406547][T15981] Bluetooth: hci0: command tx timeout [ 794.229966][ T7561] team0 (unregistering): Port device team_slave_1 removed [ 794.242649][ T7561] team0 (unregistering): Port device team_slave_0 removed [ 794.488684][T15981] Bluetooth: hci0: command tx timeout [ 795.210431][T14695] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 795.352417][T14695] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 795.353679][T14695] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.353743][T14695] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 795.355756][T14695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.355780][T14695] usb 6-1: Product: syz [ 795.355802][T14695] usb 6-1: Manufacturer: syz [ 795.355818][T14695] usb 6-1: SerialNumber: syz [ 795.995504][T19679] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.995964][T19679] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.996154][T19679] bridge_slave_0: entered allmulticast mode [ 796.074677][T19679] bridge_slave_0: entered promiscuous mode [ 796.156180][T19679] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.156398][T19679] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.156598][T19679] bridge_slave_1: entered allmulticast mode [ 796.197680][T19679] bridge_slave_1: entered promiscuous mode [ 796.248837][ C0] usb 6-1: received EP1 urb->status = -71 [ 796.924293][T19679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.926902][T19679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.974985][T19679] team0: Port device team_slave_0 added [ 796.977978][T19679] team0: Port device team_slave_1 added [ 797.317630][T14695] usb 6-1: unable to init card! (ret=-19) [ 797.395153][T19679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.395172][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.395203][T19679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.397210][T19679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.397226][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.397257][T19679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.499418][T14695] usb 6-1: USB disconnect, device number 68 [ 797.862441][T19679] hsr_slave_0: entered promiscuous mode [ 797.863720][T19679] hsr_slave_1: entered promiscuous mode [ 797.864519][T19679] debugfs: 'hsr0' already exists in 'hsr' [ 797.864541][T19679] Cannot create hsr debugfs directory [ 799.897193][T19966] binder: BINDER_SET_CONTEXT_MGR already set [ 799.897213][T19966] binder: 19961:19966 ioctl 4018620d 200000000400 returned -16 [ 799.903630][T19966] binder: 19961:19966 ioctl c0306201 0 returned -14 [ 803.942265][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 803.953567][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 804.011683][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 804.697829][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 804.841764][ T5872] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 805.423909][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 805.455865][T20001] tap0: tun_chr_ioctl cmd 1074025675 [ 805.455884][T20001] tap0: persist disabled [ 805.457541][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 806.349077][ T5872] usb 6-1: device descriptor read/all, error -71 [ 806.875556][T20021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4658'. [ 806.961446][T20026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4658'. [ 807.750930][ T7582] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 807.925352][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.487484][ T5625] Bluetooth: hci6: command tx timeout [ 811.747404][T20032] hub 1-0:1.0: USB hub found [ 811.788200][T20032] hub 1-0:1.0: 1 port detected [ 811.796716][ T5625] Bluetooth: hci6: command tx timeout [ 812.402027][ T5872] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 812.551647][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 812.552353][ T5872] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 812.553398][ T5872] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 812.555714][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 812.555741][ T5872] usb 6-1: Product: syz [ 812.555759][ T5872] usb 6-1: Manufacturer: syz [ 812.555777][ T5872] usb 6-1: SerialNumber: syz [ 812.727438][ T5872] usb 6-1: config 0 descriptor?? [ 812.729868][T20034] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 812.746806][ T5872] hub 6-1:0.0: bad descriptor, ignoring hub [ 812.746833][ T5872] hub 6-1:0.0: probe with driver hub failed with error -5 [ 813.196029][T19872] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.196220][T19872] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.196433][T19872] bridge_slave_0: entered allmulticast mode [ 813.230213][T19872] bridge_slave_0: entered promiscuous mode [ 814.036176][ T5625] Bluetooth: hci6: command tx timeout [ 814.050734][T19872] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.050824][T19872] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.050947][T19872] bridge_slave_1: entered allmulticast mode [ 814.052718][T19872] bridge_slave_1: entered promiscuous mode [ 814.159235][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.159353][T19911] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.159491][T19911] bridge_slave_0: entered allmulticast mode [ 814.161819][T19911] bridge_slave_0: entered promiscuous mode [ 814.164457][T19911] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.164569][T19911] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.164701][T19911] bridge_slave_1: entered allmulticast mode [ 814.166751][T19911] bridge_slave_1: entered promiscuous mode [ 814.416681][T19911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.440659][T19911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.586891][T19911] team0: Port device team_slave_0 added [ 814.589948][T19911] team0: Port device team_slave_1 added [ 815.803459][T14695] usb 6-1: USB disconnect, device number 71 [ 816.232894][ T5625] Bluetooth: hci6: command tx timeout [ 816.248867][T19872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.252783][T19872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.284779][T19872] team0: Port device team_slave_0 added [ 816.288346][T19872] team0: Port device team_slave_1 added [ 816.429982][T19911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.430002][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.430034][T19911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.439787][T19911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.439809][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.439841][T19911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.473728][T19872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.473746][T19872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.473797][T19872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.475845][T19872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.475861][T19872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.475892][T19872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.863222][T19911] hsr_slave_0: entered promiscuous mode [ 816.864298][T19911] hsr_slave_1: entered promiscuous mode [ 816.865063][T19911] debugfs: 'hsr0' already exists in 'hsr' [ 816.865084][T19911] Cannot create hsr debugfs directory [ 817.150254][T19872] hsr_slave_0: entered promiscuous mode [ 817.162151][T19872] hsr_slave_1: entered promiscuous mode [ 817.164529][T19872] debugfs: 'hsr0' already exists in 'hsr' [ 817.164551][T19872] Cannot create hsr debugfs directory [ 819.979733][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 820.046857][T20085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4670'. [ 820.752592][T20087] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4670'. [ 821.991636][T14682] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 822.149677][T14682] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 822.150703][T14682] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 822.150729][T14682] usb 6-1: config 1 has no interface number 0 [ 822.178955][T14682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.178983][T14682] usb 6-1: Product: syz [ 822.179001][T14682] usb 6-1: Manufacturer: syz [ 822.179019][T14682] usb 6-1: SerialNumber: syz [ 822.236881][T14682] usb 6-1: 3:0 : does not exist [ 822.236906][T14682] usb 6-1: 3:0 : does not exist [ 823.452756][T14682] usb 6-1: USB disconnect, device number 72 [ 824.403032][T20039] udevd[20039]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.476422][T19996] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.476541][T19996] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.476679][T19996] bridge_slave_0: entered allmulticast mode [ 824.480196][T19996] bridge_slave_0: entered promiscuous mode [ 824.487068][T19996] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.487180][T19996] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.487312][T19996] bridge_slave_1: entered allmulticast mode [ 824.492299][T19996] bridge_slave_1: entered promiscuous mode [ 824.567205][T19996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.570664][T19996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.742863][T19996] team0: Port device team_slave_0 added [ 824.764078][T19996] team0: Port device team_slave_1 added [ 830.644494][T19996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.644516][T19996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.644547][T19996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.651373][T19996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.651390][T19996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.651421][T19996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.051935][T19996] hsr_slave_0: entered promiscuous mode [ 831.054600][T19996] hsr_slave_1: entered promiscuous mode [ 831.060085][T19996] debugfs: 'hsr0' already exists in 'hsr' [ 831.060107][T19996] Cannot create hsr debugfs directory [ 836.998534][T15981] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 837.025213][T15981] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 837.054032][T15981] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 837.730247][T15981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 837.759876][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 837.772583][T20155] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4682'. [ 839.651675][T14683] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 839.802498][T14683] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 839.803806][T14683] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 839.803833][T14683] usb 3-1: config 1 has no interface number 0 [ 839.806890][T14683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.806918][T14683] usb 3-1: Product: syz [ 839.806936][T14683] usb 3-1: Manufacturer: syz [ 839.806954][T14683] usb 3-1: SerialNumber: syz [ 839.893828][T14683] usb 3-1: 3:0 : does not exist [ 839.893854][T14683] usb 3-1: 3:0 : does not exist [ 840.230906][T20177] tmpfs: Bad value for 'mpol' [ 840.243152][T17816] usb 3-1: USB disconnect, device number 57 [ 841.075331][ T5617] Bluetooth: hci7: command tx timeout [ 844.348221][ T5617] Bluetooth: hci7: command tx timeout [ 847.108546][ T5625] Bluetooth: hci7: command tx timeout [ 847.144330][ T5617] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 847.211466][ T5617] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 847.245509][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4691'. [ 847.281095][ T5617] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 847.860723][T20204] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4691'. [ 848.588782][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 849.205247][ T5617] Bluetooth: hci7: command tx timeout [ 849.247480][T15981] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 849.267839][T20204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.282246][T20204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.226157][ T5625] Bluetooth: hci8: Opcode 0x0c16 failed: -110 [ 853.737778][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 853.780621][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 854.902916][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 854.915513][T20204] bond0 (unregistering): Released all slaves [ 854.992153][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 856.179010][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 858.313317][T20238] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4695'. [ 858.379649][ T5625] Bluetooth: hci8: command tx timeout [ 859.680227][T20243] jffs2: notice: (20243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 860.402226][ T5625] Bluetooth: hci8: command tx timeout [ 862.481983][ T5625] Bluetooth: hci8: command tx timeout [ 863.841685][T20254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4701'. [ 864.544616][T20149] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.544780][T20149] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.544916][T20149] bridge_slave_0: entered allmulticast mode [ 864.551386][T20149] bridge_slave_0: entered promiscuous mode [ 864.603374][T20149] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.603558][T20149] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.609902][T20149] bridge_slave_1: entered allmulticast mode [ 864.618741][ T5625] Bluetooth: hci8: command tx timeout [ 864.644150][T20149] bridge_slave_1: entered promiscuous mode [ 866.044087][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 866.079679][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 866.119548][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 866.413454][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 866.489425][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 866.827674][T20149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.744997][T20149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.660900][ T5617] Bluetooth: hci1: command tx timeout [ 868.748775][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4707'. [ 868.819150][T20149] team0: Port device team_slave_0 added [ 868.831314][T20149] team0: Port device team_slave_1 added [ 868.889025][T20318] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4707'. [ 869.526416][ T31] audit: type=1800 audit(1791759802.247:710): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4705" name=08 dev="sda1" ino=2074 res=0 errno=0 [ 869.730691][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.776966][T20318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.722686][ T5617] Bluetooth: hci1: command tx timeout [ 870.756197][T20318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.758354][T20318] bond0 (unregistering): Released all slaves [ 871.549974][T20149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.549991][T20149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.550015][T20149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.551695][T20149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.551711][T20149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.551742][T20149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.587694][T20149] hsr_slave_0: entered promiscuous mode [ 871.588542][T20149] hsr_slave_1: entered promiscuous mode [ 871.589120][T20149] debugfs: 'hsr0' already exists in 'hsr' [ 871.589137][T20149] Cannot create hsr debugfs directory [ 872.390476][T20330] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4709'. [ 873.206236][ T5617] Bluetooth: hci1: command tx timeout [ 874.381862][T14695] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 874.532287][T14695] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 874.533595][T14695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.781444][T14695] usb 3-1: config 0 descriptor?? [ 874.800705][T14695] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 875.671516][ T5625] Bluetooth: hci1: command tx timeout [ 876.721630][T14695] gspca_cpia1: usb_control_msg 05, error -110 [ 876.722327][T14695] gspca_cpia1: usb_control_msg 01, error -32 [ 876.724214][T14695] gspca_cpia1: usb_control_msg 01, error -32 [ 876.726212][T14695] gspca_cpia1: usb_control_msg 01, error -32 [ 876.728049][T14695] gspca_cpia1: usb_control_msg 01, error -32 [ 876.728066][T14695] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 877.378752][T14695] usb 3-1: USB disconnect, device number 58 [ 880.331484][T20368] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4720'. [ 881.484740][T20199] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.484883][T20199] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.485033][T20199] bridge_slave_0: entered allmulticast mode [ 881.487253][T20199] bridge_slave_0: entered promiscuous mode [ 881.528289][T20199] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.528407][T20199] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.528558][T20199] bridge_slave_1: entered allmulticast mode [ 881.561248][T20199] bridge_slave_1: entered promiscuous mode [ 881.857650][T20199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.891186][T20199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.037506][T20199] team0: Port device team_slave_0 added [ 882.119922][T20199] team0: Port device team_slave_1 added [ 882.298901][T20199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.298922][T20199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.298954][T20199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.395871][T20199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.395892][T20199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.395925][T20199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.510064][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 886.049427][T20199] hsr_slave_0: entered promiscuous mode [ 886.050525][T20199] hsr_slave_1: entered promiscuous mode [ 886.051283][T20199] debugfs: 'hsr0' already exists in 'hsr' [ 886.051303][T20199] Cannot create hsr debugfs directory [ 991.411469][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 991.418439][ C0] rcu: 1-...!: (1 ticks this GP) idle=b764/1/0x4000000000000000 softirq=108800/108800 fqs=1 [ 991.428591][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20199/1:b..l P20403/1:b..l [ 991.437815][ C0] rcu: (detected by 0, t=10502 jiffies, g=128081, q=944 ncpus=2) [ 991.445605][ C0] Sending NMI from CPU 0 to CPUs 1: [ 991.450802][ C1] NMI backtrace for cpu 1 [ 991.450823][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.450855][ C1] Tainted: [L]=SOFTLOCKUP [ 991.450865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 991.450880][ C1] RIP: 0010:do_raw_spin_lock+0x4/0x2f0 [ 991.450922][ C1] Code: e1 07 80 c1 03 38 c1 7c 90 48 89 df e8 d5 e5 94 00 eb 86 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 [ 991.450943][ C1] RSP: 0018:ffffc90000a18db8 EFLAGS: 00000092 [ 991.450964][ C1] RAX: 73148bbff56f6b00 RBX: 0000000000000001 RCX: 0000000001000101 [ 991.450981][ C1] RDX: 00000000001caf3d RSI: ffffffff8e6f2158 RDI: ffff8880b8528280 [ 991.450999][ C1] RBP: ffff8880765fc300 R08: ffffffff81b47156 R09: 0000000000000001 [ 991.451016][ C1] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: ffff8880b8528280 [ 991.451035][ C1] R13: 0000000000000001 R14: ffff8880b8528420 R15: 1ffff110170a507a [ 991.451056][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 991.451077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 991.451094][ C1] CR2: 0000001b2d511ff8 CR3: 00000000543fc000 CR4: 0000000000350ef0 [ 991.451114][ C1] Call Trace: [ 991.451124][ C1] [ 991.451133][ C1] __hrtimer_run_queues+0x466/0xa10 [ 991.451185][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 991.451244][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 991.451277][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 991.451306][ C1] [ 991.451315][ C1] [ 991.451325][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 991.451352][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 991.451383][ C1] Code: ff ff ff e8 50 4d 45 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 b2 a7 f2 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7a d8 6c ff cc 48 8d 3d 67 45 da [ 991.451403][ C1] RSP: 0018:ffffc900001e7620 EFLAGS: 00000292 [ 991.451424][ C1] RAX: 73148bbff56f6b00 RBX: 0000000000000000 RCX: 8000000000000100 [ 991.451441][ C1] RDX: 00000000aeaa6479 RSI: ffffffff8e6f2158 RDI: ffffffff8c6dde80 [ 991.451459][ C1] RBP: ffff88801f6e5dc0 R08: ffffffff817811df R09: 0000000000000000 [ 991.451477][ C1] R10: dffffc0000000000 R11: ffffffff81b2c570 R12: ffffffff8fd5c8a0 [ 991.451495][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 991.451514][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 991.451542][ C1] ? unwind_next_frame+0x8f/0x2550 [ 991.451578][ C1] ? stack_trace_save+0xa9/0x100 [ 991.451602][ C1] ? unwind_next_frame+0x8f/0x2550 [ 991.451633][ C1] unwind_next_frame+0xac/0x2550 [ 991.451661][ C1] ? unwind_next_frame+0x8f/0x2550 [ 991.451694][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.451722][ C1] ? __unwind_start+0x514/0x660 [ 991.451754][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 991.451781][ C1] arch_stack_walk+0x11b/0x150 [ 991.451814][ C1] ? stack_trace_save+0xa9/0x100 [ 991.451843][ C1] stack_trace_save+0xa9/0x100 [ 991.451868][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 991.451898][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.451926][ C1] ? __lock_acquire+0x747/0x2de0 [ 991.451955][ C1] kasan_save_track+0x3e/0x80 [ 991.452025][ C1] ? dst_destroy+0x22f/0x340 [ 991.452057][ C1] kasan_save_free_info+0x40/0x50 [ 991.452081][ C1] __kasan_slab_free+0x5c/0x80 [ 991.452114][ C1] kmem_cache_free+0x182/0x650 [ 991.452144][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 991.452181][ C1] dst_destroy+0x22f/0x340 [ 991.452212][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 991.452244][ C1] ? rcu_core+0x8a8/0x1260 [ 991.452273][ C1] rcu_core+0x926/0x1260 [ 991.452313][ C1] ? __pfx_rcu_core+0x10/0x10 [ 991.452354][ C1] handle_softirqs+0x226/0x860 [ 991.452392][ C1] ? schedule+0x90/0x2b0 [ 991.452415][ C1] ? run_ksoftirqd+0x36/0x60 [ 991.452456][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 991.452491][ C1] run_ksoftirqd+0x36/0x60 [ 991.452527][ C1] smpboot_thread_fn+0x565/0xa70 [ 991.452565][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 991.452608][ C1] kthread+0x38b/0x480 [ 991.452633][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 991.452669][ C1] ? __pfx_kthread+0x10/0x10 [ 991.452695][ C1] ret_from_fork+0x514/0xb70 [ 991.452721][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 991.452745][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.452773][ C1] ? __switch_to+0xc89/0x1420 [ 991.452809][ C1] ? __pfx_kthread+0x10/0x10 [ 991.452835][ C1] ret_from_fork_asm+0x1a/0x30 [ 991.452871][ C1] [ 991.896198][ C0] task:syz.3.4722 state:R running task stack:26736 pid:20403 tgid:20388 ppid:16918 task_flags:0x400140 flags:0x00080002 [ 991.909708][ C0] Call Trace: [ 991.912975][ C0] [ 991.915901][ C0] __schedule+0x17db/0x58f0 [ 991.920417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.926060][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.931702][ C0] ? irqentry_exit+0x218/0x920 [ 991.936466][ C0] ? __pfx___schedule+0x10/0x10 [ 991.941314][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.946961][ C0] preempt_schedule_notrace+0x56/0x90 [ 991.952330][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 991.958234][ C0] rcu_is_watching+0x81/0xb0 [ 991.962829][ C0] lock_acquire+0x58/0x350 [ 991.967257][ C0] ? __unwind_start+0xed/0x660 [ 991.972022][ C0] ? unwind_next_frame+0x8f/0x2550 [ 991.977136][ C0] unwind_next_frame+0xac/0x2550 [ 991.982073][ C0] ? unwind_next_frame+0x8f/0x2550 [ 991.987184][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 991.992556][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.998189][ C0] ? get_stack_info_noinstr+0x19/0x130 [ 992.003665][ C0] __unwind_start+0x514/0x660 [ 992.008349][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.014503][ C0] arch_stack_walk+0xe3/0x150 [ 992.019187][ C0] ? __unwind_start+0xed/0x660 [ 992.023955][ C0] stack_trace_save+0xa9/0x100 [ 992.028716][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 992.034094][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 992.039899][ C0] kasan_save_track+0x3e/0x80 [ 992.044637][ C0] ? rcu_is_watching+0x16/0xb0 [ 992.049407][ C0] __kasan_kmalloc+0x93/0xb0 [ 992.054005][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 992.059377][ C0] ? __kmalloc_cache_noprof+0x14d/0x600 [ 992.064921][ C0] ? kobject_uevent_env+0x289/0x9e0 [ 992.070127][ C0] ? kobject_uevent_env+0x289/0x9e0 [ 992.075338][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 992.080623][ C0] kobject_uevent_env+0x289/0x9e0 [ 992.085660][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.091298][ C0] device_add+0x544/0xb80 [ 992.095638][ C0] cdev_device_add+0x1c6/0x380 [ 992.100417][ C0] posix_clock_register+0x59/0x170 [ 992.105544][ C0] ptp_clock_register+0x118c/0x1660 [ 992.110733][ C0] ? vsnprintf+0xe42/0xef0 [ 992.115168][ C0] ? __pfx_ptp_clock_register+0x10/0x10 [ 992.120712][ C0] ? rcu_is_watching+0x16/0xb0 [ 992.125484][ C0] ? __pfx_snprintf+0x10/0x10 [ 992.130171][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.135809][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.141443][ C0] ? mutex_init_lockdep+0xdf/0x110 [ 992.146562][ C0] ? __pfx_ptp_vclock_gettime+0x10/0x10 [ 992.152109][ C0] ptp_vclock_register+0x202/0x530 [ 992.157224][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.162860][ C0] n_vclocks_store+0x296/0x750 [ 992.167636][ C0] ? __pfx_n_vclocks_store+0x10/0x10 [ 992.172922][ C0] ? sysfs_file_kobj+0x1e4/0x230 [ 992.177855][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.183490][ C0] ? sysfs_kf_write+0x166/0x260 [ 992.188335][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.193972][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 992.199165][ C0] kernfs_fop_write_iter+0x3a4/0x540 [ 992.204467][ C0] vfs_write+0x612/0xba0 [ 992.208718][ C0] ? __pfx_vfs_write+0x10/0x10 [ 992.213494][ C0] ? __fget_files+0x2a/0x420 [ 992.218082][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.223719][ C0] ksys_write+0x150/0x270 [ 992.228048][ C0] ? __pfx_ksys_write+0x10/0x10 [ 992.232911][ C0] do_syscall_64+0x166/0x520 [ 992.237502][ C0] ? trace_irq_disable+0x3b/0x140 [ 992.242525][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.248596][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.254487][ C0] RIP: 0033:0x7f51ecf9e1d9 [ 992.258894][ C0] RSP: 002b:00007f51ede2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 992.267393][ C0] RAX: ffffffffffffffda RBX: 00007f51ed226360 RCX: 00007f51ecf9e1d9 [ 992.275360][ C0] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 000000000000000b [ 992.283324][ C0] RBP: 00007f51ed035888 R08: 0000000000000000 R09: 0000000000000000 [ 992.291283][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.299244][ C0] R13: 00007f51ed2263f8 R14: 00007f51ed226360 R15: 00007ffc15a089e8 [ 992.307236][ C0] [ 992.310241][ C0] task:syz-executor state:R running task stack:22048 pid:20199 tgid:20199 ppid:20195 task_flags:0x400140 flags:0x00080000 [ 992.323745][ C0] Call Trace: [ 992.327010][ C0] [ 992.329938][ C0] __schedule+0x17db/0x58f0 [ 992.334475][ C0] ? __pfx___schedule+0x10/0x10 [ 992.339347][ C0] preempt_schedule_irq+0x4b/0x90 [ 992.344370][ C0] irqentry_exit+0x14f/0x920 [ 992.348960][ C0] ? trace_irq_disable+0x3b/0x140 [ 992.353990][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 992.359970][ C0] RIP: 0010:unwind_next_frame+0x1b5f/0x2550 [ 992.365866][ C0] Code: c6 03 01 4c 8b 6c 24 50 4c 8b 7c 24 10 43 0f b6 04 27 84 c0 0f 85 6d 02 00 00 41 c7 06 00 00 00 00 31 ed e8 e3 8e 70 0a 85 c0 <74> 3a e8 ba 70 34 00 84 c0 75 31 e8 d1 8e 70 0a 85 c0 74 28 80 3d [ 992.385469][ C0] RSP: 0018:ffffc90004aa6640 EFLAGS: 00000202 [ 992.391533][ C0] RAX: 0000000000000001 RBX: ffffc90004aa66f8 RCX: ffff888069293e80 [ 992.399497][ C0] RDX: ffffc90004aa6701 RSI: dffffc0000000000 RDI: ffffc90004aa66f0 [ 992.407462][ C0] RBP: 1ffffffff242e301 R08: ffffc90004aa6810 R09: ffffc90004aa6738 [ 992.415425][ C0] R10: dffffc0000000000 R11: fffff52000954ce9 R12: ffffc90004aa0000 [ 992.423388][ C0] R13: ffffffff817811df R14: ffffc90004aa66e8 R15: ffffc90004aa6820 [ 992.431354][ C0] ? unwind_next_frame+0x8f/0x2550 [ 992.436493][ C0] ? stack_trace_save+0xa9/0x100 [ 992.441430][ C0] ? unwind_next_frame+0x8f/0x2550 [ 992.446548][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.452700][ C0] arch_stack_walk+0x11b/0x150 [ 992.457474][ C0] ? kasan_save_track+0x3e/0x80 [ 992.462332][ C0] stack_trace_save+0xa9/0x100 [ 992.467093][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 992.472465][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.478097][ C0] ? __lock_acquire+0x747/0x2de0 [ 992.483039][ C0] kasan_save_track+0x3e/0x80 [ 992.487784][ C0] kasan_save_free_info+0x40/0x50 [ 992.492803][ C0] __kasan_slab_free+0x5c/0x80 [ 992.497573][ C0] kfree+0x1c5/0x650 [ 992.501464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.507095][ C0] ? kobject_uevent_env+0x375/0x9e0 [ 992.512307][ C0] kobject_uevent_env+0x375/0x9e0 [ 992.517351][ C0] net_rx_queue_update_kobjects+0x3fe/0x780 [ 992.523267][ C0] netdev_register_kobject+0x23e/0x350 [ 992.528737][ C0] register_netdevice+0x1433/0x1eb0 [ 992.533956][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 992.539508][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.545137][ C0] ? __hw_addr_insert+0x1f8/0x220 [ 992.550158][ C0] ? dev_addr_mod+0x174/0x350 [ 992.554840][ C0] ? dev_addr_mod+0x1ba/0x350 [ 992.559517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.565147][ C0] ? netif_inherit_tso_max+0x1ec/0x340 [ 992.570608][ C0] veth_newlink+0x4d7/0xdd0 [ 992.575111][ C0] ? stack_depot_save_flags+0x21/0x7f0 [ 992.580584][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.586214][ C0] ? kasan_save_track+0x4f/0x80 [ 992.591064][ C0] ? kasan_save_track+0x3e/0x80 [ 992.595917][ C0] ? __pfx_veth_newlink+0x10/0x10 [ 992.600940][ C0] ? rtnl_newlink_create+0x258/0x7b0 [ 992.606222][ C0] ? rtnl_newlink+0x166d/0x1c30 [ 992.611067][ C0] ? rtnetlink_rcv_msg+0x802/0xc00 [ 992.616171][ C0] ? netlink_rcv_skb+0x226/0x4a0 [ 992.621107][ C0] ? netlink_unicast+0x7bd/0x940 [ 992.626041][ C0] ? sock_sendmsg_nosec+0x13a/0x180 [ 992.631240][ C0] ? __sys_sendto+0x408/0x5a0 [ 992.635909][ C0] ? __x64_sys_sendto+0xde/0x100 [ 992.640917][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.646549][ C0] ? validate_linkmsg+0x765/0x950 [ 992.651598][ C0] ? rtnl_create_link+0xa04/0xd70 [ 992.656628][ C0] ? __pfx_veth_newlink+0x10/0x10 [ 992.661655][ C0] rtnl_newlink_create+0x305/0x7b0 [ 992.666775][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 992.672414][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 992.677439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.683083][ C0] ? full_name_hash+0x92/0xe0 [ 992.687777][ C0] rtnl_newlink+0x166d/0x1c30 [ 992.692471][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 992.697503][ C0] ? __lock_acquire+0x747/0x2de0 [ 992.702507][ C0] ? __kernel_text_address+0xd/0x30 [ 992.707703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.713334][ C0] ? unwind_get_return_address+0x4d/0x90 [ 992.718968][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 992.725116][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.730751][ C0] ? arch_stack_walk+0xfb/0x150 [ 992.735617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.741247][ C0] ? lock_acquire+0x115/0x350 [ 992.745929][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.751572][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 992.756592][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 992.761525][ C0] ? netlink_sendmsg+0x5d4/0xb40 [ 992.766470][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 992.771580][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 992.777033][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.782665][ C0] ? __lock_acquire+0x747/0x2de0 [ 992.787616][ C0] netlink_rcv_skb+0x226/0x4a0 [ 992.792384][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 992.797843][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 992.803160][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 992.808358][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 992.813566][ C0] netlink_unicast+0x7bd/0x940 [ 992.818342][ C0] netlink_sendmsg+0x813/0xb40 [ 992.823120][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.828417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.834048][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 992.839598][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.845233][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 992.850522][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 992.855556][ C0] __sys_sendto+0x408/0x5a0 [ 992.860064][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 992.865081][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 992.870292][ C0] ? fput_close_sync+0x11f/0x240 [ 992.875234][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.880864][ C0] ? kmem_cache_free+0x471/0x650 [ 992.885820][ C0] ? rcu_is_watching+0x16/0xb0 [ 992.890588][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.896226][ C0] __x64_sys_sendto+0xde/0x100 [ 992.900998][ C0] do_syscall_64+0x166/0x520 [ 992.905586][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.911653][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.917538][ C0] RIP: 0033:0x7fcdd0f5ea0e [ 992.921939][ C0] RSP: 002b:00007fff876365a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 992.930347][ C0] RAX: ffffffffffffffda RBX: 000055555f146500 RCX: 00007fcdd0f5ea0e [ 992.938310][ C0] RDX: 0000000000000084 RSI: 00007fcdd1d54670 RDI: 0000000000000003 [ 992.946270][ C0] RBP: 0000000000000001 R08: 00007fff87636624 R09: 000000000000000c [ 992.954231][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 992.962191][ C0] R13: 0000000000000000 R14: 00007fcdd1d54670 R15: 0000000000000000 [ 992.970174][ C0] [ 992.973183][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g128081 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 992.985232][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=49577 [ 992.993104][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g128081 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=1 [ 993.004199][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 993.014149][ C0] rcu: RCU grace-period kthread stack dump: [ 993.020020][ C0] task:rcu_preempt state:I stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 993.031950][ C0] Call Trace: [ 993.035215][ C0] [ 993.038137][ C0] __schedule+0x17db/0x58f0 [ 993.042671][ C0] ? __pfx___schedule+0x10/0x10 [ 993.047514][ C0] ? lock_acquire+0x115/0x350 [ 993.052197][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.057834][ C0] ? schedule+0x90/0x2b0 [ 993.062087][ C0] schedule+0x164/0x2b0 [ 993.066242][ C0] schedule_timeout+0x152/0x2c0 [ 993.071099][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 993.076474][ C0] ? __pfx_process_timeout+0x10/0x10 [ 993.081753][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.087376][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 993.093180][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.098817][ C0] ? prepare_to_swait_event+0x322/0x350 [ 993.104371][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 993.109236][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 993.115132][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 993.120412][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 993.125614][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 993.131418][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 993.136008][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 993.141203][ C0] ? __kthread_parkme+0x71/0x1f0 [ 993.146142][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.151770][ C0] ? __kthread_parkme+0x199/0x1f0 [ 993.156803][ C0] kthread+0x38b/0x480 [ 993.160861][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 993.166051][ C0] ? __pfx_kthread+0x10/0x10 [ 993.170634][ C0] ret_from_fork+0x514/0xb70 [ 993.175222][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 993.180325][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.185949][ C0] ? __switch_to+0xc89/0x1420 [ 993.190658][ C0] ? __pfx_kthread+0x10/0x10 [ 993.195244][ C0] ret_from_fork_asm+0x1a/0x30 [ 993.200035][ C0]